last executing test programs: 11m5.897087546s ago: executing program 1 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 10m42.347455894s ago: executing program 1 (id=2044): syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) clock_gettime(0xffffffc3, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) flistxattr(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 10m18.110481575s ago: executing program 1 (id=2049): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 10m17.614535502s ago: executing program 1 (id=2050): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x65) 10m17.468246383s ago: executing program 1 (id=2051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) tgkill(0x0, 0x0, 0x3c) 10m17.077724102s ago: executing program 1 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) prlimit64(0x0, 0x5, &(0x7f00000001c0)={0x400, 0x400}, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 9m31.359870535s ago: executing program 32 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) prlimit64(0x0, 0x5, &(0x7f00000001c0)={0x400, 0x400}, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 9m20.636050485s ago: executing program 2 (id=2057): r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2001, 0x0) 9m20.448850469s ago: executing program 2 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000081", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 9m20.199913337s ago: executing program 2 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) 8m34.529282946s ago: executing program 33 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) 7m35.048336268s ago: executing program 3 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 7m34.688470405s ago: executing program 3 (id=2081): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 7m34.208520402s ago: executing program 3 (id=2082): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000400000078dec9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 7m34.018849356s ago: executing program 3 (id=2083): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410103ef9220570521201a7401020301090224000101"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4}) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) 7m32.801424628s ago: executing program 3 (id=2084): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x600002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) 7m9.6079845s ago: executing program 3 (id=2087): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="8fae18ae8c41246be32a4522ab1868c96cf8a670cd598e170d75d746b2d1b2ee752c7843afb50c46a04d6c89ebca4d6c9c4c91997a7fb9f927785e91284f904e3bbae31fcb229c2e7f3943a24d4e4f141bff56832fad0d20d0a86af1e255b3966da6babf41fe1e", 0x67, 0x20008880, &(0x7f00000000c0)={0x11, 0x4, r7, 0x1, 0x69, 0x6, @random="495d77dd6f96"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb10000110000", 0x16, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 6m23.896426732s ago: executing program 34 (id=2087): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="8fae18ae8c41246be32a4522ab1868c96cf8a670cd598e170d75d746b2d1b2ee752c7843afb50c46a04d6c89ebca4d6c9c4c91997a7fb9f927785e91284f904e3bbae31fcb229c2e7f3943a24d4e4f141bff56832fad0d20d0a86af1e255b3966da6babf41fe1e", 0x67, 0x20008880, &(0x7f00000000c0)={0x11, 0x4, r7, 0x1, 0x69, 0x6, @random="495d77dd6f96"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb10000110000", 0x16, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 6m23.543401588s ago: executing program 0 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 6m23.230114282s ago: executing program 0 (id=2095): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r6, 0x10001, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd7000000000", @ANYBLOB="0b000080976b640868603000ad3737"], 0x2c}], 0x1}, 0x0) 5m44.358675307s ago: executing program 0 (id=2098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r4, 0x2}, 0x20) mount$binderfs(0x0, 0x0, &(0x7f0000000040), 0x5f42080cefc7bce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000580)={"71683af1803bd83162d2c3d0059984a0", 0x0, 0x0, {0x5, 0x10001}, {0x5, 0x5}, 0xc6, [0x7, 0x6, 0x7463, 0x6, 0x7, 0xfffffffffffffffa, 0x4, 0x8, 0x4, 0x9, 0x4, 0x5590, 0x0, 0x3, 0x0, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000680)={{r7}, r8, 0x8, @inherit={0x80, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x8, {0x29, 0x77, 0x800, 0x8, 0xa2}, [0x8, 0x200, 0x81, 0x0, 0x1000, 0x4, 0x0]}}, @name="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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) 5m42.189553041s ago: executing program 4 (id=2101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000ffdbdf25570000000c0099000b00000021f8ff00060095000500000006009500080000000600950001800000060095000b00000006009500080000fb05009500f700000006009500ff000000060095000700000006009500080000000600958078360000091515a1a82de7484c9c51173cc7a469dbcaaca2"], 0x70}}, 0x850) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r5 = socket(0xf, 0x3, 0x2) write(r5, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3e) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r5, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m36.11489066s ago: executing program 0 (id=2102): add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 5m35.608386948s ago: executing program 0 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m29.179687884s ago: executing program 4 (id=2104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1001}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 5m10.535913192s ago: executing program 4 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 5m10.447769488s ago: executing program 4 (id=2106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 5m10.329507747s ago: executing program 4 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 5m9.979081174s ago: executing program 4 (id=2108): socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m54.954279718s ago: executing program 0 (id=2109): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3d, &(0x7f0000000140)}, 0x0) epoll_create(0x69b) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r7, 0x0, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x8) 4m24.761295718s ago: executing program 35 (id=2108): socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m9.64174033s ago: executing program 36 (id=2109): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3d, &(0x7f0000000140)}, 0x0) epoll_create(0x69b) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r7, 0x0, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x8) 3m17.948509414s ago: executing program 6 (id=2128): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x1fe) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$TIPC_NL_NET_SET(r3, 0x0, 0x400c050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m49.017155669s ago: executing program 6 (id=2143): syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 2m26.739122311s ago: executing program 6 (id=2147): mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00"], 0x5c}}, 0x0) 2m11.38968235s ago: executing program 5 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) 2m11.097701942s ago: executing program 5 (id=2150): ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) 2m10.640407027s ago: executing program 5 (id=2151): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2m10.33040822s ago: executing program 5 (id=2152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x138, 0x1a, 0xffffffffffffffff, 0x4070bd28, 0x3, {{@in=@private=0xa010101, @in6=@mcast2, 0xfe, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x84d4, 0x6c}, @in=@broadcast, {0x100000000, 0x0, 0x3d0c, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0xffffffff, 0x0, 0xfffffffffffffffc, 0xa3}, {0x936d, 0x3d49, 0x4000}, 0x3, 0x3503, 0xa, 0x1, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 2m9.249198142s ago: executing program 6 (id=2153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)=0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000380), 0x0) 2m8.100504509s ago: executing program 6 (id=2154): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 2m7.629305464s ago: executing program 6 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m46.62676082s ago: executing program 5 (id=2156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x2, 0x6361, 0x5, 0xfffffff0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c864}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1m46.3680226s ago: executing program 5 (id=2157): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m22.27034594s ago: executing program 37 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m13.441344676s ago: executing program 7 (id=2158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) 1m13.339810584s ago: executing program 7 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 1m1.269089996s ago: executing program 38 (id=2157): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 48.9575161s ago: executing program 7 (id=2161): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r5 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180900"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070000008500000021000000b700000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868010000000000000000", 0x0, 0xe8a1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) 42.600352205s ago: executing program 8 (id=2160): r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6e96}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x0, 0x7, 0xffff, 0xb, 0x3e0c, 0x300b, 0xfffffffd, 0x1ff, 0x7, 0x200, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 42.12975075s ago: executing program 8 (id=2162): connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0x4e22, 0x100007, @remote, 0xa}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) 25.910703633s ago: executing program 7 (id=2163): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) 16.608360458s ago: executing program 8 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioprio_get$uid(0x3, 0xee01) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket(0x10, 0x803, 0x0) 0s ago: executing program 7 (id=2165): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}], 0x1, 0x20004810) kernel console output (not intermixed with test programs): a52dfa8 to 0xea52dff0) [ 535.812688][ T8330] dfa0: 0000000f 76fadf30 00000005 76fadf30 0000000f 00000000 [ 535.812764][ T8330] dfc0: 0000000f 76fadf30 00000005 00000003 00300000 00000000 00006364 76fae0bc [ 535.812851][ T8330] dfe0: 00000158 76faded0 000d81d0 001303dc [ 537.073376][ T723] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 537.203100][ T723] usb 1-1: device descriptor read/64, error -71 [ 537.443345][ T723] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 537.582753][ T723] usb 1-1: device descriptor read/64, error -71 [ 537.694303][ T723] usb usb1-port1: attempt power cycle [ 538.043637][ T723] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 538.071398][ T723] usb 1-1: device descriptor read/8, error -71 [ 538.303594][ T723] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 538.328069][ T723] usb 1-1: device descriptor read/8, error -71 [ 538.433279][ T723] usb usb1-port1: unable to enumerate USB device [ 542.229357][ T29] audit: type=1400 audit(542.130:369): avc: denied { write } for pid=8362 comm="syz.1.1285" path="socket:[16813]" dev="sockfs" ino=16813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 546.921193][ T8378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=8378 comm=syz.0.1289 [ 547.646936][ T8388] FAULT_INJECTION: forcing a failure. [ 547.646936][ T8388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.648275][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.0.1294 Not tainted syzkaller #0 PREEMPT [ 547.648369][ T8388] Hardware name: ARM-Versatile Express [ 547.648426][ T8388] Call trace: [ 547.648461][ T8388] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 547.648569][ T8388] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 547.648593][ T8388] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 547.648645][ T8388] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 547.648699][ T8388] r5:84235400 r4:82918864 [ 547.648714][ T8388] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 547.648765][ T8388] [<809869b4>] (should_fail_ex) from [<8052ee94>] (should_fail_alloc_page+0x68/0x74) [ 547.648840][ T8388] r8:00000001 r7:00000000 r6:00000000 r5:00140cca r4:ea9a5cb8 [ 547.648856][ T8388] [<8052ee2c>] (should_fail_alloc_page) from [<804f6fa4>] (prepare_alloc_pages.constprop.0+0x94/0x1b0) [ 547.648913][ T8388] [<804f6f10>] (prepare_alloc_pages.constprop.0) from [<804ff56c>] (__alloc_frozen_pages_noprof+0xac/0x1104) [ 547.648973][ T8388] r10:00000000 r9:00000000 r8:84235400 r7:00000000 r6:00140cca r5:84235400 [ 547.648998][ T8388] r4:00000000 r3:ea9a5cb8 [ 547.649012][ T8388] [<804ff4c0>] (__alloc_frozen_pages_noprof) from [<80500638>] (__folio_alloc_noprof+0x14/0x6c) [ 547.649074][ T8388] r10:00000000 r9:84e15980 r8:00000001 r7:00000000 r6:7eff4000 r5:84235400 [ 547.649097][ T8388] r4:00000081 [ 547.649111][ T8388] [<80500624>] (__folio_alloc_noprof) from [<804d081c>] (handle_mm_fault+0xcec/0x14e0) [ 547.649172][ T8388] r5:84235400 r4:00000081 [ 547.649188][ T8388] [<804cfb30>] (handle_mm_fault) from [<804c1c74>] (__get_user_pages+0x254/0x6e4) [ 547.649247][ T8388] r10:00000000 r9:7eff4000 r8:84235400 r7:00000008 r6:00000081 r5:84e15980 [ 547.649268][ T8388] r4:00050003 [ 547.649284][ T8388] [<804c1a20>] (__get_user_pages) from [<804c2224>] (get_user_pages_remote+0x120/0x58c) [ 547.649340][ T8388] r10:00050003 r9:ea9a5ed0 r8:7eff4000 r7:858a8680 r6:858a8704 r5:ea9a5e90 [ 547.649363][ T8388] r4:00000001 [ 547.649379][ T8388] [<804c2104>] (get_user_pages_remote) from [<805680bc>] (get_arg_page+0x78/0xf4) [ 547.649439][ T8388] r10:7eff4000 r9:858a8680 r8:7eff4000 r7:84e15980 r6:00000000 r5:84cc7e00 [ 547.649460][ T8388] r4:00000001 [ 547.649476][ T8388] [<80568044>] (get_arg_page) from [<8056936c>] (copy_strings+0x124/0x3bc) [ 547.649530][ T8388] r9:7eff5000 r8:82a78528 r7:00003feb r6:ded5a8fc r5:00001000 r4:00000000 [ 547.649559][ T8388] [<80569248>] (copy_strings) from [<805696f0>] (do_execveat_common+0xec/0x190) [ 547.649617][ T8388] r10:0000000b r9:84cc7e00 r8:20000040 r7:00000000 r6:84235400 r5:83223000 [ 547.649635][ T8388] r4:00000000 [ 547.649652][ T8388] [<80569604>] (do_execveat_common) from [<8056a764>] (sys_execve+0x3c/0x44) [ 547.649710][ T8388] r9:84235400 r8:8020029c r7:0000000b r6:001304b8 r5:20000040 r4:00000000 [ 547.649723][ T8388] [<8056a728>] (sys_execve) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 547.649771][ T8388] Exception stack(0xea9a5fa8 to 0xea9a5ff0) [ 547.649804][ T8388] 5fa0: 00000000 00000000 20019140 00000000 20000040 00000000 [ 547.649839][ T8388] 5fc0: 00000000 00000000 001304b8 0000000b 00300000 00000000 00006364 76fae0bc [ 547.649865][ T8388] 5fe0: 76fadec0 76fadeb0 000195a4 00132510 [ 547.649886][ T8388] r5:00000000 r4:00000000 [ 548.027522][ T29] audit: type=1400 audit(547.930:370): avc: denied { listen } for pid=8398 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 548.382741][ T8409] FAULT_INJECTION: forcing a failure. [ 548.382741][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 548.383585][ T8409] CPU: 0 UID: 0 PID: 8409 Comm: syz.0.1301 Not tainted syzkaller #0 PREEMPT [ 548.383646][ T8409] Hardware name: ARM-Versatile Express [ 548.383661][ T8409] Call trace: [ 548.383682][ T8409] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 548.383739][ T8409] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 548.383748][ T8409] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 548.383805][ T8409] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 548.383838][ T8409] r5:84231800 r4:82918810 [ 548.383846][ T8409] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 548.383877][ T8409] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 548.383914][ T8409] r8:84231800 r7:00000000 r6:00000cc0 r5:8291b72c r4:830a4cc0 [ 548.383923][ T8409] [<8052ed98>] (should_failslab) from [<8050ea9c>] (kmem_cache_alloc_noprof+0x4c/0x444) [ 548.383952][ T8409] [<8050ea50>] (kmem_cache_alloc_noprof) from [<805616d4>] (alloc_empty_file+0x54/0x13c) [ 548.383989][ T8409] r10:00000142 r9:83223000 r8:82805cc0 r7:842f1080 r6:00000000 r5:8291b72c [ 548.383998][ T8409] r4:82457898 [ 548.384005][ T8409] [<80561680>] (alloc_empty_file) from [<80573ff0>] (path_openat+0x40/0x1150) [ 548.384037][ T8409] r8:eaa5de58 r7:eaa5de58 r6:eaa5df20 r5:84231800 r4:ffffff9c [ 548.384046][ T8409] [<80573fb0>] (path_openat) from [<805751ac>] (do_filp_open+0xac/0x148) [ 548.384075][ T8409] r10:00000142 r9:83223000 r8:00000001 r7:eaa5de58 r6:eaa5df20 r5:84231800 [ 548.384085][ T8409] r4:ffffff9c [ 548.384092][ T8409] [<80575100>] (do_filp_open) from [<8055bd7c>] (do_sys_openat2+0x90/0xe0) [ 548.384123][ T8409] r9:84231800 r8:8020029c r7:ffffff9c r6:eaa5df58 r5:83223000 r4:00000004 [ 548.384131][ T8409] [<8055bcec>] (do_sys_openat2) from [<8055c1a4>] (sys_openat+0x98/0xd4) [ 548.384160][ T8409] r7:00000142 r6:00000000 r5:76fadab0 r4:ffffff9c [ 548.384168][ T8409] [<8055c10c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 548.384191][ T8409] Exception stack(0xeaa5dfa8 to 0xeaa5dff0) [ 548.384211][ T8409] dfa0: 00000000 76fadab0 ffffff9c 76fadab0 00000000 00000000 [ 548.384229][ T8409] dfc0: 00000000 76fadab0 00000000 00000142 00000000 00000000 00006364 76fae0bc [ 548.384241][ T8409] dfe0: 81010301 76fada68 000d81d0 00130198 [ 548.384253][ T8409] r5:76fadab0 r4:00000000 [ 556.787818][ T29] audit: type=1400 audit(556.690:371): avc: denied { associate } for pid=8459 comm="syz.0.1324" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 560.486648][ T1090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.567788][ T1090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.637641][ T1090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.714413][ T1090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.929962][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.937127][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.939863][ T1090] bond0 (unregistering): Released all slaves [ 561.018159][ T1090] hsr_slave_0: left promiscuous mode [ 561.021251][ T1090] hsr_slave_1: left promiscuous mode [ 561.041414][ T1090] veth1_macvtap: left promiscuous mode [ 561.044827][ T1090] veth0_macvtap: left promiscuous mode [ 561.045873][ T1090] veth1_vlan: left promiscuous mode [ 561.046869][ T1090] veth0_vlan: left promiscuous mode [ 561.552580][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.680335][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.704135][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.050810][ T8705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8705 comm=syz.1.1339 [ 563.181186][ T8709] FAULT_INJECTION: forcing a failure. [ 563.181186][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 563.181694][ T8709] CPU: 1 UID: 0 PID: 8709 Comm: syz.1.1340 Not tainted syzkaller #0 PREEMPT [ 563.181767][ T8709] Hardware name: ARM-Versatile Express [ 563.181791][ T8709] Call trace: [ 563.181832][ T8709] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 563.181935][ T8709] r7:00000c40 r6:00000000 r5:60000013 r4:82252390 [ 563.182023][ T8709] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 563.182355][ T8709] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 563.183471][ T8709] r5:83991800 r4:82918810 [ 563.183790][ T8709] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 563.183874][ T8709] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 563.183966][ T8709] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 563.183986][ T8709] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 563.184041][ T8709] [<8050a268>] (__kmalloc_noprof) from [<807d3008>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 563.184108][ T8709] r10:83991800 r9:8309e400 r8:00000000 r7:834d64c8 r6:8588cce8 r5:00001000 [ 563.184126][ T8709] r4:00000000 [ 563.184142][ T8709] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 563.184220][ T8709] r10:83991800 r9:00000000 r8:8588ccc0 r7:c1105517 r6:00000004 r5:81cd6588 [ 563.184284][ T8709] r4:8588cce8 r3:826c1240 [ 563.184299][ T8709] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 563.184362][ T8709] r9:00000004 r8:8588ccc0 r7:00000000 r6:00000000 r5:c1105517 r4:8588ccc0 [ 563.184379][ T8709] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 563.184428][ T8709] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 563.184485][ T8709] r7:00000000 r6:8588ccc1 r5:00000000 r4:c1105517 [ 563.184501][ T8709] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 563.184556][ T8709] Exception stack(0xebf0dfa8 to 0xebf0dff0) [ 563.184598][ T8709] dfa0: 00000000 00000000 00000004 c1105517 00000000 00000000 [ 563.184630][ T8709] dfc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76f440bc [ 563.184654][ T8709] dfe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 563.184689][ T8709] r10:00000036 r9:83991800 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 563.184707][ T8709] r4:00000000 [ 563.196529][ T8709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.748456][ T8489] hsr_slave_0: entered promiscuous mode [ 563.750324][ T8489] hsr_slave_1: entered promiscuous mode [ 563.751639][ T8489] debugfs: 'hsr0' already exists in 'hsr' [ 563.751930][ T8489] Cannot create hsr debugfs directory [ 564.395807][ T8489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 564.405614][ T8489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 564.419916][ T8489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 564.438595][ T8489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 565.256304][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.229669][ T29] audit: type=1400 audit(566.130:372): avc: denied { ioctl } for pid=8890 comm="syz.1.1343" path="socket:[18457]" dev="sockfs" ino=18457 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 566.253294][ T29] audit: type=1400 audit(566.150:373): avc: denied { setattr } for pid=8890 comm="syz.1.1343" path="socket:[18457]" dev="sockfs" ino=18457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 566.410109][ T29] audit: type=1400 audit(566.300:374): avc: denied { bind } for pid=8890 comm="syz.1.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 569.169363][ T8489] veth0_vlan: entered promiscuous mode [ 569.195869][ T8489] veth1_vlan: entered promiscuous mode [ 569.287284][ T8489] veth0_macvtap: entered promiscuous mode [ 569.297963][ T8489] veth1_macvtap: entered promiscuous mode [ 569.361039][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.361489][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.361578][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.361668][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.666306][ T29] audit: type=1400 audit(569.570:375): avc: denied { lock } for pid=8969 comm="syz.0.1335" path="socket:[18527]" dev="sockfs" ino=18527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 570.791376][ T8983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8983 comm=syz.1.1354 [ 570.811876][ T29] audit: type=1400 audit(570.710:376): avc: denied { nlmsg_read } for pid=8982 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 570.878722][ T8988] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=8988 comm=syz.1.1355 [ 570.964592][ T8988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=8988 comm=syz.1.1355 [ 571.145279][ T8993] syz.1.1357 uses obsolete (PF_INET,SOCK_PACKET) [ 571.619587][ T29] audit: type=1800 audit(571.520:377): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1360" name="/newroot/156" dev="tmpfs" ino=830 res=0 errno=0 [ 572.286138][ T9003] FAULT_INJECTION: forcing a failure. [ 572.286138][ T9003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.286543][ T9003] CPU: 1 UID: 0 PID: 9003 Comm: syz.1.1361 Not tainted syzkaller #0 PREEMPT [ 572.286660][ T9003] Hardware name: ARM-Versatile Express [ 572.286691][ T9003] Call trace: [ 572.286737][ T9003] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 572.286874][ T9003] r7:76f43860 r6:00000000 r5:60000113 r4:82252390 [ 572.286896][ T9003] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 572.286949][ T9003] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 572.287224][ T9003] r5:84034800 r4:8294f590 [ 572.287368][ T9003] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 572.287444][ T9003] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 572.287698][ T9003] r8:b5003587 r7:76f43860 r6:76f43840 r5:ec549f58 r4:76f43840 [ 572.287743][ T9003] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 572.287850][ T9003] [<80986bf4>] (should_fail_usercopy) from [<8026ad70>] (copy_siginfo_to_user+0x1c/0xa4) [ 572.288027][ T9003] [<8026ad54>] (copy_siginfo_to_user) from [<8022bb50>] (do_work_pending+0x378/0x4e8) [ 572.288316][ T9003] r9:84034800 r8:b5003587 r7:84035030 r6:76f43840 r5:ec549fb0 r4:84034800 [ 572.288422][ T9003] [<8022b7d8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 572.288820][ T9003] Exception stack(0xec549fb0 to 0xec549ff8) [ 572.288916][ T9003] 9fa0: 0000003f 20000400 00000000 00000000 [ 572.289041][ T9003] 9fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76f440bc [ 572.289214][ T9003] 9fe0: 76f43ec0 76f43bb8 7ed7b348 200008c0 00000010 ffffffff [ 572.289345][ T9003] r10:00006364 r9:84034800 r8:00000000 r7:84034800 r6:ffffffff r5:00000010 [ 572.289474][ T9003] r4:200008c0 [ 572.628513][ T29] audit: type=1400 audit(572.530:378): avc: denied { map_read map_write } for pid=9005 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.137274][ T29] audit: type=1800 audit(580.040:379): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1374" name="/newroot/11" dev="tmpfs" ino=75 res=0 errno=0 [ 581.441018][ T29] audit: type=1800 audit(581.340:380): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1380" name="/newroot/166" dev="tmpfs" ino=884 res=0 errno=0 [ 581.636558][ T9075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9075 comm=syz.1.1382 [ 582.346326][ T29] audit: type=1800 audit(582.250:381): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1385" name="/newroot/171" dev="tmpfs" ino=910 res=0 errno=0 [ 582.432655][ T29] audit: type=1400 audit(582.330:382): avc: denied { setopt } for pid=9086 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 583.236123][ T29] audit: type=1800 audit(583.130:383): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1390" name="/newroot/175" dev="tmpfs" ino=932 res=0 errno=0 [ 585.904157][ T9117] FAULT_INJECTION: forcing a failure. [ 585.904157][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.904702][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.1.1394 Not tainted syzkaller #0 PREEMPT [ 585.904803][ T9117] Hardware name: ARM-Versatile Express [ 585.904880][ T9117] Call trace: [ 585.904954][ T9117] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 585.905069][ T9117] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 585.905086][ T9117] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 585.905138][ T9117] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 585.905192][ T9117] r5:838b8000 r4:8294f590 [ 585.905208][ T9117] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 585.905316][ T9117] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 585.905427][ T9117] r8:76f43f30 r7:00000000 r6:00000000 r5:dff25f68 r4:00000002 [ 585.905448][ T9117] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 585.905577][ T9117] [<80986bf4>] (should_fail_usercopy) from [<80599e8c>] (simple_read_from_buffer+0x80/0x13c) [ 585.905645][ T9117] [<80599e0c>] (simple_read_from_buffer) from [<80615fb4>] (proc_fail_nth_read+0xb8/0x108) [ 585.905715][ T9117] r10:00000001 r9:80615efc r8:00000002 r7:dff25f68 r6:0000000f r5:76f43f30 [ 585.905737][ T9117] r4:838b8000 r3:dff25e9f [ 585.905752][ T9117] [<80615efc>] (proc_fail_nth_read) from [<8055ee3c>] (vfs_read+0x98/0x324) [ 585.905818][ T9117] r8:76f43f30 r7:dff25f68 r6:838b8000 r5:0000000f r4:848a8b40 [ 585.905835][ T9117] [<8055eda4>] (vfs_read) from [<8055fb4c>] (ksys_read+0x74/0xe8) [ 585.905899][ T9117] r10:00000003 r9:838b8000 r8:8020029c r7:00000000 r6:00000000 r5:848a8b40 [ 585.905917][ T9117] r4:848a8b43 [ 585.905932][ T9117] [<8055fad8>] (ksys_read) from [<8055fbd0>] (sys_read+0x10/0x14) [ 585.906033][ T9117] r7:00000003 r6:00000003 r5:76f43f30 r4:0000000f [ 585.906051][ T9117] [<8055fbc0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 585.906141][ T9117] Exception stack(0xdff25fa8 to 0xdff25ff0) [ 585.906189][ T9117] 5fa0: 0000000f 76f43f30 00000003 76f43f30 0000000f 00000000 [ 585.906226][ T9117] 5fc0: 0000000f 76f43f30 00000003 00000003 00300000 00000000 00006364 76f440bc [ 585.906253][ T9117] 5fe0: 00000158 76f43ed0 000d81d0 001303dc [ 586.514782][ T29] audit: type=1400 audit(586.420:384): avc: denied { getopt } for pid=9126 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 587.800725][ T9145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9145 comm=syz.0.1405 [ 588.384880][ T9161] fuse: Unknown parameter 'FÖñ' [ 590.960021][ T9178] FAULT_INJECTION: forcing a failure. [ 590.960021][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 590.963912][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: syz.0.1418 Not tainted syzkaller #0 PREEMPT [ 590.964063][ T9178] Hardware name: ARM-Versatile Express [ 590.964089][ T9178] Call trace: [ 590.964131][ T9178] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 590.964242][ T9178] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 590.964266][ T9178] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 590.964321][ T9178] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 590.964378][ T9178] r5:83990c00 r4:82918810 [ 590.964393][ T9178] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 590.964453][ T9178] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 590.964529][ T9178] r8:83990c00 r7:00000000 r6:00000dc0 r5:830a23c0 r4:830a4f00 [ 590.964550][ T9178] [<8052ed98>] (should_failslab) from [<8050ea9c>] (kmem_cache_alloc_noprof+0x4c/0x444) [ 590.964609][ T9178] [<8050ea50>] (kmem_cache_alloc_noprof) from [<80627428>] (__kernfs_new_node+0x54/0x204) [ 590.964678][ T9178] r10:830a23c0 r9:83990c00 r8:824579cc r7:848aad68 r6:823ee788 r5:830a23c0 [ 590.964699][ T9178] r4:848aad68 [ 590.964716][ T9178] [<806273d4>] (__kernfs_new_node) from [<80629018>] (kernfs_new_node+0x80/0xa4) [ 590.964790][ T9178] r10:830a23c0 r9:823ee788 r8:00000000 r7:00000004 r6:00000000 r5:0000a1ff [ 590.964813][ T9178] r4:848aad68 [ 590.964829][ T9178] [<80628f98>] (kernfs_new_node) from [<8062b7f8>] (kernfs_create_link+0x44/0xac) [ 590.964895][ T9178] r10:83990c00 r9:00000001 r8:848e7438 r7:00000000 r6:848aad68 r5:85878108 [ 590.964915][ T9178] r4:848aad68 [ 590.964930][ T9178] [<8062b7b4>] (kernfs_create_link) from [<8062ccec>] (sysfs_do_create_link_sd+0x6c/0xe8) [ 590.965026][ T9178] r6:85878108 r5:823ee788 r4:848aad68 [ 590.965045][ T9178] [<8062cc80>] (sysfs_do_create_link_sd) from [<8062cd98>] (sysfs_create_link+0x30/0x3c) [ 590.965116][ T9178] r9:00000004 r8:848e7438 r7:833e2000 r6:84ed5830 r5:848e7400 r4:8507ea00 [ 590.965133][ T9178] [<8062cd68>] (sysfs_create_link) from [<80b7b7d8>] (module_add_driver+0x38/0x138) [ 590.965194][ T9178] [<80b7b7a0>] (module_add_driver) from [<80b5b570>] (bus_add_driver+0x10c/0x21c) [ 590.965259][ T9178] r7:833e2000 r6:00000000 r5:848e7400 r4:84ed5830 [ 590.965276][ T9178] [<80b5b464>] (bus_add_driver) from [<80b5de60>] (driver_register+0x84/0x11c) [ 590.965338][ T9178] r8:849d3d80 r7:84ed5804 r6:84ed5830 r5:00000000 r4:84ed5830 [ 590.965355][ T9178] [<80b5dddc>] (driver_register) from [<81009530>] (usb_gadget_register_driver_owner+0x50/0xf8) [ 590.965417][ T9178] r5:00000000 r4:84ed580c [ 590.965434][ T9178] [<810094e0>] (usb_gadget_register_driver_owner) from [<8106ec10>] (raw_ioctl+0x9dc/0x1094) [ 590.965496][ T9178] r7:84ed5804 r6:60000013 r5:00000000 r4:84ed5800 [ 590.965512][ T9178] [<8106e234>] (raw_ioctl) from [<805786e0>] (sys_ioctl+0x130/0xba0) [ 590.965574][ T9178] r10:83990c00 r9:00000004 r8:849d3d80 r7:00000000 r6:849d3d81 r5:00000000 [ 590.965594][ T9178] r4:00005501 [ 590.965610][ T9178] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 590.965653][ T9178] Exception stack(0xea419fa8 to 0xea419ff0) [ 590.965692][ T9178] 9fa0: 00000004 76fe5e70 00000004 00005501 00000000 76fe4e00 [ 590.965724][ T9178] 9fc0: 00000004 76fe5e70 76fe4e70 00000036 00000002 76fe5e60 00000000 00000000 [ 590.965748][ T9178] 9fe0: 00000000 76fe4de8 002e8000 00131edc [ 590.965790][ T9178] r10:00000036 r9:83990c00 r8:8020029c r7:00000036 r6:76fe4e70 r5:76fe5e70 [ 590.965810][ T9178] r4:00000004 [ 590.971072][ T9178] bus_add_driver: failed to create module links for raw-gadget.0 [ 590.980549][ T9178] UDC core: USB Raw Gadget: driver registration failed: -12 [ 590.980698][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 591.088616][ T9184] FAULT_INJECTION: forcing a failure. [ 591.088616][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 591.090212][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.0.1419 Not tainted syzkaller #0 PREEMPT [ 591.090325][ T9184] Hardware name: ARM-Versatile Express [ 591.090351][ T9184] Call trace: [ 591.090395][ T9184] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 591.090503][ T9184] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 591.090540][ T9184] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 591.090598][ T9184] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 591.090652][ T9184] r5:841dd400 r4:82918810 [ 591.090670][ T9184] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 591.090732][ T9184] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 591.090814][ T9184] r8:00000020 r7:00000000 r6:00000cc0 r5:8510e000 r4:83001240 [ 591.090836][ T9184] [<8052ed98>] (should_failslab) from [<8050f770>] (__kmalloc_cache_noprof+0x4c/0x44c) [ 591.090893][ T9184] [<8050f724>] (__kmalloc_cache_noprof) from [<81595a2c>] (register_netdevice+0xfc/0x8ac) [ 591.090969][ T9184] r10:20000100 r9:8487fd08 r8:8510e0d8 r7:8510e6c0 r6:850b2d00 r5:8510e000 [ 591.090989][ T9184] r4:00000000 [ 591.091005][ T9184] [<81595930>] (register_netdevice) from [<818c01f0>] (ipip6_tunnel_create+0x70/0xd8) [ 591.091076][ T9184] r10:20000100 r9:8487fd08 r8:850b2d00 r7:8510e6c0 r6:8487fd00 r5:82819b9c [ 591.091096][ T9184] r4:8510e000 [ 591.091111][ T9184] [<818c0180>] (ipip6_tunnel_create) from [<818c16cc>] (ipip6_tunnel_locate+0x180/0x260) [ 591.091181][ T9184] r9:8487fd08 r8:00000001 r7:01011eac r6:850b2d00 r5:ea419d44 r4:8510e000 [ 591.091201][ T9184] [<818c154c>] (ipip6_tunnel_locate) from [<818c18d4>] (ipip6_tunnel_ctl+0x128/0x274) [ 591.091310][ T9184] r9:818c1cf8 r8:81e7148c r7:20000100 r6:000089f1 r5:ea419d44 r4:8529a800 [ 591.091331][ T9184] [<818c17ac>] (ipip6_tunnel_ctl) from [<817c48b0>] (ip_tunnel_siocdevprivate+0x68/0xb4) [ 591.091411][ T9184] r9:818c1cf8 r8:81e7148c r7:20000100 r6:000089f1 r5:20000100 r4:8529a800 [ 591.091431][ T9184] [<817c4848>] (ip_tunnel_siocdevprivate) from [<818c1d74>] (ipip6_tunnel_siocdevprivate+0x7c/0x7b8) [ 591.091513][ T9184] r6:000089f1 r5:20000100 r4:8529a800 [ 591.091543][ T9184] [<818c1cf8>] (ipip6_tunnel_siocdevprivate) from [<815ca3f8>] (dev_ifsioc+0x710/0x838) [ 591.091619][ T9184] r9:818c1cf8 r8:81e7148c r7:20000100 r6:ea419ecc r5:8529a800 r4:000089f1 [ 591.091636][ T9184] [<815c9ce8>] (dev_ifsioc) from [<815caa54>] (dev_ioctl+0x534/0x62c) [ 591.091707][ T9184] r9:ea419ecb r8:00000000 r7:850b2d00 r6:ea419ecc r5:00000001 r4:000089f1 [ 591.091728][ T9184] [<815ca520>] (dev_ioctl) from [<81557870>] (sock_ioctl+0x464/0x600) [ 591.091803][ T9184] r10:841dd400 r9:00000003 r8:848a8b40 r7:b5403587 r6:850b2d00 r5:20000040 [ 591.091824][ T9184] r4:000089f1 r3:20000100 [ 591.091842][ T9184] [<8155740c>] (sock_ioctl) from [<805786e0>] (sys_ioctl+0x130/0xba0) [ 591.091911][ T9184] r9:00000003 r8:848a8b40 r7:20000040 r6:848a8b41 r5:00000000 r4:000089f1 [ 591.091933][ T9184] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 591.091981][ T9184] Exception stack(0xea419fa8 to 0xea419ff0) [ 591.092067][ T9184] 9fa0: 00000000 00000000 00000003 000089f1 20000040 00000000 [ 591.092138][ T9184] 9fc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76fe70bc [ 591.092168][ T9184] 9fe0: 76fe6ec0 76fe6eb0 000195a4 00132510 [ 591.092228][ T9184] r10:00000036 r9:841dd400 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 591.092270][ T9184] r4:00000000 [ 591.648254][ T9194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9194 comm=syz.0.1423 [ 591.654316][ T9194] 8021q: VLANs not supported on ipvlan0 [ 593.143334][ T3789] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 593.302487][ T3789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 593.305470][ T3789] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 593.316144][ T3789] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.316524][ T3789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 593.316850][ T3789] usb 2-1: SerialNumber: syz [ 593.750561][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.753756][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.773802][ T3789] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 593.780189][ T3789] usb 2-1: USB disconnect, device number 19 [ 593.871883][ T9218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9218 comm=syz.1.1425 [ 594.347726][ T29] audit: type=1800 audit(594.250:385): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1427" name="/newroot/33" dev="tmpfs" ino=196 res=0 errno=0 [ 594.408392][ T9233] FAULT_INJECTION: forcing a failure. [ 594.408392][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 594.408880][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.0.1429 Not tainted syzkaller #0 PREEMPT [ 594.408984][ T9233] Hardware name: ARM-Versatile Express [ 594.409014][ T9233] Call trace: [ 594.409061][ T9233] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 594.409217][ T9233] r7:00000c40 r6:00000000 r5:60000013 r4:82252390 [ 594.409242][ T9233] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 594.409330][ T9233] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 594.409392][ T9233] r5:83b4e000 r4:82918810 [ 594.409408][ T9233] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 594.409473][ T9233] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 594.409551][ T9233] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 594.409573][ T9233] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 594.409639][ T9233] [<8050a268>] (__kmalloc_noprof) from [<807d3008>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 594.409872][ T9233] r10:848a8c00 r9:8460b800 r8:00000000 r7:8546b990 r6:848a8c28 r5:00001000 [ 594.409902][ T9233] r4:00000000 [ 594.409970][ T9233] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf3fc>] (tomoyo_check_open_permission+0x150/0x1c0) [ 594.410153][ T9233] r10:848a8c00 r9:00000004 r8:8486d200 r7:00000000 r6:00000000 r5:848a8c28 [ 594.410392][ T9233] r4:00000001 r3:00000001 [ 594.410521][ T9233] [<807cf2ac>] (tomoyo_check_open_permission) from [<807d3eb0>] (tomoyo_file_open+0x34/0x38) [ 594.410658][ T9233] r9:00000000 r8:848a8c28 r7:00000000 r6:8545cc80 r5:81cce2b0 r4:848a8c00 [ 594.410775][ T9233] [<807d3e7c>] (tomoyo_file_open) from [<80790280>] (security_file_open+0x54/0x194) [ 594.410901][ T9233] r5:81cce2b0 r4:848a8c00 [ 594.410924][ T9233] [<8079022c>] (security_file_open) from [<805598d8>] (do_dentry_open+0xe4/0x4d0) [ 594.410989][ T9233] r5:81cce2b0 r4:848a8c00 [ 594.411009][ T9233] [<805597f4>] (do_dentry_open) from [<8055b81c>] (vfs_open+0x2c/0xe8) [ 594.411072][ T9233] r9:00000000 r8:ea5dde58 r7:00000000 r6:848a8c28 r5:8291f61c r4:848a8c00 [ 594.411090][ T9233] [<8055b7f0>] (vfs_open) from [<805742bc>] (path_openat+0x30c/0x1150) [ 594.411199][ T9233] r6:ea5ddf20 r5:8291f61c r4:00000000 [ 594.411236][ T9233] [<80573fb0>] (path_openat) from [<805751ac>] (do_filp_open+0xac/0x148) [ 594.411305][ T9233] r10:00000142 r9:83316000 r8:00000001 r7:ea5dde58 r6:ea5ddf20 r5:83b4e000 [ 594.411328][ T9233] r4:ffffff9c [ 594.411346][ T9233] [<80575100>] (do_filp_open) from [<8055bd7c>] (do_sys_openat2+0x90/0xe0) [ 594.411411][ T9233] r9:83b4e000 r8:8020029c r7:ffffff9c r6:ea5ddf58 r5:83316000 r4:00000006 [ 594.411433][ T9233] [<8055bcec>] (do_sys_openat2) from [<8055c1a4>] (sys_openat+0x98/0xd4) [ 594.411548][ T9233] r7:00000142 r6:001304b8 r5:20000000 r4:ffffff9c [ 594.411570][ T9233] [<8055c10c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 594.411620][ T9233] Exception stack(0xea5ddfa8 to 0xea5ddff0) [ 594.411664][ T9233] dfa0: 00000000 00000000 ffffff9c 20000000 00000000 00000000 [ 594.411706][ T9233] dfc0: 00000000 00000000 001304b8 00000142 00300000 00000000 00006364 76fe70bc [ 594.411736][ T9233] dfe0: 76fe6ec0 76fe6eb0 000195a4 00132510 [ 594.411768][ T9233] r5:00000000 r4:00000000 [ 594.416813][ T9233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.525710][ T9237] FAULT_INJECTION: forcing a failure. [ 594.525710][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 594.527574][ T9237] CPU: 1 UID: 0 PID: 9237 Comm: syz.0.1430 Not tainted syzkaller #0 PREEMPT [ 594.527705][ T9237] Hardware name: ARM-Versatile Express [ 594.527728][ T9237] Call trace: [ 594.527770][ T9237] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 594.527891][ T9237] r7:00000c40 r6:00000000 r5:60000013 r4:82252390 [ 594.527911][ T9237] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 594.527998][ T9237] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 594.528129][ T9237] r5:83b4bc00 r4:82918810 [ 594.528176][ T9237] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 594.528249][ T9237] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 594.528328][ T9237] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 594.528376][ T9237] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 594.528478][ T9237] [<8050a268>] (__kmalloc_noprof) from [<807d3008>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 594.528782][ T9237] r10:83b4bc00 r9:8309e400 r8:00000000 r7:8342b110 r6:849d3928 r5:00001000 [ 594.528864][ T9237] r4:00000000 [ 594.528885][ T9237] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 594.528959][ T9237] r10:83b4bc00 r9:00000000 r8:849d3900 r7:41015500 r6:00000004 r5:81cd6588 [ 594.529093][ T9237] r4:849d3928 r3:826c1240 [ 594.529201][ T9237] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 594.529293][ T9237] r9:00000004 r8:849d3900 r7:76fe5e60 r6:76fe5e60 r5:41015500 r4:849d3900 [ 594.529592][ T9237] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 594.529656][ T9237] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 594.529719][ T9237] r7:76fe5e60 r6:849d3901 r5:76fe5e70 r4:41015500 [ 594.529737][ T9237] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 594.529783][ T9237] Exception stack(0xea5f9fa8 to 0xea5f9ff0) [ 594.530178][ T9237] 9fa0: 00000004 76fe5e70 00000004 41015500 76fe5e60 76fe4e00 [ 594.530226][ T9237] 9fc0: 00000004 76fe5e70 76fe4e70 00000036 00000002 76fe5e60 00440418 00000000 [ 594.530257][ T9237] 9fe0: 00000000 76fe4de8 002e8000 00131edc [ 594.530302][ T9237] r10:00000036 r9:83b4bc00 r8:8020029c r7:00000036 r6:76fe4e70 r5:76fe5e70 [ 594.530326][ T9237] r4:00000004 [ 594.530357][ T9237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.774759][ T3789] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 594.948911][ T3789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 594.953161][ T3789] usb 1-1: not running at top speed; connect to a high speed hub [ 594.963236][ T3789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 594.963737][ T3789] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 594.977430][ T3789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.977724][ T3789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.977790][ T3789] usb 1-1: Product: syz [ 594.977825][ T3789] usb 1-1: Manufacturer: syz [ 594.977849][ T3789] usb 1-1: SerialNumber: syz [ 594.985321][ T9237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 595.201566][ T3789] cdc_ncm 1-1:1.0: bind() failure [ 595.207875][ T3789] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 595.208231][ T3789] cdc_ncm 1-1:1.1: bind() failure [ 595.217641][ T3789] usb 1-1: USB disconnect, device number 35 [ 595.325515][ T9254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9254 comm=syz.0.1431 [ 595.915584][ T29] audit: type=1800 audit(595.820:386): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1434" name="/newroot/39" dev="tmpfs" ino=228 res=0 errno=0 [ 596.623500][ T29] audit: type=1800 audit(596.520:387): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1439" name="/newroot/44" dev="tmpfs" ino=253 res=0 errno=0 [ 597.153585][ T3789] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 597.312862][ T3789] usb 2-1: Using ep0 maxpacket: 32 [ 597.329652][ T3789] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 597.329958][ T3789] usb 2-1: config 0 has no interface number 0 [ 597.330227][ T3789] usb 2-1: config 0 interface 184 has no altsetting 0 [ 597.347188][ T3789] usb 2-1: New USB device found, idVendor=040f, idProduct=7500, bcdDevice=69.ee [ 597.347490][ T3789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.347883][ T3789] usb 2-1: Product: syz [ 597.347936][ T3789] usb 2-1: Manufacturer: syz [ 597.348052][ T3789] usb 2-1: SerialNumber: syz [ 597.354821][ T3789] usb 2-1: config 0 descriptor?? [ 597.588950][ T9309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=637 sclass=netlink_route_socket pid=9309 comm=syz.1.1441 [ 597.784530][ T29] audit: type=1800 audit(597.680:388): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1444" name="/newroot/48" dev="tmpfs" ino=274 res=0 errno=0 [ 597.857147][ T9] usb 2-1: USB disconnect, device number 20 [ 597.921645][ T9338] FAULT_INJECTION: forcing a failure. [ 597.921645][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.922040][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.1.1446 Not tainted syzkaller #0 PREEMPT [ 597.922268][ T9338] Hardware name: ARM-Versatile Express [ 597.922300][ T9338] Call trace: [ 597.922347][ T9338] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 597.922465][ T9338] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 597.922486][ T9338] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 597.922540][ T9338] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 597.922596][ T9338] r5:83991800 r4:8294f590 [ 597.922612][ T9338] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 597.922670][ T9338] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 597.922733][ T9338] r8:85091e00 r7:00000000 r6:ea4dddd0 r5:8534a400 r4:00000060 [ 597.922764][ T9338] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 597.922821][ T9338] [<80986bf4>] (should_fail_usercopy) from [<817ec22c>] (do_arpt_set_ctl+0x424/0x814) [ 597.922878][ T9338] [<817ebe08>] (do_arpt_set_ctl) from [<816b193c>] (nf_setsockopt+0x60/0x7c) [ 597.922955][ T9338] r10:00000126 r9:83991800 r8:00000438 r7:83760280 r6:8534a400 r5:817ebe08 [ 597.922977][ T9338] r4:829ef0e4 [ 597.922994][ T9338] [<816b18e0>] (nf_setsockopt) from [<8174e220>] (ip_setsockopt+0x88/0x98) [ 597.923058][ T9338] r6:8534a400 r5:00000438 r4:00000060 [ 597.923076][ T9338] [<8174e19c>] (ip_setsockopt) from [<817931f0>] (udp_setsockopt+0x38/0x64) [ 597.923235][ T9338] r6:00000060 r5:00000000 r4:817931b8 [ 597.923326][ T9338] [<817931bc>] (udp_setsockopt) from [<81559e94>] (sock_common_setsockopt+0x38/0x40) [ 597.923536][ T9338] r4:817931b8 [ 597.923668][ T9338] [<81559e60>] (sock_common_setsockopt) from [<81555620>] (do_sock_setsockopt+0x70/0xc8) [ 597.923846][ T9338] r4:81559e5c [ 597.924079][ T9338] [<815555b0>] (do_sock_setsockopt) from [<81558b28>] (__sys_setsockopt+0x7c/0xc4) [ 597.924307][ T9338] r8:00000000 r7:848a8840 r6:848a8841 r5:00000060 r4:00000000 [ 597.924355][ T9338] [<81558aac>] (__sys_setsockopt) from [<81558b8c>] (sys_setsockopt+0x1c/0x24) [ 597.924494][ T9338] r8:8020029c r7:00000126 r6:001304b8 r5:00000000 r4:00000438 [ 597.924726][ T9338] [<81558b70>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 597.924903][ T9338] Exception stack(0xea4ddfa8 to 0xea4ddff0) [ 597.925220][ T9338] dfa0: 00000438 00000000 00000003 00000000 00000060 20000000 [ 597.925333][ T9338] dfc0: 00000438 00000000 001304b8 00000126 00300000 00000000 00006364 76f440bc [ 597.925364][ T9338] dfe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 598.497295][ T29] audit: type=1800 audit(598.400:389): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1449" name="/newroot/198" dev="tmpfs" ino=1050 res=0 errno=0 [ 599.035406][ T29] audit: type=1400 audit(598.940:390): avc: denied { accept } for pid=9349 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 601.910539][ T29] audit: type=1800 audit(601.810:391): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1455" name="/newroot/201" dev="tmpfs" ino=1066 res=0 errno=0 [ 602.086202][ T9380] FAULT_INJECTION: forcing a failure. [ 602.086202][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.086538][ T9380] CPU: 1 UID: 0 PID: 9380 Comm: syz.1.1460 Not tainted syzkaller #0 PREEMPT [ 602.086601][ T9380] Hardware name: ARM-Versatile Express [ 602.086617][ T9380] Call trace: [ 602.086646][ T9380] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 602.086756][ T9380] r7:20000780 r6:00000000 r5:60000013 r4:82252390 [ 602.086768][ T9380] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 602.086797][ T9380] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 602.086841][ T9380] r5:841d6c00 r4:8294f590 [ 602.086850][ T9380] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 602.086884][ T9380] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 602.086922][ T9380] r8:00000000 r7:20000780 r6:eaa5dea8 r5:0000001e r4:00000042 [ 602.086931][ T9380] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 602.086954][ T9380] [<80986bf4>] (should_fail_usercopy) from [<817e8638>] (do_ipt_get_ctl+0x1a4/0x5a8) [ 602.086988][ T9380] [<817e8494>] (do_ipt_get_ctl) from [<816b18c4>] (nf_getsockopt+0x50/0x68) [ 602.087029][ T9380] r10:00000127 r9:b5403587 r8:b5003500 r7:20000780 r6:84414680 r5:00000042 [ 602.087040][ T9380] r4:829eef58 [ 602.087048][ T9380] [<816b1874>] (nf_getsockopt) from [<8174ee34>] (ip_getsockopt+0x104/0x134) [ 602.087086][ T9380] r7:200007c0 r6:20000780 r5:84414680 r4:00000042 [ 602.087094][ T9380] [<8174ed30>] (ip_getsockopt) from [<81559de0>] (sock_common_getsockopt+0x28/0x30) [ 602.087136][ T9380] r9:841d6c00 r8:200007c0 r7:81559db8 r6:83763680 r5:00000042 r4:8174ed30 [ 602.087145][ T9380] [<81559db8>] (sock_common_getsockopt) from [<81556d3c>] (do_sock_getsockopt+0x124/0x1ec) [ 602.087173][ T9380] r4:00000000 [ 602.087182][ T9380] [<81556c18>] (do_sock_getsockopt) from [<81558c28>] (__sys_getsockopt+0x94/0xdc) [ 602.087299][ T9380] r8:843af900 r7:eaa5df50 r6:00000042 r5:eaa5df58 r4:843af901 [ 602.087339][ T9380] [<81558b94>] (__sys_getsockopt) from [<81558c8c>] (sys_getsockopt+0x1c/0x24) [ 602.087424][ T9380] r8:8020029c r7:00000127 r6:001304b8 r5:00000000 r4:200007c0 [ 602.087439][ T9380] [<81558c70>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 602.087619][ T9380] Exception stack(0xeaa5dfa8 to 0xeaa5dff0) [ 602.087674][ T9380] dfa0: 200007c0 00000000 00000003 00000000 00000042 20000780 [ 602.087733][ T9380] dfc0: 200007c0 00000000 001304b8 00000127 00300000 00000000 00006364 76f440bc [ 602.087816][ T9380] dfe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 602.436418][ T29] audit: type=1800 audit(602.340:392): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1462" name="/newroot/205" dev="tmpfs" ino=1086 res=0 errno=0 [ 605.588138][ T29] audit: type=1800 audit(605.490:393): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1467" name="/newroot/209" dev="tmpfs" ino=1109 res=0 errno=0 [ 605.775769][ T9410] FAULT_INJECTION: forcing a failure. [ 605.775769][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 605.779609][ T9410] CPU: 0 UID: 0 PID: 9410 Comm: syz.0.1469 Not tainted syzkaller #0 PREEMPT [ 605.779776][ T9410] Hardware name: ARM-Versatile Express [ 605.779807][ T9410] Call trace: [ 605.779852][ T9410] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 605.780306][ T9410] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 605.780335][ T9410] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 605.780390][ T9410] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 605.780452][ T9410] r5:841de000 r4:82918810 [ 605.780469][ T9410] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 605.780532][ T9410] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 605.780613][ T9410] r8:841de000 r7:00000000 r6:00000dc0 r5:843afc00 r4:830a4540 [ 605.780632][ T9410] [<8052ed98>] (should_failslab) from [<8050ea9c>] (kmem_cache_alloc_noprof+0x4c/0x444) [ 605.780703][ T9410] [<8050ea50>] (kmem_cache_alloc_noprof) from [<8078f078>] (security_file_alloc+0x30/0x1dc) [ 605.780775][ T9410] r10:00000142 r9:83224000 r8:82805cc0 r7:83aeb380 r6:00000002 r5:843afc00 [ 605.780795][ T9410] r4:843afc00 [ 605.780811][ T9410] [<8078f048>] (security_file_alloc) from [<80560f78>] (init_file+0x48/0x110) [ 605.780874][ T9410] r5:843afc00 r4:843afc00 [ 605.780892][ T9410] [<80560f30>] (init_file) from [<805616e8>] (alloc_empty_file+0x68/0x13c) [ 605.780955][ T9410] r7:83aeb380 r6:00000002 r5:843afc00 r4:82457898 [ 605.780973][ T9410] [<80561680>] (alloc_empty_file) from [<80573ff0>] (path_openat+0x40/0x1150) [ 605.781038][ T9410] r8:eab7de58 r7:eab7de58 r6:eab7df20 r5:841de000 r4:ffffff9c [ 605.781059][ T9410] [<80573fb0>] (path_openat) from [<805751ac>] (do_filp_open+0xac/0x148) [ 605.781124][ T9410] r10:00000142 r9:83224000 r8:00000001 r7:eab7de58 r6:eab7df20 r5:841de000 [ 605.781146][ T9410] r4:ffffff9c [ 605.781163][ T9410] [<80575100>] (do_filp_open) from [<8055bd7c>] (do_sys_openat2+0x90/0xe0) [ 605.781229][ T9410] r9:841de000 r8:8020029c r7:ffffff9c r6:eab7df58 r5:83224000 r4:00000004 [ 605.781250][ T9410] [<8055bcec>] (do_sys_openat2) from [<8055c1a4>] (sys_openat+0x98/0xd4) [ 605.781313][ T9410] r7:00000142 r6:00000000 r5:76fe6e38 r4:ffffff9c [ 605.781333][ T9410] [<8055c10c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 605.781381][ T9410] Exception stack(0xeab7dfa8 to 0xeab7dff0) [ 605.781430][ T9410] dfa0: 00000002 76fe6e38 ffffff9c 76fe6e38 00000002 00000000 [ 605.781469][ T9410] dfc0: 00000002 76fe6e38 00000000 00000142 00000000 00000000 00006364 76fe70bc [ 605.781500][ T9410] dfe0: 7f037eff 76fe6df8 000d81d0 00130198 [ 605.781528][ T9410] r5:76fe6e38 r4:00000002 [ 606.495336][ T29] audit: type=1800 audit(606.400:394): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1472" name="/newroot/212" dev="tmpfs" ino=1124 res=0 errno=0 [ 606.651765][ T9426] FAULT_INJECTION: forcing a failure. [ 606.651765][ T9426] name failslab, interval 1, probability 0, space 0, times 0 [ 606.655711][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.1.1474 Not tainted syzkaller #0 PREEMPT [ 606.655877][ T9426] Hardware name: ARM-Versatile Express [ 606.655906][ T9426] Call trace: [ 606.655952][ T9426] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 606.656067][ T9426] r7:00000d40 r6:00000000 r5:60000013 r4:82252390 [ 606.656091][ T9426] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 606.656152][ T9426] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 606.656209][ T9426] r5:83a50000 r4:82918810 [ 606.656230][ T9426] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 606.656293][ T9426] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 606.656372][ T9426] r8:00000000 r7:00000d40 r6:0000001f r5:8533bffc r4:83001240 [ 606.656390][ T9426] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 606.656444][ T9426] [<8050a268>] (__kmalloc_noprof) from [<807d2f10>] (tomoyo_encode2+0x64/0xf0) [ 606.656515][ T9426] r10:00000fff r9:84e70c00 r8:00000000 r7:8373a198 r6:848a8868 r5:8533bffc [ 606.656539][ T9426] r4:8533bfe8 [ 606.656559][ T9426] [<807d2eac>] (tomoyo_encode2) from [<807d2fc0>] (tomoyo_encode+0x24/0x30) [ 606.656724][ T9426] r9:84e70c00 r8:00000000 r7:8373a198 r6:848a8868 r5:00001000 r4:8533bfe9 [ 606.656747][ T9426] [<807d2f9c>] (tomoyo_encode) from [<807d304c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 606.656815][ T9426] r5:00001000 r4:8533b000 [ 606.656838][ T9426] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 606.656910][ T9426] r10:83a50000 r9:00000000 r8:848a8840 r7:00005450 r6:00000004 r5:81cd6588 [ 606.656936][ T9426] r4:848a8868 r3:826c1240 [ 606.656957][ T9426] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 606.657029][ T9426] r9:00000003 r8:848a8840 r7:00000000 r6:00000000 r5:00005450 r4:848a8840 [ 606.657052][ T9426] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 606.657111][ T9426] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 606.657178][ T9426] r7:00000000 r6:848a8841 r5:00000000 r4:00005450 [ 606.657197][ T9426] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 606.657246][ T9426] Exception stack(0xeab35fa8 to 0xeab35ff0) [ 606.657289][ T9426] 5fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 606.657322][ T9426] 5fc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76f440bc [ 606.657351][ T9426] 5fe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 606.657388][ T9426] r10:00000036 r9:83a50000 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 606.657409][ T9426] r4:00000000 [ 606.667436][ T9426] ERROR: Out of memory at tomoyo_realpath_from_path. [ 606.748471][ T9428] FAULT_INJECTION: forcing a failure. [ 606.748471][ T9428] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.750376][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.1.1475 Not tainted syzkaller #0 PREEMPT [ 606.750544][ T9428] Hardware name: ARM-Versatile Express [ 606.750577][ T9428] Call trace: [ 606.750621][ T9428] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 606.750697][ T9428] r7:00000000 r6:00000000 r5:60010013 r4:82252390 [ 606.750707][ T9428] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 606.750745][ T9428] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 606.750817][ T9428] r5:83a53c00 r4:82918864 [ 606.750831][ T9428] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 606.750872][ T9428] [<809869b4>] (should_fail_ex) from [<8052ee94>] (should_fail_alloc_page+0x68/0x74) [ 606.750913][ T9428] r8:00000001 r7:00000000 r6:00000000 r5:00140cca r4:eab35de8 [ 606.750922][ T9428] [<8052ee2c>] (should_fail_alloc_page) from [<804f6fa4>] (prepare_alloc_pages.constprop.0+0x94/0x1b0) [ 606.750983][ T9428] [<804f6f10>] (prepare_alloc_pages.constprop.0) from [<804ff56c>] (__alloc_frozen_pages_noprof+0xac/0x1104) [ 606.751050][ T9428] r10:eab35fb0 r9:00000000 r8:83a53c00 r7:00000040 r6:00140cca r5:83a53c00 [ 606.751063][ T9428] r4:00000000 r3:eab35de8 [ 606.751071][ T9428] [<804ff4c0>] (__alloc_frozen_pages_noprof) from [<80500638>] (__folio_alloc_noprof+0x14/0x6c) [ 606.751110][ T9428] r10:eab35fb0 r9:84891200 r8:00000001 r7:00000040 r6:76f42e69 r5:83a53c00 [ 606.751120][ T9428] r4:00001255 [ 606.751134][ T9428] [<80500624>] (__folio_alloc_noprof) from [<804d081c>] (handle_mm_fault+0xcec/0x14e0) [ 606.751203][ T9428] r5:83a53c00 r4:00001255 [ 606.751218][ T9428] [<804cfb30>] (handle_mm_fault) from [<802342f0>] (do_page_fault+0x1c8/0x49c) [ 606.751265][ T9428] r10:00000002 r9:83ffdd40 r8:00000255 r7:83a53c00 r6:00000a07 r5:76f42e69 [ 606.751274][ T9428] r4:eab35fb0 [ 606.751426][ T9428] [<80234128>] (do_page_fault) from [<802347ac>] (do_DataAbort+0x38/0xa8) [ 606.751565][ T9428] r10:00440000 r9:76f42e60 r8:80234128 r7:eab35fb0 r6:76f42e69 r5:00000a07 [ 606.751589][ T9428] r4:8281d0c8 [ 606.751611][ T9428] [<80234774>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 606.751657][ T9428] Exception stack(0xeab35fb0 to 0xeab35ff8) [ 606.751686][ T9428] 5fa0: 76f42e69 00000000 00000077 76f42e69 [ 606.751706][ T9428] 5fc0: 00000009 00000080 0018a3d0 76f42e60 00000003 76f42e60 00440000 00000000 [ 606.751723][ T9428] 5fe0: 0018a3d9 76f41df0 00119c40 001183e0 20000010 ffffffff [ 606.751743][ T9428] r8:826b8044 r7:83a53c00 r6:ffffffff r5:20000010 r4:001183e0 [ 606.770998][ T9428] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 607.022951][ T723] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 607.189638][ T723] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 607.189912][ T723] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 607.201580][ T723] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.201839][ T723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 607.202437][ T723] usb 2-1: SerialNumber: syz [ 607.212966][ T9428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.273589][ T3789] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 607.404274][ T3789] usb 1-1: device descriptor read/64, error -71 [ 607.430556][ T723] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 607.438481][ T723] usb 2-1: USB disconnect, device number 21 [ 607.640102][ T29] audit: type=1800 audit(607.540:395): pid=9447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1477" name="/newroot/216" dev="tmpfs" ino=1144 res=0 errno=0 [ 607.644456][ T3789] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 607.773112][ T3789] usb 1-1: device descriptor read/64, error -71 [ 607.883878][ T3789] usb usb1-port1: attempt power cycle [ 608.223344][ T3789] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 608.245956][ T3789] usb 1-1: device descriptor read/8, error -71 [ 608.493541][ T3789] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 608.520076][ T3789] usb 1-1: device descriptor read/8, error -71 [ 608.625551][ T3789] usb usb1-port1: unable to enumerate USB device [ 609.670874][ T9461] FAULT_INJECTION: forcing a failure. [ 609.670874][ T9461] name failslab, interval 1, probability 0, space 0, times 0 [ 609.674286][ T9461] CPU: 0 UID: 0 PID: 9461 Comm: syz.1.1481 Not tainted syzkaller #0 PREEMPT [ 609.674404][ T9461] Hardware name: ARM-Versatile Express [ 609.674432][ T9461] Call trace: [ 609.674473][ T9461] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 609.674612][ T9461] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 609.674637][ T9461] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 609.674694][ T9461] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 609.674755][ T9461] r5:841d9800 r4:82918810 [ 609.674770][ T9461] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 609.674831][ T9461] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 609.674904][ T9461] r8:00000020 r7:00000000 r6:00000cc0 r5:76f42e60 r4:83001240 [ 609.674921][ T9461] [<8052ed98>] (should_failslab) from [<8050f770>] (__kmalloc_cache_noprof+0x4c/0x44c) [ 609.674973][ T9461] [<8050f724>] (__kmalloc_cache_noprof) from [<8106cf94>] (raw_ioctl_init+0x10c/0x340) [ 609.675046][ T9461] r10:841d9800 r9:824576c0 r8:843af240 r7:b5403587 r6:84ed3000 r5:76f42e60 [ 609.675064][ T9461] r4:00000000 [ 609.675078][ T9461] [<8106ce88>] (raw_ioctl_init) from [<8106e624>] (raw_ioctl+0x3f0/0x1094) [ 609.675141][ T9461] r10:841d9800 r9:00000004 r8:843af240 r7:76f42e60 r6:76f42e60 r5:00000000 [ 609.675159][ T9461] r4:84ed3000 [ 609.675173][ T9461] [<8106e234>] (raw_ioctl) from [<805786e0>] (sys_ioctl+0x130/0xba0) [ 609.675238][ T9461] r10:841d9800 r9:00000004 r8:843af240 r7:76f42e60 r6:843af241 r5:00000000 [ 609.675257][ T9461] r4:41015500 [ 609.675271][ T9461] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 609.675317][ T9461] Exception stack(0xeab35fa8 to 0xeab35ff0) [ 609.675360][ T9461] 5fa0: 00000004 76f42e70 00000004 41015500 76f42e60 76f41e00 [ 609.675396][ T9461] 5fc0: 00000004 76f42e70 76f41e70 00000036 00000002 76f42e60 00440000 00000000 [ 609.675421][ T9461] 5fe0: 00000000 76f41de8 002e8000 00131edc [ 609.675488][ T9461] r10:00000036 r9:841d9800 r8:8020029c r7:00000036 r6:76f41e70 r5:76f42e70 [ 609.675509][ T9461] r4:00000004 [ 609.950610][ T29] audit: type=1800 audit(609.850:396): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1482" name="/newroot/221" dev="tmpfs" ino=1171 res=0 errno=0 [ 616.514846][ T9508] binder: 9507:9508 ioctl 40084149 0 returned -22 [ 617.141607][ T29] audit: type=1400 audit(617.040:397): avc: denied { lock } for pid=9516 comm="syz.0.1499" path="socket:[19821]" dev="sockfs" ino=19821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 618.729627][ T9538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9538 comm=syz.0.1507 [ 618.859247][ T9538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9538 comm=syz.0.1507 [ 619.000188][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.010437][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.030247][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.034281][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.223329][ T3788] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 619.373397][ T3788] usb 1-1: Using ep0 maxpacket: 16 [ 619.394498][ T3788] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 619.397425][ T3788] usb 1-1: config 1 interface 0 has no altsetting 0 [ 619.415173][ T3788] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.40 [ 619.416957][ T3788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.418719][ T3788] usb 1-1: Product: 燑äºé›èž¿íŠªíž¤ä›ªã–«í—¨é°½à¥©ã…†á´¶â™åˆî¬œè•¦è¾ã‡•æ‘¼åµŠâ†€æ˜ªä­±è—¦î䵪î®ëªà¢Šä‡»åŽ¦â¾Šéš”⿂篽峸櫾ᢒ묺ë–晪엠䧢וּ섿å¨éº±ä–žì–½í鼅⯣ܤ◺兖ã™äŽ‹ [ 619.423340][ T3788] usb 1-1: Manufacturer: „ [ 619.425608][ T3788] usb 1-1: SerialNumber: ⋛譀똘ê³ì’¶ï§Šäºƒà¯¢å¯¤î¹œã»â±ã·“ືæ↔ãºà¨ˆî’앵ë†ãŠ ê¿ï€¥î¸®ë‚䭕崂ⷎæ±ã­á¿ ä´î‘—盺ãˆç´ˆî·³â¡ï¥£â›äŠîƒ’㿆깟⹇ﾓ擜홴ëŸã³ºèƒ±à«î–ªåœ¸â¶¨ã§œí‘⡃떃꛶燐ï™ë¤„瀢③ꆨ妀쩜往슫೴̴á­éˆ›é°ˆë³ï¯“ [ 619.681001][ T3788] usbhid 1-1:1.0: can't add hid device: -71 [ 619.681811][ T3788] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 619.706716][ T3788] usb 1-1: USB disconnect, device number 40 [ 626.430085][ T29] audit: type=1400 audit(626.330:398): avc: denied { accept } for pid=9599 comm="syz.1.1521" dev="sockfs" ino=19939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 626.675941][ T9601] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9601 comm=syz.1.1521 [ 626.804768][ T45] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 627.190677][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.191114][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 627.191443][ T45] usb 1-1: SerialNumber: syz [ 627.299102][ T45] cdc_ether 1-1:1.0: skipping garbage [ 627.304602][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 627.496992][ T1805] usb 1-1: USB disconnect, device number 41 [ 629.853391][ T9628] FAULT_INJECTION: forcing a failure. [ 629.853391][ T9628] name failslab, interval 1, probability 0, space 0, times 0 [ 629.857230][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.1.1527 Not tainted syzkaller #0 PREEMPT [ 629.857368][ T9628] Hardware name: ARM-Versatile Express [ 629.857394][ T9628] Call trace: [ 629.857434][ T9628] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 629.857546][ T9628] r7:00000d40 r6:00000000 r5:60000013 r4:82252390 [ 629.857563][ T9628] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 629.857614][ T9628] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 629.857670][ T9628] r5:839a0000 r4:82918810 [ 629.857689][ T9628] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 629.857750][ T9628] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 629.857826][ T9628] r8:00000000 r7:00000d40 r6:00000022 r5:841cdffc r4:83001240 [ 629.857844][ T9628] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 629.857895][ T9628] [<8050a268>] (__kmalloc_noprof) from [<807d2f10>] (tomoyo_encode2+0x64/0xf0) [ 629.857972][ T9628] r10:00000fff r9:83850800 r8:00000000 r7:8340e440 r6:843af4a8 r5:841cdffc [ 629.857994][ T9628] r4:841cdfe5 [ 629.858010][ T9628] [<807d2eac>] (tomoyo_encode2) from [<807d2fc0>] (tomoyo_encode+0x24/0x30) [ 629.858076][ T9628] r9:83850800 r8:00000000 r7:8340e440 r6:843af4a8 r5:00001000 r4:841cdfe6 [ 629.858093][ T9628] [<807d2f9c>] (tomoyo_encode) from [<807d304c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 629.858146][ T9628] r5:00001000 r4:841cd000 [ 629.858162][ T9628] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 629.858228][ T9628] r10:839a0000 r9:00000000 r8:843af480 r7:00005451 r6:00000004 r5:81cd6588 [ 629.858251][ T9628] r4:843af4a8 r3:826c1240 [ 629.858267][ T9628] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 629.858333][ T9628] r9:00000003 r8:843af480 r7:00000000 r6:00000000 r5:00005451 r4:843af480 [ 629.858350][ T9628] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 629.858403][ T9628] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 629.858461][ T9628] r7:00000000 r6:843af481 r5:00000000 r4:00005451 [ 629.858476][ T9628] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 629.858517][ T9628] Exception stack(0xdf9edfa8 to 0xdf9edff0) [ 629.858558][ T9628] dfa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 629.858592][ T9628] dfc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76f440bc [ 629.858618][ T9628] dfe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 629.858652][ T9628] r10:00000036 r9:839a0000 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 629.858672][ T9628] r4:00000000 [ 629.878078][ T9628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 630.031758][ T9634] FAULT_INJECTION: forcing a failure. [ 630.031758][ T9634] name failslab, interval 1, probability 0, space 0, times 0 [ 630.033975][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.1.1530 Not tainted syzkaller #0 PREEMPT [ 630.034079][ T9634] Hardware name: ARM-Versatile Express [ 630.034102][ T9634] Call trace: [ 630.034137][ T9634] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 630.034236][ T9634] r7:00000cc0 r6:00000000 r5:60000013 r4:82252390 [ 630.034253][ T9634] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 630.034303][ T9634] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 630.034355][ T9634] r5:839a0c00 r4:82918810 [ 630.034373][ T9634] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 630.034433][ T9634] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 630.034511][ T9634] r8:00000000 r7:00000cc0 r6:00000018 r5:00000017 r4:83001240 [ 630.034530][ T9634] [<8052ed98>] (should_failslab) from [<80511374>] (__kmalloc_node_track_caller_noprof+0xa0/0x574) [ 630.034584][ T9634] [<805112d4>] (__kmalloc_node_track_caller_noprof) from [<804a4684>] (kstrdup+0x38/0x64) [ 630.034724][ T9634] r10:82c319dc r9:00000000 r8:828f5680 r7:8031c5a0 r6:dfa31e78 r5:00000017 [ 630.034746][ T9634] r4:00000cc0 [ 630.034761][ T9634] [<804a464c>] (kstrdup) from [<8031c5a0>] (__request_module+0xfc/0x2c0) [ 630.034826][ T9634] r7:839a0c00 r6:817a0cbc r5:00000002 r4:85018040 [ 630.034845][ T9634] [<8031c4a4>] (__request_module) from [<817a0cbc>] (inet_create+0x340/0x364) [ 630.034909][ T9634] r3:00000003 r2:00000002 r1:82419188 [ 630.034949][ T9634] r8:82c319d8 r7:85091e00 r6:83762500 r5:ffffffa3 r4:00000003 [ 630.034969][ T9634] [<817a097c>] (inet_create) from [<8155533c>] (__sock_create+0xfc/0x228) [ 630.035042][ T9634] r10:81e66334 r9:85091e00 r8:83762500 r7:00000003 r6:817a097c r5:00000002 [ 630.035061][ T9634] r4:00000002 [ 630.035078][ T9634] [<81555240>] (__sock_create) from [<81557b5c>] (__sys_socket+0x94/0x10c) [ 630.035144][ T9634] r10:00000119 r9:839a0c00 r8:8020029c r7:00000119 r6:839a0c00 r5:00000002 [ 630.035164][ T9634] r4:00000002 [ 630.035180][ T9634] [<81557ac8>] (__sys_socket) from [<81557be4>] (sys_socket+0x10/0x14) [ 630.035235][ T9634] r6:001304b8 r5:00000000 r4:00000000 [ 630.035251][ T9634] [<81557bd4>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 630.035293][ T9634] Exception stack(0xdfa31fa8 to 0xdfa31ff0) [ 630.035327][ T9634] 1fa0: 00000000 00000000 00000002 00000002 00000003 00000000 [ 630.035361][ T9634] 1fc0: 00000000 00000000 001304b8 00000119 00300000 00000000 00006364 76f440bc [ 630.035385][ T9634] 1fe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 631.451525][ T9661] FAULT_INJECTION: forcing a failure. [ 631.451525][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.462786][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.0.1537 Not tainted syzkaller #0 PREEMPT [ 631.462877][ T9661] Hardware name: ARM-Versatile Express [ 631.462890][ T9661] Call trace: [ 631.462912][ T9661] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 631.463010][ T9661] r7:dfad9e20 r6:00000000 r5:60000013 r4:82252390 [ 631.463023][ T9661] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 631.463051][ T9661] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 631.463080][ T9661] r5:839a0000 r4:8294f590 [ 631.463087][ T9661] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 631.463117][ T9661] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 631.463149][ T9661] r8:00000050 r7:dfad9e20 r6:20000c80 r5:00000000 r4:dfad9f20 [ 631.463158][ T9661] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 631.463180][ T9661] [<80986bf4>] (should_fail_usercopy) from [<81558ee8>] (copy_msghdr_from_user+0x50/0x130) [ 631.463209][ T9661] [<81558e98>] (copy_msghdr_from_user) from [<81559040>] (___sys_sendmsg+0x78/0xd0) [ 631.463242][ T9661] r8:00000050 r7:00000000 r6:83762280 r5:dfad9f20 r4:dfad9e64 [ 631.463250][ T9661] [<81558fc8>] (___sys_sendmsg) from [<815594fc>] (__sys_sendmsg+0x8c/0xe0) [ 631.463284][ T9661] r10:00000128 r9:839a0000 r8:843af540 r7:00000050 r6:20000c80 r5:843af541 [ 631.463294][ T9661] r4:00000004 [ 631.463302][ T9661] [<81559470>] (__sys_sendmsg) from [<81559564>] (sys_sendmsg+0x14/0x18) [ 631.463334][ T9661] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 631.463342][ T9661] [<81559550>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 631.463367][ T9661] Exception stack(0xdfad9fa8 to 0xdfad9ff0) [ 631.463388][ T9661] 9fa0: 00000000 00000000 00000004 20000c80 00000050 00000000 [ 631.463406][ T9661] 9fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76fe70bc [ 631.463419][ T9661] 9fe0: 76fe6ec0 76fe6eb0 000195a4 00132510 [ 633.741129][ T29] audit: type=1400 audit(633.640:399): avc: denied { create } for pid=9685 comm="syz.1.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 635.458226][ T9715] can: request_module (can-proto-0) failed. [ 636.091053][ T9730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9730 comm=syz.1.1562 [ 636.097829][ T9730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9730 comm=syz.1.1562 [ 637.381846][ T9749] ======================================================= [ 637.381846][ T9749] WARNING: The mand mount option has been deprecated and [ 637.381846][ T9749] and is ignored by this kernel. Remove the mand [ 637.381846][ T9749] option from the mount to silence this warning. [ 637.381846][ T9749] ======================================================= [ 637.385646][ T9749] fuse: Bad value for 'rootmode' [ 637.923554][ T9756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9756 comm=syz.1.1571 [ 638.443578][ T9771] FAULT_INJECTION: forcing a failure. [ 638.443578][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 638.444168][ T9771] CPU: 1 UID: 0 PID: 9771 Comm: syz.1.1576 Not tainted syzkaller #0 PREEMPT [ 638.444278][ T9771] Hardware name: ARM-Versatile Express [ 638.444309][ T9771] Call trace: [ 638.444377][ T9771] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 638.444514][ T9771] r7:00000c40 r6:00000000 r5:60000013 r4:82252390 [ 638.444536][ T9771] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 638.444595][ T9771] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 638.444650][ T9771] r5:8427d400 r4:82918810 [ 638.444664][ T9771] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 638.444723][ T9771] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 638.444835][ T9771] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 638.444858][ T9771] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 638.444919][ T9771] [<8050a268>] (__kmalloc_noprof) from [<807d3008>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 638.445010][ T9771] r10:8427d400 r9:8309e400 r8:00000000 r7:834e1660 r6:848a8928 r5:00001000 [ 638.445033][ T9771] r4:00000000 [ 638.445050][ T9771] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 638.445119][ T9771] r10:8427d400 r9:00000000 r8:848a8900 r7:00008905 r6:00000004 r5:81cd6588 [ 638.445141][ T9771] r4:848a8928 r3:826c1240 [ 638.445166][ T9771] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 638.445229][ T9771] r9:00000004 r8:848a8900 r7:00000000 r6:00000000 r5:00008905 r4:848a8900 [ 638.445247][ T9771] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 638.445304][ T9771] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 638.445367][ T9771] r7:00000000 r6:848a8901 r5:00000000 r4:00008905 [ 638.445387][ T9771] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 638.445435][ T9771] Exception stack(0xea2c9fa8 to 0xea2c9ff0) [ 638.445475][ T9771] 9fa0: 00000000 00000000 00000004 00008905 00000000 00000000 [ 638.445511][ T9771] 9fc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76f440bc [ 638.445540][ T9771] 9fe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 638.445578][ T9771] r10:00000036 r9:8427d400 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 638.445634][ T9771] r4:00000000 [ 638.445683][ T9771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 639.481528][ T9778] FAULT_INJECTION: forcing a failure. [ 639.481528][ T9778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.493121][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.1.1579 Not tainted syzkaller #0 PREEMPT [ 639.493294][ T9778] Hardware name: ARM-Versatile Express [ 639.493324][ T9778] Call trace: [ 639.493427][ T9778] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 639.493559][ T9778] r7:000000ad r6:00000000 r5:60000113 r4:82252390 [ 639.493585][ T9778] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 639.493647][ T9778] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 639.493710][ T9778] r5:839a0c00 r4:8294f590 [ 639.493727][ T9778] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 639.493914][ T9778] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 639.494013][ T9778] r8:00000000 r7:000000ad r6:76f43bb8 r5:76f43b38 r4:ea2c9fb0 [ 639.494031][ T9778] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 639.494084][ T9778] [<80986bf4>] (should_fail_usercopy) from [<8022b540>] (restore_sigframe+0x4c/0x210) [ 639.494146][ T9778] [<8022b4f4>] (restore_sigframe) from [<8022b7a8>] (sys_rt_sigreturn+0x44/0x74) [ 639.494213][ T9778] r7:000000ad r6:001304b8 r5:76f43b38 r4:ea2c9fb0 [ 639.494232][ T9778] [<8022b764>] (sys_rt_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 639.494283][ T9778] Exception stack(0xea2c9fa8 to 0xea2c9ff0) [ 639.494333][ T9778] 9fa0: 00000000 00000000 000002a3 76f43b38 76f43bb8 00000000 [ 639.494373][ T9778] 9fc0: 00000000 00000000 001304b8 000000ad 00300000 00000000 00006364 76f440bc [ 639.494403][ T9778] 9fe0: 76f43ec0 76f43b38 0015aea0 000ef5e8 [ 639.494432][ T9778] r5:00000000 r4:00000000 [ 641.481432][ T9795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=9795 comm=syz.1.1585 [ 643.616239][ T9822] FAULT_INJECTION: forcing a failure. [ 643.616239][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.617282][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.1.1596 Not tainted syzkaller #0 PREEMPT [ 643.617354][ T9822] Hardware name: ARM-Versatile Express [ 643.617368][ T9822] Call trace: [ 643.617388][ T9822] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 643.617454][ T9822] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 643.617467][ T9822] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 643.617497][ T9822] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 643.617530][ T9822] r5:839a4800 r4:8294f590 [ 643.617538][ T9822] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 643.617571][ T9822] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 643.617608][ T9822] r8:ea6f5eb8 r7:00000000 r6:00000001 r5:76f43f30 r4:00000001 [ 643.617616][ T9822] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 643.617640][ T9822] [<80986bf4>] (should_fail_usercopy) from [<808cff88>] (kstrtouint_from_user+0x54/0x13c) [ 643.617673][ T9822] [<808cff34>] (kstrtouint_from_user) from [<8061746c>] (proc_fail_nth_write+0x40/0xf0) [ 643.617713][ T9822] r8:ea6f5f68 r7:839a4800 r6:00000001 r5:843af240 r4:00000001 [ 643.617722][ T9822] [<8061742c>] (proc_fail_nth_write) from [<8055f738>] (vfs_write+0xac/0x44c) [ 643.617754][ T9822] r5:843af240 r4:8061742c [ 643.617763][ T9822] [<8055f68c>] (vfs_write) from [<8055fc48>] (ksys_write+0x74/0xe8) [ 643.617802][ T9822] r10:00000004 r9:839a4800 r8:8020029c r7:00000000 r6:00000002 r5:843af240 [ 643.617813][ T9822] r4:843af243 [ 643.617822][ T9822] [<8055fbd4>] (ksys_write) from [<8055fccc>] (sys_write+0x10/0x14) [ 643.617858][ T9822] r7:00000004 r6:00000004 r5:76f43f30 r4:00000001 [ 643.617867][ T9822] [<8055fcbc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 643.617894][ T9822] Exception stack(0xea6f5fa8 to 0xea6f5ff0) [ 643.617918][ T9822] 5fa0: 00000001 76f43f30 00000004 76f43f30 00000001 00000000 [ 643.617944][ T9822] 5fc0: 00000001 76f43f30 00000004 00000004 00300000 00000000 00006364 76f440bc [ 643.617960][ T9822] 5fe0: 00000158 76f43ed0 000d81d0 001304a4 [ 644.701015][ T8968] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 644.853265][ T8968] usb 1-1: Invalid ep0 maxpacket: 16 [ 644.983033][ T8968] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 644.993500][ T9845] FAULT_INJECTION: forcing a failure. [ 644.993500][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 644.994386][ T9845] CPU: 0 UID: 0 PID: 9845 Comm: syz.1.1604 Not tainted syzkaller #0 PREEMPT [ 644.994454][ T9845] Hardware name: ARM-Versatile Express [ 644.994469][ T9845] Call trace: [ 644.994488][ T9845] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 644.994570][ T9845] r7:00000c40 r6:00000000 r5:60000013 r4:82252390 [ 644.994586][ T9845] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 644.994615][ T9845] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 644.994645][ T9845] r5:839a0c00 r4:82918810 [ 644.994652][ T9845] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 644.994683][ T9845] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 644.994723][ T9845] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 644.994731][ T9845] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 644.994760][ T9845] [<8050a268>] (__kmalloc_noprof) from [<807d3008>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 644.994798][ T9845] r10:839a0c00 r9:8309e400 r8:00000000 r7:8549b440 r6:843af4a8 r5:00001000 [ 644.994807][ T9845] r4:00000000 [ 644.994814][ T9845] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 644.994848][ T9845] r10:839a0c00 r9:00000000 r8:843af480 r7:00005450 r6:00000004 r5:81cd6588 [ 644.994859][ T9845] r4:843af4a8 r3:826c1240 [ 644.994867][ T9845] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 644.994901][ T9845] r9:00000003 r8:843af480 r7:00000015 r6:00000015 r5:00005450 r4:843af480 [ 644.994919][ T9845] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 644.994948][ T9845] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 644.994979][ T9845] r7:00000015 r6:843af481 r5:00000000 r4:00005450 [ 644.994987][ T9845] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 644.995010][ T9845] Exception stack(0xea7fdfa8 to 0xea7fdff0) [ 644.995029][ T9845] dfa0: 00000000 00000000 00000003 00005450 00000015 00000000 [ 644.995046][ T9845] dfc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76f440bc [ 644.995060][ T9845] dfe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 644.995078][ T9845] r10:00000036 r9:839a0c00 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 644.995087][ T9845] r4:00000000 [ 645.015664][ T9845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 645.143673][ T8968] usb 1-1: Invalid ep0 maxpacket: 16 [ 645.163029][ T8968] usb usb1-port1: attempt power cycle [ 645.575277][ T8968] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 645.636119][ T8968] usb 1-1: Invalid ep0 maxpacket: 16 [ 645.803218][ T8968] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 645.830306][ T8968] usb 1-1: Invalid ep0 maxpacket: 16 [ 645.833305][ T8968] usb usb1-port1: unable to enumerate USB device [ 646.968560][ T9857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=9857 comm=syz.1.1609 [ 653.388543][ T9862] SELinux: Context some 00000000000000000972 00000000000000000005 is not valid (left unmapped). [ 653.733558][ T1805] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 653.892815][ T1805] usb 1-1: Invalid ep0 maxpacket: 16 [ 654.022616][ T1805] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 654.193351][ T1805] usb 1-1: Invalid ep0 maxpacket: 16 [ 654.195825][ T1805] usb usb1-port1: attempt power cycle [ 654.648874][ T29] audit: type=1400 audit(654.550:400): avc: denied { connect } for pid=9877 comm="syz.0.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 655.789420][ T9896] FAULT_INJECTION: forcing a failure. [ 655.789420][ T9896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.789943][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.1.1623 Not tainted syzkaller #0 PREEMPT [ 655.790026][ T9896] Hardware name: ARM-Versatile Express [ 655.790133][ T9896] Call trace: [ 655.790257][ T9896] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 655.790380][ T9896] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 655.790421][ T9896] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 655.790477][ T9896] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 655.790533][ T9896] r5:841dc800 r4:8294f590 [ 655.790548][ T9896] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 655.790603][ T9896] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 655.790736][ T9896] r8:df965eb8 r7:00000000 r6:00000001 r5:76f43f30 r4:00000001 [ 655.790780][ T9896] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 655.790830][ T9896] [<80986bf4>] (should_fail_usercopy) from [<808cff88>] (kstrtouint_from_user+0x54/0x13c) [ 655.790886][ T9896] [<808cff34>] (kstrtouint_from_user) from [<8061746c>] (proc_fail_nth_write+0x40/0xf0) [ 655.790951][ T9896] r8:df965f68 r7:841dc800 r6:00000001 r5:848a8c00 r4:00000001 [ 655.790970][ T9896] [<8061742c>] (proc_fail_nth_write) from [<8055f738>] (vfs_write+0xac/0x44c) [ 655.791043][ T9896] r5:848a8c00 r4:8061742c [ 655.791071][ T9896] [<8055f68c>] (vfs_write) from [<8055fc48>] (ksys_write+0x74/0xe8) [ 655.791138][ T9896] r10:00000004 r9:841dc800 r8:8020029c r7:00000000 r6:00000002 r5:848a8c00 [ 655.791173][ T9896] r4:848a8c03 [ 655.791229][ T9896] [<8055fbd4>] (ksys_write) from [<8055fccc>] (sys_write+0x10/0x14) [ 655.791289][ T9896] r7:00000004 r6:00000004 r5:76f43f30 r4:00000001 [ 655.791334][ T9896] [<8055fcbc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 655.791381][ T9896] Exception stack(0xdf965fa8 to 0xdf965ff0) [ 655.791449][ T9896] 5fa0: 00000001 76f43f30 00000004 76f43f30 00000001 00000000 [ 655.791552][ T9896] 5fc0: 00000001 76f43f30 00000004 00000004 00300000 00000000 00006364 76f440bc [ 655.791580][ T9896] 5fe0: 00000158 76f43ed0 000d81d0 001304a4 [ 655.964165][ T9897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9897 comm=syz.0.1625 [ 656.105365][ T9900] FAULT_INJECTION: forcing a failure. [ 656.105365][ T9900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.105914][ T9900] CPU: 1 UID: 0 PID: 9900 Comm: syz.1.1626 Not tainted syzkaller #0 PREEMPT [ 656.106000][ T9900] Hardware name: ARM-Versatile Express [ 656.106114][ T9900] Call trace: [ 656.106179][ T9900] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 656.106313][ T9900] r7:00000000 r6:00000000 r5:60000013 r4:82252390 [ 656.106336][ T9900] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 656.106415][ T9900] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 656.106505][ T9900] r5:841dbc00 r4:8294f590 [ 656.106523][ T9900] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 656.106597][ T9900] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 656.106689][ T9900] r8:dfb6deb8 r7:00000000 r6:00000001 r5:76f43f30 r4:00000001 [ 656.106734][ T9900] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 656.106783][ T9900] [<80986bf4>] (should_fail_usercopy) from [<808cff88>] (kstrtouint_from_user+0x54/0x13c) [ 656.106834][ T9900] [<808cff34>] (kstrtouint_from_user) from [<8061746c>] (proc_fail_nth_write+0x40/0xf0) [ 656.106896][ T9900] r8:dfb6df68 r7:841dbc00 r6:00000001 r5:848a8c00 r4:00000001 [ 656.106957][ T9900] [<8061742c>] (proc_fail_nth_write) from [<8055f738>] (vfs_write+0xac/0x44c) [ 656.107019][ T9900] r5:848a8c00 r4:8061742c [ 656.107042][ T9900] [<8055f68c>] (vfs_write) from [<8055fc48>] (ksys_write+0x74/0xe8) [ 656.107261][ T9900] r10:00000004 r9:841dbc00 r8:8020029c r7:00000000 r6:00000002 r5:848a8c00 [ 656.107289][ T9900] r4:848a8c03 [ 656.107306][ T9900] [<8055fbd4>] (ksys_write) from [<8055fccc>] (sys_write+0x10/0x14) [ 656.107370][ T9900] r7:00000004 r6:00000004 r5:76f43f30 r4:00000001 [ 656.107402][ T9900] [<8055fcbc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 656.107480][ T9900] Exception stack(0xdfb6dfa8 to 0xdfb6dff0) [ 656.107520][ T9900] dfa0: 00000001 76f43f30 00000004 76f43f30 00000001 00000000 [ 656.107555][ T9900] dfc0: 00000001 76f43f30 00000004 00000004 00300000 00000000 00006364 76f440bc [ 656.107624][ T9900] dfe0: 00000158 76f43ed0 000d81d0 001304a4 [ 659.660317][ T3788] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 659.861380][ T3788] usb 1-1: Using ep0 maxpacket: 32 [ 659.905270][ T3788] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 659.905582][ T3788] usb 1-1: config 0 has no interface number 0 [ 659.905891][ T3788] usb 1-1: config 0 interface 184 has no altsetting 0 [ 659.953076][ T3788] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 659.958403][ T3788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.958725][ T3788] usb 1-1: Product: syz [ 659.958895][ T3788] usb 1-1: Manufacturer: syz [ 659.959067][ T3788] usb 1-1: SerialNumber: syz [ 659.966692][ T3788] usb 1-1: config 0 descriptor?? [ 659.988376][ T3788] smsc75xx v1.0.0 [ 659.992058][ T3788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 660.003401][ T3788] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 660.011517][ T29] audit: type=1400 audit(659.910:401): avc: denied { setopt } for pid=9929 comm="syz.1.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 660.408476][ T8968] usb 1-1: USB disconnect, device number 49 [ 661.189805][ T9949] FAULT_INJECTION: forcing a failure. [ 661.189805][ T9949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.190892][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: syz.1.1638 Not tainted syzkaller #0 PREEMPT [ 661.190965][ T9949] Hardware name: ARM-Versatile Express [ 661.190979][ T9949] Call trace: [ 661.191001][ T9949] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 661.191065][ T9949] r7:200003c0 r6:00000000 r5:60000013 r4:82252390 [ 661.191092][ T9949] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 661.191141][ T9949] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 661.191192][ T9949] r5:83b4e000 r4:8294f590 [ 661.191209][ T9949] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 661.191264][ T9949] [<809869b4>] (should_fail_ex) from [<80986bf0>] (should_fail+0x14/0x18) [ 661.191301][ T9949] r8:00000000 r7:200003c0 r6:84caf200 r5:00000000 r4:e40e1f20 [ 661.191310][ T9949] [<80986bdc>] (should_fail) from [<80986c10>] (should_fail_usercopy+0x1c/0x20) [ 661.191335][ T9949] [<80986bf4>] (should_fail_usercopy) from [<808c72c4>] (_copy_from_iter+0x6c/0x7d8) [ 661.191367][ T9949] [<808c7258>] (_copy_from_iter) from [<816866d8>] (netlink_sendmsg+0x18c/0x444) [ 661.191416][ T9949] r10:00000000 r9:00000000 r8:e40e1f30 r7:85179000 r6:00000014 r5:84895480 [ 661.191427][ T9949] r4:e40e1f20 [ 661.191436][ T9949] [<8168654c>] (netlink_sendmsg) from [<815568d4>] (__sock_sendmsg+0x44/0x78) [ 661.191531][ T9949] r10:00000000 r9:e40e1dc4 r8:e40e1dc4 r7:00000000 r6:83763400 r5:e40e1f20 [ 661.191542][ T9949] r4:00000000 [ 661.191551][ T9949] [<81556890>] (__sock_sendmsg) from [<8155709c>] (____sys_sendmsg+0x298/0x2cc) [ 661.191585][ T9949] r7:00000000 r6:83763400 r5:00008880 r4:e40e1f20 [ 661.191594][ T9949] [<81556e04>] (____sys_sendmsg) from [<81559064>] (___sys_sendmsg+0x9c/0xd0) [ 661.191633][ T9949] r10:e40e1e24 r9:20000b40 r8:00008880 r7:00000000 r6:83763400 r5:e40e1f20 [ 661.191643][ T9949] r4:00000000 [ 661.191651][ T9949] [<81558fc8>] (___sys_sendmsg) from [<815594fc>] (__sys_sendmsg+0x8c/0xe0) [ 661.191698][ T9949] r10:00000128 r9:83b4e000 r8:843af900 r7:00008880 r6:20000b40 r5:843af901 [ 661.191708][ T9949] r4:00000004 [ 661.191717][ T9949] [<81559470>] (__sys_sendmsg) from [<81559564>] (sys_sendmsg+0x14/0x18) [ 661.191755][ T9949] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 661.191764][ T9949] [<81559550>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 661.191792][ T9949] Exception stack(0xe40e1fa8 to 0xe40e1ff0) [ 661.191814][ T9949] 1fa0: 00000000 00000000 00000004 20000b40 00008880 00000000 [ 661.191834][ T9949] 1fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76f440bc [ 661.191849][ T9949] 1fe0: 76f43ec0 76f43eb0 000195a4 00132510 [ 661.673742][ T29] audit: type=1400 audit(661.570:402): avc: denied { name_bind } for pid=9952 comm="syz.1.1640" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 661.757895][ T9954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9954 comm=syz.1.1640 [ 662.624717][ T9985] FAULT_INJECTION: forcing a failure. [ 662.624717][ T9985] name failslab, interval 1, probability 0, space 0, times 0 [ 662.625328][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.0.1644 Not tainted syzkaller #0 PREEMPT [ 662.625415][ T9985] Hardware name: ARM-Versatile Express [ 662.625441][ T9985] Call trace: [ 662.625477][ T9985] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 662.625621][ T9985] r7:00000d40 r6:00000000 r5:60000013 r4:82252390 [ 662.625657][ T9985] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 662.625757][ T9985] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 662.625821][ T9985] r5:841d4800 r4:82918810 [ 662.625861][ T9985] [<8021f930>] (dump_stack) from [<80986b78>] (should_fail_ex+0x1c4/0x228) [ 662.625925][ T9985] [<809869b4>] (should_fail_ex) from [<8052ee04>] (should_failslab+0x6c/0x94) [ 662.625994][ T9985] r8:00000000 r7:00000d40 r6:00000024 r5:83b3affc r4:83001240 [ 662.626062][ T9985] [<8052ed98>] (should_failslab) from [<8050a304>] (__kmalloc_noprof+0x9c/0x568) [ 662.626126][ T9985] [<8050a268>] (__kmalloc_noprof) from [<807d2f10>] (tomoyo_encode2+0x64/0xf0) [ 662.626215][ T9985] r10:00000fff r9:8309e400 r8:00000000 r7:834d64c8 r6:848a8028 r5:83b3affc [ 662.626239][ T9985] r4:83b3afe3 [ 662.626257][ T9985] [<807d2eac>] (tomoyo_encode2) from [<807d2fc0>] (tomoyo_encode+0x24/0x30) [ 662.626360][ T9985] r9:8309e400 r8:00000000 r7:834d64c8 r6:848a8028 r5:00001000 r4:83b3afe4 [ 662.626379][ T9985] [<807d2f9c>] (tomoyo_encode) from [<807d304c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 662.626461][ T9985] r5:00001000 r4:83b3a000 [ 662.626498][ T9985] [<807d2fcc>] (tomoyo_realpath_from_path) from [<807cf14c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 662.626568][ T9985] r10:841d4800 r9:00000000 r8:848a8000 r7:0000125f r6:00000004 r5:81cd6588 [ 662.626592][ T9985] r4:848a8028 r3:826c1240 [ 662.626608][ T9985] [<807cf080>] (tomoyo_path_number_perm) from [<807d3a2c>] (tomoyo_file_ioctl+0x1c/0x20) [ 662.626686][ T9985] r9:00000004 r8:848a8000 r7:00000000 r6:00000000 r5:0000125f r4:848a8000 [ 662.626705][ T9985] [<807d3a10>] (tomoyo_file_ioctl) from [<807802f0>] (security_file_ioctl+0x64/0x1e4) [ 662.626762][ T9985] [<8078028c>] (security_file_ioctl) from [<805785fc>] (sys_ioctl+0x4c/0xba0) [ 662.626855][ T9985] r7:00000000 r6:848a8001 r5:00000000 r4:0000125f [ 662.626877][ T9985] [<805785b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 662.626926][ T9985] Exception stack(0xdfa25fa8 to 0xdfa25ff0) [ 662.626997][ T9985] 5fa0: 00000000 00000000 00000004 0000125f 00000000 00000000 [ 662.627036][ T9985] 5fc0: 00000000 00000000 001304b8 00000036 00300000 00000000 00006364 76fe70bc [ 662.627126][ T9985] 5fe0: 76fe6ec0 76fe6eb0 000195a4 00132510 [ 662.627169][ T9985] r10:00000036 r9:841d4800 r8:8020029c r7:00000036 r6:001304b8 r5:00000000 [ 662.627224][ T9985] r4:00000000 [ 662.627479][ T9985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 663.061044][ T29] audit: type=1400 audit(662.960:403): avc: denied { create } for pid=9988 comm="syz.0.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 665.189181][T10000] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 669.301917][T10032] netlink: 'syz.0.1663': attribute type 12 has an invalid length. [ 669.775004][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'. [ 669.777465][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'. [ 669.780577][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'. [ 671.145303][T10048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 671.152931][T10048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 671.155842][T10048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 671.174036][T10048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 671.667846][T10053] xt_l2tp: v2 sid > 0xffff: 2162688 [ 675.027188][ T29] audit: type=1400 audit(674.930:404): avc: denied { remount } for pid=10075 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 676.008460][ T29] audit: type=1400 audit(675.910:405): avc: denied { unmount } for pid=7164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 677.546064][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 678.451122][T10111] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 678.464734][T10111] dvmrp1: linktype set to 780 [ 681.404706][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1707'. [ 681.407539][ T29] audit: type=1400 audit(681.310:406): avc: denied { relabelfrom } for pid=10143 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 681.409077][ T29] audit: type=1400 audit(681.310:407): avc: denied { relabelto } for pid=10143 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 691.955209][T10244] syzkaller0: entered promiscuous mode [ 691.956887][T10244] syzkaller0: entered allmulticast mode [ 692.887775][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 692.925211][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 692.936784][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 695.143252][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1755'. [ 695.276524][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1755'. [ 695.393819][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1755'. [ 695.396791][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1755'. [ 698.926403][T10303] syzkaller0: entered promiscuous mode [ 698.927198][T10303] syzkaller0: entered allmulticast mode [ 702.421609][T10347] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1782'. [ 703.003938][T10353] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1785'. [ 703.004879][T10353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1785'. [ 704.494830][T10369] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1791'. [ 709.377193][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1802'. [ 709.389883][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1802'. [ 709.404278][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1802'. [ 709.576868][T10405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1804'. [ 711.143094][T10421] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 711.143499][T10421] netlink: 'syz.0.1810': attribute type 2 has an invalid length. [ 712.386746][T10438] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1816'. [ 716.754395][T10467] tap0: tun_chr_ioctl cmd 2148553947 [ 720.564426][T10515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10515 comm=syz.0.1841 [ 720.570564][T10510] netlink: 'syz.0.1841': attribute type 29 has an invalid length. [ 722.039297][T10530] syzkaller0: entered promiscuous mode [ 722.039862][T10530] syzkaller0: entered allmulticast mode [ 726.855385][T10600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1874'. [ 726.874975][T10600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1874'. [ 726.886134][T10600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1874'. [ 727.674416][T10611] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 729.725464][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 746.363607][T10714] syzkaller0: entered promiscuous mode [ 746.363854][T10714] syzkaller0: entered allmulticast mode [ 748.667953][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1929'. [ 748.679275][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1929'. [ 748.693574][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1929'. [ 750.393544][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 751.427782][T10785] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=10785 comm=syz.1.1944 [ 751.430561][ T29] audit: type=1400 audit(751.330:408): avc: denied { setopt } for pid=10780 comm="syz.1.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 752.169599][T10795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1947'. [ 752.235962][T10795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1947'. [ 752.343902][T10795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1947'. [ 754.117304][T10815] syzkaller0: entered promiscuous mode [ 754.118466][T10815] syzkaller0: entered allmulticast mode [ 758.162673][ T29] audit: type=1400 audit(758.050:409): avc: denied { create } for pid=10861 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 758.307429][ T29] audit: type=1400 audit(758.210:410): avc: denied { ioctl } for pid=10861 comm="syz.0.1972" path="socket:[23299]" dev="sockfs" ino=23299 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 758.376140][ T29] audit: type=1400 audit(758.280:411): avc: denied { write } for pid=10861 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 760.658053][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'. [ 763.480357][T10928] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1996'. [ 763.557837][T10930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.456835][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2008'. [ 768.027420][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 768.043504][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 768.049776][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 768.451162][ T29] audit: type=1400 audit(768.350:412): avc: denied { read } for pid=10971 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 770.154000][T10984] netlink: 'syz.1.2018': attribute type 46 has an invalid length. [ 783.412985][T10268] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 783.633126][T10268] usb 2-1: Using ep0 maxpacket: 16 [ 783.801924][T10268] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 783.802375][T10268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.802539][T10268] usb 2-1: Product: syz [ 783.802631][T10268] usb 2-1: Manufacturer: syz [ 783.802725][T10268] usb 2-1: SerialNumber: syz [ 783.807090][T10268] usb 2-1: config 0 descriptor?? [ 784.127109][T10268] usb 2-1: USB disconnect, device number 22 [ 794.053556][ T29] audit: type=1400 audit(793.950:413): avc: denied { write } for pid=11050 comm="syz.1.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 794.114832][ T29] audit: type=1400 audit(794.010:414): avc: denied { mount } for pid=11050 comm="syz.1.2041" name="/" dev="ramfs" ino=24581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 843.332952][T11100] SELinux: policydb magic number 0x20000300 does not match expected magic number 0xf97cff8c [ 843.335511][T11100] SELinux: failed to load policy [ 866.259393][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2054'. [ 892.167221][ T29] audit: type=1400 audit(892.060:415): avc: denied { name_bind } for pid=11123 comm="syz.0.2058" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 895.305370][T11120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.311117][T11120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.433773][T11120] hsr_slave_0: entered promiscuous mode [ 896.436372][T11120] hsr_slave_1: entered promiscuous mode [ 896.438021][T11120] debugfs: 'hsr0' already exists in 'hsr' [ 896.438773][T11120] Cannot create hsr debugfs directory [ 896.836150][T11120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.843593][T11120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.849871][T11120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.857253][T11120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 897.644395][T11120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.708323][T11120] veth0_vlan: entered promiscuous mode [ 899.737305][T11120] veth1_vlan: entered promiscuous mode [ 899.813372][T11120] veth0_macvtap: entered promiscuous mode [ 899.826574][T11120] veth1_macvtap: entered promiscuous mode [ 899.914886][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.916648][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.920308][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.921511][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.597859][T11493] syz.0.2065 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 952.681996][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.711833][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.808249][T11505] hsr_slave_0: entered promiscuous mode [ 954.815109][T11505] hsr_slave_1: entered promiscuous mode [ 954.825921][T11505] debugfs: 'hsr0' already exists in 'hsr' [ 954.826435][T11505] Cannot create hsr debugfs directory [ 955.738601][T11505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 955.766105][T11505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 955.778708][T11505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 955.816747][T11505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.991391][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.041681][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.055377][T11505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.147071][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.248818][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.653704][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.661163][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.677468][ T31] bond0 (unregistering): Released all slaves [ 958.784080][ T31] hsr_slave_0: left promiscuous mode [ 958.794664][ T31] hsr_slave_1: left promiscuous mode [ 958.873308][ T31] veth1_macvtap: left promiscuous mode [ 958.873638][ T31] veth0_macvtap: left promiscuous mode [ 958.873972][ T31] veth1_vlan: left promiscuous mode [ 958.874124][ T31] veth0_vlan: left promiscuous mode [ 963.447345][T11505] veth0_vlan: entered promiscuous mode [ 963.494864][T11505] veth1_vlan: entered promiscuous mode [ 963.640577][T11505] veth0_macvtap: entered promiscuous mode [ 963.660566][T11505] veth1_macvtap: entered promiscuous mode [ 963.765476][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.769888][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.770625][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.771668][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.397096][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 982.398989][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 1006.955433][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.965136][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.790891][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.850553][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.075754][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.165561][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.775539][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.789991][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.799129][ T56] bond0 (unregistering): Released all slaves [ 1010.918655][ T56] hsr_slave_0: left promiscuous mode [ 1010.930658][ T56] hsr_slave_1: left promiscuous mode [ 1010.964527][ T56] veth1_macvtap: left promiscuous mode [ 1010.964977][ T56] veth0_macvtap: left promiscuous mode [ 1010.965182][ T56] veth1_vlan: left promiscuous mode [ 1010.965324][ T56] veth0_vlan: left promiscuous mode [ 1050.747159][T12078] netlink: 'syz.0.2089': attribute type 12 has an invalid length. [ 1077.464890][T12094] pim6reg1: entered promiscuous mode [ 1077.466274][T12094] pim6reg1: entered allmulticast mode [ 1081.206211][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.235653][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.461648][T12088] hsr_slave_0: entered promiscuous mode [ 1083.476091][T12088] hsr_slave_1: entered promiscuous mode [ 1084.246527][T12088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1084.273238][T12088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1084.280184][T12088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1084.291707][T12088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1085.606409][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 1085.793655][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.251150][T12088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1087.265407][T12088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.219677][T12088] veth0_vlan: entered promiscuous mode [ 1094.293625][T12088] veth1_vlan: entered promiscuous mode [ 1094.498730][T12088] veth0_macvtap: entered promiscuous mode [ 1094.548844][T12088] veth1_macvtap: entered promiscuous mode [ 1094.815157][ T1090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.815708][T11577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.816037][T11577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.816470][T11577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.351220][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.360494][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.386460][ T1090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.471657][ T1090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.554971][ T1090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.653658][ T1090] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.233951][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.266596][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.271669][ T1090] bond0 (unregistering): Released all slaves [ 1155.430745][ T1090] hsr_slave_0: left promiscuous mode [ 1155.437752][ T1090] hsr_slave_1: left promiscuous mode [ 1155.515125][ T1090] veth1_macvtap: left promiscuous mode [ 1155.515628][ T1090] veth0_macvtap: left promiscuous mode [ 1155.515841][ T1090] veth1_vlan: left promiscuous mode [ 1155.515980][ T1090] veth0_vlan: left promiscuous mode [ 1198.470073][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.488063][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.564426][T12677] hsr_slave_0: entered promiscuous mode [ 1199.565771][T12677] hsr_slave_1: entered promiscuous mode [ 1199.570160][T12677] debugfs: 'hsr0' already exists in 'hsr' [ 1199.571655][T12677] Cannot create hsr debugfs directory [ 1200.005974][T12677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1200.014562][T12677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1200.021840][T12677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1200.029668][T12677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1200.980241][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.882125][T12677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.956329][T12677] veth0_vlan: entered promiscuous mode [ 1204.997866][T12677] veth1_vlan: entered promiscuous mode [ 1205.070629][T12677] veth0_macvtap: entered promiscuous mode [ 1205.087541][T12677] veth1_macvtap: entered promiscuous mode [ 1205.197193][T12554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.197716][T12554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.198349][T12554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.198596][T12554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.013035][T13031] SELinux: failed to load policy [ 1216.381415][T13037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.419289][T13037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.595252][T13037] hsr_slave_0: entered promiscuous mode [ 1218.596853][T13037] hsr_slave_1: entered promiscuous mode [ 1218.624674][T13037] debugfs: 'hsr0' already exists in 'hsr' [ 1218.625456][T13037] Cannot create hsr debugfs directory [ 1219.451811][T13037] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1219.479265][T13037] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1219.496923][T13037] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1219.535776][T13037] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1222.024467][T13037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.062019][T13037] veth0_vlan: entered promiscuous mode [ 1230.111072][T13037] veth1_vlan: entered promiscuous mode [ 1230.279339][T13037] veth0_macvtap: entered promiscuous mode [ 1230.301256][T13037] veth1_macvtap: entered promiscuous mode [ 1230.468514][T12561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.469335][T12561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.469470][T12561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.469537][T12561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.244796][ T1090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.385977][ T1090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.466671][ T1090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.565446][ T1090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.873586][T13445] input: syz0 as /devices/virtual/input/input8 [ 1250.957796][ T29] audit: type=1400 audit(1256.854:416): avc: denied { mount } for pid=13431 comm="syz.5.2121" name="/" dev="configfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1251.062969][ T29] audit: type=1400 audit(1256.874:417): avc: denied { search } for pid=13431 comm="syz.5.2121" name="/" dev="configfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1251.063394][ T29] audit: type=1400 audit(1256.874:418): avc: denied { search } for pid=13431 comm="syz.5.2121" name="/" dev="configfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1251.325203][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.364020][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.379243][ T1090] bond0 (unregistering): Released all slaves [ 1251.775674][ T1090] hsr_slave_0: left promiscuous mode [ 1251.778439][ T1090] hsr_slave_1: left promiscuous mode [ 1251.813645][ T1090] veth1_macvtap: left promiscuous mode [ 1251.815246][ T1090] veth0_macvtap: left promiscuous mode [ 1251.818910][ T1090] veth1_vlan: left promiscuous mode [ 1251.903720][ T1090] veth0_vlan: left promiscuous mode [ 1261.697698][ T29] audit: type=1326 audit(1267.594:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.698191][ T29] audit: type=1326 audit(1267.594:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.704123][ T29] audit: type=1326 audit(1267.604:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=355 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.704542][ T29] audit: type=1326 audit(1267.604:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.723071][ T29] audit: type=1326 audit(1267.604:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.735727][ T29] audit: type=1326 audit(1267.634:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=439 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.736245][ T29] audit: type=1326 audit(1267.634:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1261.736377][ T29] audit: type=1326 audit(1267.634:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.6.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 1262.390810][T13489] binder: BC_ACQUIRE_RESULT not supported [ 1262.433648][T13489] binder: 13487:13489 ioctl c0306201 200001c0 returned -22 [ 1271.776607][ T29] audit: type=1400 audit(1277.664:427): avc: denied { bind } for pid=13514 comm="syz.5.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1271.952950][T13515] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2129'. [ 1275.006204][ T29] audit: type=1400 audit(1280.904:428): avc: denied { write } for pid=13534 comm="syz.5.2136" path="socket:[28215]" dev="sockfs" ino=28215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1275.441150][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.453565][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.228703][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.243507][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.428436][T13558] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1302.786138][T13590] syzkaller0: entered promiscuous mode [ 1302.789593][T13590] syzkaller0: entered allmulticast mode [ 1312.369390][T12546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.457479][T12546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.525980][T12546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.630330][T12546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.067743][T12546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.080001][T12546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.091273][T12546] bond0 (unregistering): Released all slaves [ 1313.176600][T12546] hsr_slave_0: left promiscuous mode [ 1313.179052][T12546] hsr_slave_1: left promiscuous mode [ 1313.207340][T12546] veth1_macvtap: left promiscuous mode [ 1313.207923][T12546] veth0_macvtap: left promiscuous mode [ 1313.208159][T12546] veth1_vlan: left promiscuous mode [ 1313.208288][T12546] veth0_vlan: left promiscuous mode [ 1354.349093][T13717] syzkaller0: entered promiscuous mode [ 1354.350784][T13717] syzkaller0: entered allmulticast mode [ 1381.090768][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.106832][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.619702][T13727] hsr_slave_0: entered promiscuous mode [ 1382.625673][T13727] hsr_slave_1: entered promiscuous mode [ 1383.028652][T13727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1383.040312][T13727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1383.055033][T13727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1383.067266][T13727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1384.177259][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.079036][T13727] veth0_vlan: entered promiscuous mode [ 1387.100238][T13727] veth1_vlan: entered promiscuous mode [ 1387.175785][T13727] veth0_macvtap: entered promiscuous mode [ 1387.189550][T13727] veth1_macvtap: entered promiscuous mode [ 1387.261091][T12557] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.265620][T12557] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.266052][T12557] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.266279][T12557] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.369873][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.405595][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.825707][T14088] hsr_slave_0: entered promiscuous mode [ 1407.827711][T14088] hsr_slave_1: entered promiscuous mode [ 1407.835529][T14088] debugfs: 'hsr0' already exists in 'hsr' [ 1407.847984][T14088] Cannot create hsr debugfs directory [ 1408.435794][T14088] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1408.448601][T14088] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1408.458045][T14088] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1408.490110][T14088] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1409.895228][T14088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.208089][T14088] veth0_vlan: entered promiscuous mode [ 1417.264456][T14088] veth1_vlan: entered promiscuous mode [ 1417.486175][T14088] veth0_macvtap: entered promiscuous mode [ 1417.511828][T14088] veth1_macvtap: entered promiscuous mode [ 1417.766015][T12546] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.766913][T12546] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.767024][T12546] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.767099][T12546] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.418504][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.420236][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.359497][ T29] audit: type=1400 audit(1456.254:429): avc: denied { map } for pid=14456 comm="syz.8.2164" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1459.127991][T12561] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.224350][T12561] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.334179][T12561] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.431842][T12561] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.144087][T12561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.150118][T12561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.158298][T12561] bond0 (unregistering): Released all slaves [ 1460.312778][T12561] hsr_slave_0: left promiscuous mode [ 1460.325143][T12561] hsr_slave_1: left promiscuous mode [ 1460.346147][T12561] veth1_macvtap: left promiscuous mode [ 1460.346761][T12561] veth0_macvtap: left promiscuous mode [ 1460.346974][T12561] veth1_vlan: left promiscuous mode [ 1460.347108][T12561] veth0_vlan: left promiscuous mode [ 1462.869358][T12559] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.994350][T12559] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.099809][T12559] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.196973][T12559] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.969382][T12559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.983713][T12559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.988172][T12559] bond0 (unregistering): Released all slaves [ 1464.121379][T12559] hsr_slave_0: left promiscuous mode [ 1464.124710][T12559] hsr_slave_1: left promiscuous mode [ 1464.131858][T12559] veth1_macvtap: left promiscuous mode [ 1464.133937][T12559] veth0_macvtap: left promiscuous mode [ 1464.134411][T12559] veth1_vlan: left promiscuous mode [ 1464.134574][T12559] veth0_vlan: left promiscuous mode [ 1465.524901][T12559] ------------[ cut here ]------------ [ 1465.525389][T12559] WARNING: CPU: 1 PID: 1 ** replaying previous printk message ** [ 1465.525389][T12559] WARNING: CPU: 1 PID: 12559 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100 [ 1465.527497][T12559] Modules linked in: [ 1465.528865][T12559] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1465.529732][T12559] CPU: 1 UID: 0 PID: 12559 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT [ 1465.530725][T12559] Hardware name: ARM-Versatile Express [ 1465.532123][T12559] Workqueue: netns cleanup_net [ 1465.535504][T12559] Call trace: [ 1465.535945][T12559] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1465.536495][T12559] r7:82240688 r6:83a56000 r5:00000000 r4:82252390 [ 1465.539229][T12559] [<80201b08>] (show_stack) from [<8021f908>] (dump_stack_lvl+0x54/0x7c) [ 1465.542797][T12559] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 1465.543204][T12559] r5:00000000 r4:82a78d18 [ 1465.543386][T12559] [<8021f930>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8) [ 1465.543753][T12559] [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8) [ 1465.544130][T12559] r7:818b0088 [ 1465.544288][T12559] [<80202800>] (panic) from [<80252948>] (get_taint+0x0/0x1c) [ 1465.544645][T12559] r3:8280c684 r2:00000001 r1:82238bec r0:82240688 [ 1465.544903][T12559] [<802528d0>] (check_panic_on_warn) from [<80252aac>] (__warn+0x80/0x188) [ 1465.545282][T12559] [<80252a2c>] (__warn) from [<80252d2c>] (warn_slowpath_fmt+0x178/0x1f4) [ 1465.545645][T12559] r8:00000009 r7:82433000 r6:dfef9de4 r5:83a56000 r4:00000000 [ 1465.545932][T12559] [<80252bb8>] (warn_slowpath_fmt) from [<818b0088>] (xfrm6_tunnel_net_exit+0x94/0x100) [ 1465.546467][T12559] r10:00000001 r9:00000001 r8:829de39c r7:82433000 r6:82a0789c r5:85a66000 [ 1465.547031][T12559] r4:00000001 [ 1465.547285][T12559] [<818afff4>] (xfrm6_tunnel_net_exit) from [<81576ff8>] (ops_undo_list+0xe8/0x238) [ 1465.547806][T12559] r7:829f2540 r6:829de39c r5:85093c00 r4:dfef9e98 [ 1465.551213][T12559] [<81576f10>] (ops_undo_list) from [<81579190>] (cleanup_net+0x220/0x3a0) [ 1465.552674][T12559] r10:00000000 r9:ffffffd4 r8:850b4b00 r7:829de380 r6:829de358 r5:82c2c240 [ 1465.553042][T12559] r4:85093c20 [ 1465.553209][T12559] [<81578f70>] (cleanup_net) from [<802785a0>] (process_one_work+0x1b4/0x4f4) [ 1465.553629][T12559] r10:8300f470 r9:8301c815 r8:83a56000 r7:8300e600 r6:8301c800 r5:829de370 [ 1465.553983][T12559] r4:830ba400 [ 1465.554134][T12559] [<802783ec>] (process_one_work) from [<802791e8>] (worker_thread+0x1fc/0x3d8) [ 1465.554533][T12559] r10:61c88647 r9:83a56000 r8:830ba42c r7:82804d40 r6:8300e600 r5:8300e620 [ 1465.554866][T12559] r4:830ba400 [ 1465.555033][T12559] [<80278fec>] (worker_thread) from [<8028020c>] (kthread+0x12c/0x280) [ 1465.555425][T12559] r10:00000000 r9:830ba400 r8:80278fec r7:dfef1e60 r6:830ba380 r5:83a56000 [ 1465.555782][T12559] r4:00000001 [ 1465.555944][T12559] [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1465.556275][T12559] Exception stack(0xdfef9fb0 to 0xdfef9ff8) [ 1465.556520][T12559] 9fa0: 00000000 00000000 00000000 00000000 [ 1465.556865][T12559] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1465.557203][T12559] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1465.557484][T12559] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 [ 1465.557771][T12559] r4:830b6980 [ 1465.560120][T12559] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:25:04 Registers: info registers vcpu 0 CPU#0 R00=83c65cc0 R01=00000400 R02=00000001 R03=df9c9400 R04=83c65cc0 R05=83851800 R06=00000000 R07=83e2b000 R08=83e2b008 R09=83e2b000 R10=00000040 R11=df801674 R12=df801660 R13=df801660 R14=80a318e4 R15=80a318ec PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000016 s03=00000000 d01=0000000000000016 s04=c8000000 s05=c8000000 d02=c8000000c8000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=c0000800 d04=c000080000000000 s10=08000000 s11=80400000 d05=8040000008000000 s12=08040201 s13=80402010 d06=8040201008040201 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=82b15124 R01=800f0193 R02=83a56000 R03=0000476c R04=82b1491c R05=800f0193 R06=00000f01 R07=00000000 R08=82827128 R09=00000000 R10=00001749 R11=dfef9ab4 R12=dfef9ab8 R13=dfef9aa8 R14=80a0d410 R15=81a6cf5c PSR=600f0193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000