last executing test programs: 45m17.820993227s ago: executing program 32 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0x200}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote, r3}, 0x14) 39m30.542800655s ago: executing program 33 (id=1023): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x20000800, 0x0, 0x0) shutdown(r0, 0x1) 38m35.05634168s ago: executing program 34 (id=1043): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80004, 0x200}, &(0x7f0000000180), &(0x7f0000000500)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) 35m20.925363026s ago: executing program 35 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xf) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, 0x0, 0x4c2003a0) 34m36.331155721s ago: executing program 36 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000080), &(0x7f0000000440)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 34m8.641379564s ago: executing program 37 (id=1159): r0 = syz_open_dev$evdev(&(0x7f0000001080), 0xb, 0xa602) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x2000200c}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) getpid() ppoll(&(0x7f0000000300)=[{r1, 0x83a0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 32m42.387161184s ago: executing program 38 (id=1174): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @empty=0xe0000000, @broadcast}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x684}}}}}}, 0x0) 32m34.903920638s ago: executing program 39 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 30m29.259471222s ago: executing program 40 (id=1202): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x2e, 0x807, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) fcntl$setpipe(r0, 0x407, 0x2000000) 28m58.833139105s ago: executing program 41 (id=1228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={@remote, @private1, @private0, 0x4, 0x2f, 0xff, 0x700, 0x2d7, 0x20221, r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000100000700000a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00', @ANYRESHEX], 0x68}}, 0x4004040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000001340), 0xede8, r8}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) futex(&(0x7f0000000040)=0x400, 0xa, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0) 26m49.631044847s ago: executing program 42 (id=1273): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 24m47.04860891s ago: executing program 43 (id=1320): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffecf, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800) 22m36.104469793s ago: executing program 44 (id=1341): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000280)={0x2, 0xe28, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, 0x0, &(0x7f00000000c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 21m49.053965993s ago: executing program 45 (id=1358): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x94}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c66", 0x24, 0x40088c0, &(0x7f00000000c0)={0x11, 0x2, r6, 0x1, 0x60, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c000000120001010000000000000000000000004e2400"/41, @ANYRES32=0x0, @ANYBLOB="00000000000000000014000000000000d95b27fa6e1e698c5baddeddaf73ac11cba0918f17a927036cce1b3e4e15b5dc887716cd47a8c38a8611b0d2e652db6f0a1a958170b173d859fbb148a2615e7e37f451cacf9d190a513250194049dd6162d10da7dc6db72a4fa836dc83f4f588f5d2eb0f94a5819c45b2f0dd00f2c4e730b37771e21c79c1a7573deef3d985c5def3b754372ea33d5721cdd0ccd433ea795011d26f8538f3aa9444b35853"], 0x4c}}, 0x0) 18m49.782517s ago: executing program 46 (id=1428): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) 18m42.65702278s ago: executing program 47 (id=1429): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r4, &(0x7f0000000340)) 16m12.089969657s ago: executing program 6 (id=1467): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504", @ANYRES8=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030800000008030300000000000000d140a7915b0011f849"], 0x0, 0x0, 0x0}, 0x0) 16m11.771459082s ago: executing program 6 (id=1468): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) rename(&(0x7f0000000140)='./file2/file0\x00', 0x0) 16m11.403812023s ago: executing program 6 (id=1469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r2, 0x0, 0x0) 16m10.912149247s ago: executing program 6 (id=1470): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9200183afffe8000000000000000e0ffffff0000aafe8000000000000000000000000000aa88009078ce"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 16m4.734068473s ago: executing program 7 (id=1475): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x1, 0x1, 0x3, 0x5, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008f00000000000016445fa2000000000071141400000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r4, 0xffffffffffffffff, 0xfffffffdfffffffc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000240)={'netdevsim0\x00', {0x2, 0x4e23, @local}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 15m25.436035173s ago: executing program 48 (id=1470): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9200183afffe8000000000000000e0ffffff0000aafe8000000000000000000000000000aa88009078ce"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 15m19.126868294s ago: executing program 49 (id=1475): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x1, 0x1, 0x3, 0x5, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008f00000000000016445fa2000000000071141400000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r4, 0xffffffffffffffff, 0xfffffffdfffffffc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000240)={'netdevsim0\x00', {0x2, 0x4e23, @local}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 14m49.573319518s ago: executing program 9 (id=1478): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r0 = syz_io_uring_setup(0x5807, &(0x7f0000000500)={0x0, 0x8866, 0x8, 0x2, 0x243}, &(0x7f0000000100), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000046c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 14m43.057600001s ago: executing program 9 (id=1479): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1, 0x0, 0x1000}}}}}}, 0x0) 14m42.786411341s ago: executing program 9 (id=1480): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f5"], 0x0}, 0x0) 14m42.235257861s ago: executing program 9 (id=1481): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) getsockname(r2, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010008105000400"/20, @ANYRES32=r5, @ANYBLOB="0580040000000000280012800b000100697036746e6c00001800028014000200fc"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 14m41.463807076s ago: executing program 9 (id=1482): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14m40.723640977s ago: executing program 9 (id=1483): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 14m16.303297249s ago: executing program 50 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000002c0)) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x80003, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 13m54.8151055s ago: executing program 51 (id=1483): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 8m47.324488442s ago: executing program 0 (id=1584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 8m40.764283429s ago: executing program 0 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m39.764729379s ago: executing program 0 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 8m37.267553252s ago: executing program 0 (id=1588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m36.664184898s ago: executing program 0 (id=1589): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x42, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0x8, 0x4) 8m35.335946173s ago: executing program 0 (id=1590): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='skb_copy_datagram_iovec\x00', r6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) 8m20.572673878s ago: executing program 1 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_socket_connect_nvme_tcp() r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r4, r0], 0x3) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, r6, 0x1, 0xf, 0x6, @local}, 0x14) sendto$packet(r5, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) 7m55.152843686s ago: executing program 1 (id=1594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000005880)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x840) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 7m51.70287174s ago: executing program 1 (id=1595): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m51.276158152s ago: executing program 1 (id=1596): creat(&(0x7f00000000c0)='./bus\x00', 0x182) mknod(0x0, 0x400, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x800002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 7m50.854542204s ago: executing program 1 (id=1597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x6, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 7m50.504637991s ago: executing program 1 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) 7m49.451364311s ago: executing program 52 (id=1590): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='skb_copy_datagram_iovec\x00', r6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) 7m11.904388724s ago: executing program 2 (id=1604): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 7m11.393269023s ago: executing program 2 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x5, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 7m11.006851133s ago: executing program 2 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 7m10.625141242s ago: executing program 2 (id=1607): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x10}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x5}]}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7m4.443286353s ago: executing program 53 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) 6m59.673946527s ago: executing program 2 (id=1609): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m59.152356337s ago: executing program 2 (id=1610): socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0x87) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0xe4, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000380)={@fda={0x66646185, 0x8, 0x0, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/7, 0x7, 0x0, 0x35}, @flat=@binder={0x73622a85, 0x1101}}, 0x0}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2a}, @fda={0x66646185, 0x4, 0x2, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x2, 0x1, 0x1a}, @fda={0x66646185, 0x6, 0x0, 0x1a}}, &(0x7f0000000780)={0x0, 0x20, 0x40}}, 0x1000}], 0xfb, 0x0, &(0x7f0000000900)="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"}) 6m13.744802209s ago: executing program 54 (id=1610): socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0x87) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0xe4, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000380)={@fda={0x66646185, 0x8, 0x0, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/7, 0x7, 0x0, 0x35}, @flat=@binder={0x73622a85, 0x1101}}, 0x0}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2a}, @fda={0x66646185, 0x4, 0x2, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x2, 0x1, 0x1a}, @fda={0x66646185, 0x6, 0x0, 0x1a}}, &(0x7f0000000780)={0x0, 0x20, 0x40}}, 0x1000}], 0xfb, 0x0, &(0x7f0000000900)="84ea31c721d6e36d05542955ef8b80cf3b17b17ada2c673c4085ac12a44ffbd720cd9be908a6468ebef7b5e327cae6cb4a6672fc108eb725de099ebda5d9ac77b4b3d6de27516c27873cf7514593eedb3e8aa8721e667e8f278fd6b7564f29014685a955c1ba5613a9b4c3ce9efdc53eee7d4dce0348503f23e35caff52d471401d8ea8d8f325eae489e3ca8ce4b37ddff06d997b3ce438462695d0613c3d17b639d511a58f05ccaa40ecf70bc6d7ab2f4cf779929d0ffcfb68f373acc4e21fbd9e2b340e0879a761c5b84a119209113399274f6bdd0af6b056eb96a06b2a14d0b7854170cb632fc35684473dffec6c92eea56c0875f4c493c5188"}) 5m42.323671915s ago: executing program 3 (id=1623): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m59.290606396s ago: executing program 3 (id=1629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 4m58.439983661s ago: executing program 3 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 4m57.933859679s ago: executing program 3 (id=1631): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) 4m43.723810833s ago: executing program 5 (id=1635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_SRC_VNI={0x8}]}, 0x24}}, 0x0) 4m43.225257091s ago: executing program 5 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_sigsuspend(0x0, 0x0) 4m42.615350038s ago: executing program 5 (id=1637): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f0000000a80)=""/227, 0xe3}], 0x7}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) 4m42.113038606s ago: executing program 5 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 4m38.861291134s ago: executing program 5 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 4m20.477414215s ago: executing program 3 (id=1640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) mkdir(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0xfffffffffffffef7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 4m19.924863098s ago: executing program 3 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r4 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f00000000c0)) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) io_uring_enter(r4, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 3m57.124202806s ago: executing program 5 (id=1642): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000100000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3m34.404686649s ago: executing program 55 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r4 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f00000000c0)) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) io_uring_enter(r4, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 3m11.814645241s ago: executing program 56 (id=1642): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000100000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2m45.366640958s ago: executing program 4 (id=1649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) ioctl$TCFLSH(r2, 0x540b, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000540)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "a3c269d5977aa643d7f2d7db058f53fa801ebfecfcd8131edadee3910026601d", "7ec1debbd8169e74a75723ab679637cf", {"9b6836d2757b6b19feedc3f05d00008b", "0f7b42c838ddc67f2d4bf2f3ae7a42c6"}}}}}}}, 0x0) 2m45.175964502s ago: executing program 4 (id=1650): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 2m44.763354544s ago: executing program 4 (id=1651): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) 2m44.360402315s ago: executing program 4 (id=1652): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) getsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000400)=""/230, &(0x7f0000000500)=0xe6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x50801}, 0x0) 2m32.756780559s ago: executing program 4 (id=1653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m32.096681929s ago: executing program 4 (id=1654): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x3) 2m24.343284401s ago: executing program 6 (id=1644): r0 = syz_io_uring_setup(0x6df0, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xffffffffffffffff, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000040c0)={0x2020}, 0x2020) 2m12.566087228s ago: executing program 6 (id=1655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) 1m46.249909154s ago: executing program 57 (id=1654): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x3) 1m26.662346716s ago: executing program 58 (id=1655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) 59.81707882s ago: executing program 7 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 59.12552576s ago: executing program 7 (id=1658): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "6271be4d"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000001c0)={0x0, 0x14, 0x61, "e100002486cc6bfaa08e5ba71c59e97972948975be996f5697cc57071976e6f56a771f911b9aaeb99deb7fda175eb3e091400b39598350ca1984dbb30603584a2d7c1d266933510a5ee6a3c396a6f8e14877d906cbcc338175be83940e49163318"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000680)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, ' \a'}, 0x0, &(0x7f0000000080)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, 0x0}) 58.553368201s ago: executing program 7 (id=1659): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 47.269747234s ago: executing program 7 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0xf5, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0x1, 0x5, {0x5, 0xa, "6ddc14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 45.614255514s ago: executing program 7 (id=1661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 28.021529771s ago: executing program 8 (id=1670): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000880)={0x1000000, 0x0, 0x0, 0x1, 0x4001, r0, 0x0, 0x50, 0x3, 0x0, 0x2}]) 27.493101639s ago: executing program 8 (id=1671): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) capset(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000e80)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getgroups(0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 26.894214992s ago: executing program 8 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 23.855273541s ago: executing program 8 (id=1673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) 23.411998403s ago: executing program 8 (id=1674): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x11, 0x401, 0xfd, 0xb103, 0x1, "c74192f3b7e8720700000000000010ee0800", 0x2, 0xcd3dc55}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) 22.995180063s ago: executing program 8 (id=1675): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) clock_gettime(0x2, &(0x7f0000000300)) 0s ago: executing program 59 (id=1661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): interface with an up link [ 739.985793][ T8394] netlink: 'syz.2.1030': attribute type 3 has an invalid length. [ 739.988290][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 739.993728][ T8394] netlink: 'syz.2.1030': attribute type 1 has an invalid length. [ 742.694408][ T8174] hsr_slave_0: entered promiscuous mode [ 742.704217][ T8174] hsr_slave_1: entered promiscuous mode [ 742.717764][ T8174] debugfs: 'hsr0' already exists in 'hsr' [ 742.718124][ T8174] Cannot create hsr debugfs directory [ 742.854576][ T8474] fuse: Invalid rootmode [ 744.050886][ T8174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 744.099743][ T8174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 744.143119][ T8174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 744.190828][ T8174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 744.900673][ T8557] wg2: entered promiscuous mode [ 744.901225][ T8557] wg2: entered allmulticast mode [ 746.734502][ T8579] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1042'. [ 747.208421][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.245275][ T8174] veth0_vlan: entered promiscuous mode [ 754.279415][ T8174] veth1_vlan: entered promiscuous mode [ 754.355090][ T8174] veth0_macvtap: entered promiscuous mode [ 754.373564][ T8174] veth1_macvtap: entered promiscuous mode [ 754.521418][ T6035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.522174][ T6035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.522346][ T6035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.522414][ T6035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.004157][ T8627] fuse: Unknown parameter 'group_id00000000000000000000' [ 755.167049][ T29] audit: type=1400 audit(755.070:294): avc: denied { map } for pid=8583 comm="syz.2.1043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 755.197574][ T29] audit: type=1400 audit(755.110:295): avc: denied { read write } for pid=8583 comm="syz.2.1043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 762.742204][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.747151][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.075557][ T8654] fuse: Bad value for 'user_id' [ 763.076788][ T8654] fuse: Bad value for 'user_id' [ 766.800067][ T29] audit: type=1326 audit(766.720:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.1052" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 766.812806][ T29] audit: type=1326 audit(766.730:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.1052" exe="/syz-executor" sig=0 arch=40000028 syscall=324 compat=0 ip=0x132510 code=0x7ffc0000 [ 766.821657][ T29] audit: type=1326 audit(766.740:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.1052" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 766.826778][ T29] audit: type=1326 audit(766.740:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.3.1052" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 766.968163][ T8684] fuse: Bad value for 'user_id' [ 766.972380][ T8684] fuse: Bad value for 'user_id' [ 773.549514][ T8698] fuse: Bad value for 'user_id' [ 773.551562][ T8698] fuse: Bad value for 'user_id' [ 778.778968][ T8719] fuse: Bad value for 'fd' [ 791.748559][ T8736] fuse: Bad value for 'fd' [ 793.020401][ T29] audit: type=1326 audit(792.940:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.031965][ T29] audit: type=1326 audit(792.940:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.063194][ T29] audit: type=1326 audit(792.940:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.065204][ T29] audit: type=1326 audit(792.940:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=26 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.070842][ T29] audit: type=1326 audit(792.940:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.073446][ T29] audit: type=1326 audit(792.950:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.078142][ T29] audit: type=1326 audit(792.950:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.080250][ T29] audit: type=1326 audit(792.950:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.082117][ T29] audit: type=1326 audit(792.950:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.084274][ T29] audit: type=1326 audit(792.970:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.3.1072" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 793.749387][ T8750] fuse: Bad value for 'fd' [ 799.359562][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.388247][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.440425][ T8741] hsr_slave_0: entered promiscuous mode [ 802.441781][ T8741] hsr_slave_1: entered promiscuous mode [ 802.459001][ T8741] debugfs: 'hsr0' already exists in 'hsr' [ 802.459595][ T8741] Cannot create hsr debugfs directory [ 803.743615][ T8741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 803.764983][ T8741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 804.059307][ T8741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 804.305874][ T8741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 806.709102][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.869656][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 811.870106][ T29] audit: type=1400 audit(811.790:331): avc: denied { setopt } for pid=9089 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 819.032878][ T8741] veth0_vlan: entered promiscuous mode [ 819.143349][ T8741] veth1_vlan: entered promiscuous mode [ 819.707574][ T8741] veth0_macvtap: entered promiscuous mode [ 819.769051][ T8741] veth1_macvtap: entered promiscuous mode [ 820.168414][ T6058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.168931][ T6058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.169791][ T6058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.170154][ T6058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.575169][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.588049][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.804143][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 835.789600][ T29] audit: type=1326 audit(835.680:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9161 comm="syz.3.1089" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 835.801198][ T29] audit: type=1326 audit(835.690:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9161 comm="syz.3.1089" exe="/syz-executor" sig=0 arch=40000028 syscall=29 compat=0 ip=0x132510 code=0x7ffc0000 [ 836.234268][ T9162] netlink: 'syz.4.1086': attribute type 12 has an invalid length. [ 837.914418][ T9165] fuse: Bad value for 'fd' [ 842.257867][ T9176] fuse: Invalid rootmode [ 849.568248][ T9189] fuse: Invalid rootmode [ 852.300239][ T6058] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.300658][ T6058] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.300857][ T6058] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.300907][ T6058] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.580771][ T9204] fuse: Invalid rootmode [ 867.836930][ T9228] netlink: 'syz.3.1116': attribute type 12 has an invalid length. [ 896.328764][ T9265] binder: 9262:9265 ioctl c0306201 20000040 returned -22 [ 916.812207][ T29] audit: type=1326 audit(916.730:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.826805][ T29] audit: type=1326 audit(916.740:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.849716][ T29] audit: type=1326 audit(916.770:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.861197][ T29] audit: type=1326 audit(916.780:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.889602][ T29] audit: type=1326 audit(916.800:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.921122][ T29] audit: type=1326 audit(916.830:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.921693][ T29] audit: type=1326 audit(916.840:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.927993][ T29] audit: type=1326 audit(916.840:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.928319][ T29] audit: type=1326 audit(916.850:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 916.943823][ T29] audit: type=1326 audit(916.860:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.1129" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 928.044340][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.050152][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.072730][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.075548][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.252178][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 934.202681][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 934.204904][ T29] audit: type=1326 audit(934.120:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.211891][ T29] audit: type=1326 audit(934.130:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.238806][ T29] audit: type=1326 audit(934.150:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.256554][ T29] audit: type=1326 audit(934.160:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.257032][ T29] audit: type=1326 audit(934.170:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.257253][ T29] audit: type=1326 audit(934.170:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.295766][ T29] audit: type=1326 audit(934.210:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.308069][ T29] audit: type=1326 audit(934.210:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.308541][ T29] audit: type=1326 audit(934.210:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 934.313796][ T29] audit: type=1326 audit(934.230:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 937.192770][ T9342] tmpfs: Unsupported parameter 'huge' [ 984.602470][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 984.606738][ T29] audit: type=1326 audit(984.520:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.667106][ T29] audit: type=1326 audit(984.580:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.807320][ T29] audit: type=1326 audit(984.710:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.821831][ T29] audit: type=1326 audit(984.730:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.866828][ T29] audit: type=1326 audit(984.730:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.888789][ T29] audit: type=1326 audit(984.740:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.901267][ T29] audit: type=1326 audit(984.740:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.910152][ T29] audit: type=1326 audit(984.830:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=184 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.910659][ T29] audit: type=1326 audit(984.830:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 984.921662][ T29] audit: type=1326 audit(984.840:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9372 comm="syz.4.1157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 991.545339][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.564457][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.809683][ T9377] hsr_slave_0: entered promiscuous mode [ 994.819911][ T9377] hsr_slave_1: entered promiscuous mode [ 994.826947][ T9377] debugfs: 'hsr0' already exists in 'hsr' [ 994.828563][ T9377] Cannot create hsr debugfs directory [ 995.662359][ T9377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 995.751594][ T9377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 995.790651][ T9377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 995.838243][ T9377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 999.322081][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.650836][ T9377] veth0_vlan: entered promiscuous mode [ 1011.702817][ T9377] veth1_vlan: entered promiscuous mode [ 1011.883231][ T9377] veth0_macvtap: entered promiscuous mode [ 1012.039777][ T9377] veth1_macvtap: entered promiscuous mode [ 1012.197649][ T6035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.198342][ T6035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.198983][ T6035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.199070][ T6035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.005070][ T9745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.013527][ T9745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.819982][ T9745] hsr_slave_0: entered promiscuous mode [ 1039.821525][ T9745] hsr_slave_1: entered promiscuous mode [ 1039.822767][ T9745] debugfs: 'hsr0' already exists in 'hsr' [ 1039.823306][ T9745] Cannot create hsr debugfs directory [ 1042.365364][ T9745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1042.402882][ T9745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1042.413019][ T9745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1042.462398][ T9745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1043.904579][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.257390][ T9745] veth0_vlan: entered promiscuous mode [ 1053.313238][ T9745] veth1_vlan: entered promiscuous mode [ 1053.559651][ T9745] veth0_macvtap: entered promiscuous mode [ 1053.608909][ T9745] veth1_macvtap: entered promiscuous mode [ 1053.857575][ T5134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.858110][ T5134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.858474][ T5134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.858720][ T5134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.548357][T10097] fuse: Unknown parameter 'fd0x0000000000000004' [ 1055.085958][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1162'. [ 1067.235452][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.263024][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.185972][T10105] hsr_slave_0: entered promiscuous mode [ 1071.243873][T10105] hsr_slave_1: entered promiscuous mode [ 1071.261567][T10105] debugfs: 'hsr0' already exists in 'hsr' [ 1071.262119][T10105] Cannot create hsr debugfs directory [ 1072.673105][T10105] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1072.712774][T10105] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1072.743467][T10105] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1072.775779][T10105] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1075.634732][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.302167][T10463] fuse: Unknown parameter 'fd0x0000000000000004' [ 1090.000278][T10105] veth0_vlan: entered promiscuous mode [ 1090.062927][T10105] veth1_vlan: entered promiscuous mode [ 1090.318975][T10105] veth0_macvtap: entered promiscuous mode [ 1090.361242][T10105] veth1_macvtap: entered promiscuous mode [ 1090.698281][ T6066] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.700146][ T6066] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.710821][ T6066] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.712150][ T6066] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.810866][ T6053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.999200][ T6053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.099709][ T6053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.261581][ T6053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.488657][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.569797][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.610416][ T6053] bond0 (unregistering): Released all slaves [ 1105.867247][ T6053] hsr_slave_0: left promiscuous mode [ 1105.876946][ T6053] hsr_slave_1: left promiscuous mode [ 1105.898295][ T6053] veth1_macvtap: left promiscuous mode [ 1105.903554][ T6053] veth0_macvtap: left promiscuous mode [ 1105.905227][ T6053] veth1_vlan: left promiscuous mode [ 1105.908165][ T6053] veth0_vlan: left promiscuous mode [ 1114.384767][ T29] audit: type=1400 audit(1114.280:376): avc: denied { wake_alarm } for pid=10519 comm="syz.6.1177" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1151.895068][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.952561][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.328096][T10585] hsr_slave_0: entered promiscuous mode [ 1155.329870][T10585] hsr_slave_1: entered promiscuous mode [ 1155.330984][T10585] debugfs: 'hsr0' already exists in 'hsr' [ 1155.331273][T10585] Cannot create hsr debugfs directory [ 1156.763593][T10585] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1156.910693][T10585] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1157.001591][T10585] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1157.043632][T10585] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1160.033148][T10585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.210961][T10767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.247847][T10767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.171097][ T6031] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.378518][ T6031] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.589211][ T6031] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.812480][ T6031] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.787779][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.806226][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.822348][ T6031] bond0 (unregistering): Released all slaves [ 1162.947502][ T6031] hsr_slave_0: left promiscuous mode [ 1162.970286][ T6031] hsr_slave_1: left promiscuous mode [ 1162.997811][ T6031] veth1_macvtap: left promiscuous mode [ 1162.998288][ T6031] veth0_macvtap: left promiscuous mode [ 1162.998535][ T6031] veth1_vlan: left promiscuous mode [ 1162.998659][ T6031] veth0_vlan: left promiscuous mode [ 1164.033526][T10767] hsr_slave_0: entered promiscuous mode [ 1164.049174][T10767] hsr_slave_1: entered promiscuous mode [ 1164.059137][T10767] debugfs: 'hsr0' already exists in 'hsr' [ 1164.060275][T10767] Cannot create hsr debugfs directory [ 1165.344358][T10767] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1165.403728][T10767] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1165.463743][T10767] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1165.633649][T10767] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1168.374768][T10767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.771380][T10767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1174.466213][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.498353][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.519232][ T6066] bond0 (unregistering): Released all slaves [ 1174.677181][ T6066] hsr_slave_0: left promiscuous mode [ 1174.714100][ T6066] hsr_slave_1: left promiscuous mode [ 1176.301590][T10585] veth0_vlan: entered promiscuous mode [ 1176.351012][T10585] veth1_vlan: entered promiscuous mode [ 1176.538422][T10585] veth0_macvtap: entered promiscuous mode [ 1176.567637][T10585] veth1_macvtap: entered promiscuous mode [ 1176.665305][ T6066] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.668022][ T6066] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.673190][ T6066] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.683765][ T6066] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.769034][ T29] audit: type=1400 audit(1177.690:377): avc: denied { create } for pid=11335 comm="syz.8.1180" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1178.442015][ T29] audit: type=1400 audit(1178.350:378): avc: denied { unlink } for pid=10585 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1182.474631][T10767] veth0_vlan: entered promiscuous mode [ 1182.598663][T10767] veth1_vlan: entered promiscuous mode [ 1183.009144][T10767] veth0_macvtap: entered promiscuous mode [ 1183.085081][T10767] veth1_macvtap: entered promiscuous mode [ 1183.401426][ T6031] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.401867][ T6031] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.402159][ T6031] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.402393][ T6031] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.175797][ T29] audit: type=1400 audit(1191.070:379): avc: denied { mount } for pid=11359 comm="syz.8.1182" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1191.189700][ T29] audit: type=1400 audit(1191.090:380): avc: denied { read } for pid=11359 comm="syz.8.1182" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.195027][ T29] audit: type=1400 audit(1191.090:381): avc: denied { open } for pid=11359 comm="syz.8.1182" path="/3/file0" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.233112][ T29] audit: type=1400 audit(1191.130:382): avc: denied { setattr } for pid=11359 comm="syz.8.1182" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.275001][T11387] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1193.932965][T11400] syzkaller0: entered promiscuous mode [ 1193.933456][T11400] syzkaller0: entered allmulticast mode [ 1201.837018][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 1215.982819][ T5134] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.300005][ T5134] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.579925][ T5134] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.742462][ T5134] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.888502][ T5134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.948404][ T5134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.966226][ T5134] bond0 (unregistering): Released all slaves [ 1218.177322][ T5134] hsr_slave_0: left promiscuous mode [ 1218.197427][ T5134] hsr_slave_1: left promiscuous mode [ 1218.239638][ T5134] veth1_macvtap: left promiscuous mode [ 1218.240091][ T5134] veth0_macvtap: left promiscuous mode [ 1218.240643][ T5134] veth1_vlan: left promiscuous mode [ 1218.241089][ T5134] veth0_vlan: left promiscuous mode [ 1223.549268][ T29] audit: type=1400 audit(1223.470:383): avc: denied { unmount } for pid=10585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1285.624021][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.662168][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.958956][T11673] hsr_slave_0: entered promiscuous mode [ 1289.021812][T11673] hsr_slave_1: entered promiscuous mode [ 1289.037112][T11673] debugfs: 'hsr0' already exists in 'hsr' [ 1289.038052][T11673] Cannot create hsr debugfs directory [ 1291.207078][T11673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1291.232641][T11673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1291.259824][T11673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1291.301127][T11673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1293.523991][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.702189][T11673] veth0_vlan: entered promiscuous mode [ 1305.846054][T11673] veth1_vlan: entered promiscuous mode [ 1306.118398][T11673] veth0_macvtap: entered promiscuous mode [ 1306.164480][T11673] veth1_macvtap: entered promiscuous mode [ 1307.266147][ T5134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.267727][ T5134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.268138][ T5134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.268424][ T5134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.267893][ T29] audit: type=1400 audit(1308.170:384): avc: denied { read write } for pid=11673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1308.310299][ T29] audit: type=1400 audit(1308.220:385): avc: denied { open } for pid=11673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1308.310941][ T29] audit: type=1400 audit(1308.220:386): avc: denied { ioctl } for pid=11673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=634 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1309.817729][ T6708] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1310.023879][ T6708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.024211][ T6708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.024560][ T6708] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1310.024775][ T6708] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1310.024923][ T6708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.032467][ T6708] usb 1-1: config 0 descriptor?? [ 1310.552003][ T6708] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1310.852262][ T6698] usb 1-1: USB disconnect, device number 12 [ 1330.728345][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1228'. [ 1332.630401][ T6055] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.950869][ T6055] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.131212][ T6055] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.370049][ T6055] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.609556][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.618495][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.670210][ T6055] bond0 (unregistering): Released all slaves [ 1334.807824][ T6055] hsr_slave_0: left promiscuous mode [ 1334.837040][ T6055] hsr_slave_1: left promiscuous mode [ 1334.878953][ T6055] veth1_macvtap: left promiscuous mode [ 1334.879377][ T6055] veth0_macvtap: left promiscuous mode [ 1334.879828][ T6055] veth1_vlan: left promiscuous mode [ 1334.879978][ T6055] veth0_vlan: left promiscuous mode [ 1359.277091][ T29] audit: type=1326 audit(1359.190:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.0.1237" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1359.367019][ T29] audit: type=1326 audit(1359.250:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.0.1237" exe="/syz-executor" sig=0 arch=40000028 syscall=29 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.923526][ T29] audit: type=1326 audit(1369.840:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.932400][ T29] audit: type=1326 audit(1369.850:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.932797][ T29] audit: type=1326 audit(1369.850:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.950103][ T29] audit: type=1326 audit(1369.870:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.977100][ T29] audit: type=1326 audit(1369.890:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.977542][ T29] audit: type=1326 audit(1369.890:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1369.977856][ T29] audit: type=1326 audit(1369.890:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1370.003384][ T29] audit: type=1326 audit(1369.920:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1370.009066][ T29] audit: type=1326 audit(1369.930:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1370.055174][ T29] audit: type=1326 audit(1369.930:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.1245" exe="/syz-executor" sig=0 arch=40000028 syscall=23 compat=0 ip=0x132510 code=0x7ffc0000 [ 1374.998149][ T5134] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.330134][ T5134] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.447512][ T5134] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.581733][ T5134] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.468454][ T5134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.529255][ T5134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.564838][ T5134] bond0 (unregistering): Released all slaves [ 1376.736975][ T5134] hsr_slave_0: left promiscuous mode [ 1376.742856][ T5134] hsr_slave_1: left promiscuous mode [ 1376.800499][ T5134] veth1_macvtap: left promiscuous mode [ 1376.800972][ T5134] veth0_macvtap: left promiscuous mode [ 1376.802140][ T5134] veth1_vlan: left promiscuous mode [ 1376.802314][ T5134] veth0_vlan: left promiscuous mode [ 1378.075050][T12294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.108529][T12294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.930276][T12294] hsr_slave_0: entered promiscuous mode [ 1381.931992][T12294] hsr_slave_1: entered promiscuous mode [ 1381.938103][T12294] debugfs: 'hsr0' already exists in 'hsr' [ 1381.952011][T12294] Cannot create hsr debugfs directory [ 1383.332303][T12294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1383.361074][T12294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1383.400765][T12294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1383.419551][T12294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1386.895992][T12294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.621765][T12294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1395.792084][T12294] veth0_vlan: entered promiscuous mode [ 1395.852236][T12294] veth1_vlan: entered promiscuous mode [ 1395.991388][T12294] veth0_macvtap: entered promiscuous mode [ 1396.030557][T12294] veth1_macvtap: entered promiscuous mode [ 1396.170956][ T6058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.171569][ T6058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.171695][ T6058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.171768][ T6058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.917342][T12830] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1430.173544][T12830] usb 1-1: config 0 has no interfaces? [ 1430.173907][T12830] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1430.174160][T12830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.183084][T12830] usb 1-1: config 0 descriptor?? [ 1430.460482][T12110] usb 1-1: USB disconnect, device number 13 [ 1430.902368][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1430.902817][ T29] audit: type=1326 audit(1430.820:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1430.964480][ T29] audit: type=1326 audit(1430.880:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.003795][ T29] audit: type=1326 audit(1430.920:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.004329][ T29] audit: type=1326 audit(1430.920:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.004646][ T29] audit: type=1326 audit(1430.920:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.036187][ T29] audit: type=1326 audit(1430.950:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.072404][ T29] audit: type=1326 audit(1430.980:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.084399][ T29] audit: type=1326 audit(1431.000:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.115875][ T29] audit: type=1326 audit(1431.030:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1431.116232][ T29] audit: type=1326 audit(1431.030:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.0.1259" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x132510 code=0x7ffc0000 [ 1434.558440][T12888] SELinux: syz.0.1267 (12888) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1442.930824][ T6058] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.109947][ T6058] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.260281][ T6058] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.390597][ T6058] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.872400][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.928014][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.945734][ T6058] bond0 (unregistering): Released all slaves [ 1444.069470][ T6058] hsr_slave_0: left promiscuous mode [ 1444.113404][ T6058] hsr_slave_1: left promiscuous mode [ 1444.151418][ T6058] veth1_macvtap: left promiscuous mode [ 1444.153571][ T6058] veth0_macvtap: left promiscuous mode [ 1444.164023][ T6058] veth1_vlan: left promiscuous mode [ 1444.168291][ T6058] veth0_vlan: left promiscuous mode [ 1459.671640][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1459.671980][ T29] audit: type=1400 audit(1459.590:413): avc: denied { mount } for pid=12982 comm="syz.0.1273" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1468.956090][ T29] audit: type=1400 audit(1468.870:414): avc: denied { compute_member } for pid=13049 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1502.752869][T13096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.770765][T13096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.044290][T13096] hsr_slave_0: entered promiscuous mode [ 1506.058862][T13096] hsr_slave_1: entered promiscuous mode [ 1506.060719][T13096] debugfs: 'hsr0' already exists in 'hsr' [ 1506.061620][T13096] Cannot create hsr debugfs directory [ 1506.780457][T13096] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.941875][T13096] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.059965][T13096] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.244490][T13096] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.591182][T13096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1507.624574][T13096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1507.652832][T13096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1507.702915][T13096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1509.460060][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.484869][T13096] veth0_vlan: entered promiscuous mode [ 1520.552823][T13096] veth1_vlan: entered promiscuous mode [ 1520.730803][T13096] veth0_macvtap: entered promiscuous mode [ 1520.827921][T13096] veth1_macvtap: entered promiscuous mode [ 1521.200929][ T5134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.201656][ T5134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.201937][ T5134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.202309][ T5134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.213834][T12911] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1526.471663][T12911] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 1526.472754][T12911] usb 2-1: config 0 has no interface number 0 [ 1526.605600][T12911] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=b7.44 [ 1526.627648][T12911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.629110][T12911] usb 2-1: Product: syz [ 1526.647280][T12911] usb 2-1: Manufacturer: syz [ 1526.648439][T12911] usb 2-1: SerialNumber: syz [ 1526.849017][T12911] usb 2-1: config 0 descriptor?? [ 1527.105184][T12911] usb 2-1: bad CDC descriptors [ 1527.147971][T12911] usb 2-1: unsupported MDLM descriptors [ 1527.240501][T12911] usb 2-1: USB disconnect, device number 15 [ 1527.480971][ T29] audit: type=1326 audit(1527.390:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.481562][ T29] audit: type=1326 audit(1527.400:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.487215][ T29] audit: type=1326 audit(1527.400:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.496195][ T29] audit: type=1326 audit(1527.410:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=385 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.497231][ T29] audit: type=1326 audit(1527.410:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.497336][ T29] audit: type=1326 audit(1527.410:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.547084][ T29] audit: type=1326 audit(1527.450:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.547523][ T29] audit: type=1326 audit(1527.450:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.594822][ T29] audit: type=1326 audit(1527.500:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1527.595275][ T29] audit: type=1326 audit(1527.460:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.1.1290" exe="/syz-executor" sig=0 arch=40000028 syscall=352 compat=0 ip=0x132510 code=0x7ffc0000 [ 1540.390521][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'. [ 1563.814009][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1563.817524][ T29] audit: type=1107 audit(1563.730:428): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1580.247887][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1320'. [ 1612.047914][ T29] audit: type=1400 audit(1611.960:429): avc: denied { write } for pid=13565 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1612.090111][ T29] audit: type=1326 audit(1612.010:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.105020][ T29] audit: type=1326 audit(1612.020:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.114449][ T29] audit: type=1326 audit(1612.030:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.114934][ T29] audit: type=1326 audit(1612.030:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.142200][ T29] audit: type=1326 audit(1612.060:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.254074][ T29] audit: type=1326 audit(1612.170:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.254628][ T29] audit: type=1326 audit(1612.170:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=105 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.255024][ T29] audit: type=1326 audit(1612.170:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1612.306893][ T29] audit: type=1326 audit(1612.220:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.1322" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1626.460096][T13571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.521901][T13571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.114518][T13571] hsr_slave_0: entered promiscuous mode [ 1629.158214][T13571] hsr_slave_1: entered promiscuous mode [ 1629.167729][T13571] debugfs: 'hsr0' already exists in 'hsr' [ 1629.168123][T13571] Cannot create hsr debugfs directory [ 1630.991403][T13571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1631.030293][T13571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1631.070005][T13571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1631.081182][T13571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1632.597286][T13571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.492907][ T6055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.738295][ T6055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.940806][ T6055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.062174][ T6055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.858299][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.881215][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.900597][ T6055] bond0 (unregistering): Released all slaves [ 1637.108003][ T6055] hsr_slave_0: left promiscuous mode [ 1637.129045][ T6055] hsr_slave_1: left promiscuous mode [ 1637.179885][ T6055] veth1_macvtap: left promiscuous mode [ 1637.180261][ T6055] veth0_macvtap: left promiscuous mode [ 1637.180964][ T6055] veth1_vlan: left promiscuous mode [ 1637.181413][ T6055] veth0_vlan: left promiscuous mode [ 1646.848385][T13571] veth0_vlan: entered promiscuous mode [ 1646.942460][T13571] veth1_vlan: entered promiscuous mode [ 1647.180179][T13571] veth0_macvtap: entered promiscuous mode [ 1647.230850][T13571] veth1_macvtap: entered promiscuous mode [ 1647.526198][ T5134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.527240][ T5134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.527444][ T5134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.527641][ T5134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.453091][T13993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 1649.519537][ T29] audit: type=1400 audit(1649.440:439): avc: denied { connect } for pid=13987 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1649.629523][ T29] audit: type=1400 audit(1649.550:440): avc: denied { getopt } for pid=13987 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1700.233652][ T29] audit: type=1400 audit(1700.150:441): avc: denied { shutdown } for pid=14108 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1725.588800][T14182] pim6reg1: entered promiscuous mode [ 1725.589229][T14182] pim6reg1: entered allmulticast mode [ 1741.413958][ T6055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.560051][ T6055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.718892][ T6055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.842491][ T6055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.837694][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.908228][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.921449][ T6055] bond0 (unregistering): Released all slaves [ 1743.037096][ T6055] hsr_slave_0: left promiscuous mode [ 1743.050728][ T6055] hsr_slave_1: left promiscuous mode [ 1743.070193][ T6055] veth1_macvtap: left promiscuous mode [ 1743.071265][ T6055] veth0_macvtap: left promiscuous mode [ 1743.072327][ T6055] veth1_vlan: left promiscuous mode [ 1743.073254][ T6055] veth0_vlan: left promiscuous mode [ 1755.993306][T14224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.008559][T14224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.744828][T14224] hsr_slave_0: entered promiscuous mode [ 1758.754281][T14224] hsr_slave_1: entered promiscuous mode [ 1758.759856][T14224] debugfs: 'hsr0' already exists in 'hsr' [ 1758.760119][T14224] Cannot create hsr debugfs directory [ 1761.152534][T14224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1761.209690][T14224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1761.233133][T14224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1761.289699][T14224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1764.481981][T14224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.563888][T14224] veth0_vlan: entered promiscuous mode [ 1776.683690][T14224] veth1_vlan: entered promiscuous mode [ 1776.972750][T14224] veth0_macvtap: entered promiscuous mode [ 1777.021823][T14224] veth1_macvtap: entered promiscuous mode [ 1777.248745][T13338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.249245][T13338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.249584][T13338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.249816][T13338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.006050][ T29] audit: type=1400 audit(1777.920:442): avc: denied { read } for pid=14657 comm="syz.4.1356" path="socket:[22007]" dev="sockfs" ino=22007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1779.649715][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.657560][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.306882][ T29] audit: type=1326 audit(1791.160:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.307259][ T29] audit: type=1326 audit(1791.180:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=179 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.307540][ T29] audit: type=1326 audit(1791.180:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.307722][ T29] audit: type=1326 audit(1791.180:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.307901][ T29] audit: type=1326 audit(1791.180:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.308080][ T29] audit: type=1326 audit(1791.190:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.308259][ T29] audit: type=1326 audit(1791.190:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.308437][ T29] audit: type=1326 audit(1791.190:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=4 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.330535][ T29] audit: type=1326 audit(1791.250:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1791.339079][ T29] audit: type=1326 audit(1791.260:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.4.1359" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1805.049954][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.055299][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.576070][T14721] hsr_slave_0: entered promiscuous mode [ 1808.598427][T14721] hsr_slave_1: entered promiscuous mode [ 1808.600662][T14721] debugfs: 'hsr0' already exists in 'hsr' [ 1808.601473][T14721] Cannot create hsr debugfs directory [ 1811.328637][T14721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1811.354910][T14721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1811.399024][T14721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1811.425258][T14721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1814.415695][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1826.788417][T14721] veth0_vlan: entered promiscuous mode [ 1826.901432][T14721] veth1_vlan: entered promiscuous mode [ 1827.408222][T14721] veth0_macvtap: entered promiscuous mode [ 1827.424796][T14721] veth1_macvtap: entered promiscuous mode [ 1827.944760][ T6055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.945336][ T6055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.945778][ T6055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.946136][ T6055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.473109][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 1832.688840][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.690385][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.471224][T15221] binder: 15220:15221 ioctl c0306201 20000040 returned -14 [ 1846.597768][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1371'. [ 1850.838306][T15260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1382'. [ 1859.698613][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1859.703025][ T29] audit: type=1326 audit(1859.620:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.704908][ T29] audit: type=1326 audit(1859.620:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.712775][ T29] audit: type=1326 audit(1859.620:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.717445][ T29] audit: type=1326 audit(1859.630:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.721700][ T29] audit: type=1326 audit(1859.630:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.726005][ T29] audit: type=1326 audit(1859.630:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.735159][ T29] audit: type=1326 audit(1859.630:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.739580][ T29] audit: type=1326 audit(1859.640:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=9 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.745483][ T29] audit: type=1326 audit(1859.640:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1859.748741][ T29] audit: type=1326 audit(1859.640:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.5.1389" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1860.080085][T15307] input: syz1 as /devices/virtual/input/input9 [ 1860.139799][T15309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.149198][T15309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.492942][T15329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.514696][T15329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.120973][T15336] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1394'. [ 1892.660367][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 1894.062878][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.064727][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.632618][ T29] audit: type=1326 audit(1894.550:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.4.1405" exe="/syz-executor" sig=31 arch=40000028 syscall=20 compat=0 ip=0x12819c code=0x0 [ 1895.500640][ T6055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.653927][ T6055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.791851][ T6055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.878420][ T6055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.805739][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1896.849508][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1896.865324][ T6055] bond0 (unregistering): Released all slaves [ 1897.026968][ T6055] hsr_slave_0: left promiscuous mode [ 1897.038195][ T6055] hsr_slave_1: left promiscuous mode [ 1897.058505][ T6055] veth1_macvtap: left promiscuous mode [ 1897.058895][ T6055] veth0_macvtap: left promiscuous mode [ 1897.059110][ T6055] veth1_vlan: left promiscuous mode [ 1897.059282][ T6055] veth0_vlan: left promiscuous mode [ 1898.802058][T15399] SELinux: Context system_u:object is not valid (left unmapped). [ 1898.863451][ T29] audit: type=1400 audit(1898.780:470): avc: denied { relabelto } for pid=15395 comm="syz.4.1406" name="cgroup.procs" dev="cgroup" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1898.866142][ T29] audit: type=1400 audit(1898.780:471): avc: denied { associate } for pid=15395 comm="syz.4.1406" name="cgroup.procs" dev="cgroup" ino=316 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 1910.778474][T15430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.779584][T15430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.169953][T15480] bridge_slave_0: entered promiscuous mode [ 1930.620876][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.624934][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.759630][T13338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.899994][T13338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.219895][T13338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.379546][T13338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.889765][T13338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.913672][T13338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.921547][T13338] bond0 (unregistering): Released all slaves [ 1949.029284][T13338] hsr_slave_0: left promiscuous mode [ 1949.033300][T13338] hsr_slave_1: left promiscuous mode [ 1949.068879][T13338] veth1_macvtap: left promiscuous mode [ 1949.069390][T13338] veth0_macvtap: left promiscuous mode [ 1949.069645][T13338] veth1_vlan: left promiscuous mode [ 1949.069767][T13338] veth0_vlan: left promiscuous mode [ 1981.868802][T15605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.890678][T15605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1983.801078][T15605] hsr_slave_0: entered promiscuous mode [ 1983.805133][T15605] hsr_slave_1: entered promiscuous mode [ 1983.818562][T15605] debugfs: 'hsr0' already exists in 'hsr' [ 1983.823527][T15605] Cannot create hsr debugfs directory [ 1984.814674][T15605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1984.870865][T15605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1984.891270][T15605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1984.982652][T15605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1987.714907][T15605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1991.631953][T15920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1991.635321][T15920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.989139][T15920] hsr_slave_0: entered promiscuous mode [ 1994.999444][T15920] hsr_slave_1: entered promiscuous mode [ 1995.002340][T15920] debugfs: 'hsr0' already exists in 'hsr' [ 1995.003868][T15920] Cannot create hsr debugfs directory [ 1996.695181][T15920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1996.749756][T15920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1996.783112][T15920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1996.922062][T15920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2000.001471][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2000.612867][T15605] veth0_vlan: entered promiscuous mode [ 2000.715239][T15605] veth1_vlan: entered promiscuous mode [ 2001.073433][T15605] veth0_macvtap: entered promiscuous mode [ 2001.122265][T15605] veth1_macvtap: entered promiscuous mode [ 2001.434635][T13338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.447580][T13338] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.448046][T13338] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.448298][T13338] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.916031][T15920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2002.364829][T16355] syzkaller0: entered promiscuous mode [ 2002.365566][T16355] syzkaller0: entered allmulticast mode [ 2011.694438][T15920] veth0_vlan: entered promiscuous mode [ 2011.828039][T15920] veth1_vlan: entered promiscuous mode [ 2012.147554][T15920] veth0_macvtap: entered promiscuous mode [ 2012.193775][T15920] veth1_macvtap: entered promiscuous mode [ 2012.757319][ T6031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.758077][ T6031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.758710][ T6031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.759219][ T6031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.861483][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1440'. [ 2048.372859][T16527] netlink: 'syz.6.1445': attribute type 12 has an invalid length. [ 2048.673921][ T29] audit: type=1326 audit(2048.590:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.707330][ T29] audit: type=1326 audit(2048.610:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.716071][ T29] audit: type=1326 audit(2048.630:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.716964][ T29] audit: type=1326 audit(2048.630:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.717218][ T29] audit: type=1326 audit(2048.630:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.717413][ T29] audit: type=1326 audit(2048.630:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.717598][ T29] audit: type=1326 audit(2048.630:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.729033][ T29] audit: type=1326 audit(2048.650:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.730856][ T29] audit: type=1326 audit(2048.650:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2048.739493][ T29] audit: type=1326 audit(2048.660:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16528 comm="syz.6.1446" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x132510 code=0x7ffc0000 [ 2119.284828][T16648] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.550801][T16648] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.690436][T16648] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.880775][T16648] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.828862][T16648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2120.834974][T16648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2120.857817][T16648] bond0 (unregistering): Released all slaves [ 2120.947588][T16648] hsr_slave_0: left promiscuous mode [ 2120.988581][T16648] hsr_slave_1: left promiscuous mode [ 2121.063569][T16648] veth1_macvtap: left promiscuous mode [ 2121.064786][T16648] veth0_macvtap: left promiscuous mode [ 2121.065903][T16648] veth1_vlan: left promiscuous mode [ 2121.067568][T16648] veth0_vlan: left promiscuous mode [ 2125.168324][ T6035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.272941][ T6035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.444591][ T6035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.509930][ T6035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.357110][ T6035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2126.387968][ T6035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2126.391802][ T6035] bond0 (unregistering): Released all slaves [ 2126.538745][ T6035] hsr_slave_0: left promiscuous mode [ 2126.541105][ T6035] hsr_slave_1: left promiscuous mode [ 2126.588024][ T6035] veth1_macvtap: left promiscuous mode [ 2126.588638][ T6035] veth0_macvtap: left promiscuous mode [ 2126.589177][ T6035] veth1_vlan: left promiscuous mode [ 2126.589516][ T6035] veth0_vlan: left promiscuous mode [ 2132.377082][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2132.402402][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.063773][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.069138][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.808178][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 2138.808514][ T29] audit: type=1400 audit(2138.730:530): avc: denied { search } for pid=16792 comm="syz.7.1471" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2138.815042][ T29] audit: type=1400 audit(2138.730:531): avc: denied { search } for pid=16792 comm="syz.7.1471" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2142.048484][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'. [ 2142.107254][T16807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2142.108348][T16807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2143.479225][ T29] audit: type=1400 audit(2143.400:532): avc: denied { lock } for pid=16811 comm="syz.7.1475" path="socket:[25561]" dev="sockfs" ino=25561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2185.422859][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.441741][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2186.771151][T16924] hsr_slave_0: entered promiscuous mode [ 2186.772071][T16924] hsr_slave_1: entered promiscuous mode [ 2186.779167][T16924] debugfs: 'hsr0' already exists in 'hsr' [ 2186.786764][T16924] Cannot create hsr debugfs directory [ 2187.928887][T16924] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2187.948576][T16924] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2187.970157][T16924] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2187.988448][T16924] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2190.850282][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2194.823747][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2194.841937][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2198.524242][T17246] hsr_slave_0: entered promiscuous mode [ 2198.538399][T17246] hsr_slave_1: entered promiscuous mode [ 2198.539088][T17246] debugfs: 'hsr0' already exists in 'hsr' [ 2198.539212][T17246] Cannot create hsr debugfs directory [ 2200.799903][T17246] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2200.833866][T17246] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2200.845790][T17246] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2200.910618][T17246] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2203.123130][T16924] veth0_vlan: entered promiscuous mode [ 2203.209334][T16924] veth1_vlan: entered promiscuous mode [ 2203.498570][T16924] veth0_macvtap: entered promiscuous mode [ 2203.564201][T16924] veth1_macvtap: entered promiscuous mode [ 2203.602370][T17246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2203.774089][T13338] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.775565][T13338] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.777187][T13338] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.777734][T13338] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2215.792516][T17246] veth0_vlan: entered promiscuous mode [ 2215.824063][T17246] veth1_vlan: entered promiscuous mode [ 2216.028611][T17246] veth0_macvtap: entered promiscuous mode [ 2216.079596][T17246] veth1_macvtap: entered promiscuous mode [ 2216.337591][ T5134] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.338545][ T5134] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.339735][ T5134] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.339981][ T5134] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.487920][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.488697][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.036192][T17738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17738 comm=syz.9.1481 [ 2225.059648][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1481'. [ 2226.087988][ T29] audit: type=1400 audit(2225.990:533): avc: denied { unmount } for pid=17742 comm="syz.9.1482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2233.299771][ T29] audit: type=1400 audit(2233.220:534): avc: denied { create } for pid=17744 comm="syz.9.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2260.143800][T17789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2260.194624][T17789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2264.725914][T17789] hsr_slave_0: entered promiscuous mode [ 2265.078653][T17789] hsr_slave_1: entered promiscuous mode [ 2265.080060][T17789] debugfs: 'hsr0' already exists in 'hsr' [ 2265.107942][T17789] Cannot create hsr debugfs directory [ 2267.549404][T17789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2267.592442][T17789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2267.670370][T17789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2267.720737][T17789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2271.678538][T17789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2284.444279][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2284.482541][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.100932][T17789] veth0_vlan: entered promiscuous mode [ 2287.220660][T17789] veth1_vlan: entered promiscuous mode [ 2287.785810][T17789] veth0_macvtap: entered promiscuous mode [ 2287.984168][T17789] veth1_macvtap: entered promiscuous mode [ 2288.297735][ T6035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.298503][ T6035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.302155][ T6035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.302539][ T6035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.021341][T18154] hsr_slave_0: entered promiscuous mode [ 2289.028412][T18154] hsr_slave_1: entered promiscuous mode [ 2289.038152][T18154] debugfs: 'hsr0' already exists in 'hsr' [ 2289.038838][T18154] Cannot create hsr debugfs directory [ 2291.190902][T18510] syzkaller0: entered promiscuous mode [ 2291.191504][T18510] syzkaller0: entered allmulticast mode [ 2291.885874][T18154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2292.000029][T18154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2292.118991][T18154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2292.192675][T18154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2295.225440][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.467211][T15355] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2296.657282][T15355] usb 1-1: Using ep0 maxpacket: 8 [ 2296.737337][T15355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 2296.737670][T15355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2296.738046][T15355] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 2296.738225][T15355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2296.768567][T15355] usb 1-1: config 0 descriptor?? [ 2297.391534][T15355] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0008/input/input11 [ 2297.433736][T15355] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 2297.506879][T14898] usb 1-1: USB disconnect, device number 14 [ 2311.223500][T18154] veth0_vlan: entered promiscuous mode [ 2311.423727][T18154] veth1_vlan: entered promiscuous mode [ 2312.004049][T18154] veth0_macvtap: entered promiscuous mode [ 2312.107096][T18154] veth1_macvtap: entered promiscuous mode [ 2312.629743][T16648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.630117][T16648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.630405][T16648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.630588][T16648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2324.829429][T16642] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.024855][T16642] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.374422][T16642] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.538412][T16642] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.642493][T18678] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1496'. [ 2325.909381][T18678] bond0: (slave bond_slave_0): Releasing backup interface [ 2325.992185][T18678] bond0: (slave bond_slave_1): Releasing backup interface [ 2326.156787][T18678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2327.241921][T16642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2327.298582][T16642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2327.310144][T16642] bond0 (unregistering): Released all slaves [ 2327.368551][T16642] hsr_slave_0: left promiscuous mode [ 2327.370153][T16642] hsr_slave_1: left promiscuous mode [ 2327.379060][T16642] veth1_macvtap: left promiscuous mode [ 2327.379987][T16642] veth0_macvtap: left promiscuous mode [ 2327.387262][T16642] veth1_vlan: left promiscuous mode [ 2327.388045][T16642] veth0_vlan: left promiscuous mode [ 2333.260519][T16642] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.369229][T16642] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.515849][T16642] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.651820][T16642] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.507685][T16642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2334.579787][T16642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2334.584921][T16642] bond0 (unregistering): Released all slaves [ 2334.827255][T16642] hsr_slave_0: left promiscuous mode [ 2334.849978][T16642] hsr_slave_1: left promiscuous mode [ 2334.890681][T16642] veth1_macvtap: left promiscuous mode [ 2334.892341][T16642] veth0_macvtap: left promiscuous mode [ 2334.897917][T16642] veth1_vlan: left promiscuous mode [ 2334.899911][T16642] veth0_vlan: left promiscuous mode [ 2340.567172][T15274] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 2340.769210][T15274] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2340.769555][T15274] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2340.769841][T15274] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 2340.770170][T15274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.777614][T15274] usb 1-1: config 0 descriptor?? [ 2340.807855][T18729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2341.254886][T15274] dragonrise 0003:0079:0011.0009: item fetching failed at offset 4/5 [ 2341.257905][T15274] dragonrise 0003:0079:0011.0009: parse failed [ 2341.263238][T15274] dragonrise 0003:0079:0011.0009: probe with driver dragonrise failed with error -22 [ 2341.457515][T15165] usb 1-1: USB disconnect, device number 15 [ 2380.526944][ T29] audit: type=1400 audit(2381.422:535): avc: denied { connect } for pid=18849 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2385.518616][T18872] input: syz1 as /devices/virtual/input/input12 [ 2388.107576][T18824] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 2388.324338][T18824] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2388.356726][T18824] usb 2-1: not running at top speed; connect to a high speed hub [ 2388.368189][T18824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2388.369392][T18824] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 2388.370059][T18824] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 2388.386056][T18824] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.02 [ 2388.387456][T18824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.388601][T18824] usb 2-1: Product: syz [ 2388.389265][T18824] usb 2-1: Manufacturer: syz [ 2388.390692][T18824] usb 2-1: SerialNumber: syz [ 2398.737046][T18871] usb 2-1: USB disconnect, device number 16 [ 2402.758234][T18959] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 2403.117292][T18959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2403.190041][T18959] usb 2-1: not running at top speed; connect to a high speed hub [ 2403.236152][T18959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2403.238511][T18959] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 2403.242993][T18959] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 2403.394072][T18959] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.02 [ 2403.394422][T18959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.394775][T18959] usb 2-1: Product: syz [ 2403.395065][T18959] usb 2-1: Manufacturer: syz [ 2403.395334][T18959] usb 2-1: SerialNumber: syz [ 2403.770678][T18959] usb 2-1: USB disconnect, device number 17 [ 2405.637949][ T29] audit: type=1400 audit(2406.552:536): avc: denied { module_request } for pid=18984 comm="syz.1.1521" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2406.230381][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 2432.367031][T15493] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2432.568252][T15493] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2432.568695][T15493] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2432.569030][T15493] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2432.569276][T15493] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2432.569718][T15493] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2432.569905][T15493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.743337][T15493] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2432.778590][T15493] usb 1-1: invalid MIDI out EP 0 [ 2433.048567][T15493] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2433.088663][T15493] usb 1-1: USB disconnect, device number 16 [ 2436.337013][T19113] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2436.577040][T19113] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.577569][T19113] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2436.577955][T19113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.641854][T19113] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2436.722663][T19113] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2436.967976][T19098] usb 1-1: USB disconnect, device number 17 [ 2456.725652][T19187] sch_tbf: burst 88 is lower than device macvlan1 mtu (1514) ! [ 2457.132862][T19190] syzkaller0: entered promiscuous mode [ 2457.133386][T19190] syzkaller0: entered allmulticast mode [ 2459.617696][T19197] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2459.777105][T19197] usb 2-1: Using ep0 maxpacket: 8 [ 2459.785986][T19197] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2459.786711][T19197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2459.786878][T19197] usb 2-1: config 0 has no interface number 0 [ 2459.823622][T19197] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2459.823913][T19197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.824178][T19197] usb 2-1: Product: syz [ 2459.824335][T19197] usb 2-1: Manufacturer: syz [ 2459.824485][T19197] usb 2-1: SerialNumber: syz [ 2459.848917][T19197] usb 2-1: config 0 descriptor?? [ 2460.077236][T19197] usb 2-1: USB disconnect, device number 18 [ 2460.737843][T15388] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2460.890173][T15388] usb 2-1: Using ep0 maxpacket: 8 [ 2460.971266][T15388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2460.985227][T15388] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2460.985760][T15388] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2461.100301][T15388] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2461.100479][T15388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.100674][T15388] usb 2-1: Product: syz [ 2461.100700][T15388] usb 2-1: Manufacturer: syz [ 2461.100712][T15388] usb 2-1: SerialNumber: syz [ 2461.108036][T19217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2461.127174][T19217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2466.209776][T15388] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2468.929983][T16648] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.074727][T16648] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.279742][T16648] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.465076][T16648] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.129430][T16648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2470.189258][T16648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2470.204448][T16648] bond0 (unregistering): Released all slaves [ 2470.397334][T16648] hsr_slave_0: left promiscuous mode [ 2470.413806][T16648] hsr_slave_1: left promiscuous mode [ 2470.437913][T16648] veth1_macvtap: left promiscuous mode [ 2470.438438][T16648] veth0_macvtap: left promiscuous mode [ 2470.441895][T16648] veth1_vlan: left promiscuous mode [ 2470.442392][T16648] veth0_vlan: left promiscuous mode [ 2472.400099][T19096] usb 2-1: USB disconnect, device number 19 [ 2475.884775][ T6058] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.240681][ T6058] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.361171][ T6058] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.448769][ T6058] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2477.219209][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2477.283164][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2477.328512][ T6058] bond0 (unregistering): Released all slaves [ 2477.469227][ T6058] hsr_slave_0: left promiscuous mode [ 2477.497524][ T6058] hsr_slave_1: left promiscuous mode [ 2477.524913][ T6058] veth1_macvtap: left promiscuous mode [ 2477.528425][ T6058] veth0_macvtap: left promiscuous mode [ 2477.530729][ T6058] veth1_vlan: left promiscuous mode [ 2477.531300][ T6058] veth0_vlan: left promiscuous mode [ 2504.377732][T19167] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2504.557156][T19167] usb 1-1: Using ep0 maxpacket: 16 [ 2504.657779][T19167] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2504.660037][T19167] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2504.661713][T19167] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2504.663551][T19167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.729598][T19167] usb 1-1: config 0 descriptor?? [ 2505.358674][T19167] acrux 0003:1A34:0802.000A: unknown main item tag 0x0 [ 2505.361466][T19167] acrux 0003:1A34:0802.000A: unknown main item tag 0x0 [ 2505.367794][T19167] acrux 0003:1A34:0802.000A: item fetching failed at offset 2/5 [ 2505.370179][T19167] acrux 0003:1A34:0802.000A: parse failed [ 2505.380200][T19167] acrux 0003:1A34:0802.000A: probe with driver acrux failed with error -22 [ 2505.550850][T19167] usb 1-1: USB disconnect, device number 18 [ 2507.019308][T19112] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2507.187375][T19112] usb 2-1: Using ep0 maxpacket: 16 [ 2507.199555][T19112] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2507.215527][T19112] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2507.215974][T19112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.216162][T19112] usb 2-1: Product: syz [ 2507.216874][T19112] usb 2-1: Manufacturer: syz [ 2507.217083][T19112] usb 2-1: SerialNumber: syz [ 2507.236230][T19112] usb 2-1: config 0 descriptor?? [ 2507.249667][T19112] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2507.251046][T19112] usb 2-1: Detected FT232R [ 2507.456083][T19381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.457073][T19112] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2507.468800][T19381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2512.477769][T19112] ftdi_sio ttyUSB0: Unable to write latency timer: -110 [ 2512.479356][T19112] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 2512.509944][T19112] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2518.205164][T19098] usb 2-1: USB disconnect, device number 20 [ 2518.245603][T19098] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2518.270715][T19098] ftdi_sio 2-1:0.0: device disconnected [ 2522.230678][T19406] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2522.451389][T19406] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2522.451708][T19406] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2522.451975][T19406] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2522.452158][T19406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2522.452325][T19406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.629541][T19406] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2522.631298][T19406] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2522.633148][T19406] usb 1-1: Product: syz [ 2522.633918][T19406] usb 1-1: Manufacturer: syz [ 2522.695239][T19406] cdc_wdm 1-1:1.0: skipping garbage [ 2522.696305][T19406] cdc_wdm 1-1:1.0: skipping garbage [ 2522.729913][T19406] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2522.930846][T19406] usb 1-1: USB disconnect, device number 19 [ 2561.741664][ T29] audit: type=1400 audit(2562.652:537): avc: denied { module_load } for pid=19580 comm="syz.0.1571" path="/sys/power/wakeup_count" dev="sysfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 2562.967070][ T29] audit: type=1400 audit(2563.862:538): avc: denied { bind } for pid=19590 comm="syz.0.1574" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2564.017740][T19149] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 2564.222857][T19149] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2564.224145][T19149] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2564.225321][T19149] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 2564.227223][T19149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.232013][T19149] usb 1-1: config 0 descriptor?? [ 2564.243498][T19593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2564.906852][T19149] dragonrise 0003:0079:0011.000B: item fetching failed at offset 4/5 [ 2564.948088][T19149] dragonrise 0003:0079:0011.000B: parse failed [ 2564.954645][T19149] dragonrise 0003:0079:0011.000B: probe with driver dragonrise failed with error -22 [ 2565.217302][T19149] usb 1-1: USB disconnect, device number 20 [ 2576.667757][ T29] audit: type=1400 audit(2577.552:539): avc: denied { create } for pid=19619 comm="syz.0.1580" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2576.668172][ T29] audit: type=1400 audit(2577.572:540): avc: denied { mounton } for pid=19619 comm="syz.0.1580" path="/62/file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2578.963996][ T29] audit: type=1400 audit(2579.802:541): avc: denied { unlink } for pid=17789 comm="syz-executor" name="file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2581.956981][T19639] veth0_vlan: entered allmulticast mode [ 2613.342916][ T29] audit: type=1326 audit(2614.252:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.362021][ T29] audit: type=1326 audit(2614.252:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.379718][ T29] audit: type=1326 audit(2614.252:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.385612][ T29] audit: type=1326 audit(2614.252:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.405463][ T29] audit: type=1326 audit(2614.252:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.429601][ T29] audit: type=1326 audit(2614.252:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.430014][ T29] audit: type=1326 audit(2614.252:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.430215][ T29] audit: type=1326 audit(2614.252:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=294 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.430375][ T29] audit: type=1326 audit(2614.252:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2613.430524][ T29] audit: type=1326 audit(2614.272:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.1.1593" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x132510 code=0x7ffc0000 [ 2635.383999][T19691] binder: 19690:19691 unknown command 0 [ 2635.385540][T19691] binder: 19690:19691 ioctl c0306201 20000080 returned -22 [ 2635.408064][T19691] binder: BINDER_SET_CONTEXT_MGR already set [ 2635.409678][T19691] binder: 19690:19691 ioctl 4018620d 20000100 returned -16 [ 2635.538722][T19691] binder: BINDER_SET_CONTEXT_MGR already set [ 2635.539431][T19691] binder: 19690:19691 ioctl 4018620d 200002c0 returned -16 [ 2635.628195][T19691] binder: 19690:19691 ioctl c0306201 0 returned -14 [ 2645.119814][T19699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2645.149481][T19699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2648.039590][T19699] hsr_slave_0: entered promiscuous mode [ 2648.041426][T19699] hsr_slave_1: entered promiscuous mode [ 2648.042097][T19699] debugfs: 'hsr0' already exists in 'hsr' [ 2648.077877][T19699] Cannot create hsr debugfs directory [ 2649.855108][T19699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2649.915872][T19699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2649.934161][T19699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2649.963220][T19699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2653.263500][T19699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2663.142783][T19699] veth0_vlan: entered promiscuous mode [ 2663.278028][T19699] veth1_vlan: entered promiscuous mode [ 2663.442127][T19699] veth0_macvtap: entered promiscuous mode [ 2663.499690][T19699] veth1_macvtap: entered promiscuous mode [ 2664.020761][T16646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.021511][T16646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.021822][T16646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.022105][T16646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.677601][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2665.678503][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2674.809487][T20120] veth0_vlan: entered allmulticast mode [ 2674.949919][T20120] veth0_vlan: left promiscuous mode [ 2674.957075][T20120] veth0_vlan: entered promiscuous mode [ 2675.405348][T20123] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1604'. [ 2690.840311][T20145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2690.846010][T20145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2694.485521][T20145] hsr_slave_0: entered promiscuous mode [ 2694.518968][T20145] hsr_slave_1: entered promiscuous mode [ 2694.528950][T20145] debugfs: 'hsr0' already exists in 'hsr' [ 2694.529298][T20145] Cannot create hsr debugfs directory [ 2696.325704][T20145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2696.352156][T20145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2696.362903][T20145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2696.421098][T20145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2700.225485][T20145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2713.302810][T20145] veth0_vlan: entered promiscuous mode [ 2713.493834][T20145] veth1_vlan: entered promiscuous mode [ 2713.723310][T20145] veth0_macvtap: entered promiscuous mode [ 2713.762329][T20145] veth1_macvtap: entered promiscuous mode [ 2713.900974][T16648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.901675][T16648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.902143][T16648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.902509][T16648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2715.218383][T20563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2715.219365][T20563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2743.281646][T20596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2743.311418][T20596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2747.489876][T20596] hsr_slave_0: entered promiscuous mode [ 2747.492647][T20596] hsr_slave_1: entered promiscuous mode [ 2747.494628][T20596] debugfs: 'hsr0' already exists in 'hsr' [ 2747.495664][T20596] Cannot create hsr debugfs directory [ 2749.613761][T20596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2749.737477][T20596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2749.871473][T20596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2749.924167][T20596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2753.375166][T20596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2759.058467][T20975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2759.059679][T20975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2761.080489][T20992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2761.082303][T20992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2764.349453][T21015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.358453][T21015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2773.035165][T20596] veth0_vlan: entered promiscuous mode [ 2773.064068][T20596] veth1_vlan: entered promiscuous mode [ 2773.312369][T20596] veth0_macvtap: entered promiscuous mode [ 2773.353454][T20596] veth1_macvtap: entered promiscuous mode [ 2773.765026][T16644] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2773.766099][T16644] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2773.766230][T16644] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2773.766302][T16644] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.199212][T21103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2778.200351][T21103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.110427][ T6031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.383366][ T6031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.630113][ T6031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.815497][ T6031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.861770][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2795.918687][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2795.952743][ T6031] bond0 (unregistering): Released all slaves [ 2796.187500][ T6031] hsr_slave_0: left promiscuous mode [ 2796.208041][ T6031] hsr_slave_1: left promiscuous mode [ 2796.273671][ T6031] veth1_macvtap: left promiscuous mode [ 2796.287401][ T6031] veth0_macvtap: left promiscuous mode [ 2796.288042][ T6031] veth1_vlan: left promiscuous mode [ 2808.819605][T21169] IPv6: sit1: Disabled Multicast RS [ 2808.821130][T21169] sit1: entered allmulticast mode [ 2836.052916][T21229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2875.745366][ T6058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.959512][ T6058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2876.174249][ T6058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2876.384277][ T6058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2877.070366][ T6058] bond0 (unregistering): Released all slaves [ 2877.239354][ T6058] hsr_slave_0: left promiscuous mode [ 2877.258784][ T6058] hsr_slave_1: left promiscuous mode [ 2877.289983][ T6058] veth1_macvtap: left promiscuous mode [ 2877.290481][ T6058] veth0_macvtap: left promiscuous mode [ 2877.290817][ T6058] veth1_vlan: left promiscuous mode [ 2877.291019][ T6058] veth0_vlan: left promiscuous mode [ 2902.604076][T21314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2902.701140][T21314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2906.949996][T21314] hsr_slave_0: entered promiscuous mode [ 2906.951088][T21314] hsr_slave_1: entered promiscuous mode [ 2906.959151][T21314] debugfs: 'hsr0' already exists in 'hsr' [ 2906.960537][T21314] Cannot create hsr debugfs directory [ 2908.202848][T21314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2908.342457][T21314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2908.391342][T21314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2908.432180][T21314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2911.830583][T21314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2925.618284][T21680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2925.650205][T21680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2928.920881][T21314] veth0_vlan: entered promiscuous mode [ 2929.008874][T21314] veth1_vlan: entered promiscuous mode [ 2929.283065][T21314] veth0_macvtap: entered promiscuous mode [ 2929.340515][T21314] veth1_macvtap: entered promiscuous mode [ 2929.535494][ T5134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.550260][ T5134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.551604][ T5134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.552786][ T5134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2930.030093][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 2930.030570][ T29] audit: type=1400 audit(2930.912:562): avc: denied { write } for pid=21314 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 2930.030812][ T29] audit: type=1400 audit(2930.912:563): avc: denied { open } for pid=21314 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 2932.749057][T21680] hsr_slave_0: entered promiscuous mode [ 2932.750785][T21680] hsr_slave_1: entered promiscuous mode [ 2932.761162][T21680] debugfs: 'hsr0' already exists in 'hsr' [ 2932.764028][T21680] Cannot create hsr debugfs directory [ 2933.292302][ T29] audit: type=1400 audit(2934.202:564): avc: denied { accept } for pid=21942 comm="syz.4.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2934.712840][T21680] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2934.760419][T21680] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2934.800345][T21680] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2934.845800][T21680] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2938.868788][T21680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2942.082684][T22104] netlink: 'syz.4.1650': attribute type 12 has an invalid length. [ 2942.532282][T22107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2942.559240][T22107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2952.419678][T21940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2952.585294][T21940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2952.915987][T21940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2953.100082][T21940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2954.255353][T21940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2954.338461][T21940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2954.342715][T21940] bond0 (unregistering): Released all slaves [ 2954.597183][T21940] hsr_slave_0: left promiscuous mode [ 2954.602185][T21940] hsr_slave_1: left promiscuous mode [ 2954.669073][T21940] veth1_macvtap: left promiscuous mode [ 2954.669692][T21940] veth0_macvtap: left promiscuous mode [ 2954.669967][T21940] veth1_vlan: left promiscuous mode [ 2959.245950][T21680] veth0_vlan: entered promiscuous mode [ 2959.361448][T21680] veth1_vlan: entered promiscuous mode [ 2959.650220][T21680] veth0_macvtap: entered promiscuous mode [ 2959.741049][T21680] veth1_macvtap: entered promiscuous mode [ 2960.260465][T16642] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2960.260932][T16642] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2960.261533][T16642] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2960.261824][T16642] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2962.987269][ T29] audit: type=1326 audit(2963.892:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22186 comm="syz.6.1644" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x50000 [ 2962.997558][ T29] audit: type=1326 audit(2963.902:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22186 comm="syz.6.1644" exe="/syz-executor" sig=0 arch=40000028 syscall=120 compat=0 ip=0x132510 code=0x50000 [ 2962.999404][ T29] audit: type=1326 audit(2963.902:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22186 comm="syz.6.1644" exe="/syz-executor" sig=0 arch=40000028 syscall=265 compat=0 ip=0x15ffc4 code=0x50000 [ 2963.001061][ T29] audit: type=1326 audit(2963.902:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22186 comm="syz.6.1644" exe="/syz-executor" sig=0 arch=40000028 syscall=1 compat=0 ip=0x132510 code=0x50000 [ 3010.572862][T22254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3010.598877][T22254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3015.809375][T22254] hsr_slave_0: entered promiscuous mode [ 3015.818956][T22254] hsr_slave_1: entered promiscuous mode [ 3015.868251][T22254] debugfs: 'hsr0' already exists in 'hsr' [ 3015.868724][T22254] Cannot create hsr debugfs directory [ 3018.589086][T22254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3018.630607][T22254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3018.689058][T22254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3018.710929][T22254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3023.157041][T16648] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.333154][T16648] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.559472][T16648] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.839464][T16648] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.004506][T22254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3026.805685][T16648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3026.829540][T16648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3026.840050][T16648] bond0 (unregistering): Released all slaves [ 3026.948804][T16648] hsr_slave_0: left promiscuous mode [ 3026.959994][T16648] hsr_slave_1: left promiscuous mode [ 3026.998593][T16648] veth1_macvtap: left promiscuous mode [ 3026.999039][T16648] veth0_macvtap: left promiscuous mode [ 3026.999291][T16648] veth1_vlan: left promiscuous mode [ 3026.999469][T16648] veth0_vlan: left promiscuous mode [ 3029.165580][T22254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3033.435992][T22614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3033.503065][T22614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3038.119513][T22614] hsr_slave_0: entered promiscuous mode [ 3038.122963][T22614] hsr_slave_1: entered promiscuous mode [ 3038.130832][T22614] debugfs: 'hsr0' already exists in 'hsr' [ 3038.147008][T22614] Cannot create hsr debugfs directory [ 3040.432220][T22614] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3040.529181][T22614] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3040.610834][T22614] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3040.667672][T22614] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3044.870035][T22254] veth0_vlan: entered promiscuous mode [ 3044.985839][T22254] veth1_vlan: entered promiscuous mode [ 3045.474007][T22254] veth0_macvtap: entered promiscuous mode [ 3045.530853][T22614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3045.574481][T22254] veth1_macvtap: entered promiscuous mode [ 3045.742668][T21292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.924621][T21292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.925267][T21292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.925741][T21292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3048.201342][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3048.238286][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3058.241699][T23046] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1659'. [ 3061.139296][T23089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3061.141378][T23089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.329367][T22614] veth0_vlan: entered promiscuous mode [ 3065.460006][T22614] veth1_vlan: entered promiscuous mode [ 3065.615891][T22614] veth0_macvtap: entered promiscuous mode [ 3065.673120][T22614] veth1_macvtap: entered promiscuous mode [ 3065.978706][T13338] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3065.979150][T13338] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3065.979553][T13338] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3065.979782][T13338] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3067.700723][T23115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3067.701895][T23115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3078.858054][ T29] audit: type=1400 audit(3079.762:569): avc: denied { create } for pid=23158 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3078.917913][ T29] audit: type=1400 audit(3079.792:570): avc: denied { read } for pid=23158 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3082.580694][T23170] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1672'. [ 3083.354360][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.354686][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.354926][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355059][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355161][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355252][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355320][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355385][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355484][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.355580][T23178] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 3083.397492][T23178] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 3110.353923][T13338] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3111.377330][T13338] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3112.370887][T13338] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3112.543785][T13338] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3113.228092][T13338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3113.258899][T13338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3113.290012][T13338] bond0 (unregistering): Released all slaves [ 3113.462818][T13338] hsr_slave_0: left promiscuous mode [ 3113.478465][T13338] hsr_slave_1: left promiscuous mode [ 3113.508094][T13338] veth1_macvtap: left promiscuous mode [ 3113.508476][T13338] veth0_macvtap: left promiscuous mode [ 3113.509044][T13338] veth1_vlan: left promiscuous mode [ 3113.509364][T13338] veth0_vlan: left promiscuous mode [ 3116.736709][ T30] INFO: task kworker/0:53:19011 blocked for more than 430 seconds. [ 3116.737242][ T30] Not tainted syzkaller #0 [ 3116.737466][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3116.737710][ T30] task:kworker/0:53 state:D stack:0 pid:19011 tgid:19011 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.738395][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.739225][ T30] Call trace: [ 3116.739590][ T30] [<81a631d4>] (__schedule) from [<81a64168>] (schedule+0x2c/0x130) [ 3116.739920][ T30] r10:ea561d84 r9:00000002 r8:60000113 r7:829171a0 r6:ea561d8c r5:8423d400 [ 3116.740074][ T30] r4:8423d400 [ 3116.740281][ T30] [<81a6413c>] (schedule) from [<81a64550>] (schedule_preempt_disabled+0x18/0x24) [ 3116.740445][ T30] r5:8423d400 r4:8291719c [ 3116.740527][ T30] [<81a64538>] (schedule_preempt_disabled) from [<81a67100>] (__mutex_lock.constprop.0+0x350/0xa24) [ 3116.740660][ T30] [<81a66db0>] (__mutex_lock.constprop.0) from [<81a678a8>] (__mutex_lock_slowpath+0x14/0x18) [ 3116.740808][ T30] r10:8280c960 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea561e08 [ 3116.740881][ T30] r4:00000000 [ 3116.741032][ T30] [<81a67894>] (__mutex_lock_slowpath) from [<81a678e8>] (mutex_lock+0x3c/0x40) [ 3116.741228][ T30] [<81a678ac>] (mutex_lock) from [<804e9dd4>] (_vm_unmap_aliases+0x68/0x240) [ 3116.741373][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.741546][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85c04340 [ 3116.741664][ T30] r4:00000000 [ 3116.741788][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.741913][ T30] r9:83018405 r8:8423d400 r7:00000000 r6:83018400 r5:00001000 r4:7f296000 [ 3116.742024][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.742128][ T30] r5:00001000 r4:dfa61000 [ 3116.742191][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.742283][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.742433][ T30] r5:84de9f8c r4:858f4d00 [ 3116.742612][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.742774][ T30] r7:dddcfd80 r6:83018400 r5:84de9f8c r4:858f4d00 [ 3116.742869][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.743016][ T30] r10:61c88647 r9:8423d400 r8:858f4d2c r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.743098][ T30] r4:858f4d00 [ 3116.743240][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.743404][ T30] r10:00000000 r9:858f4d00 r8:80278fec r7:ea495e60 r6:858f4a80 r5:8423d400 [ 3116.743567][ T30] r4:00000001 [ 3116.743677][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.743885][ T30] Exception stack(0xea561fb0 to 0xea561ff8) [ 3116.744102][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 3116.744259][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.744389][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.744542][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.744616][ T30] r4:86161b00 [ 3116.745130][ T30] INFO: task kworker/0:53:19011 is blocked on a mutex likely owned by task kworker/0:26:15316. [ 3116.745350][ T30] task:kworker/0:26 state:R running task stack:0 pid:15316 tgid:15316 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.745793][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.746058][ T30] Call trace: [ 3116.806835][ T30] [<81a631d4>] (__schedule) from [<81a6459c>] (preempt_schedule_irq+0x40/0xa8) [ 3116.806916][ T30] r10:8280c9b4 r9:8321b000 r8:80200c04 r7:eab95d54 r6:ffffffff r5:8321b000 [ 3116.806926][ T30] r4:00000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3116.806934][ T30] [<81a6455c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 3116.806990][ T30] Exception stack(0xeab95d20 to 0xeab95d68) [ 3116.807033][ T30] 5d20: a9707000 ea8cf000 00000001 80239bf8 7f22e000 00000001 82acb1c4 82aca5a0 [ 3116.807051][ T30] 5d40: 7f22e000 ea8cf000 8280c9b4 eab95d9c eab95da0 eab95d70 80230af0 80239c10 [ 3116.807061][ T30] 5d60: 800b0113 ffffffff [ 3116.807072][ T30] r5:800b0113 r4:80239c10 [ 3116.807079][ T30] [<80230a8c>] (flush_tlb_kernel_range) from [<804e9b98>] (__purge_vmap_area_lazy+0x284/0x458) [ 3116.807109][ T30] r4:82acb1e4 [ 3116.807115][ T30] [<804e9914>] (__purge_vmap_area_lazy) from [<804e9f50>] (_vm_unmap_aliases+0x1e4/0x240) [ 3116.807143][ T30] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:eab95dc0 r5:eab95e08 [ 3116.807151][ T30] r4:eab95dc0 [ 3116.807158][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.807185][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85dd0600 [ 3116.807193][ T30] r4:00000000 [ 3116.807200][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.807237][ T30] r9:83018405 r8:8321b000 r7:00000000 r6:83018400 r5:00001000 r4:7f2d6000 [ 3116.807246][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.807275][ T30] r5:00001000 r4:e4163000 [ 3116.807282][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.807321][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.807351][ T30] r5:84e3878c r4:85d45d00 [ 3116.807358][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.807388][ T30] r7:dddcfd80 r6:83018400 r5:84e3878c r4:85d45d00 [ 3116.807395][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.807423][ T30] r10:61c88647 r9:8321b000 r8:85d45d2c r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.807432][ T30] r4:85d45d00 [ 3116.807438][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.807467][ T30] r10:00000000 r9:85d45d00 r8:80278fec r7:eaabde60 r6:85d45d80 r5:8321b000 [ 3116.807498][ T30] r4:00000001 [ 3116.807531][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.807560][ T30] Exception stack(0xeab95fb0 to 0xeab95ff8) [ 3116.807572][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 3116.807586][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.807600][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.807615][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.807623][ T30] r4:86777c40 [ 3116.807745][ T30] INFO: task kworker/1:51:19111 blocked for more than 430 seconds. [ 3116.807769][ T30] Not tainted syzkaller #0 [ 3116.807779][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3116.807787][ T30] task:kworker/1:51 state:D stack:0 pid:19111 tgid:19111 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.807823][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.807870][ T30] Call trace: [ 3116.807917][ T30] [<81a631d4>] (__schedule) from [<81a64168>] (schedule+0x2c/0x130) [ 3116.807950][ T30] r10:ea695d84 r9:00000002 r8:60000113 r7:829171a0 r6:ea695d8c r5:8423bc00 [ 3116.807959][ T30] r4:8423bc00 [ 3116.807965][ T30] [<81a6413c>] (schedule) from [<81a64550>] (schedule_preempt_disabled+0x18/0x24) [ 3116.807989][ T30] r5:8423bc00 r4:8291719c [ 3116.807996][ T30] [<81a64538>] (schedule_preempt_disabled) from [<81a67100>] (__mutex_lock.constprop.0+0x350/0xa24) [ 3116.808037][ T30] [<81a66db0>] (__mutex_lock.constprop.0) from [<81a678a8>] (__mutex_lock_slowpath+0x14/0x18) [ 3116.808069][ T30] r10:8280c960 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea695e08 [ 3116.808089][ T30] r4:00000000 [ 3116.808097][ T30] [<81a67894>] (__mutex_lock_slowpath) from [<81a678e8>] (mutex_lock+0x3c/0x40) [ 3116.808120][ T30] [<81a678ac>] (mutex_lock) from [<804e9dd4>] (_vm_unmap_aliases+0x68/0x240) [ 3116.808142][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.808168][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:860aed00 [ 3116.808176][ T30] r4:00000000 [ 3116.808182][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.808208][ T30] r9:83018605 r8:8423bc00 r7:00000000 r6:83018600 r5:00001000 r4:7f26c000 [ 3116.808215][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.808247][ T30] r5:00001000 r4:df849000 [ 3116.808260][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.808294][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.808344][ T30] r5:86af2b8c r4:8578bd00 [ 3116.808358][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.808437][ T30] r7:ddde3d80 r6:83018600 r5:86af2b8c r4:8578bd00 [ 3116.808449][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.808484][ T30] r10:61c88647 r9:8423bc00 r8:8578bd2c r7:82804d40 r6:ddde3d80 r5:ddde3da0 [ 3116.808499][ T30] r4:8578bd00 [ 3116.808513][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.808596][ T30] r10:00000000 r9:8578bd00 r8:80278fec r7:ea5a1e60 r6:8578bb00 r5:8423bc00 [ 3116.808612][ T30] r4:00000001 [ 3116.808731][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.809008][ T30] Exception stack(0xea695fb0 to 0xea695ff8) [ 3116.809042][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 3116.809071][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.809133][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.809164][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.809208][ T30] r4:86b82b80 [ 3116.809409][ T30] INFO: task kworker/1:51:19111 is blocked on a mutex likely owned by task kworker/0:26:15316. [ 3116.809427][ T30] task:kworker/0:26 state:R running task stack:0 pid:15316 tgid:15316 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.809518][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.809543][ T30] Call trace: [ 3116.809554][ T30] [<81a631d4>] (__schedule) from [<81a6459c>] (preempt_schedule_irq+0x40/0xa8) [ 3116.809588][ T30] r10:8280c9b4 r9:8321b000 r8:80200c04 r7:eab95d54 r6:ffffffff r5:8321b000 [ 3116.809596][ T30] r4:00000000 [ 3116.809603][ T30] [<81a6455c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 3116.809623][ T30] Exception stack(0xeab95d20 to 0xeab95d68) [ 3116.809659][ T30] 5d20: a9707000 ea8cf000 00000001 80239bf8 7f22e000 00000001 82acb1c4 82aca5a0 [ 3116.809700][ T30] 5d40: 7f22e000 ea8cf000 8280c9b4 eab95d9c eab95da0 eab95d70 80230af0 80239c10 [ 3116.809717][ T30] 5d60: 800b0113 ffffffff [ 3116.809727][ T30] r5:800b0113 r4:80239c10 [ 3116.809733][ T30] [<80230a8c>] (flush_tlb_kernel_range) from [<804e9b98>] (__purge_vmap_area_lazy+0x284/0x458) [ 3116.809760][ T30] r4:82acb1e4 [ 3116.809766][ T30] [<804e9914>] (__purge_vmap_area_lazy) from [<804e9f50>] (_vm_unmap_aliases+0x1e4/0x240) [ 3116.809816][ T30] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:eab95dc0 r5:eab95e08 [ 3116.809827][ T30] r4:eab95dc0 [ 3116.809833][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.809860][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85dd0600 [ 3116.809868][ T30] r4:00000000 [ 3116.809892][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.809922][ T30] r9:83018405 r8:8321b000 r7:00000000 r6:83018400 r5:00001000 r4:7f2d6000 [ 3116.809929][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.809953][ T30] r5:00001000 r4:e4163000 [ 3116.809959][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.809983][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.810008][ T30] r5:84e3878c r4:85d45d00 [ 3116.810015][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.810061][ T30] r7:dddcfd80 r6:83018400 r5:84e3878c r4:85d45d00 [ 3116.810069][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.810100][ T30] r10:61c88647 r9:8321b000 r8:85d45d2c r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.810108][ T30] r4:85d45d00 [ 3116.810114][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.810141][ T30] r10:00000000 r9:85d45d00 r8:80278fec r7:eaabde60 r6:85d45d80 r5:8321b000 [ 3116.810149][ T30] r4:00000001 [ 3116.810155][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.810174][ T30] Exception stack(0xeab95fb0 to 0xeab95ff8) [ 3116.810186][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 3116.810200][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.810237][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.810256][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.810265][ T30] r4:86777c40 [ 3116.810280][ T30] INFO: task kworker/0:61:19144 blocked for more than 430 seconds. [ 3116.810293][ T30] Not tainted syzkaller #0 [ 3116.810302][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3116.810308][ T30] task:kworker/0:61 state:D stack:0 pid:19144 tgid:19144 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.810333][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.810354][ T30] Call trace: [ 3116.810365][ T30] [<81a631d4>] (__schedule) from [<81a64168>] (schedule+0x2c/0x130) [ 3116.810395][ T30] r10:e0025d84 r9:00000002 r8:60000013 r7:829171a0 r6:e0025d8c r5:86516000 [ 3116.810403][ T30] r4:86516000 [ 3116.810409][ T30] [<81a6413c>] (schedule) from [<81a64550>] (schedule_preempt_disabled+0x18/0x24) [ 3116.810434][ T30] r5:86516000 r4:8291719c [ 3116.810441][ T30] [<81a64538>] (schedule_preempt_disabled) from [<81a67100>] (__mutex_lock.constprop.0+0x350/0xa24) [ 3116.810464][ T30] [<81a66db0>] (__mutex_lock.constprop.0) from [<81a678a8>] (__mutex_lock_slowpath+0x14/0x18) [ 3116.810493][ T30] r10:8280c960 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0025e08 [ 3116.810501][ T30] r4:00000000 [ 3116.810507][ T30] [<81a67894>] (__mutex_lock_slowpath) from [<81a678e8>] (mutex_lock+0x3c/0x40) [ 3116.810529][ T30] [<81a678ac>] (mutex_lock) from [<804e9dd4>] (_vm_unmap_aliases+0x68/0x240) [ 3116.810567][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.810597][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85c04040 [ 3116.810606][ T30] r4:00000000 [ 3116.810611][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.810638][ T30] r9:83018405 r8:86516000 r7:00000000 r6:83018400 r5:00001000 r4:7f298000 [ 3116.810656][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.810683][ T30] r5:00001000 r4:dfa6f000 [ 3116.810689][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.810738][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.810766][ T30] r5:85865f8c r4:858f4480 [ 3116.810772][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.810800][ T30] r7:dddcfd80 r6:83018400 r5:85865f8c r4:858f4480 [ 3116.810806][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.810855][ T30] r10:61c88647 r9:86516000 r8:858f44ac r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.810871][ T30] r4:858f4480 [ 3116.810878][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.810919][ T30] r10:00000000 r9:858f4480 r8:80278fec r7:e0021e60 r6:858e3700 r5:86516000 [ 3116.810930][ T30] r4:00000001 [ 3116.810945][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.810966][ T30] Exception stack(0xe0025fb0 to 0xe0025ff8) [ 3116.810992][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 3116.811007][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.811020][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.811034][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.811064][ T30] r4:866e2b00 [ 3116.811202][ T30] INFO: task kworker/0:61:19144 is blocked on a mutex likely owned by task kworker/0:26:15316. [ 3116.811216][ T30] task:kworker/0:26 state:R running task stack:0 pid:15316 tgid:15316 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.811292][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.811347][ T30] Call trace: [ 3116.811359][ T30] [<81a631d4>] (__schedule) from [<81a6459c>] (preempt_schedule_irq+0x40/0xa8) [ 3116.811392][ T30] r10:8280c9b4 r9:8321b000 r8:80200c04 r7:eab95d54 r6:ffffffff r5:8321b000 [ 3116.811401][ T30] r4:00000000 [ 3116.811407][ T30] [<81a6455c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 3116.811448][ T30] Exception stack(0xeab95d20 to 0xeab95d68) [ 3116.811470][ T30] 5d20: a9707000 ea8cf000 00000001 80239bf8 7f22e000 00000001 82acb1c4 82aca5a0 [ 3116.811656][ T30] 5d40: 7f22e000 ea8cf000 8280c9b4 eab95d9c eab95da0 eab95d70 80230af0 80239c10 [ 3116.811666][ T30] 5d60: 800b0113 ffffffff [ 3116.811676][ T30] r5:800b0113 r4:80239c10 [ 3116.811683][ T30] [<80230a8c>] (flush_tlb_kernel_range) from [<804e9b98>] (__purge_vmap_area_lazy+0x284/0x458) [ 3116.811724][ T30] r4:82acb1e4 [ 3116.811734][ T30] [<804e9914>] (__purge_vmap_area_lazy) from [<804e9f50>] (_vm_unmap_aliases+0x1e4/0x240) [ 3116.811771][ T30] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:eab95dc0 r5:eab95e08 [ 3116.811782][ T30] r4:eab95dc0 [ 3116.811788][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.811815][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85dd0600 [ 3116.811823][ T30] r4:00000000 [ 3116.811830][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.811858][ T30] r9:83018405 r8:8321b000 r7:00000000 r6:83018400 r5:00001000 r4:7f2d6000 [ 3116.811868][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.811894][ T30] r5:00001000 r4:e4163000 [ 3116.811900][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.811923][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.811959][ T30] r5:84e3878c r4:85d45d00 [ 3116.811968][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.811998][ T30] r7:dddcfd80 r6:83018400 r5:84e3878c r4:85d45d00 [ 3116.812017][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.812049][ T30] r10:61c88647 r9:8321b000 r8:85d45d2c r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.812057][ T30] r4:85d45d00 [ 3116.812063][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.812091][ T30] r10:00000000 r9:85d45d00 r8:80278fec r7:eaabde60 r6:85d45d80 r5:8321b000 [ 3116.812099][ T30] r4:00000001 [ 3116.812104][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.812123][ T30] Exception stack(0xeab95fb0 to 0xeab95ff8) [ 3116.812152][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 3116.812167][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.812179][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.812196][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.812210][ T30] r4:86777c40 [ 3116.812257][ T30] INFO: task kworker/0:70:19410 blocked for more than 430 seconds. [ 3116.812294][ T30] Not tainted syzkaller #0 [ 3116.812311][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3116.812318][ T30] task:kworker/0:70 state:D stack:0 pid:19410 tgid:19410 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.812343][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.812382][ T30] Call trace: [ 3116.812416][ T30] [<81a631d4>] (__schedule) from [<81a64168>] (schedule+0x2c/0x130) [ 3116.812471][ T30] r10:e4179d84 r9:00000002 r8:60000113 r7:829171a0 r6:e4179d8c r5:86a08000 [ 3116.812490][ T30] r4:86a08000 [ 3116.812504][ T30] [<81a6413c>] (schedule) from [<81a64550>] (schedule_preempt_disabled+0x18/0x24) [ 3116.812554][ T30] r5:86a08000 r4:8291719c [ 3116.812569][ T30] [<81a64538>] (schedule_preempt_disabled) from [<81a67100>] (__mutex_lock.constprop.0+0x350/0xa24) [ 3116.812634][ T30] [<81a66db0>] (__mutex_lock.constprop.0) from [<81a678a8>] (__mutex_lock_slowpath+0x14/0x18) [ 3116.812673][ T30] r10:8280c960 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e4179e08 [ 3116.812681][ T30] r4:00000000 [ 3116.812698][ T30] [<81a67894>] (__mutex_lock_slowpath) from [<81a678e8>] (mutex_lock+0x3c/0x40) [ 3116.812739][ T30] [<81a678ac>] (mutex_lock) from [<804e9dd4>] (_vm_unmap_aliases+0x68/0x240) [ 3116.812763][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.812790][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85dd0e00 [ 3116.812811][ T30] r4:00000000 [ 3116.812818][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.812845][ T30] r9:83018405 r8:86a08000 r7:00000000 r6:83018400 r5:00001000 r4:7f2d4000 [ 3116.812853][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.812876][ T30] r5:00001000 r4:e4161000 [ 3116.812900][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.812926][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.812952][ T30] r5:868d4b8c r4:861a7580 [ 3116.812958][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.813016][ T30] r7:dddcfd80 r6:83018400 r5:868d4b8c r4:861a7580 [ 3116.813033][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.813078][ T30] r10:61c88647 r9:86a08000 r8:861a75ac r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.813089][ T30] r4:861a7580 [ 3116.813114][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.813152][ T30] r10:00000000 r9:861a7580 r8:80278fec r7:ea309e60 r6:861a7680 r5:86a08000 [ 3116.813160][ T30] r4:00000001 [ 3116.813166][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.813185][ T30] Exception stack(0xe4179fb0 to 0xe4179ff8) [ 3116.813197][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 3116.813211][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.813224][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.813244][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.813252][ T30] r4:85d90900 [ 3116.813393][ T30] INFO: task kworker/0:70:19410 is blocked on a mutex likely owned by task kworker/0:26:15316. [ 3116.813421][ T30] task:kworker/0:26 state:R running task stack:0 pid:15316 tgid:15316 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 3116.813469][ T30] Workqueue: events bpf_prog_free_deferred [ 3116.813499][ T30] Call trace: [ 3116.813509][ T30] [<81a631d4>] (__schedule) from [<81a6459c>] (preempt_schedule_irq+0x40/0xa8) [ 3116.813575][ T30] r10:8280c9b4 r9:8321b000 r8:80200c04 r7:eab95d54 r6:ffffffff r5:8321b000 [ 3116.813601][ T30] r4:00000000 [ 3116.813609][ T30] [<81a6455c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 3116.813750][ T30] Exception stack(0xeab95d20 to 0xeab95d68) [ 3116.813772][ T30] 5d20: a9707000 ea8cf000 00000001 80239bf8 7f22e000 00000001 82acb1c4 82aca5a0 [ 3116.813787][ T30] 5d40: 7f22e000 ea8cf000 8280c9b4 eab95d9c eab95da0 eab95d70 80230af0 80239c10 [ 3116.813798][ T30] 5d60: 800b0113 ffffffff [ 3116.813809][ T30] r5:800b0113 r4:80239c10 [ 3116.813839][ T30] [<80230a8c>] (flush_tlb_kernel_range) from [<804e9b98>] (__purge_vmap_area_lazy+0x284/0x458) [ 3116.813868][ T30] r4:82acb1e4 [ 3116.813874][ T30] [<804e9914>] (__purge_vmap_area_lazy) from [<804e9f50>] (_vm_unmap_aliases+0x1e4/0x240) [ 3116.813912][ T30] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:eab95dc0 r5:eab95e08 [ 3116.813922][ T30] r4:eab95dc0 [ 3116.813928][ T30] [<804e9d6c>] (_vm_unmap_aliases) from [<804edbb4>] (vfree+0x16c/0x210) [ 3116.813970][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85dd0600 [ 3116.813980][ T30] r4:00000000 [ 3116.813986][ T30] [<804eda48>] (vfree) from [<805588a0>] (execmem_free+0x30/0x50) [ 3116.814014][ T30] r9:83018405 r8:8321b000 r7:00000000 r6:83018400 r5:00001000 r4:7f2d6000 [ 3116.814021][ T30] [<80558870>] (execmem_free) from [<803c5dd0>] (bpf_jit_free_exec+0x10/0x14) [ 3116.814045][ T30] r5:00001000 r4:e4163000 [ 3116.814051][ T30] [<803c5dc0>] (bpf_jit_free_exec) from [<803c61b0>] (bpf_jit_free+0x68/0xe4) [ 3116.814074][ T30] [<803c6148>] (bpf_jit_free) from [<803c7258>] (bpf_prog_free_deferred+0x140/0x158) [ 3116.814129][ T30] r5:84e3878c r4:85d45d00 [ 3116.814148][ T30] [<803c7118>] (bpf_prog_free_deferred) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 3116.814200][ T30] r7:dddcfd80 r6:83018400 r5:84e3878c r4:85d45d00 [ 3116.814255][ T30] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 3116.814287][ T30] r10:61c88647 r9:8321b000 r8:85d45d2c r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 3116.814299][ T30] r4:85d45d00 [ 3116.814305][ T30] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.814334][ T30] r10:00000000 r9:85d45d00 r8:80278fec r7:eaabde60 r6:85d45d80 r5:8321b000 [ 3116.814343][ T30] r4:00000001 [ 3116.814349][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.814368][ T30] Exception stack(0xeab95fb0 to 0xeab95ff8) [ 3116.814384][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 3116.814398][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.814411][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.814425][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.814433][ T30] r4:86777c40 [ 3116.815091][ T30] NMI backtrace for cpu 0 [ 3116.815342][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 3116.815445][ T30] Hardware name: ARM-Versatile Express [ 3116.815515][ T30] Call trace: [ 3116.815571][ T30] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 3116.815624][ T30] r7:00000000 r6:000b0113 r5:600b0193 r4:822523c8 [ 3116.815637][ T30] [<80201b08>] (show_stack) from [<8021f93c>] (dump_stack_lvl+0x70/0x7c) [ 3116.815662][ T30] [<8021f8cc>] (dump_stack_lvl) from [<8021f960>] (dump_stack+0x18/0x1c) [ 3116.815686][ T30] r5:00000000 r4:00000001 [ 3116.815692][ T30] [<8021f948>] (dump_stack) from [<81a4cdec>] (nmi_cpu_backtrace+0x160/0x17c) [ 3116.815716][ T30] [<81a4cc8c>] (nmi_cpu_backtrace) from [<81a4cf38>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 3116.815742][ T30] r7:00000000 r6:8280c690 r5:8281ae34 r4:ffffffff [ 3116.815748][ T30] [<81a4ce08>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 3116.815779][ T30] r9:8281ba28 r8:8280c810 r7:00044c40 r6:00007e71 r5:82abf7d4 r4:85755d0c [ 3116.815786][ T30] [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037f940>] (watchdog+0x5d0/0x850) [ 3116.815814][ T30] [<8037f370>] (watchdog) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.815843][ T30] r10:00000000 r9:00000000 r8:8037f370 r7:83844000 r6:83844000 r5:832e2400 [ 3116.815878][ T30] r4:00000001 [ 3116.815914][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.815935][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 3116.815947][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 3116.815980][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.816001][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.816016][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.816023][ T30] r4:833c9900 [ 3116.816150][ T30] Sending NMI from CPU 0 to CPUs 1: [ 3116.817393][ C1] NMI backtrace for cpu 1 [ 3116.817572][ C1] CPU: 1 UID: 0 PID: 2819 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT [ 3116.817629][ C1] Hardware name: ARM-Versatile Express [ 3116.817682][ C1] PC is at nbcon_kthread_func+0x188/0x2a4 [ 3116.817765][ C1] LR is at console_srcu_read_lock+0x14/0x1c [ 3116.817816][ C1] pc : [<802e3800>] lr : [<802dd06c>] psr: 80090113 [ 3116.817847][ C1] sp : eade1ef8 ip : 00000000 fp : eade1f6c [ 3116.817879][ C1] r10: 82959554 r9 : 00000001 r8 : 00000000 [ 3116.817927][ C1] r7 : 00000117 r6 : 8280c690 r5 : 83aab000 r4 : 829594b8 [ 3116.817967][ C1] r3 : 00000003 r2 : 826b8400 r1 : 0000127e r0 : 00000000 [ 3116.818083][ C1] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 3116.818160][ C1] Control: 30c5387d Table: 84d68fc0 DAC: 00000000 [ 3116.818248][ C1] Call trace: [ 3116.818298][ C1] [<802e3678>] (nbcon_kthread_func) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.818364][ C1] r10:00000000 r9:829594b8 r8:802e3678 r7:844aa180 r6:844aa180 r5:83aab000 [ 3116.818386][ C1] r4:00000001 [ 3116.818400][ C1] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.818442][ C1] Exception stack(0xeade1fb0 to 0xeade1ff8) [ 3116.818468][ C1] 1fa0: 00000000 00000000 00000000 00000000 [ 3116.818503][ C1] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.818532][ C1] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.818559][ C1] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.818575][ C1] r4:848cfa80 [ 3116.887448][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3116.949026][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 3116.949439][ T30] Hardware name: ARM-Versatile Express [ 3116.949712][ T30] Call trace: [ 3116.949976][ T30] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 3116.950409][ T30] r7:822530ec r6:832e2400 r5:00000000 r4:822523c8 [ 3116.950695][ T30] [<80201b08>] (show_stack) from [<8021f920>] (dump_stack_lvl+0x54/0x7c) [ 3116.951076][ T30] [<8021f8cc>] (dump_stack_lvl) from [<8021f960>] (dump_stack+0x18/0x1c) [ 3116.951452][ T30] r5:00000000 r4:82a78d18 [ 3116.951668][ T30] [<8021f948>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8) [ 3116.952025][ T30] [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8) [ 3116.952413][ T30] r7:00044c40 [ 3116.952599][ T30] [<80202800>] (panic) from [<8037f780>] (watchdog+0x410/0x850) [ 3116.952948][ T30] r3:00000001 r2:00000000 r1:00000000 r0:822530ec [ 3116.953249][ T30] [<8037f370>] (watchdog) from [<8028020c>] (kthread+0x12c/0x280) [ 3116.953620][ T30] r10:00000000 r9:00000000 r8:8037f370 r7:83844000 r6:83844000 r5:832e2400 [ 3116.954074][ T30] r4:00000001 [ 3116.954239][ T30] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3116.954652][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 3116.954931][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 3116.955283][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3116.955660][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3116.955968][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 3116.956416][ T30] r4:833c9900 [ 3116.958526][ T30] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:36:13 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00010000 R03=84eb6c00 R04=8280cbfc R05=df80a000 R06=826c1388 R07=df80a00c R08=00000000 R09=01dff062 R10=00000001 R11=df801fd4 R12=df801f68 R13=df801fb8 R14=81a6cf50 R15=802012c8 PSR=20010193 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=69018287 d01=6901828700000000 s04=00f80000 s05=00f80000 d02=00f8000000f80000 s06=00000000 s07=00000000 d03=0000000000000000 s08=c0300800 s09=00000000 d04=00000000c0300800 s10=00000000 s11=00000000 d05=0000000000000000 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=840bdc40 R01=00000035 R02=eadd7000 R03=eadd7018 R04=8339603c R05=840bdc40 R06=80a8ed64 R07=8339603c R08=80a8ed64 R09=00000067 R10=00000b14 R11=eade1e24 R12=00000002 R13=eade1e18 R14=82959484 R15=80a8ed74 PSR=80090193 N--- A S svc32 s00=2073756f s01=65646f6d d00=65646f6d2073756f s02=315f6576 s03=52203a29 d01=52203a29315f6576 s04=6968205d s05=65672d64 d02=65672d646968205d s06=6972656e s07=30302063 d03=303020636972656e s08=303a3330 s09=3a343030 d04=3a343030303a3330 s10=30303030 s11=3030302e d05=3030302e30303030 s12=75203a43 s13=6f6e6b6e d06=6f6e6b6e75203a43 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000