last executing test programs: 1h2m53.174236405s ago: executing program 32 (id=10): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000680)={@loopback, 0x58, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket(0x1e, 0x80004, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1h1m39.420957398s ago: executing program 33 (id=47): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x408, 0x3001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x70, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x9, 0x7}}]}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000027bde6bd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) unshare(0x62040200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "19c2fefd"}]}}, 0x0}, 0x0) 1h0m32.970669055s ago: executing program 34 (id=54): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000093024a77b0440b31000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000340), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0xab, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1h0m28.850281556s ago: executing program 35 (id=57): epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) 58m58.66048193s ago: executing program 5 (id=71): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 58m58.326680681s ago: executing program 5 (id=72): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 58m55.619115836s ago: executing program 5 (id=73): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000f579f1c018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r2, 0x3) 58m35.338165011s ago: executing program 5 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000240), 0x85, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 58m2.207138549s ago: executing program 36 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0xffffffffffffffff, 0xfffffffffffffd61, &(0x7f0000000280)=0x100000000) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 57m49.427121727s ago: executing program 37 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000240), 0x85, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 56m40.874802593s ago: executing program 7 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 56m40.388752483s ago: executing program 7 (id=100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x5, 0x8}, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 56m34.270825926s ago: executing program 7 (id=101): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x2, 0x0, 0x0, 0x8, 0x8, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000280), &(0x7f00000006c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0}, 0x94) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xc) fallocate(r7, 0x0, 0x40ca, 0x1001f0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0x101, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 56m11.160507273s ago: executing program 7 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x7, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_usb_connect(0x3, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x91, 0x82, 0x40, 0x6f8, 0x300c, 0x3964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1ff, 0x7f, 0xd}, {0x6, 0x24, 0x1a, 0x401, 0x24}, [@mdlm_detail={0x8, 0x24, 0x13, 0x4, "df8718da"}]}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x25, @string={0x25, 0x3, "5fa22c7efccf3283a2471a6bfe4dfbd21dc82d152df9702e1c2df21753da0d5d8c96b0"}}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x2, 0x6, 0x3, 0x5, 0x3, 0xffffffff, 0x7f, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 55m25.219332391s ago: executing program 38 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x7, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_usb_connect(0x3, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x91, 0x82, 0x40, 0x6f8, 0x300c, 0x3964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1ff, 0x7f, 0xd}, {0x6, 0x24, 0x1a, 0x401, 0x24}, [@mdlm_detail={0x8, 0x24, 0x13, 0x4, "df8718da"}]}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x25, @string={0x25, 0x3, "5fa22c7efccf3283a2471a6bfe4dfbd21dc82d152df9702e1c2df21753da0d5d8c96b0"}}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x2, 0x6, 0x3, 0x5, 0x3, 0xffffffff, 0x7f, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 52m57.468656974s ago: executing program 39 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0xffffffffffffffff, 0xfffffffffffffd61, &(0x7f0000000280)=0x100000000) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRES8=0x0], 0x48) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) 51m49.231166261s ago: executing program 40 (id=166): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f00000001c0)) keyctl$invalidate(0x15, 0x0) 51m48.106632289s ago: executing program 41 (id=168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000093024a77b0440b31000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 49m11.116009362s ago: executing program 42 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) 47m22.189738002s ago: executing program 43 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) 46m47.73855842s ago: executing program 44 (id=239): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 45m0.309115576s ago: executing program 4 (id=285): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) 44m38.999176792s ago: executing program 4 (id=289): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) 44m38.890159698s ago: executing program 4 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000008d00)={{r0}, &(0x7f0000008c80), &(0x7f0000008cc0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) 44m38.709079427s ago: executing program 4 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 44m21.11825069s ago: executing program 4 (id=294): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) 44m20.889417082s ago: executing program 4 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x40802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x14, 0x8000, 0x0, 0x0, 0x0}) 43m35.911834306s ago: executing program 45 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x40802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x14, 0x8000, 0x0, 0x0, 0x0}) 43m27.915090831s ago: executing program 2 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) 43m14.83438023s ago: executing program 5 (id=302): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43m12.075028813s ago: executing program 5 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 42m59.140244504s ago: executing program 2 (id=305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) 42m58.705469746s ago: executing program 2 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 42m58.349200165s ago: executing program 2 (id=307): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000004c0)=ANY=[], 0x33) 42m58.123043547s ago: executing program 2 (id=308): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 42m52.229333883s ago: executing program 2 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0xffffffffffffffff, 0xfffffffffffffd61, &(0x7f0000000280)=0x100000000) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 42m26.058068571s ago: executing program 46 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 42m8.500325602s ago: executing program 7 (id=310): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB], 0x2c}], 0x1}, 0x0) 42m8.249495175s ago: executing program 7 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7f, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) 42m7.160140272s ago: executing program 47 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0xffffffffffffffff, 0xfffffffffffffd61, &(0x7f0000000280)=0x100000000) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 41m22.790682905s ago: executing program 48 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7f, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) 41m0.90201001s ago: executing program 8 (id=315): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB], 0x2c}], 0x1}, 0x0) 41m0.437095154s ago: executing program 8 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r3, 0x0, 0x0) 40m48.980233399s ago: executing program 6 (id=318): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2481) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e30, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe03}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/159, 0x2d, 0x9f, 0x1}, 0x28) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 40m23.068948044s ago: executing program 8 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 40m22.498034273s ago: executing program 8 (id=320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x100, 0x359}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 40m12.168984469s ago: executing program 6 (id=321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x15, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40m3.460410851s ago: executing program 6 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x0) 40m2.989485756s ago: executing program 6 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 40m2.480749092s ago: executing program 6 (id=324): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0}, 0x40) fcntl$dupfd(r0, 0x406, r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xfffffff9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 40m2.099901582s ago: executing program 6 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000093024a77b0440b31000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 39m47.119052809s ago: executing program 8 (id=326): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x78e9, 0x8000, 0x1, 0x717c8cb5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xfb, 0x4fbe32d989ec16a, 0x0, @broadcast, @multicast1}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000780)=""/190, 0x28, 0xbe, 0x0, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xb, 0x9, 0xf1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000880)=[{0x0, 0x4, 0x5, 0xc}, {0x3, 0x2, 0xe, 0x2}, {0x5, 0x2, 0x4, 0xb}], 0x10, 0x3}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 39m40.037212337s ago: executing program 8 (id=327): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x40802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x14, 0x8000, 0x0, 0x0, 0x0}) 39m16.891074178s ago: executing program 49 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000093024a77b0440b31000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 38m55.026933063s ago: executing program 50 (id=327): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x40802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x14, 0x8000, 0x0, 0x0, 0x0}) 37m56.479749461s ago: executing program 1 (id=421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) close_range(r0, 0xffffffffffffffff, 0x0) 37m55.217915327s ago: executing program 1 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe63}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 37m54.598357789s ago: executing program 1 (id=427): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x2, 0xfffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 37m41.567057465s ago: executing program 1 (id=452): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) 37m41.109330229s ago: executing program 1 (id=453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000100)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 37m40.710046709s ago: executing program 1 (id=455): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000a80)={0x10, 0x21, 0x4, 0x70bd28, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0xc844}, 0x2c000010) 37m40.70625431s ago: executing program 51 (id=455): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000a80)={0x10, 0x21, 0x4, 0x70bd28, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0xc844}, 0x2c000010) 2m6.000892445s ago: executing program 9 (id=3566): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)=""/4065, 0xfe1}], 0x1}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 2m4.819118965s ago: executing program 9 (id=3569): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) 2m4.461131567s ago: executing program 9 (id=3571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m4.158744035s ago: executing program 9 (id=3573): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000080), &(0x7f0000000ac0)}, 0x20) 2m3.698755243s ago: executing program 9 (id=3574): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) 2m3.129109847s ago: executing program 9 (id=3575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, 0x0, 0x0) 2m3.128891707s ago: executing program 52 (id=3575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, 0x0, 0x0) 11.065718376s ago: executing program 0 (id=3767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.761158164s ago: executing program 0 (id=3777): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xfd85) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x541b, 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 8.576824775s ago: executing program 0 (id=3778): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000780)=[{0x5, 0x800, 0x0, 0x0}, {0x9, 0x8000, 0x0, 0x0}], 0x2}) 2.197340548s ago: executing program 3 (id=3796): syz_usb_connect(0x0, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0x68, 0x7a, 0x5a, 0x20, 0xc72, 0x11, 0x975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0xc6, 0xdf}}]}}]}}, 0x0) 2.00716285s ago: executing program 3 (id=3797): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xb, 0x17) 1.689526259s ago: executing program 3 (id=3798): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.149771821s ago: executing program 3 (id=3799): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467657fc5f7"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 940.342664ms ago: executing program 3 (id=3800): socket$unix(0x1, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x4b, [0xdb8, 0x4, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6dc, 0x0, 0xfffffff8, 0x7, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1fb, 0x739, 0x6, 0x930, 0x4, 0x1a12, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x6, 0xa, 0xffff, 0x4, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0x7, 0x1, 0x5a3a8d03, 0x4081, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0xfffffff6, 0x9, 0x7fffffff, 0x8, 0x3, 0x6, 0x200008, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x0, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x8, 0x3, 0x100, 0x82, 0x3, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x2, 0x80, 0x1d5, 0x7, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x6, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0x100, 0x10001, 0x2, 0x8, 0x5c, 0xfffffffe, 0x48, 0x0, 0x800, 0x4, 0x4a, 0x7, 0x8, 0x5, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x1, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0x1, 0x27f2, 0x9, 0xf02f, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x3, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x8001, 0x3, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x9, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137aff, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x400002, 0x100, 0xddc4, 0x6, 0x9, 0x7f, 0x8, 0x101, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0xa, 0x401, 0x3, 0x3, 0x3, 0x10001, 0xc, 0x1007, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 649.485861ms ago: executing program 3 (id=3801): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) 310.609941ms ago: executing program 0 (id=3802): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x6, 0x0, 0x0) 176.0612ms ago: executing program 0 (id=3803): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f00000012c0)="361880853a70", 0x6}], 0x1) 0s ago: executing program 0 (id=3804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 86][T23346] r7:20000040 r6:8705f841 r5:00000000 r4:4018f514 [ 2657.734405][T23346] [<805678bc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2657.734449][T23346] Exception stack(0xdfb91fa8 to 0xdfb91ff0) [ 2657.734486][T23346] 1fa0: 00000000 00000000 00000003 4018f514 20000040 00000000 [ 2657.734520][T23346] 1fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b4f0bc [ 2657.734548][T23346] 1fe0: 76b4eec0 76b4eeb0 000193a4 00131fc0 [ 2657.734586][T23346] r10:00000036 r9:873cec00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 2657.734607][T23346] r4:00000000 [ 2657.734641][T23346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2658.545128][T23354] FAULT_INJECTION: forcing a failure. [ 2658.545128][T23354] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.545668][T23354] CPU: 0 UID: 0 PID: 23354 Comm: syz.0.2724 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2658.545752][T23354] Hardware name: ARM-Versatile Express [ 2658.545780][T23354] Call trace: [ 2658.545823][T23354] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2658.546052][T23354] r7:00000d40 r6:00000000 r5:60000013 r4:8225b4f4 [ 2658.546082][T23354] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2658.546140][T23354] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2658.546192][T23354] r5:873cec00 r4:82919a80 [ 2658.546209][T23354] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2658.546265][T23354] [<80964bd8>] (should_fail_ex) from [<8051c224>] (should_failslab+0x6c/0x94) [ 2658.546326][T23354] r8:873cec00 r7:00000d40 r6:8705f6e8 r5:00000019 r4:83001240 [ 2658.546379][T23354] [<8051c1b8>] (should_failslab) from [<80500fc8>] (__kmalloc_noprof+0x9c/0x458) [ 2658.546427][T23354] [<80500f2c>] (__kmalloc_noprof) from [<807bae3c>] (tomoyo_encode2+0x64/0xf0) [ 2658.546686][T23354] r10:00000fff r9:83319000 r8:00000000 r7:8531c880 r6:8705f6e8 r5:87239ffd [ 2658.548298][T23354] r4:87239fef [ 2658.549682][T23354] [<807badd8>] (tomoyo_encode2) from [<807baeec>] (tomoyo_encode+0x24/0x30) [ 2658.552846][T23354] r9:83319000 r8:00000000 r7:8531c880 r6:8705f6e8 r5:00001000 r4:87239ff0 [ 2658.553856][T23354] [<807baec8>] (tomoyo_encode) from [<807baf78>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2658.556168][T23354] r5:00001000 r4:87239000 [ 2658.556240][T23354] [<807baef8>] (tomoyo_realpath_from_path) from [<807b7078>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2658.556322][T23354] r10:873cec00 r9:00000000 r8:00000004 r7:00008921 r6:00000004 r5:81cd6278 [ 2658.556346][T23354] r4:8705f6e8 r3:826c0200 [ 2658.556362][T23354] [<807b6fac>] (tomoyo_path_number_perm) from [<807bb958>] (tomoyo_file_ioctl+0x1c/0x20) [ 2658.556421][T23354] r9:8705f6c0 r8:00000004 r7:20000200 r6:20000200 r5:00008921 r4:8705f6c0 [ 2658.556438][T23354] [<807bb93c>] (tomoyo_file_ioctl) from [<807688dc>] (security_file_ioctl+0x64/0x1e4) [ 2658.556484][T23354] [<80768878>] (security_file_ioctl) from [<80567908>] (sys_ioctl+0x4c/0xdc8) [ 2658.556539][T23354] r7:20000200 r6:8705f6c1 r5:00000000 r4:00008921 [ 2658.556555][T23354] [<805678bc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2658.556604][T23354] Exception stack(0xdfa91fa8 to 0xdfa91ff0) [ 2658.556640][T23354] 1fa0: 00000000 00000000 00000004 00008921 20000200 00000000 [ 2658.556669][T23354] 1fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76bd00bc [ 2658.556693][T23354] 1fe0: 76bcfec0 76bcfeb0 000193a4 00131fc0 [ 2658.556725][T23354] r10:00000036 r9:873cec00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 2658.556747][T23354] r4:00000000 [ 2658.575430][T23354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2658.900209][T23358] fuse: Bad value for 'rootmode' [ 2658.935216][ T31] audit: type=1326 audit(2658.860:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.9.2725" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2660.460739][T23364] FAULT_INJECTION: forcing a failure. [ 2660.460739][T23364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2660.461707][T23364] CPU: 1 UID: 0 PID: 23364 Comm: syz.0.2727 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2660.461780][T23364] Hardware name: ARM-Versatile Express [ 2660.461793][T23364] Call trace: [ 2660.461812][T23364] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2660.461870][T23364] r7:200001c0 r6:00000000 r5:60000013 r4:8225b4f4 [ 2660.461880][T23364] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2660.461922][T23364] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2660.461969][T23364] r5:857bec00 r4:82950610 [ 2660.461979][T23364] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2660.462008][T23364] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2660.462037][T23364] r8:00000000 r7:200001c0 r6:85638fc0 r5:00000000 r4:dfa85f20 [ 2660.462045][T23364] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2660.462068][T23364] [<80964e18>] (should_fail_usercopy) from [<808b4368>] (_copy_from_iter+0x6c/0x7c8) [ 2660.462093][T23364] [<808b42fc>] (_copy_from_iter) from [<81658578>] (netlink_sendmsg+0x18c/0x444) [ 2660.462127][T23364] r10:00000000 r9:00000000 r8:dfa85f30 r7:855b0800 r6:00000014 r5:85eee000 [ 2660.462136][T23364] r4:dfa85f20 [ 2660.462143][T23364] [<816583ec>] (netlink_sendmsg) from [<8152ade0>] (__sock_sendmsg+0x44/0x78) [ 2660.462176][T23364] r10:00000000 r9:dfa85dc4 r8:dfa85dc4 r7:00000000 r6:85086c80 r5:dfa85f20 [ 2660.462185][T23364] r4:00000000 [ 2660.462192][T23364] [<8152ad9c>] (__sock_sendmsg) from [<8152b5a0>] (____sys_sendmsg+0x298/0x2cc) [ 2660.462218][T23364] r7:00000000 r6:85086c80 r5:00000050 r4:dfa85f20 [ 2660.462225][T23364] [<8152b308>] (____sys_sendmsg) from [<8152d3ac>] (___sys_sendmsg+0x9c/0xd0) [ 2660.462253][T23364] r10:dfa85e24 r9:20000200 r8:00000050 r7:00000000 r6:85086c80 r5:dfa85f20 [ 2660.462262][T23364] r4:00000000 [ 2660.462277][T23364] [<8152d310>] (___sys_sendmsg) from [<8152d844>] (__sys_sendmsg+0x8c/0xe0) [ 2660.462340][T23364] r10:00000128 r9:857bec00 r8:854a7cc0 r7:00000050 r6:20000200 r5:854a7cc1 [ 2660.462351][T23364] r4:00000003 [ 2660.462358][T23364] [<8152d7b8>] (__sys_sendmsg) from [<8152d8ac>] (sys_sendmsg+0x14/0x18) [ 2660.462387][T23364] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 2660.462395][T23364] [<8152d898>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2660.462415][T23364] Exception stack(0xdfa85fa8 to 0xdfa85ff0) [ 2660.462432][T23364] 5fa0: 00000000 00000000 00000003 20000200 00000050 00000000 [ 2660.462448][T23364] 5fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76bd00bc [ 2660.462459][T23364] 5fe0: 76bcfec0 76bcfeb0 000193a4 00131fc0 [ 2661.718468][T23372] FAULT_INJECTION: forcing a failure. [ 2661.718468][T23372] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.719913][T23372] CPU: 1 UID: 0 PID: 23372 Comm: syz.0.2730 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2661.719995][T23372] Hardware name: ARM-Versatile Express [ 2661.720019][T23372] Call trace: [ 2661.720058][T23372] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2661.720149][T23372] r7:857b9800 r6:00000000 r5:60000013 r4:8225b4f4 [ 2661.720169][T23372] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2661.720217][T23372] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2661.720295][T23372] r5:857b9800 r4:82919a80 [ 2661.720312][T23372] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2661.720368][T23372] [<80964bd8>] (should_fail_ex) from [<8051c224>] (should_failslab+0x6c/0x94) [ 2661.720432][T23372] r8:00000000 r7:857b9800 r6:00000cc0 r5:ffffffff r4:832c9240 [ 2661.720450][T23372] [<8051c1b8>] (should_failslab) from [<805005d8>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2661.720497][T23372] [<80500588>] (kmem_cache_alloc_node_noprof) from [<81538044>] (__alloc_skb+0x138/0x160) [ 2661.720559][T23372] r10:dfca1980 r9:870b0000 r8:00000cc0 r7:00000000 r6:832c9240 r5:ffffffff [ 2661.720577][T23372] r4:828060c0 [ 2661.720595][T23372] [<81537f0c>] (__alloc_skb) from [<81769de8>] (inet_netconf_notify_devconf+0x98/0x164) [ 2661.720654][T23372] r8:0000004a r7:00000051 r6:85a11a00 r5:85a11a00 r4:00000000 [ 2661.720671][T23372] [<81769d50>] (inet_netconf_notify_devconf) from [<8176ad08>] (inetdev_event+0x23c/0x6cc) [ 2661.720727][T23372] r8:8176aacc r7:0000004a r6:84228200 r5:85a11a00 r4:8595f000 [ 2661.720746][T23372] [<8176aacc>] (inetdev_event) from [<80289550>] (notifier_call_chain+0x60/0x1b4) [ 2661.720811][T23372] r10:dfca1980 r9:826c2e80 r8:8176aacc r7:00000000 r6:fffffff0 r5:829e19ac [ 2661.720832][T23372] r4:829e1ab4 [ 2661.720847][T23372] [<802894f0>] (notifier_call_chain) from [<80289788>] (raw_notifier_call_chain+0x20/0x28) [ 2661.720907][T23372] r10:00000000 r9:826c2e80 r8:82c1d374 r7:00000000 r6:85a11a00 r5:00000006 [ 2661.720929][T23372] r4:dfca1980 [ 2661.720945][T23372] [<80289768>] (raw_notifier_call_chain) from [<8155d308>] (call_netdevice_notifiers_info+0x54/0xa0) [ 2661.721012][T23372] [<8155d2b4>] (call_netdevice_notifiers_info) from [<81568ac4>] (unregister_netdevice_many_notify+0x54c/0xbc0) [ 2661.721072][T23372] r6:00000001 r5:870b0000 r4:000000c0 [ 2661.721095][T23372] [<81568578>] (unregister_netdevice_many_notify) from [<81569238>] (unregister_netdevice_queue+0xe4/0x12c) [ 2661.721161][T23372] r10:00000000 r9:840e1c00 r8:dfca1c48 r7:840e2c00 r6:870b010c r5:870b0000 [ 2661.721185][T23372] r4:dfca19d8 [ 2661.721205][T23372] [<81569154>] (unregister_netdevice_queue) from [<80e323b8>] (nsim_destroy+0x6c/0x158) [ 2661.721267][T23372] r7:840e2c00 r6:840e2d68 r5:870b0000 r4:870b06c0 [ 2661.721284][T23372] [<80e3234c>] (nsim_destroy) from [<80e328e0>] (__nsim_dev_port_del+0x4c/0x74) [ 2661.721374][T23372] r5:85a71e08 r4:85a71e00 [ 2661.721391][T23372] [<80e32894>] (__nsim_dev_port_del) from [<80e33008>] (nsim_dev_reload_destroy+0x54/0x10c) [ 2661.721438][T23372] r5:840e2d00 r4:8591b700 [ 2661.721455][T23372] [<80e32fb4>] (nsim_dev_reload_destroy) from [<80e330e0>] (nsim_dev_reload_down+0x20/0x4c) [ 2661.721512][T23372] r9:dfca1ae4 r8:dfca1c48 r7:00000001 r6:80e330c0 r5:00000000 r4:00000000 [ 2661.721529][T23372] [<80e330c0>] (nsim_dev_reload_down) from [<818ae024>] (devlink_reload+0x88/0x378) [ 2661.721584][T23372] r5:00000000 r4:840e2c00 [ 2661.721599][T23372] [<818adf9c>] (devlink_reload) from [<818ae750>] (devlink_nl_reload_doit+0x43c/0x4f8) [ 2661.721673][T23372] r10:8246f1a4 r9:00000001 r8:85eee300 r7:855b0800 r6:840e2c00 r5:00000000 [ 2661.721698][T23372] r4:dfca1b2c [ 2661.721713][T23372] [<818ae314>] (devlink_nl_reload_doit) from [<8165a044>] (genl_family_rcv_msg_doit+0xe8/0x138) [ 2661.721774][T23372] r9:85a11a00 r8:dfca1c48 r7:dfca1bdc r6:85eee300 r5:855b0800 r4:00000000 [ 2661.721793][T23372] [<81659f5c>] (genl_family_rcv_msg_doit) from [<8165a6a8>] (genl_rcv_msg+0x23c/0x350) [ 2661.721846][T23372] r10:00000002 r9:85a11a00 r8:85eee300 r7:dfca1bdc r6:00000003 r5:85639440 [ 2661.721866][T23372] r4:8246f1a4 [ 2661.721881][T23372] [<8165a46c>] (genl_rcv_msg) from [<81658b04>] (netlink_rcv_skb+0xc0/0x120) [ 2661.721939][T23372] r10:00000000 r9:00000000 r8:85a11a00 r7:00000034 r6:85639440 r5:8165a46c [ 2661.721959][T23372] r4:85eee300 [ 2661.721981][T23372] [<81658a44>] (netlink_rcv_skb) from [<81659cfc>] (genl_rcv+0x2c/0x3c) [ 2661.722036][T23372] r7:85eee300 r6:86610b80 r5:829de428 r4:85eee300 [ 2661.722051][T23372] [<81659cd0>] (genl_rcv) from [<816582d0>] (netlink_unicast+0x1e8/0x304) [ 2661.722102][T23372] r5:00000034 r4:85dc9800 [ 2661.722118][T23372] [<816580e8>] (netlink_unicast) from [<816585b8>] (netlink_sendmsg+0x1cc/0x444) [ 2661.722179][T23372] r9:00000000 r8:00000000 r7:847f0800 r6:00000034 r5:85eee300 r4:dfca1f20 [ 2661.722195][T23372] [<816583ec>] (netlink_sendmsg) from [<8152ade0>] (__sock_sendmsg+0x44/0x78) [ 2661.722258][T23372] r10:00000000 r9:dfca1dc4 r8:dfca1dc4 r7:00000000 r6:851ac000 r5:dfca1f20 [ 2661.722279][T23372] r4:00000000 [ 2661.722295][T23372] [<8152ad9c>] (__sock_sendmsg) from [<8152b5a0>] (____sys_sendmsg+0x298/0x2cc) [ 2661.722346][T23372] r7:00000000 r6:851ac000 r5:00000000 r4:dfca1f20 [ 2661.722362][T23372] [<8152b308>] (____sys_sendmsg) from [<8152d3ac>] (___sys_sendmsg+0x9c/0xd0) [ 2661.722419][T23372] r10:dfca1e24 r9:20000080 r8:00000000 r7:00000000 r6:851ac000 r5:dfca1f20 [ 2661.722441][T23372] r4:00000000 [ 2661.722459][T23372] [<8152d310>] (___sys_sendmsg) from [<8152d844>] (__sys_sendmsg+0x8c/0xe0) [ 2661.722519][T23372] r10:00000128 r9:857b9800 r8:8705f6c0 r7:00000000 r6:20000080 r5:8705f6c1 [ 2661.722539][T23372] r4:00000003 [ 2661.722558][T23372] [<8152d7b8>] (__sys_sendmsg) from [<8152d8ac>] (sys_sendmsg+0x14/0x18) [ 2661.722625][T23372] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 2661.722649][T23372] [<8152d898>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2661.722698][T23372] Exception stack(0xdfca1fa8 to 0xdfca1ff0) [ 2661.722737][T23372] 1fa0: 00000000 00000000 00000003 20000080 00000000 00000000 [ 2661.722769][T23372] 1fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76bd00bc [ 2661.722794][T23372] 1fe0: 76bcfec0 76bcfeb0 000193a4 00131fc0 [ 2661.770578][T23372] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2661.980840][T23372] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2662.054573][T23372] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2662.156873][T23372] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2662.310900][T23372] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.350057][T23372] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.404319][T23372] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.472500][T23372] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.720074][T23393] fuse: Bad value for 'rootmode' [ 2662.795315][ T31] audit: type=1326 audit(2662.720:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23392 comm="syz.9.2733" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2665.482029][T23405] fuse: Bad value for 'rootmode' [ 2665.503912][ T31] audit: type=1326 audit(2665.430:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23404 comm="syz.9.2739" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2669.930463][T23429] fuse: Unknown parameter 'use00000000000000000000' [ 2669.956656][ T31] audit: type=1326 audit(2669.860:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.0.2747" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2674.699911][T23452] fuse: Unknown parameter 'use00000000000000000000' [ 2674.725938][ T31] audit: type=1326 audit(2674.650:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.9.2757" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2675.931689][T23458] FAULT_INJECTION: forcing a failure. [ 2675.931689][T23458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2675.932145][T23458] CPU: 0 UID: 0 PID: 23458 Comm: syz.0.2759 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2675.932207][T23458] Hardware name: ARM-Versatile Express [ 2675.932276][T23458] Call trace: [ 2675.932321][T23458] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2675.932418][T23458] r7:00000000 r6:00000000 r5:60000013 r4:8225b4f4 [ 2675.932439][T23458] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2675.932506][T23458] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2675.932576][T23458] r5:873cd400 r4:82950610 [ 2675.932597][T23458] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2675.932667][T23458] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2675.932726][T23458] r8:76bcff30 r7:00000000 r6:00000000 r5:dfa79f68 r4:00000002 [ 2675.932747][T23458] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2675.932799][T23458] [<80964e18>] (should_fail_usercopy) from [<80589618>] (simple_read_from_buffer+0x80/0x13c) [ 2675.932880][T23458] [<80589598>] (simple_read_from_buffer) from [<8060187c>] (proc_fail_nth_read+0xb8/0x100) [ 2675.932954][T23458] r10:00000001 r9:806017c4 r8:00000002 r7:dfa79f68 r6:0000000f r5:76bcff30 [ 2675.933009][T23458] r4:873cd400 r3:dfa79e9f [ 2675.933031][T23458] [<806017c4>] (proc_fail_nth_read) from [<8054dc90>] (vfs_read+0x98/0x320) [ 2675.933130][T23458] r8:76bcff30 r7:dfa79f68 r6:873cd400 r5:0000000f r4:8705fcc0 [ 2675.933157][T23458] [<8054dbf8>] (vfs_read) from [<8054e938>] (ksys_read+0x74/0xe8) [ 2675.933221][T23458] r10:00000003 r9:873cd400 r8:8020029c r7:00000000 r6:00000000 r5:8705fcc0 [ 2675.933243][T23458] r4:8705fcc3 [ 2675.933261][T23458] [<8054e8c4>] (ksys_read) from [<8054e9bc>] (sys_read+0x10/0x14) [ 2675.933372][T23458] r7:00000003 r6:00000004 r5:76bcff30 r4:0000000f [ 2675.933395][T23458] [<8054e9ac>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2675.933498][T23458] Exception stack(0xdfa79fa8 to 0xdfa79ff0) [ 2675.933657][T23458] 9fa0: 0000000f 76bcff30 00000004 76bcff30 0000000f 00000000 [ 2675.933703][T23458] 9fc0: 0000000f 76bcff30 00000004 00000003 002e0000 00000000 00006364 76bd00bc [ 2675.933736][T23458] 9fe0: 00000158 76bcfed0 000d7df0 0012fe94 [ 2677.731006][T23464] fuse: Unknown parameter '0x0000000000000003' [ 2677.824667][ T31] audit: type=1326 audit(2677.750:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.0.2762" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2679.895517][T23475] fuse: Unknown parameter 'use00000000000000000000' [ 2679.914489][ T31] audit: type=1326 audit(2679.840:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23474 comm="syz.9.2765" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2683.360280][T23487] fuse: Unknown parameter '0x0000000000000003' [ 2683.373406][ T31] audit: type=1326 audit(2683.300:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.2770" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2684.797528][T23491] fuse: Unknown parameter 'user_i00000000000000000000' [ 2684.812950][ T31] audit: type=1326 audit(2684.740:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23490 comm="syz.9.2772" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2690.102846][T23505] FAULT_INJECTION: forcing a failure. [ 2690.102846][T23505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2690.104547][T23505] CPU: 0 UID: 0 PID: 23505 Comm: syz.0.2777 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2690.104655][T23505] Hardware name: ARM-Versatile Express [ 2690.104682][T23505] Call trace: [ 2690.104724][T23505] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2690.104830][T23505] r7:00000000 r6:00000000 r5:60000013 r4:8225b4f4 [ 2690.104851][T23505] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2690.104903][T23505] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2690.104956][T23505] r5:873ce000 r4:82950610 [ 2690.104984][T23505] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2690.105045][T23505] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2690.105106][T23505] r8:76bcff30 r7:00000000 r6:00000000 r5:df911f68 r4:00000002 [ 2690.105125][T23505] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2690.105178][T23505] [<80964e18>] (should_fail_usercopy) from [<80589618>] (simple_read_from_buffer+0x80/0x13c) [ 2690.105235][T23505] [<80589598>] (simple_read_from_buffer) from [<8060187c>] (proc_fail_nth_read+0xb8/0x100) [ 2690.105332][T23505] r10:00000001 r9:806017c4 r8:00000002 r7:df911f68 r6:0000000f r5:76bcff30 [ 2690.105358][T23505] r4:873ce000 r3:df911e9f [ 2690.105378][T23505] [<806017c4>] (proc_fail_nth_read) from [<8054dc90>] (vfs_read+0x98/0x320) [ 2690.105445][T23505] r8:76bcff30 r7:df911f68 r6:873ce000 r5:0000000f r4:854a7540 [ 2690.105466][T23505] [<8054dbf8>] (vfs_read) from [<8054e938>] (ksys_read+0x74/0xe8) [ 2690.105523][T23505] r10:00000003 r9:873ce000 r8:8020029c r7:00000000 r6:00000000 r5:854a7540 [ 2690.105540][T23505] r4:854a7543 [ 2690.105555][T23505] [<8054e8c4>] (ksys_read) from [<8054e9bc>] (sys_read+0x10/0x14) [ 2690.105609][T23505] r7:00000003 r6:00000004 r5:76bcff30 r4:0000000f [ 2690.105625][T23505] [<8054e9ac>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2690.105669][T23505] Exception stack(0xdf911fa8 to 0xdf911ff0) [ 2690.105705][T23505] 1fa0: 0000000f 76bcff30 00000004 76bcff30 0000000f 00000000 [ 2690.105742][T23505] 1fc0: 0000000f 76bcff30 00000004 00000003 002e0000 00000000 00006364 76bd00bc [ 2690.105772][T23505] 1fe0: 00000158 76bcfed0 000d7df0 0012fe94 [ 2690.467295][T23509] fuse: Unknown parameter 'user_i00000000000000000000' [ 2690.487651][ T31] audit: type=1326 audit(2690.400:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.0.2779" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2695.552267][T23530] fuse: Unknown parameter 'user_i00000000000000000000' [ 2695.559732][ T31] audit: type=1326 audit(2695.490:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23529 comm="syz.9.2786" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2698.397230][T14555] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2698.650868][T14555] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2698.651275][T14555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2698.657219][T14555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2698.657780][T14555] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2698.657917][T14555] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2698.657990][T14555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.688068][T14555] usb 1-1: config 0 descriptor?? [ 2700.173637][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.174217][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.174423][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.174619][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.174748][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.174877][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.175011][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.175172][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.175300][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.175426][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.175554][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.175764][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.176066][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.197332][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.197699][T14555] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2700.297607][T14555] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2701.544921][T23566] fuse: Unknown parameter 'user_id00000000000000000000' [ 2701.589885][ T31] audit: type=1326 audit(2701.520:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23565 comm="syz.9.2793" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2701.640246][T14555] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 2704.628119][T23535] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2705.570930][T22016] usb 1-1: USB disconnect, device number 36 [ 2705.825596][T23594] FAULT_INJECTION: forcing a failure. [ 2705.825596][T23594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2705.837116][T23594] CPU: 1 UID: 0 PID: 23594 Comm: syz.9.2800 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2705.837231][T23594] Hardware name: ARM-Versatile Express [ 2705.837259][T23594] Call trace: [ 2705.837324][T23594] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2705.837429][T23594] r7:00000000 r6:00000000 r5:60000113 r4:8225b4f4 [ 2705.837450][T23594] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2705.837499][T23594] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2705.837552][T23594] r5:873ca400 r4:82950610 [ 2705.837569][T23594] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2705.837628][T23594] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2705.837691][T23594] r8:76b4ef30 r7:00000000 r6:00000000 r5:e0089f68 r4:00000002 [ 2705.837709][T23594] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2705.837761][T23594] [<80964e18>] (should_fail_usercopy) from [<80589618>] (simple_read_from_buffer+0x80/0x13c) [ 2705.837819][T23594] [<80589598>] (simple_read_from_buffer) from [<8060187c>] (proc_fail_nth_read+0xb8/0x100) [ 2705.837888][T23594] r10:00000001 r9:806017c4 r8:00000002 r7:e0089f68 r6:0000000f r5:76b4ef30 [ 2705.837920][T23594] r4:873ca400 r3:e0089e9f [ 2705.837938][T23594] [<806017c4>] (proc_fail_nth_read) from [<8054dc90>] (vfs_read+0x98/0x320) [ 2705.838002][T23594] r8:76b4ef30 r7:e0089f68 r6:873ca400 r5:0000000f r4:8391be40 [ 2705.838020][T23594] [<8054dbf8>] (vfs_read) from [<8054e938>] (ksys_read+0x74/0xe8) [ 2705.838081][T23594] r10:00000003 r9:873ca400 r8:8020029c r7:00000000 r6:00000000 r5:8391be40 [ 2705.838102][T23594] r4:8391be43 [ 2705.838118][T23594] [<8054e8c4>] (ksys_read) from [<8054e9bc>] (sys_read+0x10/0x14) [ 2705.838175][T23594] r7:00000003 r6:00000005 r5:76b4ef30 r4:0000000f [ 2705.838193][T23594] [<8054e9ac>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2705.838239][T23594] Exception stack(0xe0089fa8 to 0xe0089ff0) [ 2705.838276][T23594] 9fa0: 0000000f 76b4ef30 00000005 76b4ef30 0000000f 00000000 [ 2705.838311][T23594] 9fc0: 0000000f 76b4ef30 00000005 00000003 002e0000 00000000 00006364 76b4f0bc [ 2705.838338][T23594] 9fe0: 00000158 76b4eed0 000d7df0 0012fe94 [ 2708.040521][T23604] can: request_module (can-proto-5) failed. [ 2709.728042][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2808'. [ 2712.627324][T14582] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2712.808352][T14582] usb 1-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 2712.809625][T14582] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2712.810847][T14582] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2712.812218][T14582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2712.819898][T14582] usb 1-1: config 0 descriptor?? [ 2714.078313][T23660] Process accounting resumed [ 2718.608047][T23693] block nbd9: NBD_DISCONNECT [ 2718.912177][ T31] audit: type=1400 audit(2718.840:622): avc: denied { validate_trans } for pid=23696 comm="syz.9.2836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2720.626617][ T31] audit: type=1326 audit(2720.550:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.9.2842" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2723.184948][T23719] random: crng reseeded on system resumption [ 2723.217826][T23719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2723.221021][T23719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2726.792596][ T31] audit: type=1326 audit(2726.720:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23728 comm="syz.9.2847" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2727.378171][T14559] usb 1-1: USB disconnect, device number 37 [ 2728.153233][T23741] FAULT_INJECTION: forcing a failure. [ 2728.153233][T23741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2728.153548][T23741] CPU: 0 UID: 0 PID: 23741 Comm: syz.0.2849 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2728.153629][T23741] Hardware name: ARM-Versatile Express [ 2728.153641][T23741] Call trace: [ 2728.153660][T23741] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2728.153716][T23741] r7:85a11a00 r6:00000000 r5:60000013 r4:8225b4f4 [ 2728.153727][T23741] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2728.153751][T23741] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2728.153776][T23741] r5:868ba400 r4:82950610 [ 2728.153783][T23741] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2728.153811][T23741] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2728.153841][T23741] r8:00000003 r7:85a11a00 r6:20002100 r5:20002100 r4:82c1c5d0 [ 2728.153848][T23741] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2728.153872][T23741] [<80964e18>] (should_fail_usercopy) from [<818fdea4>] (vlan_ioctl_handler+0x3c/0x4a0) [ 2728.153897][T23741] [<818fde68>] (vlan_ioctl_handler) from [<8152b94c>] (sock_ioctl+0x1f8/0x600) [ 2728.153926][T23741] r9:8391bcc0 r8:00000003 r7:850ce500 r6:85a11a00 r5:20002100 r4:82c1c5d0 [ 2728.153934][T23741] [<8152b754>] (sock_ioctl) from [<805679ec>] (sys_ioctl+0x130/0xdc8) [ 2728.153971][T23741] r9:8391bcc0 r8:00000003 r7:20002100 r6:8391bcc1 r5:00000000 r4:00008983 [ 2728.153979][T23741] [<805678bc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2728.153999][T23741] Exception stack(0xdfc89fa8 to 0xdfc89ff0) [ 2728.154017][T23741] 9fa0: 00000000 00000000 00000003 00008983 20002100 00000000 [ 2728.154032][T23741] 9fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76bd00bc [ 2728.154043][T23741] 9fe0: 76bcfec0 76bcfeb0 000193a4 00131fc0 [ 2728.154059][T23741] r10:00000036 r9:868ba400 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 2728.154068][T23741] r4:00000000 [ 2729.122744][T23748] FAULT_INJECTION: forcing a failure. [ 2729.122744][T23748] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.123064][T23748] CPU: 0 UID: 0 PID: 23748 Comm: syz.9.2852 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2729.123106][T23748] Hardware name: ARM-Versatile Express [ 2729.123118][T23748] Call trace: [ 2729.123138][T23748] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2729.123193][T23748] r7:00000c40 r6:00000000 r5:60000013 r4:8225b4f4 [ 2729.123202][T23748] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2729.123225][T23748] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2729.123250][T23748] r5:868bbc00 r4:82919a80 [ 2729.123257][T23748] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2729.123304][T23748] [<80964bd8>] (should_fail_ex) from [<8051c224>] (should_failslab+0x6c/0x94) [ 2729.123361][T23748] r8:868bbc00 r7:00000c40 r6:8391bb68 r5:00001000 r4:830016c0 [ 2729.123369][T23748] [<8051c1b8>] (should_failslab) from [<80500fc8>] (__kmalloc_noprof+0x9c/0x458) [ 2729.123391][T23748] [<80500f2c>] (__kmalloc_noprof) from [<807baf34>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2729.123514][T23748] r10:868bbc00 r9:8309e400 r8:00000000 r7:83422f68 r6:8391bb68 r5:00001000 [ 2729.123593][T23748] r4:00000000 [ 2729.123736][T23748] [<807baef8>] (tomoyo_realpath_from_path) from [<807b7078>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2729.123797][T23748] r10:868bbc00 r9:00000000 r8:00000003 r7:00005421 r6:00000004 r5:81cd6278 [ 2729.123845][T23748] r4:8391bb68 r3:826c0200 [ 2729.124066][T23748] [<807b6fac>] (tomoyo_path_number_perm) from [<807bb958>] (tomoyo_file_ioctl+0x1c/0x20) [ 2729.124180][T23748] r9:8391bb40 r8:00000003 r7:200010c0 r6:200010c0 r5:00005421 r4:8391bb40 [ 2729.124315][T23748] [<807bb93c>] (tomoyo_file_ioctl) from [<807688dc>] (security_file_ioctl+0x64/0x1e4) [ 2729.124392][T23748] [<80768878>] (security_file_ioctl) from [<80567908>] (sys_ioctl+0x4c/0xdc8) [ 2729.124487][T23748] r7:200010c0 r6:8391bb41 r5:00000000 r4:00005421 [ 2729.124499][T23748] [<805678bc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2729.124696][T23748] Exception stack(0xdfc89fa8 to 0xdfc89ff0) [ 2729.124774][T23748] 9fa0: 00000000 00000000 00000003 00005421 200010c0 00000000 [ 2729.124791][T23748] 9fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b4f0bc [ 2729.124803][T23748] 9fe0: 76b4eec0 76b4eeb0 000193a4 00131fc0 [ 2729.124819][T23748] r10:00000036 r9:868bbc00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 2729.124827][T23748] r4:00000000 [ 2729.147169][T23748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2729.656976][T23753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23753 comm=syz.9.2854 [ 2730.535277][ T31] audit: type=1326 audit(2730.460:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23754 comm="syz.9.2855" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2734.207470][T23774] FAULT_INJECTION: forcing a failure. [ 2734.207470][T23774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2734.209183][T23774] CPU: 1 UID: 0 PID: 23774 Comm: syz.0.2861 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2734.209288][T23774] Hardware name: ARM-Versatile Express [ 2734.209360][T23774] Call trace: [ 2734.209405][T23774] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2734.209537][T23774] r7:00000000 r6:00000000 r5:60000013 r4:8225b4f4 [ 2734.209558][T23774] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2734.209612][T23774] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2734.209665][T23774] r5:841d0000 r4:82950610 [ 2734.209682][T23774] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2734.209752][T23774] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2734.209816][T23774] r8:76bcff30 r7:00000000 r6:00000000 r5:dfa5df68 r4:00000002 [ 2734.209835][T23774] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2734.209945][T23774] [<80964e18>] (should_fail_usercopy) from [<80589618>] (simple_read_from_buffer+0x80/0x13c) [ 2734.210011][T23774] [<80589598>] (simple_read_from_buffer) from [<8060187c>] (proc_fail_nth_read+0xb8/0x100) [ 2734.210083][T23774] r10:00000001 r9:806017c4 r8:00000002 r7:dfa5df68 r6:0000000f r5:76bcff30 [ 2734.210111][T23774] r4:841d0000 r3:dfa5de9f [ 2734.210130][T23774] [<806017c4>] (proc_fail_nth_read) from [<8054dc90>] (vfs_read+0x98/0x320) [ 2734.210195][T23774] r8:76bcff30 r7:dfa5df68 r6:841d0000 r5:0000000f r4:84932c00 [ 2734.210213][T23774] [<8054dbf8>] (vfs_read) from [<8054e938>] (ksys_read+0x74/0xe8) [ 2734.210274][T23774] r10:00000003 r9:841d0000 r8:8020029c r7:00000000 r6:00000000 r5:84932c00 [ 2734.210296][T23774] r4:84932c03 [ 2734.210313][T23774] [<8054e8c4>] (ksys_read) from [<8054e9bc>] (sys_read+0x10/0x14) [ 2734.210371][T23774] r7:00000003 r6:00000004 r5:76bcff30 r4:0000000f [ 2734.210390][T23774] [<8054e9ac>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2734.210435][T23774] Exception stack(0xdfa5dfa8 to 0xdfa5dff0) [ 2734.210472][T23774] dfa0: 0000000f 76bcff30 00000004 76bcff30 0000000f 00000000 [ 2734.210507][T23774] dfc0: 0000000f 76bcff30 00000004 00000003 002e0000 00000000 00006364 76bd00bc [ 2734.210534][T23774] dfe0: 00000158 76bcfed0 000d7df0 0012fe94 [ 2735.531629][ T31] audit: type=1326 audit(2735.460:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23779 comm="syz.0.2864" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2739.132889][ T31] audit: type=1400 audit(2739.060:627): avc: denied { shutdown } for pid=23785 comm="syz.0.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2745.688627][ T31] audit: type=1326 audit(2745.620:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23801 comm="syz.9.2869" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2746.715413][T23806] fuse: Unknown parameter '0x0000000000000003' [ 2746.879314][ T31] audit: type=1326 audit(2746.800:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.0.2870" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2748.253483][ T31] audit: type=1400 audit(2748.180:630): avc: denied { write } for pid=23810 comm="syz.9.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2748.254931][ T31] audit: type=1400 audit(2748.180:631): avc: denied { read } for pid=23810 comm="syz.9.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2748.390011][ T31] audit: type=1400 audit(2748.310:632): avc: denied { create } for pid=23810 comm="syz.9.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2748.497799][ T31] audit: type=1400 audit(2748.420:633): avc: denied { read write } for pid=23810 comm="syz.9.2871" name="mixer" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2748.502316][ T31] audit: type=1400 audit(2748.430:634): avc: denied { open } for pid=23810 comm="syz.9.2871" path="/dev/mixer" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2748.513179][ T31] audit: type=1400 audit(2748.440:635): avc: denied { ioctl } for pid=23810 comm="syz.9.2871" path="socket:[43169]" dev="sockfs" ino=43169 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2748.568859][ T31] audit: type=1400 audit(2748.460:636): avc: denied { getopt } for pid=23810 comm="syz.9.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2749.084021][ T31] audit: type=1400 audit(2749.010:637): avc: denied { create } for pid=23812 comm="syz.9.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2750.790023][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 2750.790388][ T31] audit: type=1400 audit(2750.720:651): avc: denied { sys_module } for pid=23817 comm="syz.9.2874" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2750.980741][ T31] audit: type=1400 audit(2750.910:652): avc: denied { create } for pid=23817 comm="syz.9.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2750.982796][ T31] audit: type=1400 audit(2750.910:653): avc: denied { ioctl } for pid=23817 comm="syz.9.2874" path="socket:[43180]" dev="sockfs" ino=43180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2751.490379][ T31] audit: type=1400 audit(2751.420:654): avc: denied { write } for pid=23817 comm="syz.9.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2751.755109][T23827] fuse: Unknown parameter '0x0000000000000003' [ 2751.755373][ T31] audit: type=1400 audit(2751.680:655): avc: denied { mounton } for pid=23826 comm="syz.9.2876" path="/257/file0" dev="tmpfs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2751.800530][ T31] audit: type=1326 audit(2751.730:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.9.2876" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2751.908191][T23829] fuse: Unknown parameter '0x0000000000000003' [ 2751.934710][ T31] audit: type=1326 audit(2751.860:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.0.2877" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2754.575536][T23833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2754.576920][ T31] audit: type=1400 audit(2754.500:658): avc: denied { ioctl } for pid=23832 comm="syz.9.2878" path="/dev/raw-gadget" dev="devtmpfs" ino=691 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2754.579134][T23833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2754.621816][ T31] audit: type=1400 audit(2754.550:659): avc: denied { read } for pid=23832 comm="syz.9.2878" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2754.622080][ T31] audit: type=1400 audit(2754.550:660): avc: denied { open } for pid=23832 comm="syz.9.2878" path="net:[4026532670]" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2755.182138][T23843] fuse: Unknown parameter '0x0000000000000003' [ 2755.472463][T23845] fuse: Unknown parameter '0x0000000000000003' [ 2757.999061][T23849] FAULT_INJECTION: forcing a failure. [ 2757.999061][T23849] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.999562][T23849] CPU: 0 UID: 0 PID: 23849 Comm: syz.9.2884 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2757.999667][T23849] Hardware name: ARM-Versatile Express [ 2757.999698][T23849] Call trace: [ 2757.999836][T23849] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2757.999937][T23849] r7:868bec00 r6:00000000 r5:60000013 r4:8225b4f4 [ 2757.999955][T23849] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2758.000004][T23849] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2758.000057][T23849] r5:868bec00 r4:82919a80 [ 2758.000103][T23849] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2758.000169][T23849] [<80964bd8>] (should_fail_ex) from [<8051c224>] (should_failslab+0x6c/0x94) [ 2758.000235][T23849] r8:00000000 r7:868bec00 r6:00400cc0 r5:ffffffff r4:832c9240 [ 2758.000252][T23849] [<8051c1b8>] (should_failslab) from [<805005d8>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2758.000347][T23849] [<80500588>] (kmem_cache_alloc_node_noprof) from [<81538044>] (__alloc_skb+0x138/0x160) [ 2758.000444][T23849] r10:dfbb1d1c r9:00000000 r8:00400cc0 r7:00000000 r6:832c9240 r5:ffffffff [ 2758.000464][T23849] r4:828060c0 [ 2758.000480][T23849] [<81537f0c>] (__alloc_skb) from [<815405e0>] (alloc_skb_with_frags+0x44/0x1ec) [ 2758.000538][T23849] r8:802c5d88 r7:dfbb1cc4 r6:00000000 r5:00001000 r4:00000003 [ 2758.000558][T23849] [<8154059c>] (alloc_skb_with_frags) from [<81530eec>] (sock_alloc_send_pskb+0x1f4/0x228) [ 2758.000624][T23849] r10:dfbb1d1c r9:00000000 r8:802c5d88 r7:dfbb1cc4 r6:868bec00 r5:7fffffff [ 2758.000667][T23849] r4:8333c600 [ 2758.000690][T23849] [<81530cf8>] (sock_alloc_send_pskb) from [<8180336c>] (unix_dgram_sendmsg+0x124/0x75c) [ 2758.000774][T23849] r10:00000000 r9:dfbb1dc4 r8:868bec00 r7:8333c600 r6:00000000 r5:00000000 [ 2758.000795][T23849] r4:dfbb1f20 [ 2758.000811][T23849] [<81803248>] (unix_dgram_sendmsg) from [<818039e8>] (unix_seqpacket_sendmsg+0x44/0x84) [ 2758.000875][T23849] r10:00000000 r9:dfbb1dc4 r8:dfbb1dc4 r7:00000000 r6:850cf900 r5:dfbb1f20 [ 2758.000895][T23849] r4:00000000 [ 2758.000940][T23849] [<818039a4>] (unix_seqpacket_sendmsg) from [<8152ade0>] (__sock_sendmsg+0x44/0x78) [ 2758.001001][T23849] r5:dfbb1f20 r4:00000000 [ 2758.001020][T23849] [<8152ad9c>] (__sock_sendmsg) from [<8152b5a0>] (____sys_sendmsg+0x298/0x2cc) [ 2758.001075][T23849] r7:00000000 r6:850cf900 r5:00004800 r4:dfbb1f20 [ 2758.001092][T23849] [<8152b308>] (____sys_sendmsg) from [<8152d3ac>] (___sys_sendmsg+0x9c/0xd0) [ 2758.001152][T23849] r10:dfbb1e24 r9:20000340 r8:00004800 r7:00000000 r6:850cf900 r5:dfbb1f20 [ 2758.001173][T23849] r4:00000000 [ 2758.001188][T23849] [<8152d310>] (___sys_sendmsg) from [<8152d844>] (__sys_sendmsg+0x8c/0xe0) [ 2758.001251][T23849] r10:00000128 r9:868bec00 r8:8391b9c0 r7:00004800 r6:20000340 r5:8391b9c1 [ 2758.001270][T23849] r4:00000005 [ 2758.001287][T23849] [<8152d7b8>] (__sys_sendmsg) from [<8152d8ac>] (sys_sendmsg+0x14/0x18) [ 2758.001418][T23849] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 2758.001513][T23849] [<8152d898>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2758.001563][T23849] Exception stack(0xdfbb1fa8 to 0xdfbb1ff0) [ 2758.001605][T23849] 1fa0: 00000000 00000000 00000005 20000340 00004800 00000000 [ 2758.001640][T23849] 1fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76b4f0bc [ 2758.001666][T23849] 1fe0: 76b4eec0 76b4eeb0 000193a4 00131fc0 [ 2758.356653][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 2758.357064][ T31] audit: type=1400 audit(2758.270:669): avc: denied { ioctl } for pid=23851 comm="syz.9.2886" path="socket:[43251]" dev="sockfs" ino=43251 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2758.673273][ T31] audit: type=1400 audit(2758.600:670): avc: denied { prog_load } for pid=23855 comm="syz.0.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2758.673761][ T31] audit: type=1400 audit(2758.600:671): avc: denied { bpf } for pid=23855 comm="syz.0.2887" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2758.787339][ T31] audit: type=1400 audit(2758.720:672): avc: denied { perfmon } for pid=23855 comm="syz.0.2887" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2758.816714][ T31] audit: type=1400 audit(2758.730:673): avc: denied { prog_run } for pid=23855 comm="syz.0.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2759.359522][T23860] fuse: Unknown parameter '0x0000000000000003' [ 2759.391993][ T31] audit: type=1326 audit(2759.320:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.0.2889" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2759.491965][ T31] audit: type=1400 audit(2759.420:675): avc: denied { append } for pid=23861 comm="syz.9.2890" name="loop-control" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2760.163877][ T31] audit: type=1400 audit(2760.090:676): avc: denied { shutdown } for pid=23865 comm="syz.9.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2760.892478][ T31] audit: type=1400 audit(2760.820:677): avc: denied { create } for pid=23871 comm="syz.9.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2762.382936][ T31] audit: type=1400 audit(2762.310:678): avc: denied { create } for pid=23878 comm="syz.0.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2762.424639][T23880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23880 comm=syz.9.2896 [ 2762.943573][T23886] fuse: Unknown parameter 'fd0x0000000000000003' [ 2763.489427][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 2763.490697][ T31] audit: type=1400 audit(2763.420:687): avc: denied { create } for pid=23881 comm="syz.9.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2766.000546][T22903] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2766.214248][T22903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2766.246771][T22903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2766.248228][T22903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2766.250071][T22903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2766.288776][T22903] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2766.290110][T22903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.291184][T22903] usb 1-1: Product: syz [ 2766.291944][T22903] usb 1-1: Manufacturer: syz [ 2766.292683][T22903] usb 1-1: SerialNumber: syz [ 2766.299431][T22903] usb 1-1: config 0 descriptor?? [ 2766.590222][T22903] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2766.846856][T14582] usb 1-1: USB disconnect, device number 38 [ 2767.018903][ T31] audit: type=1400 audit(2766.950:688): avc: denied { read } for pid=23916 comm="syz.9.2905" name="userfaultfd" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 2767.022146][ T31] audit: type=1400 audit(2766.950:689): avc: denied { open } for pid=23916 comm="syz.9.2905" path="/dev/userfaultfd" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 2767.045603][ T31] audit: type=1400 audit(2766.970:690): avc: denied { ioctl } for pid=23916 comm="syz.9.2905" path="/dev/userfaultfd" dev="devtmpfs" ino=84 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 2767.331068][ T31] audit: type=1400 audit(2767.260:691): avc: denied { write } for pid=23920 comm="syz.9.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2767.543650][T23925] fuse: Unknown parameter 'fd0x0000000000000003' [ 2767.561776][ T31] audit: type=1326 audit(2767.490:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23924 comm="syz.9.2908" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2767.830268][T23927] FAULT_INJECTION: forcing a failure. [ 2767.830268][T23927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2767.830776][T23927] CPU: 0 UID: 0 PID: 23927 Comm: syz.0.2909 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2767.830857][T23927] Hardware name: ARM-Versatile Express [ 2767.830884][T23927] Call trace: [ 2767.830922][T23927] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2767.831027][T23927] r7:20000d00 r6:00000000 r5:60000013 r4:8225b4f4 [ 2767.831048][T23927] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2767.831101][T23927] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2767.831158][T23927] r5:841f5400 r4:82950610 [ 2767.831177][T23927] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2767.831334][T23927] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2767.831403][T23927] r8:00000000 r7:20000d00 r6:86642b40 r5:00000000 r4:dfcfdf20 [ 2767.831422][T23927] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2767.831473][T23927] [<80964e18>] (should_fail_usercopy) from [<808b4368>] (_copy_from_iter+0x6c/0x7c8) [ 2767.831526][T23927] [<808b42fc>] (_copy_from_iter) from [<81658578>] (netlink_sendmsg+0x18c/0x444) [ 2767.831631][T23927] r10:00000000 r9:00000000 r8:dfcfdf30 r7:86445400 r6:00000014 r5:85efc300 [ 2767.831823][T23927] r4:dfcfdf20 [ 2767.832156][T23927] [<816583ec>] (netlink_sendmsg) from [<8152ade0>] (__sock_sendmsg+0x44/0x78) [ 2767.832411][T23927] r10:00000000 r9:dfcfddc4 r8:dfcfddc4 r7:00000000 r6:850ce280 r5:dfcfdf20 [ 2767.832499][T23927] r4:00000000 [ 2767.832778][T23927] [<8152ad9c>] (__sock_sendmsg) from [<8152b5a0>] (____sys_sendmsg+0x298/0x2cc) [ 2767.832876][T23927] r7:00000000 r6:850ce280 r5:20048004 r4:dfcfdf20 [ 2767.832895][T23927] [<8152b308>] (____sys_sendmsg) from [<8152d3ac>] (___sys_sendmsg+0x9c/0xd0) [ 2767.832952][T23927] r10:dfcfde24 r9:20000d80 r8:20048004 r7:00000000 r6:850ce280 r5:dfcfdf20 [ 2767.833148][T23927] r4:00000000 [ 2767.833228][T23927] [<8152d310>] (___sys_sendmsg) from [<8152d844>] (__sys_sendmsg+0x8c/0xe0) [ 2767.833570][T23927] r10:00000128 r9:841f5400 r8:8391b3c0 r7:20048004 r6:20000d80 r5:8391b3c1 [ 2767.833832][T23927] r4:00000004 [ 2767.833919][T23927] [<8152d7b8>] (__sys_sendmsg) from [<8152d8ac>] (sys_sendmsg+0x14/0x18) [ 2767.834017][T23927] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 2767.834035][T23927] [<8152d898>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2767.834215][T23927] Exception stack(0xdfcfdfa8 to 0xdfcfdff0) [ 2767.834475][T23927] dfa0: 00000000 00000000 00000004 20000d80 20048004 00000000 [ 2767.834614][T23927] dfc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76bd00bc [ 2767.834645][T23927] dfe0: 76bcfec0 76bcfeb0 000193a4 00131fc0 [ 2768.939316][T23932] fuse: Unknown parameter 'fd0x0000000000000003' [ 2768.976917][ T31] audit: type=1326 audit(2768.900:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23931 comm="syz.0.2911" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2770.281403][ T31] audit: type=1400 audit(2770.210:694): avc: denied { connect } for pid=23934 comm="syz.9.2912" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2772.043604][ T31] audit: type=1400 audit(2771.970:695): avc: denied { mounton } for pid=23939 comm="syz.0.2914" path="/451/file0" dev="tmpfs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2772.156953][ T31] audit: type=1400 audit(2772.090:696): avc: denied { mount } for pid=23939 comm="syz.0.2914" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2772.305374][ T31] audit: type=1400 audit(2772.230:697): avc: denied { write } for pid=23939 comm="syz.0.2914" name="arp" dev="proc" ino=4026532759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2773.124887][ T31] audit: type=1400 audit(2773.050:698): avc: denied { unmount } for pid=20216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2773.662683][T23953] fuse: Unknown parameter 'fd0x0000000000000003' [ 2773.726859][ T31] audit: type=1326 audit(2773.650:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23950 comm="syz.0.2916" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2776.880691][ T31] audit: type=1400 audit(2776.810:700): avc: denied { create } for pid=23963 comm="syz.0.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2776.890251][ T31] audit: type=1400 audit(2776.820:701): avc: denied { ioctl } for pid=23963 comm="syz.0.2921" path="socket:[43410]" dev="sockfs" ino=43410 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2777.393716][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2919'. [ 2778.959993][ T31] audit: type=1326 audit(2778.890:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23967 comm="syz.0.2922" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2779.727737][ T31] audit: type=1400 audit(2779.640:703): avc: denied { ioctl } for pid=23973 comm="syz.9.2923" path="socket:[43432]" dev="sockfs" ino=43432 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2781.367085][ T31] audit: type=1400 audit(2781.290:704): avc: denied { create } for pid=23983 comm="syz.9.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2781.416924][ T31] audit: type=1400 audit(2781.330:705): avc: denied { getopt } for pid=23983 comm="syz.9.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2781.421605][ T31] audit: type=1400 audit(2781.350:706): avc: denied { ioctl } for pid=23983 comm="syz.9.2927" path="socket:[43454]" dev="sockfs" ino=43454 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2781.758075][T23990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.760786][T23990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2782.192175][ T31] audit: type=1326 audit(2782.120:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23994 comm="syz.9.2929" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2783.312919][ T31] audit: type=1400 audit(2783.240:708): avc: denied { write } for pid=24000 comm="syz.0.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2784.957713][T24009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2784.960497][T24009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2788.069486][T24022] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 2788.540590][ T31] audit: type=1326 audit(2788.470:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24025 comm="syz.9.2937" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2788.927124][ T31] audit: type=1400 audit(2788.850:710): avc: granted { setsecparam } for pid=24029 comm="syz.0.2939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2791.540195][ T31] audit: type=1400 audit(2791.470:711): avc: denied { accept } for pid=24045 comm="syz.9.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2792.529586][T24058] FAULT_INJECTION: forcing a failure. [ 2792.529586][T24058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2792.531193][T24058] CPU: 1 UID: 0 PID: 24058 Comm: syz.9.2950 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 2792.531299][T24058] Hardware name: ARM-Versatile Express [ 2792.531324][T24058] Call trace: [ 2792.531363][T24058] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 2792.531462][T24058] r7:00000000 r6:00000000 r5:60000013 r4:8225b4f4 [ 2792.531481][T24058] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 2792.531529][T24058] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 2792.531580][T24058] r5:841f3c00 r4:82950610 [ 2792.531595][T24058] [<8021fe1c>] (dump_stack) from [<80964d9c>] (should_fail_ex+0x1c4/0x228) [ 2792.531651][T24058] [<80964bd8>] (should_fail_ex) from [<80964e14>] (should_fail+0x14/0x18) [ 2792.531708][T24058] r8:76b4ef30 r7:00000000 r6:00000000 r5:dfbe1f68 r4:00000002 [ 2792.531725][T24058] [<80964e00>] (should_fail) from [<80964e34>] (should_fail_usercopy+0x1c/0x20) [ 2792.531784][T24058] [<80964e18>] (should_fail_usercopy) from [<80589618>] (simple_read_from_buffer+0x80/0x13c) [ 2792.531841][T24058] [<80589598>] (simple_read_from_buffer) from [<8060187c>] (proc_fail_nth_read+0xb8/0x100) [ 2792.531908][T24058] r10:00000001 r9:806017c4 r8:00000002 r7:dfbe1f68 r6:0000000f r5:76b4ef30 [ 2792.531933][T24058] r4:841f3c00 r3:dfbe1e9f [ 2792.531950][T24058] [<806017c4>] (proc_fail_nth_read) from [<8054dc90>] (vfs_read+0x98/0x320) [ 2792.532012][T24058] r8:76b4ef30 r7:dfbe1f68 r6:841f3c00 r5:0000000f r4:849326c0 [ 2792.532029][T24058] [<8054dbf8>] (vfs_read) from [<8054e938>] (ksys_read+0x74/0xe8) [ 2792.532087][T24058] r10:00000003 r9:841f3c00 r8:8020029c r7:00000000 r6:00000000 r5:849326c0 [ 2792.532106][T24058] r4:849326c3 [ 2792.532121][T24058] [<8054e8c4>] (ksys_read) from [<8054e9bc>] (sys_read+0x10/0x14) [ 2792.532178][T24058] r7:00000003 r6:00000004 r5:76b4ef30 r4:0000000f [ 2792.532194][T24058] [<8054e9ac>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2792.532236][T24058] Exception stack(0xdfbe1fa8 to 0xdfbe1ff0) [ 2792.532268][T24058] 1fa0: 0000000f 76b4ef30 00000004 76b4ef30 0000000f 00000000 [ 2792.532302][T24058] 1fc0: 0000000f 76b4ef30 00000004 00000003 002e0000 00000000 00006364 76b4f0bc [ 2792.532328][T24058] 1fe0: 00000158 76b4eed0 000d7df0 0012fe94 [ 2793.992358][ T31] audit: type=1326 audit(2793.920:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.0.2948" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2795.602497][ T31] audit: type=1400 audit(2795.530:713): avc: denied { map_create } for pid=24068 comm="syz.9.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2795.919669][T24072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2795.923114][T24072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.941837][T24085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.944197][T24085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2799.060235][ T31] audit: type=1326 audit(2798.990:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.9.2959" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2799.799587][T22903] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2800.007546][T22903] usb 1-1: Using ep0 maxpacket: 16 [ 2800.043834][T22903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2800.045728][T22903] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2800.056857][T22903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2800.092816][T22903] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2800.097407][T22903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2800.098465][T22903] usb 1-1: Product: syz [ 2800.099152][T22903] usb 1-1: Manufacturer: syz [ 2800.099870][T22903] usb 1-1: SerialNumber: syz [ 2800.105856][T22903] usb 1-1: config 0 descriptor?? [ 2800.699410][T22903] usb 1-1: USB disconnect, device number 39 [ 2801.688288][ T31] audit: type=1400 audit(2801.620:715): avc: denied { read } for pid=24127 comm="syz.0.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2803.001393][ T31] audit: type=1326 audit(2802.930:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24124 comm="syz.9.2969" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2803.337052][T22973] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2803.487345][T22973] usb 1-1: Using ep0 maxpacket: 16 [ 2803.511444][T22973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2803.511866][T22973] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2803.511996][T22973] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2803.547587][T22973] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2803.547814][T22973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.547977][T22973] usb 1-1: Product: syz [ 2803.548081][T22973] usb 1-1: Manufacturer: syz [ 2803.548177][T22973] usb 1-1: SerialNumber: syz [ 2803.550141][T22973] usb 1-1: config 0 descriptor?? [ 2804.016579][T22973] usb 1-1: USB disconnect, device number 40 [ 2806.071284][ T31] audit: type=1400 audit(2806.000:717): avc: denied { read } for pid=24153 comm="syz.9.2973" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2806.073848][ T31] audit: type=1400 audit(2806.000:718): avc: denied { open } for pid=24153 comm="syz.9.2973" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2806.318318][T22903] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2806.577083][T22903] usb 1-1: Using ep0 maxpacket: 16 [ 2806.589031][T22903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2806.589639][T22903] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2806.589743][T22903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2806.730275][T22903] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2806.730724][T22903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.732855][T22903] usb 1-1: Product: syz [ 2806.733103][T22903] usb 1-1: Manufacturer: syz [ 2806.733288][T22903] usb 1-1: SerialNumber: syz [ 2806.749417][T22903] usb 1-1: config 0 descriptor?? [ 2806.793977][ T31] audit: type=1400 audit(2806.720:719): avc: denied { ioctl } for pid=24163 comm="syz.9.2976" path="socket:[43739]" dev="sockfs" ino=43739 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2807.090306][ T31] audit: type=1400 audit(2807.020:720): avc: denied { write } for pid=24163 comm="syz.9.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2807.427202][T22378] usb 1-1: USB disconnect, device number 41 [ 2807.867455][ T31] audit: type=1400 audit(2807.770:721): avc: denied { bind } for pid=24179 comm="syz.0.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2808.304703][ T31] audit: type=1326 audit(2808.230:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24169 comm="syz.9.2977" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2811.960269][ T31] audit: type=1326 audit(2811.890:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24193 comm="syz.9.2986" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x0 [ 2814.068160][ T31] audit: type=1400 audit(2814.000:724): avc: denied { setattr } for pid=24211 comm="syz.0.2988" name="PINGv6" dev="sockfs" ino=43788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2814.228034][T24215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=361 sclass=netlink_route_socket pid=24215 comm=syz.9.2989 [ 2814.459621][ T31] audit: type=1400 audit(2814.390:725): avc: denied { create } for pid=24216 comm="syz.0.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2814.468138][ T31] audit: type=1400 audit(2814.400:726): avc: denied { ioctl } for pid=24216 comm="syz.0.2990" path="socket:[43804]" dev="sockfs" ino=43804 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2814.497705][ T31] audit: type=1400 audit(2814.420:727): avc: denied { getattr } for pid=24216 comm="syz.0.2990" path="socket:[43804]" dev="sockfs" ino=43804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2815.553130][ T31] audit: type=1400 audit(2815.480:728): avc: denied { lock } for pid=24224 comm="syz.0.2994" path="/dev/loop-control" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2818.347641][T24230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24230 comm=syz.9.2995 [ 2818.357147][ T31] audit: type=1400 audit(2818.290:729): avc: denied { execmem } for pid=24229 comm="syz.9.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2826.392897][ T31] audit: type=1400 audit(2826.320:730): avc: denied { create } for pid=24248 comm="syz.9.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2826.563105][ T31] audit: type=1400 audit(2826.490:731): avc: denied { accept } for pid=24248 comm="syz.9.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2829.348935][ T31] audit: type=1400 audit(2829.280:732): avc: denied { map_read map_write } for pid=24260 comm="syz.0.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2829.946622][ T31] audit: type=1400 audit(2829.850:733): avc: denied { create } for pid=24268 comm="syz.9.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2832.620811][ T31] audit: type=1400 audit(2832.550:734): avc: denied { setopt } for pid=24268 comm="syz.9.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2852.644832][ T31] audit: type=1400 audit(2852.570:735): avc: denied { listen } for pid=24281 comm="syz.9.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2852.770778][ T31] audit: type=1400 audit(2852.700:736): avc: denied { connect } for pid=24281 comm="syz.9.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2871.254022][ T31] audit: type=1400 audit(2871.180:737): avc: denied { watch watch_reads } for pid=24291 comm="syz.9.3012" path="/332" dev="tmpfs" ino=1788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2877.460333][T24300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2877.480119][T24300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2878.377000][ T31] audit: type=1400 audit(2878.300:738): avc: denied { name_bind } for pid=24313 comm="syz.0.3021" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2878.377891][ T31] audit: type=1400 audit(2878.300:739): avc: denied { node_bind } for pid=24313 comm="syz.0.3021" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2881.117706][ T31] audit: type=1400 audit(2881.040:740): avc: denied { setopt } for pid=24323 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2888.768869][ T31] audit: type=1400 audit(2888.700:741): avc: denied { map } for pid=24338 comm="syz.0.3026" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2888.771866][ T31] audit: type=1400 audit(2888.700:742): avc: denied { read write } for pid=24338 comm="syz.0.3026" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2902.042044][ T31] audit: type=1400 audit(2901.970:743): avc: denied { bind } for pid=24371 comm="syz.0.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2902.432144][ T31] audit: type=1400 audit(2902.360:744): avc: denied { setopt } for pid=24371 comm="syz.0.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2903.556940][ T31] audit: type=1400 audit(2903.480:745): avc: denied { create } for pid=24381 comm="syz.9.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2903.566684][ T31] audit: type=1400 audit(2903.490:746): avc: denied { getopt } for pid=24381 comm="syz.9.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2924.932455][T24418] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3051' sets config #1 [ 2926.490833][T24420] netlink: 'syz.0.3052': attribute type 10 has an invalid length. [ 2928.030446][ T31] audit: type=1400 audit(2927.960:747): avc: denied { name_bind } for pid=24447 comm="syz.9.3060" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2939.147735][ T31] audit: type=1400 audit(2939.080:748): avc: denied { write } for pid=24485 comm="syz.9.3072" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2939.152325][ T31] audit: type=1400 audit(2939.080:749): avc: denied { remove_name } for pid=24485 comm="syz.9.3072" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2939.161401][ T31] audit: type=1400 audit(2939.090:750): avc: denied { unlink } for pid=24485 comm="syz.9.3072" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2939.238457][ T31] audit: type=1400 audit(2939.160:751): avc: denied { setopt } for pid=24487 comm="syz.9.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2939.244516][ T31] audit: type=1400 audit(2939.170:752): avc: denied { connect } for pid=24487 comm="syz.9.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2947.139212][ T31] audit: type=1400 audit(2947.070:753): avc: denied { getopt } for pid=24507 comm="syz.0.3082" laddr=fe80::10 lport=50089 faddr=fe80:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2947.939663][T24513] syz_tun: entered promiscuous mode [ 2947.943073][T24513] batadv_slave_0: entered promiscuous mode [ 2975.780704][T24557] tmpfs: Unsupported parameter 'huge' [ 2979.078651][ T31] audit: type=1400 audit(2979.010:754): avc: denied { create } for pid=24570 comm="syz.9.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2979.300531][ T31] audit: type=1400 audit(2979.230:755): avc: denied { ioctl } for pid=24555 comm="syz.0.3098" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2979.304333][T24576] binder: 24555:24576 ioctl 400c620e 99999999 returned -14 [ 2979.340642][ T31] audit: type=1400 audit(2979.270:756): avc: denied { create } for pid=24555 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2980.558843][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3106'. [ 2980.670186][ T31] audit: type=1400 audit(2980.600:757): avc: denied { write } for pid=24579 comm="syz.9.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2980.995161][ T31] audit: type=1400 audit(2980.920:758): avc: denied { block_suspend } for pid=24584 comm="syz.9.3109" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2992.218235][ T31] audit: type=1400 audit(2992.150:759): avc: denied { ioctl } for pid=24609 comm="syz.9.3115" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44398 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2995.735854][T24639] syzkaller1: entered promiscuous mode [ 2995.747452][T24639] syzkaller1: entered allmulticast mode [ 2996.301391][ T31] audit: type=1400 audit(2996.230:760): avc: denied { connect } for pid=24646 comm="syz.9.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2998.758790][ T31] audit: type=1400 audit(2998.690:761): avc: denied { name_bind } for pid=24655 comm="syz.9.3133" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 3073.520429][T24771] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3163'. [ 3082.419619][T24787] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 3090.356742][ T31] audit: type=1400 audit(3090.280:762): avc: denied { write } for pid=24817 comm="syz.0.3179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3096.083307][T24834] raw_sendmsg: syz.9.3184 forgot to set AF_INET. Fix it! [ 3099.437441][ T31] audit: type=1400 audit(3099.370:763): avc: denied { bind } for pid=24831 comm="syz.0.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3099.447449][ T31] audit: type=1400 audit(3099.380:764): avc: denied { listen } for pid=24831 comm="syz.0.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3104.594284][T24840] netlink: 'syz.9.3187': attribute type 18 has an invalid length. [ 3104.594550][T24840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3187'. [ 3105.098059][T24845] syzkaller0: entered promiscuous mode [ 3105.100064][T24845] syzkaller0: entered allmulticast mode [ 3123.348794][ T31] audit: type=1400 audit(3123.280:765): avc: denied { relabelfrom } for pid=24905 comm="syz.0.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3123.349221][ T31] audit: type=1400 audit(3123.280:766): avc: denied { relabelto } for pid=24905 comm="syz.0.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3123.481465][ T31] audit: type=1400 audit(3123.410:767): avc: denied { create } for pid=24915 comm="syz.0.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3123.696664][ T31] audit: type=1400 audit(3123.620:768): avc: denied { create } for pid=24918 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3125.244011][ T31] audit: type=1400 audit(3125.170:769): avc: denied { bind } for pid=24924 comm="syz.9.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3125.273691][ T31] audit: type=1400 audit(3125.190:770): avc: denied { write } for pid=24924 comm="syz.9.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3140.719591][T24957] "syz.0.3222" (24957) uses obsolete ecb(arc4) skcipher [ 3146.928465][T24962] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3223'. [ 3156.707378][T24978] input: syz1 as /devices/virtual/input/input13 [ 3157.178234][ T31] audit: type=1400 audit(3157.110:771): avc: denied { mount } for pid=24974 comm="syz.0.3227" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3168.530139][ T31] audit: type=1400 audit(3168.460:772): avc: denied { unmount } for pid=20216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3170.989170][ T31] audit: type=1400 audit(3170.920:773): avc: denied { write } for pid=25013 comm="syz.0.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3170.996829][ T31] audit: type=1400 audit(3170.920:774): avc: denied { nlmsg_write } for pid=25013 comm="syz.0.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3178.128446][ T31] audit: type=1400 audit(3178.060:775): avc: denied { setopt } for pid=25025 comm="syz.9.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3185.498379][ T31] audit: type=1400 audit(3185.430:776): avc: denied { create } for pid=25037 comm="syz.9.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3205.581572][ T31] audit: type=1400 audit(3205.510:777): avc: denied { set_context_mgr } for pid=25085 comm="syz.9.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3206.480592][T25093] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3263'. [ 3206.683575][T25095] can0: slcan on ttyS3. [ 3206.738876][T25094] can0 (unregistered): slcan off ttyS3. [ 3207.011365][ T31] audit: type=1400 audit(3206.940:778): avc: denied { read } for pid=25107 comm="syz.9.3267" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3207.655524][T25111] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 3207.655524][T25111] The task syz.9.3268 (25111) triggered the difference, watch for misbehavior. [ 3210.770137][ T31] audit: type=1400 audit(3210.700:779): avc: denied { setopt } for pid=25135 comm="syz.0.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3211.018070][ T31] audit: type=1400 audit(3210.950:780): avc: denied { mounton } for pid=25135 comm="syz.0.3278" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 3211.949516][ T31] audit: type=1400 audit(3211.880:781): avc: denied { bind } for pid=25135 comm="syz.0.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3250.018548][ T31] audit: type=1400 audit(3249.940:782): avc: denied { create } for pid=25196 comm="syz.9.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3250.542511][T25201] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3297'. [ 3250.545545][ T31] audit: type=1400 audit(3250.470:783): avc: denied { write } for pid=25196 comm="syz.9.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3256.651211][ T31] audit: type=1400 audit(3256.580:784): avc: denied { setopt } for pid=25221 comm="syz.9.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3264.510958][T25256] comedi: valid board names for 8255 driver are: [ 3264.522565][T25256] 8255 [ 3264.524756][T25256] comedi: valid board names for vmk80xx driver are: [ 3264.524953][T25256] vmk80xx [ 3264.525159][T25256] comedi: valid board names for usbduxsigma driver are: [ 3264.525362][T25256] usbduxsigma [ 3264.525536][T25256] comedi: valid board names for usbduxfast driver are: [ 3264.525708][T25256] usbduxfast [ 3264.525888][T25256] comedi: valid board names for usbdux driver are: [ 3264.532137][T25256] usbdux [ 3264.532325][T25256] comedi: valid board names for ni6501 driver are: [ 3264.532503][T25256] ni6501 [ 3264.532671][T25256] comedi: valid board names for dt9812 driver are: [ 3264.532855][T25256] dt9812 [ 3264.533021][T25256] comedi: valid board names for ni_labpc_cs driver are: [ 3264.533193][T25256] ni_labpc_cs [ 3264.533387][T25256] comedi: valid board names for ni_daq_700 driver are: [ 3264.533558][T25256] ni_daq_700 [ 3264.533765][T25256] comedi: valid board names for labpc_pci driver are: [ 3264.533936][T25256] labpc_pci [ 3264.534104][T25256] comedi: valid board names for adl_pci9118 driver are: [ 3264.534266][T25256] pci9118dg [ 3264.534429][T25256] pci9118hg [ 3264.534596][T25256] pci9118hr [ 3264.534789][T25256] comedi: valid board names for 8255_pci driver are: [ 3264.534967][T25256] 8255_pci [ 3264.535139][T25256] comedi: valid board names for comedi_parport driver are: [ 3264.535315][T25256] comedi_parport [ 3264.535488][T25256] comedi: valid board names for comedi_test driver are: [ 3264.535662][T25256] comedi_test [ 3264.535839][T25256] comedi: valid board names for comedi_bond driver are: [ 3264.544394][T25256] comedi_bond [ 3277.402747][T25267] syzkaller0: entered promiscuous mode [ 3277.405854][T25267] syzkaller0: entered allmulticast mode [ 3278.385043][ T31] audit: type=1400 audit(3278.310:785): avc: denied { read } for pid=25280 comm="syz.9.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3282.029338][T25286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3282.030120][T25286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3282.524463][T25290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3282.525369][T25290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3296.373543][T25303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3296.375892][T25303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3296.479613][ T31] audit: type=1326 audit(3296.410:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25306 comm="syz.9.3324" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 3296.483231][ T31] audit: type=1326 audit(3296.410:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25306 comm="syz.9.3324" exe="/syz-executor" sig=0 arch=40000028 syscall=269 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 3296.503368][ T31] audit: type=1326 audit(3296.410:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25306 comm="syz.9.3324" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131fc0 code=0x7ffc0000 [ 3297.170314][ T31] audit: type=1400 audit(3297.100:789): avc: denied { setopt } for pid=25312 comm="syz.9.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3300.840895][T25317] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 3300.841518][T25317] Error validating options; rc = [-22] [ 3322.057269][T22776] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3322.227529][T22776] usb 1-1: Using ep0 maxpacket: 8 [ 3322.243271][T22776] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3322.244428][T22776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3322.252978][T22776] usb 1-1: config 0 descriptor?? [ 3322.927814][T22776] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 3322.929748][T22776] asix 1-1:0.0: probe with driver asix failed with error -32 [ 3322.954373][T25217] usb 1-1: USB disconnect, device number 42 [ 3337.579966][ T31] audit: type=1400 audit(3337.510:790): avc: denied { create } for pid=25378 comm="syz.0.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3337.770967][T22776] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3337.781176][T22776] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3344.609275][T25395] batadv_slave_1: entered promiscuous mode [ 3344.614643][T25395] batadv_slave_1: left promiscuous mode [ 3359.404660][ T31] audit: type=1400 audit(3359.330:791): avc: denied { ioctl } for pid=25398 comm="syz.9.3346" path="mnt:[4026532660]" dev="nsfs" ino=4026532660 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3366.097347][ T31] audit: type=1400 audit(3366.020:792): avc: denied { execute } for pid=25404 comm="syz-executor" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 3366.113606][ T31] audit: type=1400 audit(3366.040:793): avc: denied { execute_no_trans } for pid=25404 comm="syz-executor" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 3366.241803][T22370] syz_tun (unregistering): left promiscuous mode [ 3366.290163][ T31] audit: type=1400 audit(3366.220:794): avc: denied { mounton } for pid=25405 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 3366.378785][T13095] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3366.479180][T13095] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3366.534603][T13095] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3366.618410][T13095] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3367.380505][T13095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3367.418305][T13095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3367.499794][T13095] bond0 (unregistering): Released all slaves [ 3367.617946][T13095] batadv_slave_0: left promiscuous mode [ 3367.648287][T13095] hsr_slave_0: left promiscuous mode [ 3367.689152][T13095] hsr_slave_1: left promiscuous mode [ 3367.774492][T13095] veth1_macvtap: left promiscuous mode [ 3367.795041][T13095] veth0_macvtap: left promiscuous mode [ 3367.795733][T13095] veth1_vlan: left promiscuous mode [ 3367.795933][T13095] veth0_vlan: left promiscuous mode [ 3371.460546][T25405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3371.469483][T25405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3372.383464][T25405] hsr_slave_0: entered promiscuous mode [ 3372.385862][T25405] hsr_slave_1: entered promiscuous mode [ 3372.388932][T25405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3372.389936][T25405] Cannot create hsr debugfs directory [ 3372.998606][T25405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3373.010894][T25405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3373.024949][T25405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3373.038299][T25405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3373.766026][T25405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3375.919390][T25405] veth0_vlan: entered promiscuous mode [ 3375.939255][T25405] veth1_vlan: entered promiscuous mode [ 3376.004861][T25405] veth0_macvtap: entered promiscuous mode [ 3376.019039][T25405] veth1_macvtap: entered promiscuous mode [ 3376.074088][T25405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.074492][T25405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.077837][T25405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.078144][T25405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.166786][ T31] audit: type=1400 audit(3376.090:795): avc: denied { mounton } for pid=25405 comm="syz-executor" path="/syzkaller.KrO6Uc/syz-tmp" dev="vda" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 3376.197579][ T31] audit: type=1400 audit(3376.130:796): avc: denied { mount } for pid=25405 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3376.207127][ T31] audit: type=1400 audit(3376.130:797): avc: denied { mounton } for pid=25405 comm="syz-executor" path="/syzkaller.KrO6Uc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 3376.207527][ T31] audit: type=1400 audit(3376.130:798): avc: denied { mounton } for pid=25405 comm="syz-executor" path="/syzkaller.KrO6Uc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=46597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 3376.232872][ T31] audit: type=1400 audit(3376.160:799): avc: denied { unmount } for pid=25405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3376.243849][ T31] audit: type=1400 audit(3376.170:800): avc: denied { mounton } for pid=25405 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 3376.244971][ T31] audit: type=1400 audit(3376.170:801): avc: denied { mount } for pid=25405 comm="syz-executor" name="/" dev="gadgetfs" ino=2213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 3376.251496][ T31] audit: type=1400 audit(3376.180:802): avc: denied { mount } for pid=25405 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3376.253597][ T31] audit: type=1400 audit(3376.180:803): avc: denied { mounton } for pid=25405 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 3388.477006][ T31] audit: type=1400 audit(3388.350:804): avc: denied { watch watch_reads } for pid=25790 comm="syz.0.3351" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3388.477486][ T31] audit: type=1400 audit(3388.370:805): avc: denied { execute } for pid=25790 comm="syz.0.3351" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3388.477792][ T31] audit: type=1400 audit(3388.370:806): avc: denied { execute_no_trans } for pid=25790 comm="syz.0.3351" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3405.894242][ T31] audit: type=1400 audit(3405.820:807): avc: denied { sqpoll } for pid=25833 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3405.912531][ T31] audit: type=1400 audit(3405.840:808): avc: denied { create } for pid=25833 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3405.919761][ T31] audit: type=1400 audit(3405.850:809): avc: denied { read } for pid=25833 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3407.260947][T25846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3407.262019][T25846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3409.487773][T25852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3409.488254][T25852] IPv6: NLM_F_CREATE should be set when creating new route [ 3424.847654][ T31] audit: type=1400 audit(3424.780:810): avc: denied { setopt } for pid=25874 comm="syz.9.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3431.923224][T22973] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 3431.926830][T22973] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3434.354126][T25896] netlink: 'syz.9.3379': attribute type 10 has an invalid length. [ 3434.979470][T14582] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 3434.984885][T14582] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3446.005195][T22776] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 3446.014578][T22776] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3448.848758][T22973] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 3448.857877][T22973] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3450.435088][ T31] audit: type=1400 audit(3450.360:811): avc: denied { create } for pid=25943 comm="syz.0.3389" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3450.439327][T25954] ./file0: Can't open blockdev [ 3450.440385][ T31] audit: type=1400 audit(3450.370:812): avc: denied { mounton } for pid=25943 comm="syz.0.3389" path="/24/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3455.978070][ T31] audit: type=1400 audit(3455.910:813): avc: denied { wake_alarm } for pid=25963 comm="syz.9.3394" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3458.884575][ T31] audit: type=1400 audit(3458.810:814): avc: denied { unlink } for pid=25405 comm="syz-executor" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3459.142187][T14555] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 3459.155267][T14555] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3460.673697][ T31] audit: type=1400 audit(3460.600:815): avc: denied { connect } for pid=25981 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3460.678159][ T31] audit: type=1400 audit(3460.610:816): avc: denied { setopt } for pid=25981 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3460.683325][ T31] audit: type=1400 audit(3460.610:817): avc: denied { bind } for pid=25981 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3460.690829][ T31] audit: type=1400 audit(3460.620:818): avc: denied { write } for pid=25981 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3461.908884][T25990] ./file0: Can't open blockdev [ 3469.359432][T14596] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 3469.369527][T14596] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3472.124132][ T31] audit: type=1400 audit(3472.050:819): avc: denied { write } for pid=26010 comm="syz.9.3404" name="file0" dev="tmpfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3472.130544][ T31] audit: type=1400 audit(3472.050:820): avc: denied { open } for pid=26010 comm="syz.9.3404" path="/588/file0" dev="tmpfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3474.222483][T26013] dns_resolver: Unsupported server list version (0) [ 3479.928577][T22973] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3479.935257][T22973] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3494.828392][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'. [ 3496.024928][T22776] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 3496.028510][T22776] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3499.298757][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3413'. [ 3499.300446][T26058] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3413'. [ 3499.311501][T26058] veth1: entered promiscuous mode [ 3510.491872][T22776] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 3510.507742][T22776] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3511.983401][T26080] bpf: Bad value for 'mode' [ 3513.675410][T22903] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 3513.687745][T22903] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3516.030412][T22776] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3516.197332][T22776] usb 1-1: Using ep0 maxpacket: 8 [ 3516.228600][T22776] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 3516.280143][T22776] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 3516.281985][T22776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3516.283891][T22776] usb 1-1: Product: syz [ 3516.290544][T22776] usb 1-1: Manufacturer: syz [ 3516.290870][T22776] usb 1-1: SerialNumber: syz [ 3516.388705][T22776] usb 1-1: config 0 descriptor?? [ 3516.751594][T25273] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3516.836480][T25273] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3516.902002][T25273] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3516.968891][T25273] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3518.512031][T25273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3518.577099][T25273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3518.610021][T25273] bond0 (unregistering): Released all slaves [ 3518.876730][T25273] hsr_slave_0: left promiscuous mode [ 3518.886429][T25273] hsr_slave_1: left promiscuous mode [ 3518.898389][T25273] veth1: left promiscuous mode [ 3518.900496][T25273] veth1_macvtap: left promiscuous mode [ 3518.907462][T25273] veth0_macvtap: left promiscuous mode [ 3518.908338][T25273] veth1_vlan: left promiscuous mode [ 3518.908944][T25273] veth0_vlan: left promiscuous mode [ 3521.903028][T26113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3521.914541][T26113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3522.810069][T26113] hsr_slave_0: entered promiscuous mode [ 3522.813984][T26113] hsr_slave_1: entered promiscuous mode [ 3523.345233][T26113] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3523.355172][T26113] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3523.368113][T26113] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3523.376744][T26113] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3523.991038][T26113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3526.660296][T14555] usb 1-1: USB disconnect, device number 43 [ 3527.258902][T14596] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 3527.269368][T14596] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3527.521880][T26113] veth0_vlan: entered promiscuous mode [ 3527.542525][T26113] veth1_vlan: entered promiscuous mode [ 3527.579234][T26113] veth0_macvtap: entered promiscuous mode [ 3527.587838][T26113] veth1_macvtap: entered promiscuous mode [ 3527.625901][T26113] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3527.627138][T26113] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3527.627326][T26113] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3527.628979][T26113] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3540.740225][T22903] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 3540.748138][T22903] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3541.097886][T22903] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3541.251917][T22903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3541.252334][T22903] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3541.252650][T22903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3541.260355][T22903] usb 1-1: config 0 descriptor?? [ 3545.544794][T22776] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 3545.567921][T22776] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3551.498166][T14555] usb 1-1: USB disconnect, device number 44 [ 3568.429084][T22776] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 3568.435728][T22776] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3574.393473][ T31] audit: type=1400 audit(3575.311:821): avc: denied { setopt } for pid=26604 comm="syz.9.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3575.001678][ T31] audit: type=1400 audit(3575.901:822): avc: denied { bind } for pid=26604 comm="syz.9.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3575.005224][ T31] audit: type=1400 audit(3575.901:823): avc: denied { create } for pid=26604 comm="syz.9.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 3577.109586][T22903] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 3577.124030][T22903] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3580.980631][ T31] audit: type=1400 audit(3581.901:824): avc: denied { read } for pid=26618 comm="syz.9.3447" path="socket:[49319]" dev="sockfs" ino=49319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3594.920148][ T31] audit: type=1400 audit(3595.841:825): avc: denied { mounton } for pid=26646 comm="syz.9.3457" path="/proc/45/task" dev="proc" ino=49336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3604.410984][ T31] audit: type=1400 audit(3605.331:826): avc: denied { bind } for pid=26655 comm="syz.0.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3627.145122][T26701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3627.148562][T26701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3640.907245][T25360] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 3641.067064][T25360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3641.069624][T25360] usb 1-1: not running at top speed; connect to a high speed hub [ 3641.076670][T25360] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3641.079930][T25360] usb 1-1: config 1 interface 1 has no altsetting 0 [ 3641.106993][T25360] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3641.108110][T25360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3641.111581][T25360] usb 1-1: Product: syz [ 3641.112366][T25360] usb 1-1: Manufacturer: syz [ 3641.113074][T25360] usb 1-1: SerialNumber: syz [ 3641.356651][T25360] usb 1-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 3641.363557][T25360] usb 1-1: found format II with max.bitrate = 2044, frame size=9 [ 3641.364183][T25360] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 3641.394551][T25360] usb 1-1: USB disconnect, device number 45 [ 3648.885226][T26750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26750 comm=syz.9.3481 [ 3648.894742][T26750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26750 comm=syz.9.3481 [ 3652.003989][T25360] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 3652.013325][T25360] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3663.573025][T22776] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 3663.584399][T22776] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3683.708832][T26844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3683.714290][T26844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3713.012588][T26881] ptrace attach of "/syz-executor exec"[26113] was attempted by ""[26881] [ 3731.481729][T26908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3524'. [ 3757.948476][ T31] audit: type=1400 audit(3758.871:827): avc: denied { create } for pid=26934 comm="syz.9.3533" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3758.036531][ T31] audit: type=1400 audit(3758.941:828): avc: denied { unlink } for pid=26113 comm="syz-executor" name="file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3790.050935][T26983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3790.052395][T26983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3793.290103][T26992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3793.295841][T26992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3793.689147][T26996] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 3793.691054][T26996] dvmrp1: linktype set to 778 [ 3794.719956][T27004] veth0_vlan: entered allmulticast mode [ 3797.559378][T27031] pim6reg1: entered promiscuous mode [ 3797.560102][T27031] pim6reg1: entered allmulticast mode [ 3802.953926][T25273] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3803.067954][T25273] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3803.154901][T25273] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3803.248758][T25273] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3804.020684][T25273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3804.045060][T25273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3804.051221][T25273] bond0 (unregistering): Released all slaves [ 3804.133858][T25273] hsr_slave_0: left promiscuous mode [ 3804.139015][T25273] hsr_slave_1: left promiscuous mode [ 3804.157443][T25273] veth1_macvtap: left promiscuous mode [ 3804.168776][T25273] veth0_macvtap: left promiscuous mode [ 3804.169431][T25273] veth1_vlan: left promiscuous mode [ 3804.170249][T25273] veth0_vlan: left promiscuous mode [ 3812.179248][T27141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3812.202611][T27141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3812.456825][T27410] pim6reg1: entered promiscuous mode [ 3812.457207][T27410] pim6reg1: entered allmulticast mode [ 3814.303896][T27141] hsr_slave_0: entered promiscuous mode [ 3814.317694][T27141] hsr_slave_1: entered promiscuous mode [ 3815.981182][T27141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3815.989555][T27141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3815.995692][T27141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3816.001663][T27141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3818.000888][T27617] pim6reg1: entered promiscuous mode [ 3818.002163][T27617] pim6reg1: entered allmulticast mode [ 3818.294467][T27141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3831.467100][T27141] veth0_vlan: entered promiscuous mode [ 3831.577779][T27141] veth1_vlan: entered promiscuous mode [ 3831.867416][T27141] veth0_macvtap: entered promiscuous mode [ 3831.940220][T27141] veth1_macvtap: entered promiscuous mode [ 3832.232493][T27141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3832.237980][T27141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3832.256731][T27141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3832.266733][T27141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3851.363101][T27757] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3851.366639][T27757] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3851.800565][T27760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3627'. [ 3851.801754][T27760] smc: net device bond0 applied user defined pnetid S [ 3852.867504][T27771] mmap: syz.3.3630 (27771) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3854.458158][T27779] comedi: valid board names for 8255 driver are: [ 3854.458627][T27779] 8255 [ 3854.458740][T27779] comedi: valid board names for vmk80xx driver are: [ 3854.458809][T27779] vmk80xx [ 3854.458853][T27779] comedi: valid board names for usbduxsigma driver are: [ 3854.458893][T27779] usbduxsigma [ 3854.458927][T27779] comedi: valid board names for usbduxfast driver are: [ 3854.458964][T27779] usbduxfast [ 3854.459006][T27779] comedi: valid board names for usbdux driver are: [ 3854.459049][T27779] usbdux [ 3854.459119][T27779] comedi: valid board names for ni6501 driver are: [ 3854.459160][T27779] ni6501 [ 3854.459195][T27779] comedi: valid board names for dt9812 driver are: [ 3854.459231][T27779] dt9812 [ 3854.459267][T27779] comedi: valid board names for ni_labpc_cs driver are: [ 3854.459305][T27779] ni_labpc_cs [ 3854.459339][T27779] comedi: valid board names for ni_daq_700 driver are: [ 3854.459376][T27779] ni_daq_700 [ 3854.459459][T27779] comedi: valid board names for labpc_pci driver are: [ 3854.459503][T27779] labpc_pci [ 3854.459572][T27779] comedi: valid board names for adl_pci9118 driver are: [ 3854.459734][T27779] pci9118dg [ 3854.459803][T27779] pci9118hg [ 3854.459844][T27779] pci9118hr [ 3854.459879][T27779] comedi: valid board names for 8255_pci driver are: [ 3854.459919][T27779] 8255_pci [ 3854.459953][T27779] comedi: valid board names for comedi_parport driver are: [ 3854.460011][T27779] comedi_parport [ 3854.460051][T27779] comedi: valid board names for comedi_test driver are: [ 3854.460089][T27779] comedi_test [ 3854.460236][T27779] comedi: valid board names for comedi_bond driver are: [ 3854.460384][T27779] comedi_bond [ 3860.913645][ T31] audit: type=1400 audit(3861.831:829): avc: denied { getopt } for pid=27800 comm="syz.3.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3861.130365][ T31] audit: type=1400 audit(3862.051:830): avc: denied { setopt } for pid=27800 comm="syz.3.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3861.689365][T27808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3861.691784][T27808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3861.854197][ T31] audit: type=1400 audit(3862.771:831): avc: denied { mount } for pid=27811 comm="syz.3.3647" name="/" dev="ramfs" ino=50414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 3862.603151][T27817] comedi: valid board names for 8255 driver are: [ 3862.607532][T27817] 8255 [ 3862.608282][T27817] comedi: valid board names for vmk80xx driver are: [ 3862.610379][T27817] vmk80xx [ 3862.611073][T27817] comedi: valid board names for usbduxsigma driver are: [ 3862.612019][T27817] usbduxsigma [ 3862.612659][T27817] comedi: valid board names for usbduxfast driver are: [ 3862.613518][T27817] usbduxfast [ 3862.614151][T27817] comedi: valid board names for usbdux driver are: [ 3862.614954][T27817] usbdux [ 3862.615541][T27817] comedi: valid board names for ni6501 driver are: [ 3862.617581][T27817] ni6501 [ 3862.618266][T27817] comedi: valid board names for dt9812 driver are: [ 3862.619072][T27817] dt9812 [ 3862.619735][T27817] comedi: valid board names for ni_labpc_cs driver are: [ 3862.626626][T27817] ni_labpc_cs [ 3862.627357][T27817] comedi: valid board names for ni_daq_700 driver are: [ 3862.628218][T27817] ni_daq_700 [ 3862.628901][T27817] comedi: valid board names for labpc_pci driver are: [ 3862.629783][T27817] labpc_pci [ 3862.630435][T27817] comedi: valid board names for adl_pci9118 driver are: [ 3862.632175][T27817] pci9118dg [ 3862.632855][T27817] pci9118hg [ 3862.633515][T27817] pci9118hr [ 3862.634493][T27817] comedi: valid board names for 8255_pci driver are: [ 3862.635381][T27817] 8255_pci [ 3862.636347][T27817] comedi: valid board names for comedi_parport driver are: [ 3862.638425][T27817] comedi_parport [ 3862.638767][T27817] comedi: valid board names for comedi_test driver are: [ 3862.638966][T27817] comedi_test [ 3862.639023][T27817] comedi: valid board names for comedi_bond driver are: [ 3862.639097][T27817] comedi_bond [ 3864.085391][T27830] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (672), value rounded to 0 ms [ 3864.259385][T27830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3869.208317][T27886] netlink: 'syz.0.3664': attribute type 32 has an invalid length. [ 3871.405375][T27904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3871.437894][T27904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3880.629981][ T31] audit: type=1400 audit(3881.551:832): avc: denied { read } for pid=27909 comm="syz.3.3672" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3880.632996][ T31] audit: type=1400 audit(3881.551:833): avc: denied { open } for pid=27909 comm="syz.3.3672" path="/46/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3881.028141][T27923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3881.030599][T27923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3882.225370][T27602] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3882.503170][T27602] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 3882.504475][T27602] usb 1-1: config 0 has no interface number 0 [ 3882.504578][T27602] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 3882.504655][T27602] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 3882.504749][T27602] usb 1-1: config 0 interface 255 has no altsetting 0 [ 3882.504839][T27602] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 3882.504900][T27602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3882.510943][T27602] usb 1-1: config 0 descriptor?? [ 3882.561092][T27602] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 3882.593085][T27602] ums-realtek 1-1:0.255: USB Mass Storage not supported on this host controller [ 3882.643270][T27602] ums-realtek 1-1:0.255: probe with driver ums-realtek failed with error -22 [ 3882.721351][T27669] usb 1-1: USB disconnect, device number 46 [ 3883.613841][ T31] audit: type=1400 audit(3884.521:834): avc: denied { setattr } for pid=27926 comm="syz.3.3676" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3883.867175][T27955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3883.868414][T27955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3884.368441][T27961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3884.372567][T27961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3885.713801][T27969] input: syz0 as /devices/virtual/input/input14 [ 3885.743853][T27972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3686'. [ 3885.763623][T27969] comedi: valid board names for 8255 driver are: [ 3885.764004][T27969] 8255 [ 3885.764989][T27969] comedi: valid board names for vmk80xx driver are: [ 3885.765977][T27969] vmk80xx [ 3885.766677][T27969] comedi: valid board names for usbduxsigma driver are: [ 3885.766739][T27969] usbduxsigma [ 3885.766783][T27969] comedi: valid board names for usbduxfast driver are: [ 3885.766836][T27969] usbduxfast [ 3885.766878][T27969] comedi: valid board names for usbdux driver are: [ 3885.766947][T27969] usbdux [ 3885.766995][T27969] comedi: valid board names for ni6501 driver are: [ 3885.767041][T27969] ni6501 [ 3885.767256][T27969] comedi: valid board names for dt9812 driver are: [ 3885.767335][T27969] dt9812 [ 3885.767384][T27969] comedi: valid board names for ni_labpc_cs driver are: [ 3885.767571][T27969] ni_labpc_cs [ 3885.767709][T27969] comedi: valid board names for ni_daq_700 driver are: [ 3885.767795][T27969] ni_daq_700 [ 3885.767988][T27969] comedi: valid board names for labpc_pci driver are: [ 3885.768039][T27969] labpc_pci [ 3885.768081][T27969] comedi: valid board names for adl_pci9118 driver are: [ 3885.768220][T27969] pci9118dg [ 3885.768329][T27969] pci9118hg [ 3885.768422][T27969] pci9118hr [ 3885.768637][T27969] comedi: valid board names for 8255_pci driver are: [ 3885.768748][T27969] 8255_pci [ 3885.768799][T27969] comedi: valid board names for comedi_parport driver are: [ 3885.769012][T27969] comedi_parport [ 3885.769063][T27969] comedi: valid board names for comedi_test driver are: [ 3885.769108][T27969] comedi_test [ 3885.769255][T27969] comedi: valid board names for comedi_bond driver are: [ 3885.769333][T27969] comedi_bond [ 3886.437423][T27657] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 3886.447622][T27657] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3886.997195][T27620] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3887.187317][T27620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3887.188686][T27620] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 3887.192051][T27620] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 3887.193149][T27620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3887.205686][T27620] usb 1-1: config 0 descriptor?? [ 3889.231859][ T31] audit: type=1400 audit(3890.151:835): avc: denied { getopt } for pid=28027 comm="syz.3.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3893.856378][T28040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3893.871753][T28040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3894.682216][ T31] audit: type=1400 audit(3895.601:836): avc: denied { getopt } for pid=28046 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3901.196957][T27662] usb 1-1: USB disconnect, device number 47 [ 3902.584423][ T31] audit: type=1400 audit(3903.501:837): avc: denied { getopt } for pid=28091 comm="syz.3.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3902.751152][T28094] fuse: Bad value for 'fd' [ 3903.506544][T28104] IPv4: Oversized IP packet from 127.202.26.0 [ 3904.053083][T28109] fuse: Bad value for 'fd' [ 3905.837178][T27455] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 3906.095470][T27455] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 3906.103548][T27455] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 3906.156927][T27455] usb 1-1: string descriptor 0 read error: -22 [ 3906.157389][T27455] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3906.157678][T27455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3906.402820][T27455] cdc_ncm 1-1:1.0: bind() failure [ 3906.417878][T27455] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3906.418999][T27455] cdc_ncm 1-1:1.1: bind() failure [ 3906.455763][T27455] usb 1-1: USB disconnect, device number 48 [ 3906.662045][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3733'. [ 3908.540699][T28184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 3908.551362][T28184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3745'. [ 3908.987329][T27455] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 3909.296913][T27455] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3909.329045][T27455] usb 1-1: not running at top speed; connect to a high speed hub [ 3909.333366][T27455] usb 1-1: config 2 has an invalid interface number: 158 but max is 0 [ 3909.338357][T27455] usb 1-1: config 2 has an invalid descriptor of length 239, skipping remainder of the config [ 3909.340547][T27455] usb 1-1: config 2 has no interface number 0 [ 3909.341572][T27455] usb 1-1: config 2 interface 158 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3909.391792][T27455] usb 1-1: config 2 interface 158 has no altsetting 0 [ 3909.457105][T27455] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=99.cb [ 3909.464576][T27455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3909.465516][T27455] usb 1-1: Product: syz [ 3909.466714][T27455] usb 1-1: Manufacturer: syz [ 3909.467591][T27455] usb 1-1: SerialNumber: syz [ 3909.723816][T27455] rndis_host 1-1:2.158: skipping garbage [ 3909.730789][T27455] usb 1-1: bad CDC descriptors [ 3909.732799][T27455] cdc_acm 1-1:2.158: skipping garbage [ 3909.749335][T27455] usb 1-1: USB disconnect, device number 49 [ 3914.899852][T28249] syz_tun: entered allmulticast mode [ 3914.940534][T28249] lo: entered allmulticast mode [ 3914.998772][T28248] syz_tun: left allmulticast mode [ 3917.736223][ T31] audit: type=1400 audit(3918.651:838): avc: denied { nlmsg_read } for pid=28275 comm="syz.3.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3917.743387][ T31] audit: type=1400 audit(3918.661:839): avc: denied { read } for pid=28275 comm="syz.3.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3918.093657][T28285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3918.095170][T28285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3918.250865][T28291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3918.253329][T28291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3918.683530][T28297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3918.727200][T28297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3919.273234][T28303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3919.283449][T28303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3922.516494][T28309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3922.517387][T28309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3924.010542][T28322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3924.013838][T28322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3925.315432][T28333] input: syz0 as /devices/virtual/input/input17 [ 3926.424269][T28339] ------------[ cut here ]------------ ** replaying previous printk message ** [ 3926.424269][T28339] ------------[ cut here ]------------ [ 3926.424870][T28339] WARNING: CPU: 1 PID: 28339 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 3926.431275][T28339] Modules linked in: [ 3926.432521][T28339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3926.433316][T28339] CPU: 1 UID: 0 PID: 28339 Comm: syz.3.3801 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 3926.434268][T28339] Hardware name: ARM-Versatile Express [ 3926.434969][T28339] Call trace: [ 3926.435215][T28339] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 3926.435706][T28339] r7:00000000 r6:8282083c r5:00000000 r4:8225b4f4 [ 3926.436096][T28339] [<80201ae4>] (show_stack) from [<8021fdf4>] (dump_stack_lvl+0x54/0x7c) [ 3926.436747][T28339] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 3926.437230][T28339] r5:00000000 r4:82a6dd18 [ 3926.437502][T28339] [<8021fe1c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 3926.437870][T28339] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 3926.438253][T28339] r3:8280c684 r2:00000001 r1:8224203c r0:822499d4 [ 3926.438574][T28339] r7:804bc144 [ 3926.438809][T28339] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 3926.439215][T28339] [<8025865c>] (__warn) from [<8025895c>] (warn_slowpath_fmt+0x178/0x1f4) [ 3926.439637][T28339] r8:00000009 r7:822752cc r6:dfecdd1c r5:8736d400 r4:00000000 [ 3926.439977][T28339] [<802587e8>] (warn_slowpath_fmt) from [<804bc144>] (kunmap_local_indexed+0x20c/0x224) [ 3926.440763][T28339] r10:00000000 r9:ded35488 r8:deb5de74 r7:00a00000 r6:00000003 r5:8736d400 [ 3926.441166][T28339] r4:ffedc000 [ 3926.441371][T28339] [<804bbf38>] (kunmap_local_indexed) from [<805373a8>] (move_pages+0xb24/0x19c8) [ 3926.443101][T28339] r7:00a00000 r6:fffffff0 r5:8549771c r4:840ecf00 [ 3926.443899][T28339] [<80536884>] (move_pages) from [<805be4dc>] (userfaultfd_ioctl+0xff8/0x21c4) [ 3926.444306][T28339] r10:840ecf00 r9:dfecde98 r8:21000000 r7:00000001 r6:00000000 r5:20000100 [ 3926.444609][T28339] r4:86675180 [ 3926.444766][T28339] [<805bd4e4>] (userfaultfd_ioctl) from [<805679ec>] (sys_ioctl+0x130/0xdc8) [ 3926.445283][T28339] r10:8736d400 r9:84932cc0 r8:00000003 r7:20000100 r6:84932cc1 r5:00000000 [ 3926.445623][T28339] r4:c028aa05 [ 3926.445768][T28339] [<805678bc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3926.446330][T28339] Exception stack(0xdfecdfa8 to 0xdfecdff0) [ 3926.446717][T28339] dfa0: 00000000 00000000 00000003 c028aa05 20000100 00000000 [ 3926.447244][T28339] dfc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b710bc [ 3926.447705][T28339] dfe0: 76b70ec0 76b70eb0 000193a4 00131fc0 [ 3926.448013][T28339] r10:00000036 r9:8736d400 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 3926.448434][T28339] r4:00000000 [ 3926.450840][T28339] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:08:43 Registers: info registers vcpu 0 CPU#0 R00=00000002 R01=00000007 R02=7eb7f1c0 R03=7eb7f2bc R04=00000008 R05=00000000 R06=00000000 R07=0000019e R08=00000001 R09=006bee10 R10=00000007 R11=7eb7f2bc R12=00000001 R13=df9a5ff8 R14=7694a590 R15=7694a590 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000000 R03=60000093 R04=00000000 R05=8736d400 R06=82820850 R07=00000000 R08=00000000 R09=8736d400 R10=00000000 R11=dfecdb94 R12=dfecdb98 R13=dfecdb10 R14=802e5e30 R15=802e438c PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000