last executing test programs: 16m47.869199531s ago: executing program 1 (id=374): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/118, 0x76) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 16m46.940237671s ago: executing program 1 (id=379): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x595e, 0x400, 0x3, 0x52}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x6011}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16m46.576542603s ago: executing program 1 (id=381): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) getgroups(0x0, 0x0) mmap(&(0x7f0000efc000/0x2000)=nil, 0x2000, 0x100000a, 0x100010, 0xffffffffffffffff, 0x44141000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x40000000, 0x8c, "00080000000000000000000cadf100004000"}) r5 = syz_open_pts(r4, 0x8001) write(r5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16m45.69719595s ago: executing program 1 (id=384): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(r0, &(0x7f0000000100)='./file1/file0\x00', 0x200, 0x7) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='overlay\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 16m44.36612283s ago: executing program 1 (id=391): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0xa779, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) epoll_create1(0x80000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 16m43.494928045s ago: executing program 1 (id=400): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16m27.977766144s ago: executing program 32 (id=400): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.114784182s ago: executing program 2 (id=5247): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='256\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='1\n', 0x2) faccessat(0xffffffffffffffff, &(0x7f000000b0c0)='./config/nullb/nullb1/zoned\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) write(r4, &(0x7f0000000f00)="789c04c003006d0500c0d06cdbb6976ddbb66d2ff7ae8d6cdbb66ddbb6bfd1b96f80f70ff081013e38c08706f8f0001f19e0a3037c6c808f0ff089013e39c0a706f8f4009f19e0b3037c6e80cf0ff08501be38c09706f8f2005f19e0ab037c6d80af0ff08d01be39c0b706f8f600df19e0bb037c6f80ef0ff083017e38c08f06f8f1003f19e0a703fc6c809f0ff08b017e39c0af06f8f500bf19e0b703fc6e80df0ff08701fe38c09f06f8f3007f19e0af03fc6d80bf0ff08f01fe39c0bf06f8f700ff19e0bf03fc6f804306387480c306387c802306387280a306387a806306387680e304386e80e305387e80130438618013053871809304386980930538798053043865805305387580d304386d80d305387d8033043863803305387380b304386b80b305387b8073043867807305387780f304386f80f305387f800b04b860800b05b870808b04b868808b05b878804b04b864804b05b87480cb044880cb06b85c80cb07b842802b06b852802b07b84a80ab06b85a80ab07b846806b06b856806b07b84e80eb06b85e80eb07b841801b06b851801b07b849809b06b859809b07b845805b06b855805b07b84d80db06b85d80db07b843803b06b853803b07b84b80bb06b85b80bb07b847807b06b857807b07b84f80fb06b85f80fb07784080070678508007077848808706785880870778448047067854804707784c80c706785c80c70778428027067852802707784a80a7066880a705787a8067047866806705787680e704786e8083008300c300a300e3009300d300b300f3008b00cb00ab00eb009b00db00bb00fb00cf0bf0fc002f08f0c2002f0af0e2002f09f0d2002f0bf0f200af08f0ca00af0af0ea00af09f0da00af0bf0fa006f08f0c6006f0af0e6006f09f0d6006f0bf0f600ef08f0ce00ef0af0ee00ef09f0de00ef0bf0fe001f08f0c1001f0af0e1001f09f0d1001f0bf0f1009f08f0c9009f0af0e9009f09f0d9009f0bf0f9005f08f0c5005f0af0e5005f09f0d5005f0bf0f500df08f0cd00df0af0ed00df09f0dd00df0bf0fd003f08f0c3003f0af0e3003f09f0d3003f0bf0f300bf08f0cb00bf0af0eb00bf09f0db00bf0bf0fb007f08f0c7007f0af0e7007f09f0d7007f0bf0f700ff08f0cf00ff0af0ef00ff09f0df00ff0b70488043031c16e0f00047043832c051018e0e704c8063031c27c471431c2fc4f1439c20c409439c28c489439c24c449439c2cc4c9439c22c429439c2ac4a9439c26c469439c2ec4e9439c21c419439c29c499439c25c459439c2dc4d9439c23c439439c2bc4b9439c27c479439c2fc4f9435c20c405435c28c485435c24c445435c2cc4c5435c22c425435c2ac4a5435c2644425c36c4e5425c3ec415425c31c495425c39c455425c35c4d5425c3dc435425c33c4b5425c3bc475425c37c4f5425c3fc40d42dc30c48d42dc38c44d42dc34c4cd42dc3cc42d42dc32c4ad42dc3ac46d42dc36c4ed42dc3ec41d42dc31c49d42dc39c45d42dc35c4dd42dc3dc43d42dc33c4bd42dc3bc47d42dc37c4fd42dc3fc403423c30c483423c38c443423c34c4c3423c3cc423423c32c4a3423c3ac463423c36c4e3423c3ec413423c31c493423c39c453423c3544433c2dc4d3433c23c433433c2bc4b3433c27c473431c84188418861885188798849886988598875884588658855887d884d886d885d887785e88e787784188178678518817877849889786785988978778458857867855885787784d88d786785d88d78778438837867853883787784b88b786785b88b78778478877867857887787784f88f786785f88f787f840880f86f850880f87f848888f86f858888f87f844884f86f854884f87f84c88cf86f85c88cf87f842882f86f852882f87f84a88af86f85a88af87f846886f86f856886f87f84e88ef86f85e88ef87f841881f86f851881f87f849889f86f859889f87f845885f86f855885f87f84d88df86f85d88df87f843883f86f853883f87f84b88bf86f85b88bf87f847887f86f857887f87f84f88ff86f85f8843421c1ae2b01087873822c491218e0a71748863421c1be238118e1be178118e1fe104114e18e144114e1ce124114e1ae164114e1ee114114e19e154114e1de134114e1be174114e1fe10c11ce18e14c11ce1ce12c11ce1ae16c11ce1ee11c11ce19e15c11ce1de13c11ce1be17c11ce1fe102112e18e142112e1ce122112e1ae162112e1ee112112e19e152112e1de1321112e1b2112e17e1f211ae10e18a11ae14e1ca11ae12e1aa11ae16e1ea11ae11e19a11ae15e1da11ae13e1ba11ae17e1fa116e10e186116e14e1c6116e12e1a6116e16e1e6116e11e196116e15e1d6116e13e1b6116e17e1f611ee10e18e11ee14e1ce11ee12e1ae11ee16e1ee11ee11e19e11ee15e1de11ee13e1be11ee17e1fe111e10e181111e14e1c1111e12e1a1111e16e1e1111e11e191111e15e1d1111e13e1b1111e17e1f1119e10e189119e14e1c9119e12e1a9111ae169119e1ee119119e19e159119e1de139119e1be120c220c230c228c238c224c234c22cc23cc222c232c22ac23ac226c236c22ec23ec2f3223c3fc20b22bc30c28b22bc38c24b22bc34c2cb22bc3cc22b22bc32c2ab22bc3ac26b22bc36c2eb22bc3ec21b22bc31c29b22bc39c25b22bc35c2db22bc3dc23b22bc33c2bb22bc3bc27b22bc37c2fb22bc3fc207227c30c287227c38c247227c34c2c7227c3cc227227c32c2a7227c3ac267227c36c2e7227c3ec217227c31c297227c39c257227c35c2d7227c3dc237227c33c2b7227c3bc277227c37c2f7227c3fc20f22fc30c28f22fc38c24f22fc34c2cf22fc3cc22f22fc32c2af22fc3ac26f22fc36c2ef22fc3ec21f22fc31c29f22fc39c25f22fc35c2df22fc3dc23f22fc33c2bf22fc3bc27f22fc37c2ff221c12e1d0088745383cc211118e8c705484a3231c13e1d808c78971dc18c78b71fc18278871c218278a71e218278971d218278b71f218a78871ca18a78a71ea18a78971da18a78b71fa18678871c618678a71e618678971d618678b71f618e78871ce18e78a71ee18e78971de18e78b71fe18178871c118178a71e118178971d118178b71f118978871c918978a71e91897899118978d71b918978f718518578c71a518578e719518578d71b518578f718d18d78c71ad18d78e719d18d78d71bd18d78f718318378c71a318378e719318378d71b318378f718b18b78c71ab18b78e719b18b78d71bb18b78f718718778c71a718778e719718778d71b718778f718f18f78c71af18f78e719f18f78d71bf18f78ff180180f8cf1a0180f8ef190180f8df1b0180f8ff188188f8cf1a8188f8ef198188f8df1b8188f8ff184184f8cf1a4184f8ef194184f8dd1184f8bf1f418cf88f1cc18cf8af1ec18cf89f1dc180731063186314631c6312631a6316631e631163196315631d6313631b6317631f6319e17e3f9315e10e385315e14e3c5315e12e3a5315e16e3e5315e11e395315e15e3d5315e13e3b5315e17e3f531de10e38d31de14e3cd31de12e3ad31de16e3ed31de11e39d31de15e3dd31de13e3bd31de17e3fd313e10e383313e14e3c3313e12e3a3313e16e3e3313e11e393313e15e3d3313e13e3b3313e17e3f331be10e38b31be14e3cb31be12e3ab31be16e3eb31be11e39b31be15e3db31be13e3bb31be17e3fb317e10e387317e14e3c7317e12e3a7317e16e3e7317e11e397317e15e3d7317e13e3b7317e17e3f731fe10e38f31fe14e3cf31fe12e3af31fe16e3ef31fe11e39f31fe15e3df31fe13e3bf31fe17e3901887c6382cc6e1318e8871648ca3621c1de39818c7c6384e82e326385e82e327384182132638518213273849829326385982932738458253263855825327384d82d326385d82d32738438233263853823327384b82b326385b82b32738478273263857827327384f82f326385f82f327b840820b26b850820b27b848828b26b858828b27b844824b26b854824b27b84c8224b86c82cb25b87c822b24b862822b25b87282ab24b86a82ab25b87a826b24b866826b25b87682eb24b86e82eb25b87e821b24b861821b25b871829b24b869829b25b879825b24b865825b25b87582db24b86d82db25b87d823b24b863823b25b87382bb24b86b82bb25b87b827b24b867827b25b87782fb24b86f82fb25b87f82072478608207257870828724786882872578788247247864824725787482c724786c82c725787c8227247862822725787282a724786a8226785a82a72778468267267856826727784e82e72638483048304c304a304e3049304d304b304fb048b04cb04ab04eb049b04db04bb04ff0bc04cf4ff082042f4cf0a2042f4ef092042f4df0b2042f4ff08a04af4cf0aa04af4ef09a04af4df0ba04af4ff086046f4cf0a6046f4ef096046f4df0b6046f4ff08e04ef4cf0ae04ef4ef09e04ef4df0be04ef4ff081041f4cf0a1041f4ef091041f4df0b1041f4ff089049f4cf0a9049f4ef099049f4df0b9049f4ff085045f4cf0a5045f4ef095045f4df0b5045f4ff08d04df4cf0ad04df4ef09d04df4df0bd04df4ff083043f4cf0a3043f4ef093043f4df0b3043f4ff08b04bf4cf0ab04bf4ef09b04bf4df0bb04bf4ff087047f4cf0a7047f4ef097047f4df0b7047f4ff08f04ff4cf0af04ff4ef09f04ff4df0bf0487243834c161090e4f70448223131c95e0e804c7243836c171521c37c5f1521c3fc509529c30c589529c38c549529c34c5c9529c3cc529529c32c5a9529c3ac569529c36c5e9529c3ec519529c31c599529c39c559529c35c5d9529c3dc539529c33c5b9529c3bc579529c37c5f9529c3fc505525c30c585525c38c545525c34c5c5525c3cc525525c32c5a5525c3ac5655224c565535c2ec5e5535c21c515535c29c595535c25c555535c2dc5d5535c23c535535c2bc5b5535c27c575535c2fc5f553dc20c50d53dc28c58d53dc24c54d53dc2cc5cd53dc22c52d53dc2ac5ad53dc26c56d53dc2ec5ed53dc21c51d53dc29c59d53dc25c55d53dc2dc5dd53dc23c53d53dc2bc5bd53dc27c57d53dc2fc5fd533c20c503533c28c583533c24c543533c2cc5c3533c22c523533c2ac5a3533c26c563533c2ec5e3533c21c513533c29c593533c25c5535334c5d3523c3dc533523c33c5b3523c3bc573523c37c5418a418a618a518a718a498a698a598a798a458a658a558a758a4d8a6d8a5d8a7d8ae7a5787e8a17a478618a17a578718a97a478698a97a578798a57a478658a57a578758ad7a4786d8ad7a5787d8a37a478638a37a578738ab7a4786b8ab7a5787b8a77a478678a77a578778af7a4786f8af7a5787f8a0fa4f8608a0fa5f8708a8fa4f8688a8fa5f8788a4fa4f8648a4fa5f8748acfa4f86c8acfa5f87c8a2fa4f8628a2fa5f8728aafa4f86a8aafa5f87a8a6fa4f8668a6fa5f8768aefa4f86e8aefa5f87e8a1fa4f8618a1fa5f8718a9fa4f8698a9fa5f8798a5fa4f8658a5fa5f8758adfa4f86d8adfa5f87d8a3fa4f8638a3fa5f8738abfa4f86b8abfa5f87b8a7fa4f8678a7fa5f8778affa4f86f8affa53824c5a1290e4b71788a23521c99e2a81447a73826c5b1298e93e1b8198e97e1f8194e90e184194e94e1c4194e92e1a4194e96e1e4194e91e194194e95e1d4194e93e1b4194e97e1f419ce90e18c19ce94e1cc19ce92e1ac19ce96e1ec19ce91e19c19ce95e1dc19ce93e1bc19ce97e1fc192e90e182192e94e1c2192e92e1a2192e96e1e2192e91e192192e95e1d2192e9321192e9be172192e9fe10a19ae98e14a19ae9ce12a19ae9ae16a19ae9ee11a19ae99e15a19ae9de13a19ae9be17a19ae9fe106196e98e146196e9ce126196e9ae166196e9ee116196e99e156196e9de136196e9be176196e9fe10e19ee98e14e19ee9ce12e19ee9ae16e19ee9ee11e19ee99e15e19ee9de13e19ee9be17e19ee9fe101191e98e141191e9ce121191e9ae161191e9ee111191e99e151191e9de131191e9be171191e9fe109199e98e149199e9ce129199e9aa1199e96e1e9199e91e199199e95e1d9199e93e1b9190e320c320c338c328c334c324c33cc32cc332c322c33ac32ac336c326c33ec32ec333c2fc3f333bc20c30b33bc28c38b33bc24c34b33bc2cc3cb33bc22c32b33bc2ac3ab33bc26c36b33bc2ec3eb33bc21c31b33bc29c39b33bc25c35b33bc2dc3db33bc23c33b33bc2bc3bb33bc27c37b33bc2fc3fb337c20c307337c28c387337c24c347337c2cc3c7337c22c327337c2ac3a7337c26c367337c2ec3e7337c21c317337c29c397337c25c357337c2dc3d7337c23c337337c2bc3b7337c27c377337c2fc3f733fc20c30f33fc28c38f33fc24c34f33fc2cc3cf33fc22c32f33fc2ac3af33fc26c36f33fc2ec3ef33fc21c31f33fc29c39f33fc25c35f33fc2dc3df33fc23c33f33fc2bc3bf33fc27c37f33fc2fc321190ecd705886c3331c91e1c80c4765383ac331198ecd709c1cc7cd71bc1cc7cf71821c27cc71a21c27ce71921c27cd71b21c27cf718a1ca7cc71aa1ca7ce719a1ca7cd71ba1ca7cf71861c67cc71a61c67ce71961c67cd71b61c67cf718e1ce7cc71ae1ce7ce719e1ce7cd71be1ce7cf71811c17cc71a11c17ce71911c17cd71b11c17cf71891c97cc71a91c97ce71991cc971d91c97cb71f91c57c871c51c57ca71e51c57c971d51c57cb71f51cd7c871cd1cd7ca71ed1cd7c971dd1cd7cb71fd1c37c871c31c37ca71e31c37c971d31c37cb71f31cb7c871cb1cb7ca71eb1cb7c971db1cb7cb71fb1c77c871c71c77ca71e71c77c971d71c77cb71f71cf7c871cf1cf7ca71ef1cf7c971df1cf7cb71ff1c0fc8f1c01c0fcaf1e01c0fc9f1d01c0fcbf1f01c8fc8f1c81c8fcaf1e81c8fc9f1d81c8fcbf1f81c4fc8f1c41c4fcaf1e41c4fc9f1d41ccdf1b41c4fcff18c1ccfccf1ac1ccfcef19c1ccfcd7190639063986394639c6392639a6396639e639163996395639d6393639b6397639fe379399e9fe305395e98e345395e9ce325395e9ae365395e9ee315395e99e355395e9de335395e9be375395e9fe30d39de98e34d39de9ce32d39de9ae36d39de9ee31d39de99e35d39de9de33d39de9be37d39de9fe303393e98e343393e9ce323393e9ae363393e9ee313393e99e353393e9de333393e9be373393e9fe30b39be98e34b39be9ce32b39be9ae36b39be9ee31b39be99e35b39be9de33b39be9be37b39be9fe307397e98e347397e9ce327397e9ae367397e9ee317397e99e357397e9de337397e9be377397e9fe30f39fe98e34f39fe9ce32f39fe9ae36f39fe9ee31f39fe99e35f39fe9de33f39fe9be37f390ec971688ec3721c9ee3881c47e6382ac7d1398ec9716c8ee314386e81e315387e81131438618113153871819314386981931538798153143865815315387581d314386d81d315387d8133143863813315387381b314386b81b315387b8173143867817315387781f314386f81f315387f810b14b860810b15b870818b14b868818b15b878814b14b864814b15b87481cb144881cb16b85c81cb17b842812b16b852812b17b84a81ab16b85a81ab17b846816b16b856816b17b84e81eb16b85e81eb17b841811b16b851811b17b849819b16b859819b17b845815b16b855815b17b84d81db16b85d81db17b843813b16b853813b17b84b81bb16b85b81bb17b847817b16b857817b17b84f81fb16b85f81fb17784081071678508107177848818716785881871778448147167854814717784c81c716785c81c71778428127167852812717784a81a7166881a715787a8167147866816715787681e714786e8183028302c302a302e3029302d302b302f3028b02cb02ab02eb029b02db02bb02fb02cf2bf0fc022f28f0c2022f2af0e2022f29f0d2022f2bf0f202af28f0ca02af2af0ea02af29f0da02af2bf0fa026f28f0c6026f2af0e6026f29f0d6026f2bf0f602ef28f0ce02ef2af0ee02ef29f0de02ef2bf0fe021f28f0c1021f2af0e1021f29f0d1021f2bf0f1029f28f0c9029f2af0e9029f29f0d9029f2bf0f9025f28f0c5025f2af0e5025f29f0d5025f2bf0f502df28f0cd02df2af0ed02df29f0dd02df2bf0fd023f28f0c3023f2af0e3023f29f0d3023f2bf0f302bf28f0cb02bf2af0eb02bf29f0db02bf2bf0fb027f28f0c7027f2af0e7027f29f0d7027f2bf0f702ff28f0cf02ff2af0ef02ff29f0df02ff2b704881430b1c56e0f002471438b2c051058e2e704c81630b1ca7c4714b1cafc4f14b9ca0c4094b9ca8c4894b9ca4c4494b9cacc4c94b9ca2c4294b9caac4a94b9ca6c4694b9caec4e94b9ca1c4194b9ca9c4994b9ca5c4594b9cadc4d94b9ca3c4394b9cabc4b94b9ca7c4794b9cafc4f94b5ca0c4054b5ca8c4854b5ca4c4454b5cacc4c54b5ca2c4254b5caac4a54b5ca6444a5cb6c4e54a5cbec4154a5cb1c4954a5cb9c4554a5cb5c4d54a5cbdc4354a5cb3c4b54a5cbbc4754a5cb7c4f54a5cbfc40d4adcb0c48d4adcb8c44d4adcb4c4cd4adcbcc42d4adcb2c4ad4adcbac46d4adcb6c4ed4adcbec41d4adcb1c49d4adcb9c45d4adcb5c4dd4adcbdc43d4adcb3c4bd4adcbbc47d4adcb7c4fd4adcbfc4034a3cb0c4834a3cb8c4434a3cb4c4c34a3cbcc4234a3cb2c4a34a3cbac4634a3cb6c4e34a3cbec4134a3cb1c4934a3cb9c4534a3cb5444b3cadc4d34b3ca3c4334b3cabc4b34b3ca7c4734b1c94189418961895189798949896989598975894589658955897d894d896d895d897785e89e797784189179678518917977849899796785989979778458957967855895797784d89d796785d89d79778438937967853893797784b89b796785b89b79778478977967857897797784f89f796785f89f797f840890f96f850890f97f848898f96f858898f97f844894f96f854894f97f84c89cf96f85c89cf97f842892f96f852892f97f84a89af96f85a89af97f846896f96f856896f97f84e89ef96f85e89ef97f841891f96f851891f97f849899f96f859899f97f845895f96f855895f97f84d89df96f85d89df97f843893f96f853893f97f84b89bf96f85b89bf97f847897f96f857897f97f84f89ff96f85f89434a1c5ae2b012879738a2c491258e2a717489634a1c5be238158e5be178158e5fe104154e58e144154e5ce124154e5ae164154e5ee114154e59e154154e5de134154e5be174154e5fe10c15ce58e14c15ce5ce12c15ce5ae16c15ce5ee11c15ce59e15c15ce5de13c15ce5be17c15ce5fe102152e58e142152e5ce122152e5ae162152e5ee112152e59e152152e5de1321552e1b2152e57e1f215ae50e18a15ae54e1ca15ae52e1aa15ae56e1ea15ae51e19a15ae55e1da15ae53e1ba15ae57e1fa156e50e186156e54e1c6156e52e1a6156e56e1e6156e51e196156e55e1d6156e53e1b6156e57e1f615ee50e18e15ee54e1ce15ee52e1ae15ee56e1ee15ee51e19e15ee55e1de15ee53e1be15ee57e1fe151e50e181151e54e1c1151e52e1a1151e56e1e1151e51e191151e55e1d1151e53e1b1151e57e1f1159e50e189159e54e1c9159e52e1a9155ae169159e5ee119159e59e159159e5de139159e5be1a0c2a0c2b0c2a8c2b8c2a4c2b4c2acc2bcc2a2c2b2c2aac2bac2a6c2b6c2aec2bec2f32a3cbfc20b2abcb0c28b2abcb8c24b2abcb4c2cb2abcbcc22b2abcb2c2ab2abcbac26b2abcb6c2eb2abcbec21b2abcb1c29b2abcb9c25b2abcb5c2db2abcbdc23b2abcb3c2bb2abcbbc27b2abcb7c2fb2abcbfc2072a7cb0c2872a7cb8c2472a7cb4c2c72a7cbcc2272a7cb2c2a72a7cbac2672a7cb6c2e72a7cbec2172a7cb1c2972a7cb9c2572a7cb5c2d72a7cbdc2372a7cb3c2b72a7cbbc2772a7cb7c2f72a7cbfc20f2afcb0c28f2afcb8c24f2afcb4c2cf2afcbcc22f2afcb2c2af2afcbac26f2afcb6c2ef2afcbec21f2afcb1c29f2afcb9c25f2afcb5c2df2afcbdc23f2afcb3c2bf2afcbbc27f2afcb7c2ff2a1c52e1d00a875538bcc211158eac705485a32b1c53e1d80ac7a971dc1ac7ab71fc1a27a871c21a27aa71e21a27a971d21a27ab71f21aa7a871ca1aa7aa71ea1aa7a971da1aa7ab71fa1a67a871c61a67aa71e61a67a971d61a67ab71f61ae7a871ce1ae7aa71ee1ae7a971de1ae7ab71fe1a17a871c11a17aa71e11a17a971d11a17ab71f11a97a871c91a97aa71e91a97a9911a97ad71b91a97af71851a57ac71a51a57ae71951a57ad71b51a57af718d1ad7ac71ad1ad7ae719d1ad7ad71bd1ad7af71831a37ac71a31a37ae71931a37ad71b31a37af718b1ab7ac71ab1ab7ae719b1ab7ad71bb1ab7af71871a77ac71a71a77ae71971a77ad71b71a77af718f1af7ac71af1af7ae719f1af7ad71bf1af7aff1801a0facf1a01a0faef1901a0fadf1b01a0faff1881a8facf1a81a8faef1981a8fadf1b81a8faff1841a4facf1a41a4faef1941a4fadd11a4fabf1f41acfa8f1cc1acfaaf1ec1acfa9f1dc1a0735063586354635c6352635a6356635e635163596355635d6353635b6357635f6359e57e3f9355e50e385355e54e3c5355e52e3a5355e56e3e5355e51e395355e55e3d5355e53e3b5355e57e3f535de50e38d35de54e3cd35de52e3ad35de56e3ed35de51e39d35de55e3dd35de53e3bd35de57e3fd353e50e383353e54e3c3353e52e3a3353e56e3e3353e51e393353e55e3d3353e53e3b3353e57e3f335be50e38b35be54e3cb35be52e3ab35be56e3eb35be51e39b35be55e3db35be53e3bb35be57e3fb357e50e387357e54e3c7357e52e3a7357e56e3e7357e51e397357e55e3d7357e53e3b7357e57e3f735fe50e38f35fe54e3cf35fe52e3af35fe56e3ef35fe51e39f35fe55e3df35fe53e3bf35fe57e3901a87d638acc6e1358ea871648da36a1c5de3981ac7d6384e83e336385e83e337384183133638518313373849839336385983933738458353363855835337384d83d336385d83d33738438333363853833337384b83b336385b83b33738478373363857837337384f83f336385f83f337b840830b36b850830b37b848838b36b858838b37b844834b36b854834b37b84c8334b86c83cb35b87c832b34b862832b35b87283ab34b86a83ab35b87a836b34b866836b35b87683eb34b86e83eb35b87e831b34b861831b35b871839b34b869839b35b879835b34b865835b35b87583db34b86d83db35b87d833b34b863833b35b87383bb34b86b83bb35b87b837b34b867837b35b87783fb34b86f83fb35b87f83073478608307357870838734786883873578788347347864834735787483c734786c83c735787c8327347862832735787283a734786a8336785a83a737", 0x1f90) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) 16.094905595s ago: executing program 3 (id=5249): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xff}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\f\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001300000018000180140002007369743000"/38], 0x2c}}, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x3a7}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) r7 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, 0x0) io_uring_enter(r3, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r3, 0xed4, 0x3768, 0x1, 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102000000108c0d010240000102030109026000030109403f0904000000010100000a2401d2000a0002010209040100000102000009040101010102000009050109ff0378083a07250106040b000904020000010200000904020101010200000905820920000302d12ea906033ac70990e60f78c1ca0f1101072501000e03008907dcc4c26f6f24fa15f1238eb4df04bf"], 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x9d87, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff1, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x4081ff) 14.999019769s ago: executing program 2 (id=5251): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xbf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$alg(0x26, 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) sched_getaffinity(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x2, 0x20) 13.909288721s ago: executing program 0 (id=5252): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0xfffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) futex(0x0, 0x3, 0x3, 0x0, 0x0, 0x2) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x28001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) write(r1, &(0x7f00000000c0)='/dev/loop0', 0xa) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0xffffff9a, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10.838153445s ago: executing program 4 (id=5253): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7f}, 0x50) 10.796584615s ago: executing program 2 (id=5254): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80800) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x2}, 0x3, 0x9, 0x4, 0x8, 0x27, 'syz0\x00', "2cbd8ff7ee1f79bc8e4e947da3c620ffca3cd9c6c84193d0327c360a6fc86a45", "ecb24079b306a40d31f6c009bd7b2576fbfd36c5a259952ac1e5f28f414cef29", [{0x4, 0x2, {0x0, 0x2}}, {0x7ff, 0x5, {0x0, 0x66}}, {0x8, 0x9, {0x1, 0x6}}, {0x2, 0x8001, {0x1, 0x1}}, {0x53, 0x9, {0x3, 0x7f}}, {0x238, 0x8, {0x3, 0x5}}, {0x8, 0x9, {0x0, 0x5}}, {0xffff, 0x7fff, {0x0, 0x2}}, {0x50c, 0xfcd, {0x2, 0xffffff33}}, {0x1, 0x4, {0x3, 0x7}}, {0xf01, 0x0, {0x0, 0x9}}, {0x1, 0x1, {0x3, 0x9}}, {0x2, 0x81, {0x3}}, {0x9, 0x6e, {0x2, 0x6}}, {0x80, 0x1, {0x2, 0x7}}, {0xf, 0x1, {0x2, 0x6}}, {0x4, 0x4, {0x2, 0x5}}, {0xfff9, 0x9, {0x3, 0x1}}, {0x5d21, 0x1e88, {0x2, 0x3}}, {0xbc15, 0x6, {0x3, 0xfffffffc}}, {0x3d04, 0x8, {0x3, 0x8000}}, {0x14, 0x40, {0x0, 0x48}}, {0xed8, 0xc, {0x0, 0x8}}, {0xfffb, 0x7}, {0x6, 0x3ff, {0x1, 0x6}}, {0x3, 0x7, {0x3, 0xfffffffc}}, {0x1, 0x0, {0x3, 0x62b728b2}}, {0x2, 0x4, {0x3, 0x71fe}}, {0x8, 0x7, {0x1, 0xe814}}, {0x8, 0x4, {0x1, 0x8e}}, {0x6, 0x2, {0x1, 0x7fff}}, {0x0, 0x200, {0x1, 0xffff0000}}, {0xfffa, 0x0, {0x3, 0x858}}, {0x9, 0x8001, {0x1, 0x7}}, {0x0, 0x3, {0x1, 0x7}}, {0x9, 0xcfb, {0x3, 0x3341ce0a}}, {0x6, 0x73, {0x0, 0xf}}, {0x79, 0x482, {0x3, 0xe1c}}, {0x4, 0x5, {0x0, 0x3}}, {0x24, 0x5, {0x3, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x880}, 0x20004085) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)) syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) 9.793290216s ago: executing program 3 (id=5255): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(0xffffffffffffffff, 0x0, r1, 0x0, 0x46) unlink(0x0) fanotify_init(0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB='\f\x00'], 0x24}}, 0x44004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setitimer(0x2, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6, 0x80000}) 8.893152175s ago: executing program 3 (id=5256): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$kcm(0x21, 0x7, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = signalfd4(r0, &(0x7f00000000c0)={[0x6, 0xfffffff7]}, 0x8, 0x180000) ioctl$MON_IOCX_MFETCH(r7, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.781960595s ago: executing program 0 (id=5257): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r7) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)}, 0x8000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000000640)={&(0x7f0000000280)=0x6, 0x7f, &(0x7f0000000540), &(0x7f0000000600)}) 7.267986025s ago: executing program 4 (id=5258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000240)=0x6e) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000000d00000705000100162410004cf1cf129ce24cfd97a93e78040c154245722933632e0ce137a7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) 7.218227093s ago: executing program 2 (id=5259): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0xff00, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) 5.046364051s ago: executing program 0 (id=5260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 4.756681771s ago: executing program 3 (id=5261): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='10000', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) pipe(&(0x7f0000000080)) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r9, &(0x7f0000000640)='hig', 0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) 4.396221592s ago: executing program 4 (id=5262): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x7ff, {0xfffffff8, 0xffffffff}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)=0x0) lstat(&(0x7f0000000980)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './proc\x00'}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000f00)={0x5c0, 0xffffffffffffffda, 0x0, [{{0x2, 0x3, 0xb, 0x80000000, 0x1, 0x4, {0x5, 0x3e3, 0x8000000000000000, 0x101, 0x2, 0x5, 0x21, 0x5, 0x99c, 0x6000, 0xb744, 0x0, 0x0, 0x1, 0x1}}, {0x2, 0x6000000, 0x4, 0x100, 'nbd\x00'}}, {{0x3, 0x2, 0x95, 0x2, 0x5, 0x3, {0x1, 0x3, 0x4, 0x6e, 0xffff, 0x50c5, 0x4, 0x8, 0x0, 0x6000, 0x5, 0x0, 0x0, 0x2, 0x3}}, {0x3, 0xe, 0xc, 0x0, '\\/$:,\\+]$@^\''}}, {{0x6, 0x1, 0xffffffffffffffff, 0x3, 0xffffffff, 0xba, {0x6, 0x9, 0x7fff, 0x6, 0x7, 0x9, 0x21ab66b, 0xfffffffb, 0x9, 0xa000, 0x8d, 0x0, 0x0, 0x1000}}, {0x0, 0x7fffffff, 0x2, 0x2, '\xff\xff'}}, {{0x2, 0x1, 0x0, 0x1, 0xe006, 0x0, {0x0, 0x5, 0xfa000000, 0xfffffffffffeffff, 0x9, 0x9, 0x4, 0xff, 0x5, 0xc000, 0x2, 0xee00, 0x0, 0x8, 0x3000000}}, {0x1, 0x2, 0x2, 0x40000, '\xff\xff'}}, {{0x4, 0x3, 0x0, 0x6, 0x3, 0x800, {0x4, 0x0, 0x5, 0xe1b, 0x6, 0x7, 0x4, 0x8000, 0xf, 0x1000, 0x3, 0x0, 0xee01, 0x6081, 0xdb}}, {0x3, 0xaa, 0x1, 0x3, '\x00'}}, {{0x0, 0x2, 0x100000, 0xfc5, 0x101, 0x0, {0x6, 0x0, 0x8, 0x100, 0x10000, 0xc00000000000000, 0x1, 0x7fffffff, 0x8, 0xc000, 0x8001, 0x0, 0x0, 0x87, 0x2}}, {0x2, 0x2, 0x1, 0xfffffff9, '\\'}}, {{0x1, 0x1, 0x1, 0x0, 0x2, 0xe7, {0x2, 0x0, 0x4, 0x0, 0x100000000, 0xff, 0x4, 0x3, 0x3, 0xb000, 0x4, 0x0, 0x0, 0x6, 0xbb}}, {0x1, 0xb6fc, 0x7, 0x5, 'queue0\x00'}}, {{0x4, 0x0, 0xc8a, 0x10001, 0xac20, 0x7, {0x2, 0x9, 0x0, 0x2, 0x8, 0x0, 0x8, 0x1000, 0x2, 0x8000, 0x2, r4, 0xffffffffffffffff, 0x80}}, {0x0, 0x4f0, 0xa, 0x81, 'ip6erspan\x00'}}, {{0x4, 0x3, 0x342, 0xffffffffffffffff, 0x7, 0xc18, {0x6, 0x3ff, 0x8, 0x8000, 0xf3, 0x0, 0x0, 0xce53, 0x0, 0x8000, 0x0, r5, r6, 0x5, 0xa6}}, {0x6, 0xffffffffffffffff, 0x5, 0x9, 'proc\x00'}}]}, 0x5c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x300, 0x0, 0xff, 0x2, 0x6, 0xe}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x400400c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r9, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffff', 0x2f) madvise(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1) ioctl(r1, 0x8, 0x0) 4.12623653s ago: executing program 4 (id=5263): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="440100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000020000200000000000000000000000000000000c55d4df52efff7ebb77443def940d903c62c79a2f9f2e8b8b40d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r8, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) 3.895757747s ago: executing program 0 (id=5264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'lo\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001300a7cc4a5bb5a6520eb570ee2257b8", @ANYBLOB="00000000100000001c001a80"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r4 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000009e80)=[{{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)="d49928d9548951a6616bcdfcce3debbe2d61e6e8efb941421ff2ef1b30cacfeb99bdb32ca0e287c1159724601213c6caa818aff7c75cfc2d394254f1cd6ff794ba8e85f4bca0c35a602790bf35842a8f680baaaac00cab38edec3b1e", 0x5c}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="30000000000000001601000000000500bab815c6e7823c6ad6998939ba008335f400d5677862feefc7a440b3734b8700580000000000000011010000080000006b62784812e72e56cc0b4667b10b576df0115bd1abe503ed6ae2870bc98c2ed1d14ce73f1681fa3dea81565a72ec83ffef72ffcdfe0b04b46fa43d02bc679c7c"], 0x88}}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @private0, 0xfffffffa, 0x4}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[{0x34, 0x109, 0xfd, "3d4372f9acde884ddd55c29f44398284aecb0d7a2110e7dc454dd06e0997d1965593665bfd"}, {0x14, 0x10b, 0x19b, "af9965c06d"}, {0x44, 0x109, 0x7, "f0c1e4b50438a08bfeaddbdd2ea87540ecdff0067cfed367bb4e50e71a255cec0a066c6a741d3d2140cf16cf9c2dfdf547c63eb403"}], 0x8c}}, {{&(0x7f0000000ac0)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003040)="4799c134c47c086ff02b2cdb3f3be6c5ad6804762b07bdc1396849d0db57e2b310dfb3a389f28f38598d3cc52a2c07b74c251d667634545b653c79d97b022a", 0x3f}, {&(0x7f00000030c0)="0358b64e9d287f98f2b589735d659a831d4947e5cd6471e98d7d9f6f0184d5cb2118b262aac077abcf5ca8cf07a0f6", 0x2f}], 0x2, &(0x7f0000003140)=[{0x4d4, 0x112, 0x8e1, "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"}, {0xc0, 0x11, 0x6, "bc2855380bde494121331c3e6c965f64efb87d91c2ecaedcbee45399a52c0cfed2f33218a6ff66d483630bc45d35e27abba36c0ee75599fb6cc81423316d91fdd5aa3d742dc4c0739d95421d5ee9b239faf7fd6ba8a143e03aa9ecd1dcdd47bafaa1d23031891109cada0947d5f5d0b11ede9a97ee0ce78c2609a82a89f9d4f48eea70a79f06edd56a29942a3e18f008539d3ae0afcf0f310a3ebaec5bb1d6573d1a01ec74700190fd9eae63f800000000"}, {0x94, 0x112, 0x1, "c16f6f74c2bc0055f57b70de8112f2304fe603ceae6a742a02b28c101c0bcd8fe848bd3278a69bb68d0c40ffaeeec071741e9853cc7660d7441d2f2a0422c9fd7b50e38ed6cc81b44ee5ae62e9207e81945bde31a6ed89e59416c1fef3b5e7d2fa539a7f97ed77dc67b8a9ee1d3e203a20bc63fdc32db4768f1ec3054051095cf53453f65d"}, {0x44, 0x29, 0x8, "e49a61422a6b305a40ac7507302c615f4b38b9d14d3277d268111ef6e002299f9a56ae039a161198d0e0bbc57c72cb6ca51157643791"}, {0xc, 0x6, 0x8000006}, {0x9c, 0x10f, 0x7, "e35e085bbcaa1526bbb7e367cd401ab2f9af4a07378cd175f05e9bb995a896d86a5da482b7da29cac4e62d585dda7ba224bc0c6dc5b709ee9a174c2cbfe51b576c80903c30eefbbdea3b14097d7713ec9f8f86302728ca3a72db903ccf4334e18b4a3a9bb4892765d1b4d051cdd42f40812d807e315a7cad42c9614d161c3c75135469e099dab454312dd00877"}, {0xa4, 0x1, 0x9, "1aa3800fec1c4c781e47c167e0438979680fb380f424f6525557d7e4d5fbb94f6358351acbdf96faaf2e1b137fa07b03fa899ab42707bb7002c601e1c7cc6c037213f09633160539f7e7ab46cc46051107cf0f9e70aefe918ac8db45bec461b73543e321d49be42483c3b9ec46ad71bdda804cd0c24b918ef264e1bf6afff86a33514059e26a94095275edd1f30dfb73106ef8fc1fdb"}, {0xc0, 0x10a, 0x2, "7a6a29229a64ecc378cecbc366fce7e228a2963f65e52ae9bad44502ffe114ba8f96d86a8022dce4476d6ff28d992bf25618cd594e5aab48fcb28df3f44de6527d35b2d6818ab0a19ad3c07123a39fa4f690eaee9801cc6b92862572351fb65585e1d70ef0745502dc02a6d1543479f7066973937025f94ebc01ecb39d4e759804e068d95a38470e68b69becd3704eea36144eceb24a4690fc1b38f86222534efc56c9002b310ba6453380d71985313658734803"}, {0xc, 0x114, 0xfffffffb}], 0x884}}, {{&(0x7f0000005580)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @loopback}, 0x3, 0x4, 0x4, 0x1}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000005a00)="f326aa0a3908d05083563a0402e86e387f81ef3b13f2ccf54c9e28518ab2f3786a180d35157d61fda0edc7d313078e9ee554a28f5969ae7db77b7b9519c72b6ec86cd9cd098789bd19e1c992758bf2ad1c95a3791f65732cea19292a2199321eb0bc409280e2de98f45912627ddec4e478bcd13c5f78932c8a83902bb3784e046ee201c53ea1fd26de891a959ba3a9318dfe24e6dbf464627e3e95e8e0f2bd28c1d1167cc30b3d5c1996bb24f52977fefa96178e1bb517b3b5dee7a709", 0xbd}, {&(0x7f0000005b00)}], 0x2, &(0x7f0000005c00)=[{0xdc, 0x112, 0x7, "3acfca10f3900b661a3001d2f8677952ebd4a4667faeaf166333d1e1a217ea6c936914aafe7329a1150c1ed584be731aa0ea0ccc40a61f225bc8efc4f7fa4f489e6c8ba5f37b2fb2a9e88e60d8884db281ef101232690999c51f586aaf3dae70a846fee143f5142067febaf735450bd93459c590990f0eccb0f00dfdeddf49d8b95b4a6f5918296ebe39af5b72b12a3cded5eaa931a35cca8e15046544ac57d13b35a7db2b795a86621f649d2c67ae2d2efc15257ce30b198e8b6990b11ef29d20dabce8b5ce0a34d51a2d97fce1"}, {0xfc, 0x111, 0x3, "07ecaa383adb00adf226687f632fd6e52ebe7efe52735d768ba20bad86968f4485449b03a8c7e3866018240c0df6ef2b55cfd1069d473b149dd3987c4e2448e3c2765eeb1595e88e4dc3cbf2da9a2f8d5df37bd4359b28d3fc948cdd0c1dfb276f9cb349a3ebd772266b45d4d3aaa6ecf3a23d45febd2a9f32ca46f1a10d3bc47e290382badab1a6d5ec0696cc88d75b07385d6d656f41bec2c1ec81512db72223af21ad4405704ce7e045b0c3c3ab979716625745af07332dfae7080ac661f9c266b486531ab7c461a501cda218c72734f9498539cffbbd7b562a9849042a8be94dd277a7a53d0054f9da2403c336"}, {0x40, 0x102, 0x5, "6748d471a08b35a8f5d9034a6a07802e5118eaa82e63cdc70b5118e7717e664ec2dd765211b947a1fe92c01c1c992e0bbcdba851"}], 0x218}}, {{&(0x7f0000005e40)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005ec0)="09fa2cd5d381f2112c718d65b40a8a82022732a58b78ba6ad44dfa040031ae2a987664", 0x23}], 0x1, &(0x7f0000005f40)=[{0xc, 0x114, 0x2}, {0xc, 0x10e, 0x4}], 0x18}}, {{&(0x7f00000071c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xb44, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}, 0x80, 0x0, 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB], 0x4d0}}], 0x9, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) 3.159363511s ago: executing program 2 (id=5265): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 2.644056147s ago: executing program 3 (id=5266): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x18) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48, 0xfffffffffffffffb) 834.026922ms ago: executing program 4 (id=5267): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf25000000", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 799.147312ms ago: executing program 0 (id=5268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) pread64(r3, 0x0, 0x0, 0xcd32) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) getsockopt$bt_hci(r0, 0x119, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x7fffffff, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0xfffffffe, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x40000) 798.896684ms ago: executing program 2 (id=5269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b25986300b30600fc010000000000000000000000000000ff0200000000000000000000000000016c06040306080000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafc0000000000", @ANYRES32, @ANYRES32, @ANYBLOB="7001feff9078000b220c1fbd64270d790044e1a5fea729d901ee22d318f11fe1521b140606e2d4c3d97bd10000000700000008fe0df989a54928de5e48ca582a020400010411e486d6446b102af749c19dbe3e8aa24321e2bfc3d901010000e565807f183ebdc0c69dd09c7643b937f8000000000000"], 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) read(r0, &(0x7f0000000900), 0x100) 743.732673ms ago: executing program 4 (id=5270): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000c300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x10000, 0x0) 726.968526ms ago: executing program 0 (id=5271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x202402, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x58}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mknod(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x4, 0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x2210088, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 0s ago: executing program 3 (id=5272): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x57) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = epoll_create1(0x80000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r6, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x40000001}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x3c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0xfffffff8, 0xb, "3ea481bb3b86ae46b6440f796726306b"}}}}}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r7, 0xc138fd06, &(0x7f0000000540)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c") ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000240)={0x4, "6e17ecf79a6fbc06a95d4e31f473c73ec964bc91e59bc0c200"}) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) kernel console output (not intermixed with test programs): es:1308kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 812.113355][T19862] Node 1 active_anon:5176kB inactive_anon:40984kB active_file:17148kB inactive_file:27204kB unevictable:2000kB isolated(anon):112kB isolated(file):0kB mapped:135120kB dirty:1808kB writeback:0kB shmem:37980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8152kB pagetables:5852kB sec_pagetables:292kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 812.113409][T19862] Node 0 DMA free:2780kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.113463][T19862] lowmem_reserve[]: 0 259 259 259 259 [ 812.113528][T19862] Node 0 DMA32 free:22652kB boost:26328kB min:38032kB low:40956kB high:43880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:208kB inactive_anon:0kB active_file:48kB inactive_file:12kB unevictable:2000kB writepending:48kB zspages:868kB present:1032196kB managed:265372kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.113584][T19862] lowmem_reserve[]: 0 0 0 0 0 [ 812.113626][T19862] Node 1 DMA32 free:70368kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:5176kB inactive_anon:40984kB active_file:17148kB inactive_file:27204kB unevictable:2000kB writepending:1808kB zspages:6432kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.113682][T19862] lowmem_reserve[]: 0 0 0 0 0 [ 812.113715][T19862] Node 0 DMA: 225*4kB (UE) 23*8kB (UE) 18*16kB (UE) 10*32kB (UE) 5*64kB (UE) 0*128kB 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2780kB [ 812.113853][T19862] Node 0 DMA32: 568*4kB (UME) 211*8kB (UME) 93*16kB (UME) 163*32kB (UME) 42*64kB (UME) 17*128kB (UME) 6*256kB (M) 9*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 22696kB [ 812.114026][T19862] Node 1 DMA32: 1261*4kB (UME) 699*8kB (UME) 236*16kB (UME) 114*32kB (UME) 96*64kB (UME) 52*128kB (UME) 40*256kB (UME) 29*512kB (UME) 10*1024kB (UME) 2*2048kB (M) 0*4096kB = 70284kB [ 812.114202][T19862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.114246][T19862] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.114263][T19862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.114278][T19862] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.114293][T19862] 22970 total pagecache pages [ 812.114301][T19862] 1865 pages in swap cache [ 812.114308][T19862] Free swap = 51392kB [ 812.114316][T19862] Total swap = 124996kB [ 812.114324][T19862] 524155 pages RAM [ 812.114358][T19862] 0 pages HighMem/MovableOnly [ 812.114367][T19862] 216920 pages reserved [ 812.114374][T19862] 0 pages cma reserved [ 813.801302][T19888] FAULT_INJECTION: forcing a failure. [ 813.801302][T19888] name failslab, interval 1, probability 0, space 0, times 0 [ 813.801333][T19888] CPU: 0 UID: 0 PID: 19888 Comm: syz.4.4100 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.801360][T19888] Tainted: [L]=SOFTLOCKUP [ 813.801367][T19888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 813.801379][T19888] Call Trace: [ 813.801386][T19888] [ 813.801394][T19888] dump_stack_lvl+0x100/0x190 [ 813.801426][T19888] should_fail_ex.cold+0x5/0xa [ 813.801453][T19888] should_failslab+0xc2/0x120 [ 813.801484][T19888] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 813.801512][T19888] ? start_dirop+0x79/0xb0 [ 813.801537][T19888] ? alloc_inode+0x68/0x250 [ 813.801559][T19888] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 813.801588][T19888] alloc_inode+0x68/0x250 [ 813.801608][T19888] new_inode+0x22/0x1c0 [ 813.801630][T19888] __debugfs_create_file+0xfb/0x500 [ 813.801662][T19888] debugfs_create_file_full+0x41/0x60 [ 813.801694][T19888] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 813.801718][T19888] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 813.801763][T19888] ? kasan_save_track+0x14/0x30 [ 813.801789][T19888] ? __kasan_kmalloc+0xaa/0xb0 [ 813.801814][T19888] ? lockdep_init_map_type+0x5c/0x250 [ 813.801849][T19888] preinit_net+0x252/0x920 [ 813.801875][T19888] copy_net_ns+0x1dd/0x7a0 [ 813.801902][T19888] create_new_namespaces+0x3ea/0xac0 [ 813.801937][T19888] unshare_nsproxy_namespaces+0xf2/0x220 [ 813.801967][T19888] ksys_unshare+0x4a2/0xa70 [ 813.801987][T19888] ? __pfx_ksys_unshare+0x10/0x10 [ 813.802017][T19888] __ia32_sys_unshare+0x30/0x40 [ 813.802037][T19888] __do_fast_syscall_32+0x13a/0x8b0 [ 813.802055][T19888] ? lockdep_hardirqs_on+0x7d/0x110 [ 813.802090][T19888] do_fast_syscall_32+0x32/0x70 [ 813.802108][T19888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.802133][T19888] RIP: 0023:0xf73fefec [ 813.802153][T19888] Code: Unable to access opcode bytes at 0xf73fefc2. [ 813.802162][T19888] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 813.802182][T19888] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 813.802194][T19888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 813.802206][T19888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.802217][T19888] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 813.802228][T19888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.802255][T19888] [ 813.802263][T19888] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88804ce1d240' [ 813.826153][T19888] lo speed is unknown, defaulting to 1000 [ 814.477518][T19909] Invalid ELF header magic: != ELF [ 815.212184][T19926] kAFS: unable to lookup cell 'Þ({^ú@' [ 816.236310][T19938] lo speed is unknown, defaulting to 1000 [ 817.242627][T19959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4118'. [ 817.275021][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4128'. [ 818.370872][T19982] jffs2: notice: (19982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 818.389922][T19979] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 818.435542][T19985] lo speed is unknown, defaulting to 1000 [ 818.626245][T19991] lo speed is unknown, defaulting to 1000 [ 818.687761][T19994] netlink: 'syz.2.4129': attribute type 32 has an invalid length. [ 818.687777][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4129'. [ 818.687794][T19994] netlink: 'syz.2.4129': attribute type 32 has an invalid length. [ 819.853813][T20027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4131'. [ 820.018679][T20030] Invalid ELF header magic: != ELF [ 821.156774][T20046] lo speed is unknown, defaulting to 1000 [ 821.247012][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4138'. [ 822.495142][T20069] can: request_module (can-proto-0) failed. [ 822.845228][T20079] FAULT_INJECTION: forcing a failure. [ 822.845228][T20079] name failslab, interval 1, probability 0, space 0, times 0 [ 822.845410][T20079] CPU: 3 UID: 0 PID: 20079 Comm: syz.4.4148 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.845441][T20079] Tainted: [L]=SOFTLOCKUP [ 822.845449][T20079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 822.845462][T20079] Call Trace: [ 822.845471][T20079] [ 822.845480][T20079] dump_stack_lvl+0x100/0x190 [ 822.845513][T20079] should_fail_ex.cold+0x5/0xa [ 822.845541][T20079] should_failslab+0xc2/0x120 [ 822.845574][T20079] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 822.845601][T20079] ? start_dirop+0x79/0xb0 [ 822.845627][T20079] ? alloc_inode+0x68/0x250 [ 822.845651][T20079] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 822.845683][T20079] alloc_inode+0x68/0x250 [ 822.845705][T20079] new_inode+0x22/0x1c0 [ 822.845730][T20079] __debugfs_create_file+0xfb/0x500 [ 822.845765][T20079] debugfs_create_file_full+0x41/0x60 [ 822.845801][T20079] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 822.845827][T20079] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 822.845874][T20079] ? kasan_save_track+0x14/0x30 [ 822.845902][T20079] ? __kasan_kmalloc+0xaa/0xb0 [ 822.845930][T20079] ? lockdep_init_map_type+0x5c/0x250 [ 822.845966][T20079] preinit_net+0x252/0x920 [ 822.845993][T20079] copy_net_ns+0x1dd/0x7a0 [ 822.846022][T20079] create_new_namespaces+0x3ea/0xac0 [ 822.846060][T20079] unshare_nsproxy_namespaces+0xf2/0x220 [ 822.846097][T20079] ksys_unshare+0x4a2/0xa70 [ 822.846123][T20079] ? __pfx_ksys_unshare+0x10/0x10 [ 822.846158][T20079] __ia32_sys_unshare+0x30/0x40 [ 822.846196][T20079] __do_fast_syscall_32+0x13a/0x8b0 [ 822.846219][T20079] ? lockdep_hardirqs_on+0x7d/0x110 [ 822.846253][T20079] do_fast_syscall_32+0x32/0x70 [ 822.846275][T20079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.846302][T20079] RIP: 0023:0xf73fefec [ 822.846326][T20079] Code: Unable to access opcode bytes at 0xf73fefc2. [ 822.846336][T20079] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 822.846357][T20079] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 822.846370][T20079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.846383][T20079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 822.846395][T20079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 822.846408][T20079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 822.846437][T20079] [ 822.846493][T20079] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888059e382c0' [ 822.889298][T20079] lo speed is unknown, defaulting to 1000 [ 823.142000][T20085] gtp0: left allmulticast mode [ 823.161553][T20085] lo speed is unknown, defaulting to 1000 [ 823.324029][T20084] syz.2.4149: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 823.324101][T20084] CPU: 3 UID: 0 PID: 20084 Comm: syz.2.4149 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.324130][T20084] Tainted: [L]=SOFTLOCKUP [ 823.324139][T20084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 823.324152][T20084] Call Trace: [ 823.324159][T20084] [ 823.324169][T20084] dump_stack_lvl+0x100/0x190 [ 823.324202][T20084] warn_alloc.cold+0x9e/0xb2 [ 823.324225][T20084] ? __pfx_warn_alloc+0x10/0x10 [ 823.324254][T20084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 823.324288][T20084] ? __pfx_get_page_from_freelist+0x10/0x10 [ 823.324323][T20084] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 823.324362][T20084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 823.324390][T20084] ? __lock_acquire+0x5c0/0x1f40 [ 823.324431][T20084] ? lock_acquire+0x1d1/0x380 [ 823.324457][T20084] ? page_table_check_set+0x11d/0x580 [ 823.324488][T20084] ? page_table_check_set+0x30f/0x580 [ 823.324529][T20084] __folio_alloc_noprof+0x16/0x260 [ 823.324552][T20084] alloc_migration_target+0x1d7/0x6d0 [ 823.324576][T20084] migrate_pages_batch+0x5c4/0x4680 [ 823.324602][T20084] ? __pfx_alloc_migration_target+0x10/0x10 [ 823.324629][T20084] ? rcu_read_unlock+0x2d/0xb0 [ 823.324653][T20084] ? __pfx_migrate_pages_batch+0x10/0x10 [ 823.324673][T20084] ? finish_fault+0xaea/0x13e0 [ 823.324708][T20084] ? folio_unlock+0xf5/0x190 [ 823.324753][T20084] migrate_pages_sync+0x12c/0x880 [ 823.324777][T20084] ? rcu_read_unlock+0x2d/0xb0 [ 823.324799][T20084] ? __pfx_alloc_migration_target+0x10/0x10 [ 823.324827][T20084] ? __pfx_migrate_pages_sync+0x10/0x10 [ 823.324848][T20084] ? __lock_acquire+0x5c0/0x1f40 [ 823.324883][T20084] migrate_pages+0x1a83/0x2850 [ 823.324905][T20084] ? __pfx_alloc_migration_target+0x10/0x10 [ 823.324929][T20084] ? __pfx_migrate_pages+0x10/0x10 [ 823.324963][T20084] ? mtree_load+0x3a4/0xb50 [ 823.324988][T20084] move_pages_and_store_status+0xf1/0x230 [ 823.325014][T20084] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 823.325043][T20084] kernel_move_pages+0xca4/0x14d0 [ 823.325071][T20084] ? __pfx_kernel_move_pages+0x10/0x10 [ 823.325106][T20084] ? compat_restore_altstack+0x31/0x40 [ 823.325131][T20084] __ia32_sys_move_pages+0xdd/0x1b0 [ 823.325153][T20084] __do_fast_syscall_32+0x13a/0x8b0 [ 823.325169][T20084] ? lockdep_hardirqs_on+0x7d/0x110 [ 823.325198][T20084] do_fast_syscall_32+0x32/0x70 [ 823.325217][T20084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.325240][T20084] RIP: 0023:0xf740efec [ 823.325258][T20084] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 823.325278][T20084] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 823.325301][T20084] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 823.325314][T20084] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 823.325328][T20084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.325341][T20084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.325352][T20084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.325378][T20084] [ 823.325418][T20084] Mem-Info: [ 823.325428][T20084] active_anon:1119 inactive_anon:1293 isolated_anon:0 [ 823.325428][T20084] active_file:6913 inactive_file:589 isolated_file:0 [ 823.325428][T20084] unevictable:1000 dirty:386 writeback:0 [ 823.325428][T20084] slab_reclaimable:6556 slab_unreclaimable:67886 [ 823.325428][T20084] mapped:25151 shmem:1035 pagetables:1741 [ 823.325428][T20084] sec_pagetables:373 bounce:0 [ 823.325428][T20084] kernel_misc_reclaimable:0 [ 823.325428][T20084] free:31025 free_pcp:4191 free_cma:0 [ 823.325473][T20084] Node 0 active_anon:220kB inactive_anon:20kB active_file:48kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:48kB writeback:0kB shmem:2020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7360kB pagetables:1324kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 823.325523][T20084] Node 1 active_anon:4256kB inactive_anon:5152kB active_file:27604kB inactive_file:2356kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100508kB dirty:1496kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:5640kB sec_pagetables:284kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 823.325571][T20084] Node 0 DMA free:2988kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 823.325615][T20084] lowmem_reserve[]: 0 259 259 259 259 [ 823.325635][T20084] Node 0 DMA32 free:19816kB boost:26328kB min:38032kB low:40956kB high:43880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:220kB inactive_anon:20kB active_file:48kB inactive_file:0kB unevictable:2000kB writepending:48kB zspages:800kB present:1032196kB managed:265372kB mlocked:0kB bounce:0kB free_pcp:2540kB local_pcp:56kB free_cma:0kB [ 823.325680][T20084] lowmem_reserve[]: 0 0 0 0 0 [ 823.325715][T20084] Node 1 DMA32 free:101296kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4256kB inactive_anon:5152kB active_file:27604kB inactive_file:2356kB unevictable:2000kB writepending:1496kB zspages:7344kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:14224kB local_pcp:6128kB free_cma:0kB [ 823.325769][T20084] lowmem_reserve[]: 0 0 0 0 0 [ 823.325799][T20084] Node 0 DMA: 225*4kB (UE) 25*8kB (UE) 22*16kB (UE) 12*32kB (UE) 6*64kB (UE) 0*128kB 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2988kB [ 823.325929][T20084] Node 0 DMA32: 548*4kB (UME) 200*8kB (UME) 96*16kB (UME) 152*32kB (UME) 29*64kB (UME) 5*128kB (UME) 6*256kB (M) 9*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 19856kB [ 823.326123][T20084] Node 1 DMA32: 1362*4kB (UME) 1739*8kB (UME) 867*16kB (UME) 281*32kB (UME) 192*64kB (UME) 100*128kB (UME) 37*256kB (UME) 22*512kB (UME) 13*1024kB (UME) 0*2048kB 0*4096kB = 101360kB [ 823.326260][T20084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 823.326277][T20084] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 823.326294][T20084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 823.326308][T20084] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 823.326321][T20084] 10292 total pagecache pages [ 823.326328][T20084] 1756 pages in swap cache [ 823.326334][T20084] Free swap = 49736kB [ 823.326341][T20084] Total swap = 124996kB [ 823.326348][T20084] 524155 pages RAM [ 823.326354][T20084] 0 pages HighMem/MovableOnly [ 823.326360][T20084] 216920 pages reserved [ 823.326367][T20084] 0 pages cma reserved [ 823.750017][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4150'. [ 825.722839][T20118] lo speed is unknown, defaulting to 1000 [ 826.783139][T20141] lo speed is unknown, defaulting to 1000 [ 827.134674][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 830.422392][T20187] fuse: fd is not a fuse device [ 830.435582][T20189] lo speed is unknown, defaulting to 1000 [ 830.560566][ T5443] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 60 seconds [ 830.560604][ T5443] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 60 seconds [ 830.560628][ T5443] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 60 seconds [ 830.560651][ T5443] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 60 seconds [ 831.604459][ T44] kauditd_printk_skb: 219 callbacks suppressed [ 831.604478][ T44] audit: type=1800 audit(1791557714.794:3000): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4179" name="bus" dev="ramfs" ino=72023 res=0 errno=0 [ 833.974953][ T5145] udevd[5145]: worker [18924] /devices/virtual/block/nbd0 is taking a long time [ 834.060298][T20237] Bluetooth: hci0: unsupported parameter 5135 [ 834.060318][T20237] Bluetooth: hci0: unsupported parameter 8192 [ 834.060326][T20237] Bluetooth: hci0: unsupported parameter 5135 [ 834.060333][T20237] Bluetooth: hci0: unsupported parameter 8192 [ 834.196152][T20241] FAULT_INJECTION: forcing a failure. [ 834.196152][T20241] name failslab, interval 1, probability 0, space 0, times 0 [ 834.196173][T20241] CPU: 1 UID: 0 PID: 20241 Comm: syz.4.4187 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.196189][T20241] Tainted: [L]=SOFTLOCKUP [ 834.196194][T20241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 834.196201][T20241] Call Trace: [ 834.196205][T20241] [ 834.196211][T20241] dump_stack_lvl+0x100/0x190 [ 834.196231][T20241] should_fail_ex.cold+0x5/0xa [ 834.196247][T20241] should_failslab+0xc2/0x120 [ 834.196266][T20241] kmem_cache_alloc_noprof+0x92/0x6a0 [ 834.196282][T20241] ? __pfx_map_id_range_down+0x10/0x10 [ 834.196300][T20241] ? security_inode_alloc+0x3b/0x2c0 [ 834.196316][T20241] security_inode_alloc+0x3b/0x2c0 [ 834.196329][T20241] inode_init_always_gfp+0xc6f/0xfb0 [ 834.196347][T20241] alloc_inode+0x8e/0x250 [ 834.196360][T20241] new_inode+0x22/0x1c0 [ 834.196374][T20241] __debugfs_create_file+0xfb/0x500 [ 834.196395][T20241] debugfs_create_file_full+0x41/0x60 [ 834.196415][T20241] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 834.196431][T20241] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 834.196463][T20241] ? kasan_save_track+0x14/0x30 [ 834.196480][T20241] ? __kasan_kmalloc+0xaa/0xb0 [ 834.196497][T20241] ? lockdep_init_map_type+0x5c/0x250 [ 834.196519][T20241] preinit_net+0x252/0x920 [ 834.196535][T20241] copy_net_ns+0x1dd/0x7a0 [ 834.196552][T20241] create_new_namespaces+0x3ea/0xac0 [ 834.196574][T20241] unshare_nsproxy_namespaces+0xf2/0x220 [ 834.196593][T20241] ksys_unshare+0x4a2/0xa70 [ 834.196606][T20241] ? __pfx_ksys_unshare+0x10/0x10 [ 834.196623][T20241] __ia32_sys_unshare+0x30/0x40 [ 834.196635][T20241] __do_fast_syscall_32+0x13a/0x8b0 [ 834.196647][T20241] ? lockdep_hardirqs_on+0x7d/0x110 [ 834.196666][T20241] do_fast_syscall_32+0x32/0x70 [ 834.196677][T20241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.196692][T20241] RIP: 0023:0xf73fefec [ 834.196706][T20241] Code: Unable to access opcode bytes at 0xf73fefc2. [ 834.196711][T20241] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 834.196723][T20241] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 834.196731][T20241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 834.196740][T20241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.196747][T20241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.196754][T20241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.196769][T20241] [ 834.196784][T20241] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880738502c0' [ 834.223608][T20241] lo speed is unknown, defaulting to 1000 [ 836.023217][T20257] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 836.044456][T20257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 836.093026][T20257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 836.093387][T20257] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 836.099134][T20257] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 837.050074][ T44] audit: type=1800 audit(1791557720.244:3001): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4190" name="bus" dev="ramfs" ino=71157 res=0 errno=0 [ 838.306367][T20285] FAULT_INJECTION: forcing a failure. [ 838.306367][T20285] name failslab, interval 1, probability 0, space 0, times 0 [ 838.306389][T20285] CPU: 3 UID: 0 PID: 20285 Comm: syz.4.4198 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.306406][T20285] Tainted: [L]=SOFTLOCKUP [ 838.306411][T20285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.306418][T20285] Call Trace: [ 838.306422][T20285] [ 838.306427][T20285] dump_stack_lvl+0x100/0x190 [ 838.306448][T20285] should_fail_ex.cold+0x5/0xa [ 838.306464][T20285] should_failslab+0xc2/0x120 [ 838.306483][T20285] kmem_cache_alloc_noprof+0x92/0x6a0 [ 838.306500][T20285] ? __pfx_map_id_range_down+0x10/0x10 [ 838.306518][T20285] ? security_inode_alloc+0x3b/0x2c0 [ 838.306534][T20285] security_inode_alloc+0x3b/0x2c0 [ 838.306547][T20285] inode_init_always_gfp+0xc6f/0xfb0 [ 838.306565][T20285] alloc_inode+0x8e/0x250 [ 838.306580][T20285] new_inode+0x22/0x1c0 [ 838.306594][T20285] __debugfs_create_file+0xfb/0x500 [ 838.306615][T20285] debugfs_create_file_full+0x41/0x60 [ 838.306636][T20285] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 838.306651][T20285] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 838.306676][T20285] ? kasan_save_track+0x14/0x30 [ 838.306692][T20285] ? __kasan_kmalloc+0xaa/0xb0 [ 838.306708][T20285] ? lockdep_init_map_type+0x5c/0x250 [ 838.306729][T20285] preinit_net+0x252/0x920 [ 838.306745][T20285] copy_net_ns+0x1dd/0x7a0 [ 838.306761][T20285] create_new_namespaces+0x3ea/0xac0 [ 838.306783][T20285] unshare_nsproxy_namespaces+0xf2/0x220 [ 838.306802][T20285] ksys_unshare+0x4a2/0xa70 [ 838.306814][T20285] ? __pfx_ksys_unshare+0x10/0x10 [ 838.306855][T20285] __ia32_sys_unshare+0x30/0x40 [ 838.306870][T20285] __do_fast_syscall_32+0x13a/0x8b0 [ 838.306882][T20285] ? lockdep_hardirqs_on+0x7d/0x110 [ 838.306902][T20285] do_fast_syscall_32+0x32/0x70 [ 838.306914][T20285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.306930][T20285] RIP: 0023:0xf73fefec [ 838.306945][T20285] Code: Unable to access opcode bytes at 0xf73fefc2. [ 838.306951][T20285] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 838.306963][T20285] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 838.306971][T20285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.306978][T20285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.306985][T20285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 838.306992][T20285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.307007][T20285] [ 838.307020][T20285] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888052c92a80' [ 838.363276][T20285] lo speed is unknown, defaulting to 1000 [ 839.020289][T20298] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 839.042111][T20298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.079825][T20298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.080130][T20298] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 839.080687][T20298] bond4: (slave wireguard1): Error -95 calling set_mac_address [ 841.259577][ T44] audit: type=1800 audit(1791557724.444:3002): pid=20336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4205" name="bus" dev="ramfs" ino=70410 res=0 errno=0 [ 841.541257][ T44] audit: type=1326 audit(1791557724.734:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.541889][ T44] audit: type=1326 audit(1791557724.734:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.546147][ T44] audit: type=1326 audit(1791557724.734:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.548457][ T44] audit: type=1326 audit(1791557724.734:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.588522][ T44] audit: type=1326 audit(1791557724.734:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.588568][ T44] audit: type=1326 audit(1791557724.744:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.588604][ T44] audit: type=1326 audit(1791557724.744:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 841.588755][ T44] audit: type=1326 audit(1791557724.784:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 842.059459][ T44] kauditd_printk_skb: 129 callbacks suppressed [ 842.059473][ T44] audit: type=1326 audit(1791557725.254:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.060954][ T44] audit: type=1326 audit(1791557725.254:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.062224][ T44] audit: type=1326 audit(1791557725.254:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.063571][ T44] audit: type=1326 audit(1791557725.254:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.064969][ T44] audit: type=1326 audit(1791557725.254:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.066277][ T44] audit: type=1326 audit(1791557725.254:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.067639][ T44] audit: type=1326 audit(1791557725.254:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.073575][ T44] audit: type=1326 audit(1791557725.264:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.074845][ T44] audit: type=1326 audit(1791557725.264:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 842.078703][ T44] audit: type=1326 audit(1791557725.264:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20339 comm="syz.2.4211" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf716762b code=0x7ffc0000 [ 843.141426][T20381] IPVS: ip_vs_add_dest(): server weight less than zero [ 845.365491][T20409] lo speed is unknown, defaulting to 1000 [ 845.397594][T20412] Invalid ELF header type: 3 != 1 [ 846.047212][T20422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4227'. [ 846.049916][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4227'. [ 848.101123][ T44] kauditd_printk_skb: 70 callbacks suppressed [ 848.101143][ T44] audit: type=1326 audit(1791557731.294:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.101184][ T44] audit: type=1326 audit(1791557731.294:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.102059][ T44] audit: type=1326 audit(1791557731.294:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.102100][ T44] audit: type=1326 audit(1791557731.294:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.102197][ T44] audit: type=1326 audit(1791557731.294:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.102492][ T44] audit: type=1326 audit(1791557731.294:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.102607][ T44] audit: type=1326 audit(1791557731.294:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.102703][ T44] audit: type=1326 audit(1791557731.294:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.103164][ T44] audit: type=1326 audit(1791557731.294:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.103296][ T44] audit: type=1326 audit(1791557731.294:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4235" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf740efec code=0x7ffc0000 [ 848.375533][T20462] lo speed is unknown, defaulting to 1000 [ 848.556014][T20466] IPVS: ip_vs_add_dest(): server weight less than zero [ 849.207720][T20478] netlink: 'syz.2.4243': attribute type 4 has an invalid length. [ 849.221523][T20478] netlink: 'syz.2.4243': attribute type 4 has an invalid length. [ 852.408028][T20526] fuse: fd is not a fuse device [ 852.721397][T20528] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 852.816067][T20534] netlink: 'syz.0.4253': attribute type 7 has an invalid length. [ 853.103314][T20537] IPVS: ip_vs_add_dest(): server weight less than zero [ 853.729342][ T44] kauditd_printk_skb: 172 callbacks suppressed [ 853.729358][ T44] audit: type=1326 audit(1791557736.764:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729388][ T44] audit: type=1326 audit(1791557736.764:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729422][ T44] audit: type=1326 audit(1791557736.764:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729460][ T44] audit: type=1326 audit(1791557736.764:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729482][ T44] audit: type=1326 audit(1791557736.764:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729502][ T44] audit: type=1326 audit(1791557736.764:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729523][ T44] audit: type=1326 audit(1791557736.764:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729543][ T44] audit: type=1326 audit(1791557736.764:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 853.729562][ T44] audit: type=1326 audit(1791557736.774:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f73017 code=0x7ffc0000 [ 853.729583][ T44] audit: type=1326 audit(1791557736.774:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.3.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 854.549491][T20555] IPVS: ip_vs_add_dest(): server weight less than zero [ 856.723405][T20586] netlink: 'syz.0.4262': attribute type 4 has an invalid length. [ 856.724156][T20586] netlink: 'syz.0.4262': attribute type 4 has an invalid length. [ 859.441167][ T44] kauditd_printk_skb: 197 callbacks suppressed [ 859.441182][ T44] audit: type=1326 audit(1791557742.634:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.441363][ T44] audit: type=1326 audit(1791557742.634:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.442378][ T44] audit: type=1326 audit(1791557742.634:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.442596][ T44] audit: type=1326 audit(1791557742.634:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.443953][ T44] audit: type=1326 audit(1791557742.634:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.444189][ T44] audit: type=1326 audit(1791557742.634:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.445124][ T44] audit: type=1326 audit(1791557742.634:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.448555][ T44] audit: type=1326 audit(1791557742.634:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.526851][ T44] audit: type=1326 audit(1791557742.654:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 859.526911][ T44] audit: type=1326 audit(1791557742.654:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.4.4275" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 860.735732][ T5443] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 90 seconds [ 860.735770][ T5443] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 90 seconds [ 860.735794][ T5443] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 90 seconds [ 860.735817][ T5443] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 90 seconds [ 860.932287][T20632] fuse: fd is not a fuse device [ 864.143976][T20674] jffs2: notice: (20674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 865.213871][ T44] kauditd_printk_skb: 717 callbacks suppressed [ 865.213891][ T44] audit: type=1326 audit(1791557748.404:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.213933][ T44] audit: type=1326 audit(1791557748.404:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.215611][ T44] audit: type=1326 audit(1791557748.404:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.215653][ T44] audit: type=1326 audit(1791557748.404:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.215742][ T44] audit: type=1326 audit(1791557748.404:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.216051][ T44] audit: type=1326 audit(1791557748.404:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.216197][ T44] audit: type=1326 audit(1791557748.404:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.216328][ T44] audit: type=1326 audit(1791557748.404:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.216781][ T44] audit: type=1326 audit(1791557748.404:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 865.216897][ T44] audit: type=1326 audit(1791557748.404:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.4289" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f72fec code=0x7ffc0000 [ 867.793936][T20736] IPVS: ip_vs_add_dest(): server weight less than zero [ 869.123664][T20764] lo speed is unknown, defaulting to 1000 [ 869.610784][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.610825][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.397287][T20782] lo speed is unknown, defaulting to 1000 [ 871.544125][T20800] lo speed is unknown, defaulting to 1000 [ 871.633082][T20804] IPVS: ip_vs_add_dest(): server weight less than zero [ 871.877049][ T44] kauditd_printk_skb: 393 callbacks suppressed [ 871.877069][ T44] audit: type=1326 audit(1791557755.064:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.877197][ T44] audit: type=1326 audit(1791557755.064:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.880769][ T44] audit: type=1326 audit(1791557755.074:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.880953][ T44] audit: type=1326 audit(1791557755.074:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.880993][ T44] audit: type=1326 audit(1791557755.074:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.881290][ T44] audit: type=1326 audit(1791557755.074:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.881766][ T44] audit: type=1326 audit(1791557755.074:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.884021][ T44] audit: type=1326 audit(1791557755.074:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.884061][ T44] audit: type=1326 audit(1791557755.074:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf742efec code=0x7ffc0000 [ 871.884097][ T44] audit: type=1326 audit(1791557755.074:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20806 comm="syz.0.4316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 874.344080][T20845] netlink: 'syz.0.4330': attribute type 10 has an invalid length. [ 874.347407][T20845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.350017][T20845] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 874.357325][T20842] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 874.361669][T20845] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4330'. [ 874.372513][T20845] .` (unregistering): (slave netdevsim1): Releasing backup interface [ 874.379254][T20845] .` (unregistering): Released all slaves [ 875.117558][T20857] lo speed is unknown, defaulting to 1000 [ 876.336960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 876.381148][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4333'. [ 877.013288][T20890] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 877.877089][ T44] kauditd_printk_skb: 214 callbacks suppressed [ 877.877104][ T44] audit: type=1326 audit(1791557761.064:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.877807][ T44] audit: type=1326 audit(1791557761.064:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.877945][ T44] audit: type=1326 audit(1791557761.064:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.877999][ T44] audit: type=1326 audit(1791557761.064:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.878264][ T44] audit: type=1326 audit(1791557761.064:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.878353][ T44] audit: type=1326 audit(1791557761.064:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.878798][ T44] audit: type=1326 audit(1791557761.064:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.881567][ T44] audit: type=1326 audit(1791557761.064:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.881603][ T44] audit: type=1326 audit(1791557761.064:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.881632][ T44] audit: type=1326 audit(1791557761.074:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 877.964630][T20918] IPVS: ip_vs_add_dest(): server weight less than zero [ 879.214117][T20933] 9pnet_virtio: no channels available for device 127.0.0.1 [ 879.215993][T20933] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 879.590043][T20944] Invalid ELF header magic: != ELF [ 879.801495][T20942] overlay: Unknown parameter '/' [ 881.540304][T20964] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 881.588243][T20965] usb usb8: usbfs: process 20965 (syz.4.4357) did not claim interface 0 before use [ 882.510480][T20974] lo speed is unknown, defaulting to 1000 [ 882.756812][T20983] fuse: fd is not a fuse device [ 884.059418][T21004] Invalid ELF header magic: != ELF [ 884.371360][T21001] overlay: Unknown parameter '/' [ 884.667704][T21014] lo speed is unknown, defaulting to 1000 [ 886.095169][T21046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4369'. [ 887.594428][T21060] overlayfs: failed to clone lowerpath [ 887.597264][T21058] lo speed is unknown, defaulting to 1000 [ 887.772667][T21060] overlayfs: failed to clone lowerpath [ 888.042753][T21064] o2cb: Local heartbeat has not been started. [ 888.042770][T21064] o2cb: Cluster check failed. Fix errors before retrying. [ 888.042804][T21064] (syz.4.4374,21064,2):user_dlm_register:674 ERROR: status = -22 [ 888.042831][T21064] (syz.4.4374,21064,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 888.572041][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4379'. [ 889.788162][T21100] Invalid ELF header magic: != ELF [ 889.805013][T21100] overlay: Unknown parameter '/' [ 889.886400][T21098] fuse: fd is not a fuse device [ 890.619944][T21111] Invalid ELF header magic: != ELF [ 890.632893][T21113] fuse: Bad value for 'fd' [ 890.683615][T21113] jffs2: notice: (21113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 890.829074][T21108] overlay: Unknown parameter '/' [ 891.362212][ T5443] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 120 seconds [ 891.362254][ T5443] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 120 seconds [ 891.362279][ T5443] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 120 seconds [ 891.362301][ T5443] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 120 seconds [ 893.426115][ T44] kauditd_printk_skb: 49 callbacks suppressed [ 893.426129][ T44] audit: type=1326 audit(1791557776.614:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.426258][ T44] audit: type=1326 audit(1791557776.614:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.431842][ T44] audit: type=1326 audit(1791557776.614:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.445897][ T44] audit: type=1326 audit(1791557776.634:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.446242][ T44] audit: type=1326 audit(1791557776.634:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.446403][ T44] audit: type=1326 audit(1791557776.634:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.480151][ T44] audit: type=1326 audit(1791557776.664:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.484780][ T44] audit: type=1326 audit(1791557776.674:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.484828][ T44] audit: type=1326 audit(1791557776.674:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 893.484866][ T44] audit: type=1326 audit(1791557776.674:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.4.4394" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 894.015575][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 894.481266][T21164] C: renamed from veth1_to_team [ 894.483409][T21164] netlink: 'syz.2.4399': attribute type 2 has an invalid length. [ 894.483427][T21164] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4399'. [ 894.483442][T21164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 894.513362][T21168] Invalid ELF header magic: != ELF [ 894.544364][T21168] overlay: Unknown parameter '/' [ 896.480890][T21194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4408'. [ 896.574900][T21196] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4408'. [ 898.219857][T21230] jffs2: notice: (21230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 900.217086][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 900.444152][T21264] Invalid ELF header magic: != ELF [ 900.461409][T21264] overlay: Unknown parameter '/' [ 901.173862][ T44] kauditd_printk_skb: 295 callbacks suppressed [ 901.173875][ T44] audit: type=1326 audit(1791557784.364:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.174994][ T44] audit: type=1326 audit(1791557784.364:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.175129][ T44] audit: type=1326 audit(1791557784.364:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.175314][ T44] audit: type=1326 audit(1791557784.364:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.175520][ T44] audit: type=1326 audit(1791557784.364:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.176089][ T44] audit: type=1326 audit(1791557784.364:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.176252][ T44] audit: type=1326 audit(1791557784.364:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.176395][ T44] audit: type=1326 audit(1791557784.364:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.181662][ T44] audit: type=1326 audit(1791557784.374:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.181690][ T44] audit: type=1326 audit(1791557784.374:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz.4.4431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 901.766428][T21287] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 903.135057][T21308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4439'. [ 903.584995][T21316] fuse: fd is not a fuse device [ 903.901461][T21323] bond3: entered allmulticast mode [ 903.902237][T21323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 903.917507][T21323] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 903.918204][T21323] macvlan0: entered allmulticast mode [ 903.918215][T21323] bond0: entered allmulticast mode [ 903.918566][T21323] bond3: (slave macvlan0): Enslaving as a backup interface with a down link [ 903.933189][T21323] ip6gretap1: entered allmulticast mode [ 903.933486][T21323] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 903.935761][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 903.941087][T21323] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4444'. [ 904.024480][T21320] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 904.645941][T21312] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 904.668511][T21312] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 904.668653][T21312] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 904.670721][T21312] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 904.671137][T21312] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 904.687066][T21312] pci 0000:00:01.0: Adding to iommu group 1 [ 904.689691][T21312] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 904.689704][T21312] pci 0000:00:01.0: vgaarb: bridge control possible [ 904.689712][T21312] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 904.694547][T21312] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 904.696961][T21312] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned [ 904.700695][T21312] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 904.716723][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 904.717451][T21312] [drm] Found bochs VGA, ID 0xb0c5. [ 904.717461][T21312] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 904.748369][T21312] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 904.872161][T21312] Console: switching to colour frame buffer device 160x50 [ 904.908013][T21312] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 905.226217][T21340] bridge0: port 1(syz_tun) entered blocking state [ 905.226361][T21340] bridge0: port 1(syz_tun) entered disabled state [ 905.226630][T21340] syz_tun: entered allmulticast mode [ 905.227961][T21340] syz_tun: entered promiscuous mode [ 905.283268][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4450'. [ 905.336345][T21344] lo speed is unknown, defaulting to 1000 [ 905.613558][T21350] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 905.906387][T21359] fuse: fd is not a fuse device [ 906.391731][T21373] IPVS: stopping master sync thread 17593 ... [ 906.593947][T21380] batman_adv: batadv0: Adding interface: veth0 [ 906.593959][T21380] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.594008][T21380] batman_adv: batadv0: Interface activated: veth0 [ 906.603767][T21380] batman_adv: batadv0: Interface deactivated: veth0 [ 906.603787][T21380] batman_adv: batadv0: Removing interface: veth0 [ 907.004620][T21391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'. [ 908.017300][T21402] lo speed is unknown, defaulting to 1000 [ 908.396717][T21425] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 908.452680][T21428] bond0: entered promiscuous mode [ 908.453832][T21428] batadv0: entered promiscuous mode [ 908.454984][T21428] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 908.455004][T21428] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 908.455488][T21428] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 908.497765][T21428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 908.497788][T21428] overlayfs: failed to set xattr on upper [ 908.497796][T21428] overlayfs: ...falling back to redirect_dir=nofollow. [ 908.497804][T21428] overlayfs: ...falling back to metacopy=off. [ 908.497810][T21428] overlayfs: ...falling back to index=off. [ 908.497817][T21428] overlayfs: ...falling back to uuid=null. [ 908.880561][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4484'. [ 908.987083][T21449] siw: device registration error -23 [ 909.017987][T21449] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 909.425977][T21476] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 909.532851][T21471] overlayfs: failed to resolve './cgroup': -2 [ 910.869666][T21511] siw: device registration error -23 [ 910.899201][T21511] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 911.447753][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 911.447767][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 911.489397][ T5809] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.489440][ T5809] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.489473][ T5809] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.489503][ T5809] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.762521][ T44] kauditd_printk_skb: 381 callbacks suppressed [ 911.762535][ T44] audit: type=1804 audit(1791557794.954:5718): pid=21530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4511" name="bus" dev="ramfs" ino=78377 res=1 errno=0 [ 911.781367][ T44] audit: type=1804 audit(1791557794.954:5719): pid=21530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4511" name="bus" dev="ramfs" ino=78377 res=1 errno=0 [ 912.612126][T21542] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 914.961050][T21588] siw: device registration error -23 [ 915.037993][T21589] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 916.627715][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4530'. [ 919.334349][T21654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4541'. [ 919.402969][T21665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4545'. [ 920.769078][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.769111][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.769210][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.769229][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.800570][T21690] lo speed is unknown, defaulting to 1000 [ 921.513045][ T5443] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 150 seconds [ 921.513090][ T5443] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 150 seconds [ 921.513114][ T5443] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 150 seconds [ 921.513138][ T5443] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 150 seconds [ 921.888214][T21710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4555'. [ 922.543004][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4558'. [ 922.653754][T21730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4560'. [ 923.148339][T21751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4564'. [ 924.327963][T21774] macsec0: entered promiscuous mode [ 924.327979][T21774] macsec0: entered allmulticast mode [ 924.355965][T21774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4570'. [ 924.355991][T21774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4570'. [ 924.374276][T21774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4570'. [ 924.846179][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4572'. [ 925.035025][T21800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4576'. [ 925.083064][T21805] syzkaller1: entered promiscuous mode [ 925.083080][T21805] syzkaller1: entered allmulticast mode [ 926.024666][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4579'. [ 926.138719][ T44] audit: type=1326 audit(1791557809.324:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.138772][ T44] audit: type=1326 audit(1791557809.324:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.138811][ T44] audit: type=1326 audit(1791557809.324:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.138975][ T44] audit: type=1326 audit(1791557809.324:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.139014][ T44] audit: type=1326 audit(1791557809.324:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.139053][ T44] audit: type=1326 audit(1791557809.324:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.139092][ T44] audit: type=1326 audit(1791557809.324:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.139132][ T44] audit: type=1326 audit(1791557809.324:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.139179][ T44] audit: type=1326 audit(1791557809.324:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf718762b code=0x7ffc0000 [ 926.139218][ T44] audit: type=1326 audit(1791557809.324:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.0.4581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 926.288009][T21826] netlink: 'syz.0.4581': attribute type 30 has an invalid length. [ 926.323588][T21832] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 928.905495][T21875] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 929.085263][T21894] lo speed is unknown, defaulting to 1000 [ 930.037874][T21906] 8021q: VLANs not supported on xfrm0 [ 931.051166][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.051216][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.492831][T21932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.741152][T21965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4613'. [ 934.501428][T21978] lo speed is unknown, defaulting to 1000 [ 934.933443][T21989] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 935.263101][ T44] kauditd_printk_skb: 45 callbacks suppressed [ 935.263119][ T44] audit: type=1804 audit(1791557817.458:5775): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4620" name="file1" dev="ramfs" ino=80866 res=1 errno=0 [ 935.613994][T22014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4621'. [ 935.916388][T22026] Invalid ELF header magic: != ELF [ 936.491495][T15304] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 944.797344][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4626'. [ 944.872234][ T44] audit: type=1326 audit(1791557827.068:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22061 comm="syz.0.4630" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742efec code=0x0 [ 945.038993][T22056] trusted_key: syz.4.4627 sent an empty control message without MSG_MORE. [ 945.438808][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4631'. [ 945.638081][T22078] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4632'. [ 945.753082][T22078] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 949.291914][T22093] lo speed is unknown, defaulting to 1000 [ 950.132887][T22111] netlink: 'syz.4.4641': attribute type 10 has an invalid length. [ 950.143172][T22111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 950.149636][T22111] netlink: 'syz.4.4641': attribute type 10 has an invalid length. [ 951.279303][T22135] 9pnet_virtio: no channels available for device c::: [ 951.519243][ T5443] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 180 seconds [ 951.519279][ T5443] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 180 seconds [ 951.519300][ T5443] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 180 seconds [ 951.519321][ T5443] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 180 seconds [ 951.543975][T22141] netlink: 'syz.3.4648': attribute type 9 has an invalid length. [ 953.070181][T22173] openvswitch: netlink: IP tunnel dst address not specified [ 953.198256][T22173] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 953.416285][T22183] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4660'. [ 955.150820][T22200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4665'. [ 955.166833][T22200] debugfs: '1ùà^!' already exists in 'ieee80211' [ 956.371220][T22225] afs: Unknown parameter 'dy' [ 956.399811][T22229] tipc: Resetting bearer [ 956.401380][T22229] macsec0: left promiscuous mode [ 956.401392][T22229] macsec0: left allmulticast mode [ 956.418896][T22229] lo speed is unknown, defaulting to 1000 [ 958.464222][T22275] fuse: fd is not a fuse device [ 958.702540][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703894][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703917][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703929][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703942][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703954][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703966][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.703978][T16688] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 958.800124][T16688] hid-generic 0000:0000:0001.0004: hidraw1: HID v0.10 Device [syz0] on syz1 [ 958.805785][T22283] lo speed is unknown, defaulting to 1000 [ 958.917914][T22287] overlayfs: failed to clone lowerpath [ 958.930597][T22287] overlayfs: failed to clone lowerpath [ 958.935440][T22290] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4684'. [ 958.940229][T22284] fido_id[22284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 959.033464][T22294] fuse: fd is not a fuse device [ 959.094832][T22296] netlink: 'syz.3.4689': attribute type 10 has an invalid length. [ 959.095840][T22296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 959.096541][T22296] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 959.122593][T22296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4689'. [ 959.174600][T22299] syz.3.4689: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 959.174664][T22299] CPU: 3 UID: 0 PID: 22299 Comm: syz.3.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.174681][T22299] Tainted: [L]=SOFTLOCKUP [ 959.174686][T22299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 959.174694][T22299] Call Trace: [ 959.174698][T22299] [ 959.174703][T22299] dump_stack_lvl+0x100/0x190 [ 959.174779][T22299] warn_alloc.cold+0x9e/0xb2 [ 959.174793][T22299] ? __pfx_warn_alloc+0x10/0x10 [ 959.174833][T22299] ? __lock_acquire+0x5c0/0x1f40 [ 959.174853][T22299] __vmalloc_node_range_noprof+0x123b/0x1420 [ 959.174876][T22299] ? __lock_acquire+0x5c0/0x1f40 [ 959.174893][T22299] ? __lock_acquire+0x5c0/0x1f40 [ 959.174912][T22299] ? __lock_acquire+0x5c0/0x1f40 [ 959.174929][T22299] ? do_replace+0x1c6/0x490 [ 959.174962][T22299] ? do_raw_spin_lock+0x128/0x260 [ 959.174976][T22299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 959.174997][T22299] ? __lock_acquire+0x5c0/0x1f40 [ 959.175014][T22299] ? do_raw_spin_unlock+0x145/0x1e0 [ 959.175029][T22299] ? do_replace+0x1c6/0x490 [ 959.175042][T22299] __vmalloc_node_noprof+0xad/0xf0 [ 959.175061][T22299] ? do_replace+0x1c6/0x490 [ 959.175076][T22299] __vmalloc_noprof+0xa3/0x120 [ 959.175089][T22299] ? __pfx___vmalloc_noprof+0x10/0x10 [ 959.175105][T22299] do_replace+0x1c6/0x490 [ 959.175120][T22299] ? __pfx_do_replace+0x10/0x10 [ 959.175140][T22299] ? register_lock_class+0x3f/0x7b0 [ 959.175162][T22299] compat_do_replace+0x589/0x7a0 [ 959.175177][T22299] ? __pfx_compat_do_replace+0x10/0x10 [ 959.175199][T22299] ? bpf_lsm_capable+0x9/0x10 [ 959.175212][T22299] ? security_capable+0x80/0x260 [ 959.175232][T22299] do_ebt_set_ctl+0x3f4/0x4a0 [ 959.175247][T22299] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 959.175262][T22299] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 959.175279][T22299] ? futex_wake+0x4ea/0x5e0 [ 959.175296][T22299] ? nf_sockopt_find.isra.0+0x222/0x290 [ 959.175313][T22299] nf_setsockopt+0x8d/0xf0 [ 959.175328][T22299] ip_setsockopt+0xcb/0xf0 [ 959.175347][T22299] tcp_setsockopt+0xa7/0x100 [ 959.175362][T22299] smc_setsockopt+0x1b6/0xa40 [ 959.175396][T22299] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 959.175420][T22299] ? __pfx_smc_setsockopt+0x10/0x10 [ 959.175436][T22299] ? aa_sock_opt_perm+0x114/0x1e0 [ 959.175455][T22299] ? __pfx_smc_setsockopt+0x10/0x10 [ 959.175472][T22299] do_sock_setsockopt+0xf3/0x1d0 [ 959.175490][T22299] __sys_setsockopt+0x119/0x190 [ 959.175507][T22299] __ia32_sys_setsockopt+0xbc/0x160 [ 959.175521][T22299] ? __do_fast_syscall_32+0xb3/0x8b0 [ 959.175532][T22299] ? lockdep_hardirqs_on+0x7d/0x110 [ 959.175549][T22299] __do_fast_syscall_32+0x13a/0x8b0 [ 959.175562][T22299] do_fast_syscall_32+0x32/0x70 [ 959.175573][T22299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 959.175588][T22299] RIP: 0023:0xf7f72fec [ 959.175602][T22299] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 959.175607][T22299] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 959.175619][T22299] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 959.175626][T22299] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 959.175633][T22299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.175640][T22299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 959.175647][T22299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.175662][T22299] [ 959.175667][T22299] Mem-Info: [ 959.175673][T22299] active_anon:367 inactive_anon:3486 isolated_anon:0 [ 959.175673][T22299] active_file:4633 inactive_file:8826 isolated_file:0 [ 959.175673][T22299] unevictable:1000 dirty:0 writeback:0 [ 959.175673][T22299] slab_reclaimable:6662 slab_unreclaimable:69606 [ 959.175673][T22299] mapped:26927 shmem:2398 pagetables:1777 [ 959.175673][T22299] sec_pagetables:376 bounce:0 [ 959.175673][T22299] kernel_misc_reclaimable:0 [ 959.175673][T22299] free:22768 free_pcp:2646 free_cma:0 [ 959.175700][T22299] Node 0 active_anon:52kB inactive_anon:268kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7360kB pagetables:1324kB sec_pagetables:1212kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 959.175728][T22299] Node 1 active_anon:1416kB inactive_anon:13676kB active_file:18532kB inactive_file:35304kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:107672kB dirty:0kB writeback:0kB shmem:9584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8132kB pagetables:5784kB sec_pagetables:292kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 959.175755][T22299] Node 0 DMA free:2888kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.175788][T22299] lowmem_reserve[]: 0 259 259 259 259 [ 959.175809][T22299] Node 0 DMA32 free:25048kB boost:26328kB min:38032kB low:40956kB high:43880kB reserved_highatomic:2048kB free_highatomic:20kB active_anon:52kB inactive_anon:264kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:664kB present:1032196kB managed:265372kB mlocked:0kB bounce:0kB free_pcp:2044kB local_pcp:0kB free_cma:0kB [ 959.175844][T22299] lowmem_reserve[]: 0 0 0 0 0 [ 959.175862][T22299] Node 1 DMA32 free:63136kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1416kB inactive_anon:13676kB active_file:18532kB inactive_file:35304kB unevictable:4000kB writepending:0kB zspages:8232kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:8524kB local_pcp:3132kB free_cma:0kB [ 959.175895][T22299] lowmem_reserve[]: 0 0 0 0 0 [ 959.175913][T22299] Node 0 DMA: 224*4kB (UE) 33*8kB (UE) 20*16kB (UE) 12*32kB (UE) 4*64kB (UE) 0*128kB 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2888kB [ 959.176009][T22299] Node 0 DMA32: 566*4kB (UMEH) 225*8kB (UMEH) 106*16kB (UME) 161*32kB (UME) 39*64kB (UME) 21*128kB (UME) 13*256kB (UM) 9*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 25056kB [ 959.176099][T22299] Node 1 DMA32: 469*4kB (UME) 474*8kB (UME) 146*16kB (UME) 80*32kB (UME) 54*64kB (UME) 61*128kB (UME) 32*256kB (UME) 33*512kB (UME) 12*1024kB (UME) 2*2048kB (M) 0*4096kB = 63300kB [ 959.176187][T22299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.176195][T22299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 959.176204][T22299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.176212][T22299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 959.176221][T22299] 18018 total pagecache pages [ 959.176226][T22299] 2136 pages in swap cache [ 959.176230][T22299] Free swap = 63500kB [ 959.176234][T22299] Total swap = 124996kB [ 959.176239][T22299] 524155 pages RAM [ 959.176243][T22299] 0 pages HighMem/MovableOnly [ 959.176247][T22299] 216920 pages reserved [ 959.176251][T22299] 0 pages cma reserved [ 959.283082][T22296] .` (unregistering): (slave netdevsim1): Releasing backup interface [ 959.292767][T22296] .` (unregistering): Released all slaves [ 960.056619][T22315] jffs2: notice: (22315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 960.105883][T22318] lo speed is unknown, defaulting to 1000 [ 961.059063][T16688] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 961.222077][T16688] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 961.222544][T16688] usb 9-1: config 0 has no interfaces? [ 961.226307][T16688] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 961.226327][T16688] usb 9-1: Product: syz [ 961.226336][T16688] usb 9-1: Manufacturer: syz [ 961.226343][T16688] usb 9-1: SerialNumber: syz [ 961.240853][T16688] usb 9-1: config 0 descriptor?? [ 961.506588][T16688] usb 9-1: USB disconnect, device number 29 [ 965.161485][ T5145] udevd[5145]: worker [18924] /devices/virtual/block/nbd0 timeout; kill it [ 965.165345][ T5145] udevd[5145]: seq 16877 '/devices/virtual/block/nbd0' killed [ 965.590931][T22393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4714'. [ 966.328215][T22412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 966.328233][T22412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.328334][T22412] vhci_hcd vhci_hcd.0: Device attached [ 966.611036][T16688] usb 46-1: SetAddress Request (2) to port 0 [ 966.611071][T16688] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 966.656377][T22413] vhci_hcd: connection reset by peer [ 966.660670][ T13] vhci_hcd vhci_hcd.4: stop threads [ 966.660914][ T13] vhci_hcd vhci_hcd.4: release socket [ 966.662353][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 967.451434][T22428] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 967.451482][T22428] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 967.741408][T22433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4724'. [ 968.319347][T15304] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 969.367260][T22459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4733'. [ 970.128872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 971.084734][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 971.084791][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 971.689253][T16688] usb 46-1: device descriptor read/8, error -110 [ 971.972436][T22499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4744'. [ 972.209248][T22507] fuse: Bad value for 'fd' [ 972.442151][T16688] usb usb46-port1: attempt power cycle [ 972.999855][T16688] usb usb46-port1: unable to enumerate USB device [ 975.331669][T22556] Invalid ELF header magic: != ELF [ 975.373125][T22556] overlay: Unknown parameter '/' [ 977.080954][T22584] lo speed is unknown, defaulting to 1000 [ 980.006107][T22619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4771'. [ 980.328304][T22631] fuse: fd is not a fuse device [ 980.536968][T22633] lo speed is unknown, defaulting to 1000 [ 981.346580][T22652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4782'. [ 981.616192][ T5443] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 210 seconds [ 981.616231][ T5443] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 210 seconds [ 981.616254][ T5443] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 210 seconds [ 981.616282][ T5443] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 210 seconds [ 981.906408][T22670] bridge0: port 1(vlan0) entered blocking state [ 981.906481][T22670] bridge0: port 1(vlan0) entered disabled state [ 981.906541][T22670] vlan0: entered allmulticast mode [ 981.906550][T22670] geneve0: entered allmulticast mode [ 982.826772][T22688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4792'. [ 983.227435][T22699] netlink: 'syz.0.4796': attribute type 9 has an invalid length. [ 983.440393][T22708] pim6reg: entered allmulticast mode [ 983.464689][T22708] pim6reg: left allmulticast mode [ 983.482551][T22707] loop5: detected capacity change from 0 to 2640 [ 983.482566][T22707] FAULT_INJECTION: forcing a failure. [ 983.482566][T22707] name failslab, interval 1, probability 0, space 0, times 0 [ 983.482583][T22707] CPU: 3 UID: 0 PID: 22707 Comm: syz.4.4798 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.482600][T22707] Tainted: [L]=SOFTLOCKUP [ 983.482605][T22707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 983.482612][T22707] Call Trace: [ 983.482617][T22707] [ 983.482622][T22707] dump_stack_lvl+0x100/0x190 [ 983.482641][T22707] should_fail_ex.cold+0x5/0xa [ 983.482658][T22707] should_failslab+0xc2/0x120 [ 983.482678][T22707] __kmalloc_cache_noprof+0x91/0x6d0 [ 983.482693][T22707] ? __pfx____ratelimit+0x10/0x10 [ 983.482712][T22707] ? kobject_uevent_env+0x263/0x18b0 [ 983.482729][T22707] kobject_uevent_env+0x263/0x18b0 [ 983.482750][T22707] loop_configure+0x10dc/0x1590 [ 983.482791][T22707] ? __pfx_loop_configure+0x10/0x10 [ 983.482824][T22707] lo_ioctl+0xe45/0x1df0 [ 983.482848][T22707] ? stack_trace_save+0x8e/0xc0 [ 983.482870][T22707] ? __pfx_stack_trace_save+0x10/0x10 [ 983.482894][T22707] ? stack_depot_save_flags+0x27/0x9f0 [ 983.482915][T22707] ? __lock_acquire+0x5c0/0x1f40 [ 983.482942][T22707] ? tomoyo_path_number_perm+0x46d/0x580 [ 983.482961][T22707] ? kasan_save_stack+0x3f/0x50 [ 983.482984][T22707] ? kasan_save_stack+0x30/0x50 [ 983.483006][T22707] ? kasan_save_track+0x14/0x30 [ 983.483028][T22707] ? kasan_save_free_info+0x3b/0x70 [ 983.483046][T22707] ? __kasan_slab_free+0x5f/0x80 [ 983.483069][T22707] ? kfree+0x22b/0x6d0 [ 983.483086][T22707] ? tomoyo_path_number_perm+0x46d/0x580 [ 983.483104][T22707] ? security_file_ioctl_compat+0xd3/0x230 [ 983.483123][T22707] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 983.483143][T22707] ? __do_fast_syscall_32+0x13a/0x8b0 [ 983.483159][T22707] ? do_fast_syscall_32+0x32/0x70 [ 983.483175][T22707] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.483197][T22707] ? __pfx_lo_ioctl+0x10/0x10 [ 983.483250][T22707] ? blk_get_meta_cap+0xd4/0x6c0 [ 983.483277][T22707] ? lockdep_hardirqs_on+0x7d/0x110 [ 983.483301][T22707] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 983.483328][T22707] ? tomoyo_path_number_perm+0x28f/0x580 [ 983.483347][T22707] ? tomoyo_path_number_perm+0x28f/0x580 [ 983.483402][T22707] lo_compat_ioctl+0xf3/0x160 [ 983.483429][T22707] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 983.483454][T22707] compat_blkdev_ioctl+0x682/0x7b0 [ 983.483475][T22707] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 983.483499][T22707] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 983.483517][T22707] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 983.483541][T22707] __do_fast_syscall_32+0x13a/0x8b0 [ 983.483558][T22707] ? lockdep_hardirqs_on+0x7d/0x110 [ 983.483585][T22707] do_fast_syscall_32+0x32/0x70 [ 983.483603][T22707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.483624][T22707] RIP: 0023:0xf73fefec [ 983.483645][T22707] Code: Unable to access opcode bytes at 0xf73fefc2. [ 983.483653][T22707] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 983.483673][T22707] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004c0a [ 983.483685][T22707] RDX: 0000000080001ac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.483696][T22707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.483707][T22707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.483717][T22707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.483741][T22707] [ 983.484065][T22707] buffer_io_error: 32 callbacks suppressed [ 983.484078][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488259][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488289][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488305][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488321][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488347][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488368][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488412][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488422][T22707] ldm_validate_partition_table(): Disk read failed. [ 983.488436][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488452][T22707] Buffer I/O error on dev loop5, logical block 0, async page read [ 983.488476][T22707] Dev loop5: unable to read RDB block 0 [ 983.490401][T22707] loop5: unable to read partition table [ 983.490587][T22707] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 983.610029][T22714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4800'. [ 984.986078][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 985.397213][T22749] tipc: Enabled bearer , priority 2 [ 986.505547][T22775] overlayfs: failed to clone lowerpath [ 986.540525][T22775] lo speed is unknown, defaulting to 1000 [ 986.999061][T16688] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 987.160243][T16688] usb 9-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 987.161360][T16688] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.161385][T16688] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.161406][T16688] usb 9-1: config 0 interface 0 has no altsetting 0 [ 987.161430][T16688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.165510][T16688] usb 9-1: config 0 descriptor?? [ 987.700357][T22800] jffs2: notice: (22800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 987.933566][T16688] usbhid 9-1:0.0: can't add hid device: -71 [ 987.933617][T16688] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 987.934668][T16688] usb 9-1: USB disconnect, device number 31 [ 988.169998][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 989.648652][T22848] bridge_slave_0: default FDB implementation only supports local addresses [ 989.663100][T22848] netlink: 'syz.4.4831': attribute type 10 has an invalid length. [ 990.784026][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4838'. [ 992.033273][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4844'. [ 992.406969][T22905] netlink: 'syz.2.4847': attribute type 10 has an invalid length. [ 992.406984][T22905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4847'. [ 992.407600][T22905] fuse: Bad value for 'fd' [ 992.481154][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.481204][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.503005][T22933] Invalid ELF header magic: != ELF [ 993.537407][T22933] overlay: Unknown parameter '/' [ 995.545290][T22983] netlink: 'syz.0.4862': attribute type 1 has an invalid length. [ 995.681067][T22983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 997.683425][T23010] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 997.922044][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4872'. [ 999.222044][T23047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4881'. [ 1000.036812][T23044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.567493][T23077] gre0: MTU too low for tipc bearer [ 1000.567507][T23077] tipc: Disabling bearer [ 1000.615955][ T44] audit: type=1326 audit(1791557882.808:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.616301][ T44] audit: type=1326 audit(1791557882.808:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.617901][ T44] audit: type=1326 audit(1791557882.808:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.618189][ T44] audit: type=1326 audit(1791557882.808:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.618616][ T44] audit: type=1326 audit(1791557882.808:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.637334][ T44] audit: type=1326 audit(1791557882.818:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf716762b code=0x7ffc0000 [ 1000.637730][ T44] audit: type=1326 audit(1791557882.818:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf716762b code=0x7ffc0000 [ 1000.637870][ T44] audit: type=1326 audit(1791557882.818:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.637951][ T44] audit: type=1326 audit(1791557882.818:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.638038][ T44] audit: type=1326 audit(1791557882.818:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23072 comm="syz.2.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1000.687973][T23071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1001.108915][T16688] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1001.259068][T16688] usb 9-1: Using ep0 maxpacket: 16 [ 1001.259874][T16688] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1001.261011][T16688] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1001.261031][T16688] usb 9-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 1001.261047][T16688] usb 9-1: config 0 has no interface number 0 [ 1001.263267][T16688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.263287][T16688] usb 9-1: Product: syz [ 1001.263299][T16688] usb 9-1: Manufacturer: syz [ 1001.263312][T16688] usb 9-1: SerialNumber: syz [ 1001.266260][T16688] usb 9-1: config 0 descriptor?? [ 1001.299543][T16688] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1001.299572][T16688] uvcvideo 9-1:0.105: No valid video chain found. [ 1001.424298][T23088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1001.502617][T23086] nvme_fabrics: unknown parameter or missing value 'trsvc' in ctrl creation request [ 1001.852089][T23097] lo speed is unknown, defaulting to 1000 [ 1001.955028][T23096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1003.074732][T23127] fuse: fd is not a fuse device [ 1003.306011][T23131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1003.316264][T23133] overlayfs: failed to clone upperpath [ 1003.898191][T17911] usb 9-1: USB disconnect, device number 32 [ 1006.123536][T23198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1006.123574][T23198] i: renamed from virt_wifi0 [ 1006.420361][T23198] A link change request failed with some changes committed already. Interface i may have been left with an inconsistent configuration, please check. [ 1006.422775][T23195] overlayfs: failed to clone lowerpath [ 1006.511474][T23202] block nbd4: NBD_DISCONNECT [ 1007.688037][T23230] netlink: 'syz.4.4928': attribute type 10 has an invalid length. [ 1008.069312][T23239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1008.178110][T23230] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4928'. [ 1008.247909][T23244] fuse: fd is not a fuse device [ 1011.679190][T13086] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 240 seconds [ 1011.679216][T13086] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 240 seconds [ 1011.679230][T13086] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 240 seconds [ 1011.679244][T13086] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 240 seconds [ 1011.846266][T23312] gadgetfs: bound to dummy_udc driver [ 1012.088913][T17315] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1012.089131][ C1] gadgetfs: connected [ 1012.093468][T17315] gadgetfs: disconnected [ 1012.239205][ C1] gadgetfs: connected [ 1012.240215][T17315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1012.240555][T17315] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1012.240582][T17315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.247382][ C1] gadgetfs: configuration #1 [ 1012.325192][T23318] lo speed is unknown, defaulting to 1000 [ 1012.497753][T23308] gadgetfs: suspended from state 3 [ 1012.498116][T17315] usb 5-1: USB disconnect, device number 27 [ 1012.500856][T23308] gadgetfs: disconnected [ 1012.956779][ T44] kauditd_printk_skb: 57 callbacks suppressed [ 1012.956792][ T44] audit: type=1326 audit(1791557895.148:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.4.4951" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fefec code=0x0 [ 1013.717055][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1014.007886][T23371] fuse: fd is not a fuse device [ 1014.025379][T23373] jffs2: notice: (23373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1014.972426][T23387] fuse: fd is not a fuse device [ 1015.871638][T23413] lo speed is unknown, defaulting to 1000 [ 1016.215886][T23424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4968'. [ 1016.356320][T23429] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4968'. [ 1017.291181][ T44] audit: type=1326 audit(1791557899.488:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23435 comm="syz.3.4970" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f72fec code=0x0 [ 1017.293366][T23438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4971'. [ 1017.606334][T23456] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1018.696969][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1018.943929][T23490] jffs2: notice: (23490) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1019.015958][T23490] overlayfs: failed to clone upperpath [ 1019.572665][T23513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4988'. [ 1019.615484][T23513] tipc: Resetting bearer [ 1020.006362][T23525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4991'. [ 1020.346230][ T44] audit: type=1800 audit(1791557902.538:5846): pid=23536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4994" name="nullb0" dev="tmpfs" ino=1949 res=0 errno=0 [ 1021.686210][T23573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5000'. [ 1022.234335][T23591] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5003'. [ 1023.107340][T23601] Invalid ELF header magic: != ELF [ 1023.129182][T23601] overlay: Unknown parameter '/' [ 1023.511110][T23609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1024.106971][T23625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1024.183450][T23627] lo speed is unknown, defaulting to 1000 [ 1024.545183][T23638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5017'. [ 1024.836259][T23649] netlink: 'syz.3.5018': attribute type 2 has an invalid length. [ 1025.213138][T23653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5021'. [ 1026.644707][T23690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1027.459294][T23712] WARNING! power/level is deprecated; use power/control instead [ 1027.504087][T23715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5041'. [ 1027.806123][T23722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5042'. [ 1029.511147][ T44] audit: type=1326 audit(1791557911.708:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.512376][ T44] audit: type=1326 audit(1791557911.708:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.514970][ T44] audit: type=1326 audit(1791557911.708:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.515098][ T44] audit: type=1326 audit(1791557911.708:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.517558][ T44] audit: type=1326 audit(1791557911.708:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.517793][ T44] audit: type=1326 audit(1791557911.708:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.517914][ T44] audit: type=1326 audit(1791557911.708:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.518509][ T44] audit: type=1326 audit(1791557911.708:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.520931][ T44] audit: type=1326 audit(1791557911.718:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1029.539143][ T44] audit: type=1326 audit(1791557911.718:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.2.5050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1032.368644][T23800] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5062'. [ 1033.097399][T23811] netlink: 'syz.0.5066': attribute type 10 has an invalid length. [ 1034.019410][T23834] overlayfs: failed to clone lowerpath [ 1034.093869][T23838] Invalid ELF header magic: != ELF [ 1034.101049][T23838] overlayfs: failed to clone lowerpath [ 1035.291738][T23857] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1035.858515][ T44] kauditd_printk_skb: 318 callbacks suppressed [ 1035.858534][ T44] audit: type=1326 audit(1791557918.048:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23864 comm="syz.3.5078" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f72fec code=0x0 [ 1037.119016][ T44] audit: type=1326 audit(1791557919.258:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.119075][ T44] audit: type=1326 audit(1791557919.258:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.119115][ T44] audit: type=1326 audit(1791557919.258:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.119153][ T44] audit: type=1326 audit(1791557919.258:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.119189][ T44] audit: type=1326 audit(1791557919.258:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.119223][ T44] audit: type=1326 audit(1791557919.258:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf716762b code=0x7ffc0000 [ 1037.119258][ T44] audit: type=1326 audit(1791557919.258:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf716762b code=0x7ffc0000 [ 1037.119290][ T44] audit: type=1326 audit(1791557919.258:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.119329][ T44] audit: type=1326 audit(1791557919.258:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23878 comm="syz.2.5082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 1037.519028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.990092][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1038.149556][T23899] Invalid ELF header magic: != ELF [ 1038.759376][T23903] kAFS: No cell specified [ 1040.615220][T23930] netlink: 'syz.2.5095': attribute type 30 has an invalid length. [ 1040.760245][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5097'. [ 1040.814747][T23944] overlayfs: failed to clone upperpath [ 1041.523006][T23954] overlayfs: failed to clone upperpath [ 1041.674821][T23956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1041.674838][T23956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1041.674847][T23956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1041.770669][T13086] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 270 seconds [ 1041.770704][T13086] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1041.770725][T13086] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 270 seconds [ 1041.770743][T13086] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 270 seconds [ 1046.206433][T24014] VFS: Warning: syz.4.5114 using old stat() call. Recompile your binary. [ 1046.956444][T24022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.723364][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5117'. [ 1051.300289][T24087] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1051.300768][T24087] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1052.224245][T24100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.266024][T24100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5133'. [ 1053.324753][T24122] netlink: 'syz.2.5140': attribute type 10 has an invalid length. [ 1053.365200][T24122] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5140'. [ 1053.368328][T24122] bond3: (slave .`): Releasing active interface [ 1053.368345][T24122] ip6gretap1: entered promiscuous mode [ 1053.376984][T24122] .` (unregistering): (slave netdevsim1): Releasing backup interface [ 1053.384501][T24122] .` (unregistering): (slave bridge0): Releasing backup interface [ 1053.386316][T24122] .` (unregistering): Released all slaves [ 1053.422218][T24126] syz.2.5140: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1053.422285][T24126] CPU: 2 UID: 0 PID: 24126 Comm: syz.2.5140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.422314][T24126] Tainted: [L]=SOFTLOCKUP [ 1053.422322][T24126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1053.422334][T24126] Call Trace: [ 1053.422341][T24126] [ 1053.422351][T24126] dump_stack_lvl+0x100/0x190 [ 1053.422384][T24126] warn_alloc.cold+0x9e/0xb2 [ 1053.422409][T24126] ? __pfx_warn_alloc+0x10/0x10 [ 1053.422448][T24126] ? __lock_acquire+0x5c0/0x1f40 [ 1053.422483][T24126] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1053.422514][T24126] ? __lock_acquire+0x5c0/0x1f40 [ 1053.422544][T24126] ? __lock_acquire+0x5c0/0x1f40 [ 1053.422583][T24126] ? __lock_acquire+0x5c0/0x1f40 [ 1053.422615][T24126] ? do_replace+0x1c6/0x490 [ 1053.422640][T24126] ? do_raw_spin_lock+0x128/0x260 [ 1053.422660][T24126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1053.422689][T24126] ? __lock_acquire+0x5c0/0x1f40 [ 1053.422718][T24126] ? do_raw_spin_unlock+0x145/0x1e0 [ 1053.422744][T24126] ? do_replace+0x1c6/0x490 [ 1053.422764][T24126] __vmalloc_node_noprof+0xad/0xf0 [ 1053.422794][T24126] ? do_replace+0x1c6/0x490 [ 1053.422816][T24126] __vmalloc_noprof+0xa3/0x120 [ 1053.422832][T24126] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1053.422857][T24126] do_replace+0x1c6/0x490 [ 1053.422879][T24126] ? __pfx_do_replace+0x10/0x10 [ 1053.422909][T24126] ? register_lock_class+0x3f/0x7b0 [ 1053.422942][T24126] compat_do_replace+0x589/0x7a0 [ 1053.422968][T24126] ? __pfx_compat_do_replace+0x10/0x10 [ 1053.423008][T24126] ? bpf_lsm_capable+0x9/0x10 [ 1053.423028][T24126] ? security_capable+0x80/0x260 [ 1053.423061][T24126] do_ebt_set_ctl+0x3f4/0x4a0 [ 1053.423087][T24126] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1053.423113][T24126] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1053.423143][T24126] ? futex_wake+0x4ea/0x5e0 [ 1053.423174][T24126] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1053.423201][T24126] nf_setsockopt+0x8d/0xf0 [ 1053.423228][T24126] ip_setsockopt+0xcb/0xf0 [ 1053.423260][T24126] tcp_setsockopt+0xa7/0x100 [ 1053.423286][T24126] smc_setsockopt+0x1b6/0xa40 [ 1053.423311][T24126] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1053.423342][T24126] ? __pfx_smc_setsockopt+0x10/0x10 [ 1053.423369][T24126] ? aa_sock_opt_perm+0x114/0x1e0 [ 1053.423400][T24126] ? __pfx_smc_setsockopt+0x10/0x10 [ 1053.423427][T24126] do_sock_setsockopt+0xf3/0x1d0 [ 1053.423457][T24126] __sys_setsockopt+0x119/0x190 [ 1053.423485][T24126] __ia32_sys_setsockopt+0xbc/0x160 [ 1053.423506][T24126] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1053.423526][T24126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1053.423562][T24126] __do_fast_syscall_32+0x13a/0x8b0 [ 1053.423585][T24126] do_fast_syscall_32+0x32/0x70 [ 1053.423606][T24126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.423633][T24126] RIP: 0023:0xf740efec [ 1053.423655][T24126] Code: Unable to access opcode bytes at 0xf740efc2. [ 1053.423664][T24126] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1053.423684][T24126] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 1053.423697][T24126] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 1053.423709][T24126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1053.423721][T24126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1053.423733][T24126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.423762][T24126] [ 1053.423771][T24126] Mem-Info: [ 1053.423781][T24126] active_anon:52 inactive_anon:2637 isolated_anon:0 [ 1053.423781][T24126] active_file:5364 inactive_file:4166 isolated_file:0 [ 1053.423781][T24126] unevictable:1000 dirty:119 writeback:0 [ 1053.423781][T24126] slab_reclaimable:6764 slab_unreclaimable:67715 [ 1053.423781][T24126] mapped:24401 shmem:1004 pagetables:1859 [ 1053.423781][T24126] sec_pagetables:381 bounce:0 [ 1053.423781][T24126] kernel_misc_reclaimable:0 [ 1053.423781][T24126] free:27237 free_pcp:1079 free_cma:0 [ 1053.423830][T24126] Node 0 active_anon:0kB inactive_anon:288kB active_file:72kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1312kB sec_pagetables:1228kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1053.423882][T24126] Node 1 active_anon:208kB inactive_anon:10260kB active_file:21384kB inactive_file:16632kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:97564kB dirty:476kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8240kB pagetables:6124kB sec_pagetables:296kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1053.423933][T24126] Node 0 DMA free:1856kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1053.423985][T24126] lowmem_reserve[]: 0 259 259 259 259 [ 1053.424020][T24126] Node 0 DMA32 free:10848kB boost:26328kB min:38032kB low:40956kB high:43880kB reserved_highatomic:2048kB free_highatomic:676kB active_anon:0kB inactive_anon:288kB active_file:72kB inactive_file:32kB unevictable:0kB writepending:0kB zspages:656kB present:1032196kB managed:265372kB mlocked:0kB bounce:0kB free_pcp:828kB local_pcp:16kB free_cma:0kB [ 1053.424073][T24126] lowmem_reserve[]: 0 0 0 0 0 [ 1053.424105][T24126] Node 1 DMA32 free:96244kB boost:38912kB min:86052kB low:97836kB high:109620kB reserved_highatomic:0kB free_highatomic:0kB active_anon:208kB inactive_anon:10260kB active_file:21384kB inactive_file:16632kB unevictable:4000kB writepending:476kB zspages:8144kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3488kB local_pcp:488kB free_cma:0kB [ 1053.424207][T24126] lowmem_reserve[]: 0 0 0 0 0 [ 1053.424241][T24126] Node 0 DMA: 14*4kB (UE) 21*8kB (UE) 12*16kB (UE) 7*32kB (UE) 7*64kB (UE) 0*128kB 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 1856kB [ 1053.424364][T24126] Node 0 DMA32: 320*4kB (UMEH) 141*8kB (UMEH) 79*16kB (UMEH) 86*32kB (UMEH) 31*64kB (UMEH) 9*128kB (UEH) 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 10840kB [ 1053.424482][T24126] Node 1 DMA32: 1259*4kB (UM) 1267*8kB (UME) 348*16kB (UME) 479*32kB (UME) 180*64kB (UME) 73*128kB (UME) 41*256kB (UME) 30*512kB (UME) 11*1024kB (UM) 1*2048kB (M) 0*4096kB = 96100kB [ 1053.426985][T24126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1053.426995][T24126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1053.427004][T24126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1053.427014][T24126] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 1053.427023][T24126] 12842 total pagecache pages [ 1053.427027][T24126] 2293 pages in swap cache [ 1053.427032][T24126] Free swap = 62948kB [ 1053.427036][T24126] Total swap = 124996kB [ 1053.427042][T24126] 524155 pages RAM [ 1053.427046][T24126] 0 pages HighMem/MovableOnly [ 1053.427050][T24126] 216920 pages reserved [ 1053.427055][T24126] 0 pages cma reserved [ 1053.513698][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5141'. [ 1053.919918][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.919948][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.080764][T24137] 9pnet_virtio: no channels available for device c::: [ 1054.184157][T24141] openvswitch: netlink: IP tunnel dst address not specified [ 1055.692711][T24159] fuse: fd is not a fuse device [ 1056.932338][T24179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1056.932364][T24179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1060.791068][T24225] fuse: Bad value for 'fd' [ 1061.111458][T24237] jffs2: notice: (24237) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1061.226581][T24237] md: could not open device unknown-block(1,0). [ 1062.987304][T24274] lo speed is unknown, defaulting to 1000 [ 1063.288483][T24276] netlink: 'syz.2.5180': attribute type 9 has an invalid length. [ 1066.570050][T24315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5198'. [ 1066.612560][T24315] vlan0: entered promiscuous mode [ 1066.612586][T24315] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 1067.559249][ T35] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1067.900421][ T35] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1067.902173][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.902190][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.902201][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1067.902221][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.903961][ T35] usb 9-1: config 0 descriptor?? [ 1068.321174][T24334] bond1: entered allmulticast mode [ 1068.343315][T24334] FAULT_INJECTION: forcing a failure. [ 1068.343315][T24334] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.343344][T24334] CPU: 0 UID: 0 PID: 24334 Comm: syz.4.5193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1068.343367][T24334] Tainted: [L]=SOFTLOCKUP [ 1068.343373][T24334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1068.343383][T24334] Call Trace: [ 1068.343389][T24334] [ 1068.343397][T24334] dump_stack_lvl+0x100/0x190 [ 1068.343425][T24334] should_fail_ex.cold+0x5/0xa [ 1068.343450][T24334] should_failslab+0xc2/0x120 [ 1068.343475][T24334] __kmalloc_node_noprof+0xff/0x880 [ 1068.343498][T24334] ? __kmalloc_noprof+0x350/0x840 [ 1068.343520][T24334] ? get_callchain_buffers+0x1e5/0x380 [ 1068.343545][T24334] get_callchain_buffers+0x1e5/0x380 [ 1068.343565][T24334] ? security_capable+0x80/0x260 [ 1068.343592][T24334] stack_map_alloc+0x316/0x610 [ 1068.343614][T24334] map_create+0x874/0x30d0 [ 1068.343634][T24334] ? __lock_acquire+0x5c0/0x1f40 [ 1068.343664][T24334] ? __pfx_map_create+0x10/0x10 [ 1068.343683][T24334] ? lock_acquire+0x1d1/0x380 [ 1068.343705][T24334] ? __might_fault+0xc5/0x140 [ 1068.343725][T24334] ? __might_fault+0xc5/0x140 [ 1068.343753][T24334] __sys_bpf+0x12a0/0x4a30 [ 1068.343779][T24334] ? __pfx___sys_bpf+0x10/0x10 [ 1068.343796][T24334] ? find_held_lock+0x2b/0x80 [ 1068.343815][T24334] ? futex_wake+0x4ea/0x5e0 [ 1068.343854][T24334] ? rcu_read_lock_any_held+0x6a/0x90 [ 1068.343874][T24334] ? find_held_lock+0x2b/0x80 [ 1068.343893][T24334] ? ksys_write+0x190/0x250 [ 1068.343913][T24334] ? ksys_write+0x190/0x250 [ 1068.343948][T24334] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1068.343975][T24334] ? xfd_validate_state+0x129/0x190 [ 1068.344006][T24334] ? __ia32_sys_bpf+0xcc/0x170 [ 1068.344046][T24334] __ia32_sys_bpf+0xcc/0x170 [ 1068.344069][T24334] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1068.344088][T24334] __do_fast_syscall_32+0x13a/0x8b0 [ 1068.344104][T24334] ? lockdep_hardirqs_on+0x7d/0x110 [ 1068.344132][T24334] do_fast_syscall_32+0x32/0x70 [ 1068.344150][T24334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1068.344171][T24334] RIP: 0023:0xf73fefec [ 1068.344190][T24334] Code: Unable to access opcode bytes at 0xf73fefc2. [ 1068.344198][T24334] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1068.344214][T24334] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800005c0 [ 1068.344226][T24334] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1068.344236][T24334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1068.344246][T24334] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1068.344256][T24334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.344278][T24334] [ 1068.654858][ T35] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1070.198976][T17911] usb 9-1: reset high-speed USB device number 33 using dummy_hcd [ 1070.470944][T24356] fido_id (24356) used greatest stack depth: 17936 bytes left [ 1070.777511][T24333] bond1: left allmulticast mode [ 1071.602748][T17906] usb 9-1: USB disconnect, device number 33 [ 1071.874671][T13086] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 300 seconds [ 1071.874853][T13086] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1071.874973][T13086] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 300 seconds [ 1071.875065][T13086] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 300 seconds [ 1076.969575][T24414] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1082.681758][T24449] overlayfs: failed to clone upperpath [ 1082.935546][T24456] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1083.245658][T24469] bond3: option mode: unable to set because the bond device has slaves [ 1083.260911][T24469] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5225'. [ 1087.323823][T24489] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1087.625352][T24498] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1088.588766][T24508] overlayfs: failed to resolve '/ile0': -2 [ 1092.828165][T24527] lo speed is unknown, defaulting to 1000 [ 1094.661042][T24539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1101.919279][T13086] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 330 seconds [ 1101.919305][T13086] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1101.919319][T13086] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 330 seconds [ 1101.919332][T13086] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 330 seconds [ 1107.518114][T24593] jffs2: notice: (24593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1108.012577][T24597] syz.3.5255 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1109.890632][T24593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5254'. [ 1112.981962][T24613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.668403][T24622] netlink: 'syz.4.5262': attribute type 5 has an invalid length. [ 1114.088625][T24628] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5263'. [ 1114.428475][T24633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5264'. [ 1115.360703][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.360827][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.036495][T24634] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5264'. [ 1117.030573][T24644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5267'. [ 1118.559083][ T45] INFO: task udevd:18924 blocked in I/O wait for more than 143 seconds. [ 1118.559109][ T45] Tainted: G L syzkaller #0 [ 1118.559119][ T45] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1118.559126][ T45] task:udevd state:D stack:23960 pid:18924 tgid:18924 ppid:5145 task_flags:0x400140 flags:0x00080002 [ 1118.559173][ T45] Call Trace: [ 1118.559179][ T45] [ 1118.559189][ T45] __schedule+0x1259/0x6920 [ 1118.559215][ T45] ? __lock_acquire+0x5c0/0x1f40 [ 1118.559252][ T45] ? __pfx___schedule+0x10/0x10 [ 1118.559272][ T45] ? find_held_lock+0x2b/0x80 [ 1118.559292][ T45] ? schedule+0x225/0x2c0 [ 1118.559317][ T45] schedule+0xdd/0x2c0 [ 1118.559337][ T45] io_schedule+0x8a/0xf0 [ 1118.559359][ T45] folio_wait_bit_common+0x414/0xa80 [ 1118.559384][ T45] ? folio_wait_bit_common+0x2a0/0xa80 [ 1118.559411][ T45] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1118.559440][ T45] ? __pfx_wake_page_function+0x10/0x10 [ 1118.559461][ T45] ? __filemap_get_folio_mpol+0x369/0x1280 [ 1118.559484][ T45] do_read_cache_folio+0x3bc/0x6b0 [ 1118.559500][ T45] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1118.559528][ T45] read_part_sector+0xd1/0x370 [ 1118.559551][ T45] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1118.559576][ T45] adfspart_check_POWERTEC+0x8a/0x630 [ 1118.559603][ T45] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1118.559626][ T45] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1118.559646][ T45] ? bdev_disk_changed+0x52e/0x1260 [ 1118.559670][ T45] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1118.559702][ T45] bdev_disk_changed+0x7b1/0x1260 [ 1118.559735][ T45] ? nbd_open+0x320/0x700 [ 1118.559756][ T45] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1118.559786][ T45] blkdev_get_whole+0x187/0x290 [ 1118.559809][ T45] bdev_open+0x2c7/0xe40 [ 1118.559837][ T45] blkdev_open+0x34e/0x4f0 [ 1118.559854][ T45] do_dentry_open+0x6ab/0x14d0 [ 1118.559875][ T45] ? __pfx_blkdev_open+0x10/0x10 [ 1118.559896][ T45] vfs_open+0x82/0x3f0 [ 1118.559915][ T45] path_openat+0x19fa/0x2440 [ 1118.559942][ T45] ? __pfx_path_openat+0x10/0x10 [ 1118.559970][ T45] do_file_open+0x20e/0x430 [ 1118.559994][ T45] ? __pfx_do_file_open+0x10/0x10 [ 1118.560033][ T45] ? _raw_spin_unlock+0x28/0x50 [ 1118.560053][ T45] ? alloc_fd+0x471/0x7a0 [ 1118.560082][ T45] do_sys_openat2+0x10f/0x1e0 [ 1118.560098][ T45] ? __pfx_do_sys_openat2+0x10/0x10 [ 1118.560123][ T45] __x64_sys_openat+0x12d/0x210 [ 1118.560140][ T45] ? __pfx___x64_sys_openat+0x10/0x10 [ 1118.560158][ T45] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1118.560182][ T45] do_syscall_64+0x121/0x770 [ 1118.560208][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.560225][ T45] RIP: 0033:0x7f2d586a7407 [ 1118.560240][ T45] RSP: 002b:00007ffd087dbd10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1118.560256][ T45] RAX: ffffffffffffffda RBX: 00007f2d58da6880 RCX: 00007f2d586a7407 [ 1118.560267][ T45] RDX: 00000000000a0800 RSI: 0000561ca60bb840 RDI: ffffffffffffff9c [ 1118.560277][ T45] RBP: 0000561ca60af910 R08: 0000000000000000 R09: 0000000000000000 [ 1118.560288][ T45] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561ca60d8ed0 [ 1118.560298][ T45] R13: 0000561ca60bd190 R14: 0000000000000000 R15: 0000561ca60d8ed0 [ 1118.560321][ T45] [ 1118.560348][ T45] [ 1118.560348][ T45] Showing all locks held in the system: [ 1118.560357][ T45] locks held by khungtaskd/45: 1, last CPU#1: [ 1118.560368][ T45] #0: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1118.560444][ T45] locks held by getty/5537: 2, on CPU#1: [ 1118.560455][ T45] #0: ffff88800032a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1118.560499][ T45] #1: ffffc900001bb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1118.560540][ T45] locks held by syz-executor/5664: 4, last CPU#2: [ 1118.560551][ T45] #0: ffff888047e71c60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 [ 1118.560587][ T45] #1: ffff88805188a048 (mapping.invalidate_lock#2){++++}-{4:4}, at: do_page_cache_ra+0x101/0x160 [ 1118.560634][ T45] #2: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: list_lru_count_one+0x2f/0x320 [ 1118.560672][ T45] #3: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: xa_load+0xbc/0x2c0 [ 1118.560723][ T45] locks held by udevd/18924: 1, on CPU#1: [ 1118.560734][ T45] #0: ffff888027fcb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1118.560779][ T45] locks held by syz.2.5269/24659: 3, last CPU#3: [ 1118.560791][ T45] #0: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xc3/0x2c0 [ 1118.560833][ T45] #1: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_list_internal+0x34a/0xd40 [ 1118.560871][ T45] #2: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: ip_local_deliver_finish+0x335/0x6e0 [ 1118.560909][ T45] locks held by syz.0.5271/24654: 2, last CPU#0: [ 1118.560920][ T45] #0: ffff88805182cd98 (mapping.invalidate_lock#2){++++}-{4:4}, at: do_page_cache_ra+0x101/0x160 [ 1118.560965][ T45] #1: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: list_lru_count_one+0x2f/0x320 [ 1118.561002][ T45] locks held by syz.3.5272/24662: 2, last CPU#2: [ 1118.561013][ T45] #0: ffff88805189d6a8 (mapping.invalidate_lock#2){++++}-{4:4}, at: do_page_cache_ra+0x101/0x160 [ 1118.564147][ T45] #1: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1118.564192][ T45] [ 1118.564196][ T45] ============================================= [ 1118.564196][ T45] [ 1118.564203][ T45] NMI backtrace for cpu 1 [ 1118.564216][ T45] CPU: 1 UID: 0 PID: 45 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.564237][ T45] Tainted: [L]=SOFTLOCKUP [ 1118.564243][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1118.564251][ T45] Call Trace: [ 1118.564258][ T45] [ 1118.564264][ T45] dump_stack_lvl+0x100/0x190 [ 1118.564286][ T45] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1118.564310][ T45] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1118.564335][ T45] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1118.564359][ T45] sys_info+0x141/0x190 [ 1118.564376][ T45] watchdog+0xcb1/0x1030 [ 1118.564403][ T45] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1118.564425][ T45] ? __pfx_watchdog+0x10/0x10 [ 1118.564448][ T45] ? __kthread_parkme+0x18f/0x230 [ 1118.564475][ T45] ? kthread+0x13a/0x450 [ 1118.564491][ T45] ? __pfx_watchdog+0x10/0x10 [ 1118.564512][ T45] kthread+0x373/0x450 [ 1118.564528][ T45] ? __pfx_kthread+0x10/0x10 [ 1118.564547][ T45] ret_from_fork+0x730/0xd60 [ 1118.564564][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 1118.564581][ T45] ? __switch_to+0x800/0x10f0 [ 1118.564601][ T45] ? __pfx_kthread+0x10/0x10 [ 1118.564620][ T45] ret_from_fork_asm+0x1a/0x30 [ 1118.564646][ T45] [ 1118.564652][ T45] Sending NMI from CPU 1 to CPUs 0,2-3: [ 1118.564694][ C2] NMI backtrace for cpu 2 [ 1118.564707][ C2] CPU: 2 UID: 0 PID: 24662 Comm: syz.3.5272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.564722][ C2] Tainted: [L]=SOFTLOCKUP [ 1118.564726][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1118.564732][ C2] RIP: 0010:stack_trace_consume_entry+0xd7/0x170 [ 1118.564751][ C2] Code: 02 00 0f 85 9a 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 64 48 89 75 00 8b 43 08 39 43 10 0f 92 c0 48 83 c4 08 5b 5d e9 [ 1118.564761][ C2] RSP: 0000:ffffc9000e6be620 EFLAGS: 00000246 [ 1118.564770][ C2] RAX: dffffc0000000000 RBX: ffffc9000e6be700 RCX: ffffc9000e6be594 [ 1118.564777][ C2] RDX: 1ffff92001cd7cf3 RSI: ffffffff825529a8 RDI: ffffc9000e6be70c [ 1118.564783][ C2] RBP: ffffc9000e6be798 R08: 0000000000000001 R09: 0000000000000007 [ 1118.564789][ C2] R10: 0000000000000200 R11: 0000000000017084 R12: ffffffff81f58ca0 [ 1118.564800][ C2] R13: ffffc9000e6be700 R14: 0000000000000000 R15: ffff88804a694b00 [ 1118.564806][ C2] FS: 0000000000000000(0000) GS:ffff88809594d000(0063) knlGS:0000000057a01480 [ 1118.564829][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1118.564838][ C2] CR2: 0000000032d24220 CR3: 000000004d536000 CR4: 0000000000352ef0 [ 1118.564845][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.564851][ C2] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1118.564857][ C2] Call Trace: [ 1118.564861][ C2] [ 1118.564864][ C2] ? unwind_get_return_address+0x59/0xa0 [ 1118.564879][ C2] arch_stack_walk+0x88/0xf0 [ 1118.564892][ C2] ? shrink_folio_list+0x2f38/0x5e40 [ 1118.564908][ C2] stack_trace_save+0x8e/0xc0 [ 1118.564922][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 1118.564936][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 1118.564950][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1118.564965][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 1118.564980][ C2] save_stack+0x162/0x1e0 [ 1118.564995][ C2] ? __pfx_save_stack+0x10/0x10 [ 1118.565009][ C2] ? free_unref_folios+0xa4a/0x1790 [ 1118.565023][ C2] ? page_ext_put+0x3e/0xd0 [ 1118.565039][ C2] __reset_page_owner+0x84/0x190 [ 1118.565049][ C2] free_unref_folios+0xa4a/0x1790 [ 1118.565064][ C2] shrink_folio_list+0x2f38/0x5e40 [ 1118.565081][ C2] ? __pfx_shrink_folio_list+0x10/0x10 [ 1118.565096][ C2] ? __rcu_read_lock+0x40/0x70 [ 1118.565107][ C2] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1118.565122][ C2] ? rcu_read_unlock+0x17/0x60 [ 1118.565134][ C2] ? isolate_lru_folios+0xb9d/0x11b0 [ 1118.565153][ C2] ? find_held_lock+0x2b/0x80 [ 1118.565164][ C2] ? find_held_lock+0x2b/0x80 [ 1118.565175][ C2] ? shrink_lruvec+0x1280/0x2670 [ 1118.565190][ C2] ? shrink_lruvec+0x1280/0x2670 [ 1118.565206][ C2] shrink_lruvec+0x130c/0x2670 [ 1118.565225][ C2] ? __pfx_shrink_lruvec+0x10/0x10 [ 1118.565240][ C2] ? do_shrink_slab+0xb6c/0x1200 [ 1118.565252][ C2] ? do_shrink_slab+0xcde/0x1200 [ 1118.565264][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 1118.565279][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 1118.565294][ C2] ? shrink_slab+0x677/0x12e0 [ 1118.565306][ C2] ? lock_acquire+0x1d1/0x380 [ 1118.565323][ C2] ? page_counter_calculate_protection+0x344/0x730 [ 1118.565337][ C2] ? shrink_node+0x7a0/0x4320 [ 1118.565346][ C2] shrink_node+0x7a0/0x4320 [ 1118.565356][ C2] ? expand+0xa5/0x4d0 [ 1118.565373][ C2] ? __pfx_shrink_node+0x10/0x10 [ 1118.565384][ C2] ? __pfx_memcg1_soft_limit_reclaim+0x10/0x10 [ 1118.565400][ C2] ? lock_acquire+0x1d1/0x380 [ 1118.565415][ C2] ? do_try_to_free_pages+0x33e/0x16d0 [ 1118.565444][ C2] do_try_to_free_pages+0x33e/0x16d0 [ 1118.565458][ C2] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1118.565469][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 1118.565484][ C2] try_to_free_pages+0x2a0/0x740 [ 1118.565495][ C2] ? __pfx_try_to_free_pages+0x10/0x10 [ 1118.565508][ C2] ? find_held_lock+0x2b/0x80 [ 1118.565519][ C2] ? fs_reclaim_acquire+0x70/0x100 [ 1118.565551][ C2] ? fs_reclaim_acquire+0x70/0x100 [ 1118.565568][ C2] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 1118.565584][ C2] ? xa_load+0x149/0x2c0 [ 1118.565593][ C2] ? xa_load+0x149/0x2c0 [ 1118.565603][ C2] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1118.565618][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 1118.565633][ C2] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 1118.565648][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 1118.565662][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1118.565678][ C2] ? policy_nodemask+0xed/0x4f0 [ 1118.565694][ C2] alloc_pages_mpol+0x201/0x550 [ 1118.565703][ C2] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1118.565721][ C2] folio_alloc_noprof+0x22/0x250 [ 1118.565732][ C2] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1118.565746][ C2] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1118.565759][ C2] ? __pfx_xa_load+0x10/0x10 [ 1118.565771][ C2] filemap_alloc_folio_noprof+0x5e/0x80 [ 1118.565783][ C2] ractl_alloc_folio+0x1d/0x100 [ 1118.565801][ C2] page_cache_ra_unbounded+0x357/0x990 [ 1118.565818][ C2] do_page_cache_ra+0x10f/0x160 [ 1118.565833][ C2] page_cache_ra_order+0xc05/0xed0 [ 1118.565850][ C2] filemap_fault+0x1943/0x3130 [ 1118.565861][ C2] ? __pfx_filemap_fault+0x10/0x10 [ 1118.565872][ C2] ? debug_object_free+0x295/0x550 [ 1118.565885][ C2] __do_fault+0x10b/0x440 [ 1118.565898][ C2] do_fault+0x585/0x1830 [ 1118.565912][ C2] ? __pfx_filemap_map_pages+0x10/0x10 [ 1118.565928][ C2] ? __pfx_do_fault+0x10/0x10 [ 1118.565942][ C2] ? rcu_read_unlock+0x2d/0xb0 [ 1118.565952][ C2] ? rcu_read_unlock+0x2d/0xb0 [ 1118.565962][ C2] ? __pte_offset_map+0x179/0x310 [ 1118.565977][ C2] __handle_mm_fault+0x150b/0x2f60 [ 1118.565988][ C2] ? lock_vma_under_rcu+0x11d/0x590 [ 1118.565998][ C2] ? __pfx___handle_mm_fault+0x10/0x10 [ 1118.566009][ C2] ? lock_vma_under_rcu+0x17c/0x590 [ 1118.566022][ C2] handle_mm_fault+0x363/0xa20 [ 1118.566033][ C2] do_user_addr_fault+0x59c/0x12f0 [ 1118.566047][ C2] exc_page_fault+0x6f/0xd0 [ 1118.566061][ C2] asm_exc_page_fault+0x26/0x30 [ 1118.566071][ C2] RIP: 0023:0xf706f2e2 [ 1118.566079][ C2] Code: 1c 01 00 00 ba 08 00 00 00 89 e8 e8 88 a2 fe ff 8b 45 20 8b 4c 24 08 8b 5c 24 0c 83 44 24 14 01 8d 50 f8 83 45 18 08 89 55 20 <89> 48 f8 89 58 fc 83 c6 01 3b 77 04 0f 82 9c fe ff ff 80 7d 34 00 [ 1118.566091][ C2] RSP: 002b:00000000ffbc9930 EFLAGS: 00010202 [ 1118.566099][ C2] RAX: 0000000033416000 RBX: 00000000ffffffff RCX: 00000000829d89d1 [ 1118.566105][ C2] RDX: 0000000033415ff8 RSI: 000000000000000b RDI: 00000000f7434fe8 [ 1118.566111][ C2] RBP: 00000000f7f65610 R08: 0000000000000000 R09: 0000000000000000 [ 1118.566117][ C2] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1118.566123][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.566132][ C2] [ 1118.566137][ C3] NMI backtrace for cpu 3 [ 1118.566154][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.566182][ C3] Tainted: [L]=SOFTLOCKUP [ 1118.566189][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1118.566199][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1118.566226][ C3] Code: 77 98 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 76 19 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1118.566241][ C3] RSP: 0000:ffffc9000049fe00 EFLAGS: 00000202 [ 1118.566254][ C3] RAX: 0000000000e718f7 RBX: ffff88801dbf8000 RCX: ffffffff8bd24235 [ 1118.566266][ C3] RDX: 0000000000000001 RSI: ffffffff8e3e04a3 RDI: ffffffff8c625580 [ 1118.566277][ C3] RBP: ffffed1003b7f000 R08: 0000000000000001 R09: ffffed10056667bd [ 1118.566288][ C3] R10: ffff88802b333deb R11: 0000000000000001 R12: 0000000000000000 [ 1118.566299][ C3] R13: 0000000000000000 R14: 1ffff92000093fc4 R15: dffffc0000000000 [ 1118.566311][ C3] FS: 0000000000000000(0000) GS:ffff888095a4d000(0000) knlGS:0000000000000000 [ 1118.566342][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.566356][ C3] CR2: 00000000332fbff8 CR3: 000000006fc84000 CR4: 0000000000352ef0 [ 1118.566368][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.566378][ C3] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1118.566390][ C3] Call Trace: [ 1118.566396][ C3] [ 1118.566402][ C3] default_idle+0x9/0x10 [ 1118.566419][ C3] default_idle_call+0x6c/0xb0 [ 1118.566436][ C3] do_idle+0x3ae/0x5b0 [ 1118.566454][ C3] ? __pfx_do_idle+0x10/0x10 [ 1118.566471][ C3] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1118.566501][ C3] cpu_startup_entry+0x4f/0x60 [ 1118.566519][ C3] start_secondary+0x21d/0x2d0 [ 1118.566544][ C3] ? __pfx_start_secondary+0x10/0x10 [ 1118.566571][ C3] common_startup_64+0x13e/0x158 [ 1118.566598][ C3] [ 1118.566606][ C0] NMI backtrace for cpu 0 [ 1118.566618][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.566632][ C0] Tainted: [L]=SOFTLOCKUP [ 1118.566636][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1118.566642][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1118.566659][ C0] Code: 77 98 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 76 19 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1118.566668][ C0] RSP: 0000:ffffffff8fa07cf0 EFLAGS: 00000202 [ 1118.566677][ C0] RAX: 0000000000e93419 RBX: ffffffff8fa91580 RCX: ffffffff8bd24235 [ 1118.566684][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e04a3 RDI: ffffffff8c625580 [ 1118.566690][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10056067bd [ 1118.566697][ C0] R10: ffff88802b033deb R11: 0000000000000001 R12: 0000000000000000 [ 1118.566703][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 1118.566709][ C0] FS: 0000000000000000(0000) GS:ffff88809574d000(0000) knlGS:0000000000000000 [ 1118.566732][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.566740][ C0] CR2: 000000000c3cc22e CR3: 000000005a89c000 CR4: 0000000000352ef0 [ 1118.566747][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.566752][ C0] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1118.566759][ C0] Call Trace: [ 1118.566762][ C0] [ 1118.566766][ C0] default_idle+0x9/0x10 [ 1118.566775][ C0] default_idle_call+0x6c/0xb0 [ 1118.566785][ C0] do_idle+0x3ae/0x5b0 [ 1118.566795][ C0] ? __pfx_do_idle+0x10/0x10 [ 1118.566806][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1118.566832][ C0] cpu_startup_entry+0x4f/0x60 [ 1118.566849][ C0] rest_init+0x2d3/0x2e0 [ 1118.566866][ C0] ? __pfx_rest_init+0x10/0x10 [ 1118.566886][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1118.566904][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 1118.566927][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 1118.566950][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 1118.566974][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1118.566997][ C0] start_kernel+0x48e/0x490 [ 1118.567015][ C0] x86_64_start_reservations+0x24/0x30 [ 1118.567034][ C0] x86_64_start_kernel+0x12b/0x130 [ 1118.567050][ C0] common_startup_64+0x13e/0x158 [ 1118.567072][ C0] [ 1118.568948][ T45] Kernel panic - not syncing: hung_task: blocked tasks [ 1119.225563][ T45] CPU: 1 UID: 0 PID: 45 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.229474][ T45] Tainted: [L]=SOFTLOCKUP [ 1119.231104][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1119.234840][ T45] Call Trace: [ 1119.236119][ T45] [ 1119.237256][ T45] dump_stack_lvl+0x100/0x190 [ 1119.239050][ T45] vpanic+0x553/0x970 [ 1119.240567][ T45] ? __pfx_vpanic+0x10/0x10 [ 1119.242304][ T45] panic+0xd1/0xe0 [ 1119.243729][ T45] ? __pfx_panic+0x10/0x10 [ 1119.245418][ T45] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1119.247738][ T45] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1119.250055][ T45] ? watchdog.cold+0x1ec/0x234 [ 1119.251867][ T45] watchdog.cold+0x1fd/0x234 [ 1119.253625][ T45] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1119.255814][ T45] ? __pfx_watchdog+0x10/0x10 [ 1119.257627][ T45] ? __kthread_parkme+0x18f/0x230 [ 1119.259534][ T45] ? kthread+0x13a/0x450 [ 1119.261138][ T45] ? __pfx_watchdog+0x10/0x10 [ 1119.262926][ T45] kthread+0x373/0x450 [ 1119.264471][ T45] ? __pfx_kthread+0x10/0x10 [ 1119.266235][ T45] ret_from_fork+0x730/0xd60 [ 1119.267983][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 1119.269923][ T45] ? __switch_to+0x800/0x10f0 [ 1119.271707][ T45] ? __pfx_kthread+0x10/0x10 [ 1119.273476][ T45] ret_from_fork_asm+0x1a/0x30 [ 1119.275319][ T45] [ 1119.277189][ T45] Kernel Offset: disabled [ 1119.278831][ T45] Rebooting in 86400 seconds..