Warning: Permanently added '[localhost]:16569' (ED25519) to the list of known hosts. 1970/01/01 00:10:22 fuzzer started 1970/01/01 00:10:31 dialing manager at localhost:30004 syzkaller login: [ 636.738127][ T2930] cgroup: Unknown subsys name 'net' [ 637.673710][ T2930] cgroup: Unknown subsys name 'rlimit' [ 749.707412][ T2930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS 1970/01/01 00:12:29 syscalls: 2969 1970/01/01 00:12:29 code coverage: enabled 1970/01/01 00:12:29 comparison tracing: enabled 1970/01/01 00:12:29 extra coverage: enabled 1970/01/01 00:12:29 delay kcov mmap: enabled 1970/01/01 00:12:29 setuid sandbox: enabled 1970/01/01 00:12:29 namespace sandbox: enabled 1970/01/01 00:12:29 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:12:29 fault injection: enabled 1970/01/01 00:12:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:12:29 net packet injection: enabled 1970/01/01 00:12:29 net device setup: enabled 1970/01/01 00:12:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:12:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:12:29 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:12:29 USB emulation: enabled 1970/01/01 00:12:29 hci packet injection: /dev/vhci does not exist 1970/01/01 00:12:29 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:12:29 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:12:29 swap file: enabled 1970/01/01 00:12:29 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:12:33 fetching corpus: 36, signal 39267/42692 (executing program) 1970/01/01 00:12:39 fetching corpus: 85, signal 57162/61945 (executing program) 1970/01/01 00:12:42 fetching corpus: 135, signal 69599/75645 (executing program) 1970/01/01 00:12:44 fetching corpus: 185, signal 80767/87940 (executing program) 1970/01/01 00:12:47 fetching corpus: 235, signal 90033/98243 (executing program) 1970/01/01 00:12:50 fetching corpus: 285, signal 96575/105847 (executing program) 1970/01/01 00:12:53 fetching corpus: 335, signal 101999/112346 (executing program) 1970/01/01 00:12:57 fetching corpus: 385, signal 108973/120171 (executing program) 1970/01/01 00:12:59 fetching corpus: 435, signal 114713/126710 (executing program) 1970/01/01 00:13:02 fetching corpus: 485, signal 119261/132077 (executing program) 1970/01/01 00:13:05 fetching corpus: 534, signal 126528/139895 (executing program) 1970/01/01 00:13:10 fetching corpus: 584, signal 131064/145173 (executing program) 1970/01/01 00:13:12 fetching corpus: 633, signal 136597/151271 (executing program) 1970/01/01 00:13:14 fetching corpus: 683, signal 139833/155206 (executing program) 1970/01/01 00:13:16 fetching corpus: 732, signal 142888/158978 (executing program) 1970/01/01 00:13:18 fetching corpus: 782, signal 145736/162476 (executing program) 1970/01/01 00:13:20 fetching corpus: 832, signal 148555/165919 (executing program) 1970/01/01 00:13:22 fetching corpus: 882, signal 152009/169906 (executing program) 1970/01/01 00:13:25 fetching corpus: 932, signal 155275/173677 (executing program) 1970/01/01 00:13:26 fetching corpus: 982, signal 158086/177017 (executing program) 1970/01/01 00:13:28 fetching corpus: 1032, signal 160724/180147 (executing program) 1970/01/01 00:13:30 fetching corpus: 1081, signal 162382/182504 (executing program) 1970/01/01 00:13:32 fetching corpus: 1131, signal 164021/184769 (executing program) 1970/01/01 00:13:34 fetching corpus: 1180, signal 165833/187128 (executing program) 1970/01/01 00:13:36 fetching corpus: 1230, signal 168043/189807 (executing program) 1970/01/01 00:13:39 fetching corpus: 1280, signal 169731/191991 (executing program) 1970/01/01 00:13:41 fetching corpus: 1329, signal 172293/194913 (executing program) 1970/01/01 00:13:43 fetching corpus: 1378, signal 173854/196984 (executing program) 1970/01/01 00:13:46 fetching corpus: 1427, signal 176558/199948 (executing program) 1970/01/01 00:13:48 fetching corpus: 1476, signal 178188/202026 (executing program) 1970/01/01 00:13:50 fetching corpus: 1526, signal 179641/203928 (executing program) 1970/01/01 00:13:52 fetching corpus: 1576, signal 180912/205694 (executing program) 1970/01/01 00:13:55 fetching corpus: 1626, signal 183697/208595 (executing program) 1970/01/01 00:13:56 fetching corpus: 1676, signal 185445/210645 (executing program) 1970/01/01 00:13:58 fetching corpus: 1726, signal 187275/212719 (executing program) 1970/01/01 00:14:01 fetching corpus: 1776, signal 188991/214671 (executing program) 1970/01/01 00:14:03 fetching corpus: 1826, signal 190908/216812 (executing program) 1970/01/01 00:14:05 fetching corpus: 1876, signal 192061/218311 (executing program) 1970/01/01 00:14:08 fetching corpus: 1925, signal 193590/220170 (executing program) 1970/01/01 00:14:11 fetching corpus: 1975, signal 195462/222144 (executing program) 1970/01/01 00:14:15 fetching corpus: 2025, signal 196897/223778 (executing program) 1970/01/01 00:14:17 fetching corpus: 2074, signal 198368/225445 (executing program) 1970/01/01 00:14:20 fetching corpus: 2124, signal 200046/227181 (executing program) 1970/01/01 00:14:23 fetching corpus: 2173, signal 201335/228709 (executing program) 1970/01/01 00:14:25 fetching corpus: 2223, signal 202756/230299 (executing program) 1970/01/01 00:14:27 fetching corpus: 2273, signal 204160/231829 (executing program) 1970/01/01 00:14:30 fetching corpus: 2322, signal 205288/233187 (executing program) 1970/01/01 00:14:32 fetching corpus: 2372, signal 206512/234546 (executing program) 1970/01/01 00:14:34 fetching corpus: 2422, signal 207610/235790 (executing program) 1970/01/01 00:14:36 fetching corpus: 2472, signal 208696/237039 (executing program) 1970/01/01 00:14:38 fetching corpus: 2522, signal 210130/238545 (executing program) 1970/01/01 00:14:39 fetching corpus: 2571, signal 211289/239847 (executing program) 1970/01/01 00:14:42 fetching corpus: 2620, signal 212641/241207 (executing program) 1970/01/01 00:14:46 fetching corpus: 2670, signal 213883/242533 (executing program) 1970/01/01 00:14:48 fetching corpus: 2718, signal 214651/243541 (executing program) 1970/01/01 00:14:50 fetching corpus: 2768, signal 216278/245086 (executing program) 1970/01/01 00:14:52 fetching corpus: 2818, signal 217649/246399 (executing program) 1970/01/01 00:14:55 fetching corpus: 2868, signal 218809/247588 (executing program) 1970/01/01 00:14:57 fetching corpus: 2918, signal 219868/248701 (executing program) 1970/01/01 00:14:59 fetching corpus: 2968, signal 220647/249631 (executing program) 1970/01/01 00:15:01 fetching corpus: 3018, signal 222266/251068 (executing program) 1970/01/01 00:15:04 fetching corpus: 3068, signal 223419/252220 (executing program) 1970/01/01 00:15:06 fetching corpus: 3118, signal 224898/253539 (executing program) 1970/01/01 00:15:09 fetching corpus: 3167, signal 226463/254847 (executing program) 1970/01/01 00:15:11 fetching corpus: 3216, signal 227500/255856 (executing program) 1970/01/01 00:15:13 fetching corpus: 3266, signal 228487/256806 (executing program) 1970/01/01 00:15:16 fetching corpus: 3316, signal 229666/257896 (executing program) 1970/01/01 00:15:18 fetching corpus: 3366, signal 230674/258836 (executing program) 1970/01/01 00:15:20 fetching corpus: 3416, signal 231378/259643 (executing program) 1970/01/01 00:15:21 fetching corpus: 3466, signal 232112/260435 (executing program) 1970/01/01 00:15:24 fetching corpus: 3516, signal 233144/261388 (executing program) 1970/01/01 00:15:26 fetching corpus: 3564, signal 234097/262265 (executing program) 1970/01/01 00:15:29 fetching corpus: 3614, signal 235040/263106 (executing program) 1970/01/01 00:15:31 fetching corpus: 3664, signal 236443/264150 (executing program) 1970/01/01 00:15:33 fetching corpus: 3714, signal 237451/264959 (executing program) 1970/01/01 00:15:35 fetching corpus: 3764, signal 238775/265948 (executing program) 1970/01/01 00:15:37 fetching corpus: 3814, signal 239815/266738 (executing program) 1970/01/01 00:15:39 fetching corpus: 3864, signal 240821/267562 (executing program) 1970/01/01 00:15:41 fetching corpus: 3914, signal 241685/268271 (executing program) 1970/01/01 00:15:44 fetching corpus: 3964, signal 242375/268909 (executing program) 1970/01/01 00:15:46 fetching corpus: 4014, signal 243226/269644 (executing program) 1970/01/01 00:15:48 fetching corpus: 4064, signal 244644/270562 (executing program) 1970/01/01 00:15:51 fetching corpus: 4114, signal 245713/271299 (executing program) 1970/01/01 00:15:53 fetching corpus: 4164, signal 246529/271921 (executing program) 1970/01/01 00:15:55 fetching corpus: 4214, signal 247166/272484 (executing program) 1970/01/01 00:15:57 fetching corpus: 4264, signal 248019/273104 (executing program) 1970/01/01 00:15:59 fetching corpus: 4314, signal 249180/273832 (executing program) 1970/01/01 00:16:01 fetching corpus: 4364, signal 250444/274587 (executing program) 1970/01/01 00:16:03 fetching corpus: 4414, signal 251322/275184 (executing program) 1970/01/01 00:16:04 fetching corpus: 4464, signal 251961/275714 (executing program) 1970/01/01 00:16:06 fetching corpus: 4514, signal 252663/276232 (executing program) 1970/01/01 00:16:08 fetching corpus: 4564, signal 254188/277022 (executing program) 1970/01/01 00:16:10 fetching corpus: 4614, signal 255371/277697 (executing program) 1970/01/01 00:16:12 fetching corpus: 4664, signal 256185/278186 (executing program) 1970/01/01 00:16:14 fetching corpus: 4714, signal 257073/278719 (executing program) 1970/01/01 00:16:15 fetching corpus: 4764, signal 257943/279197 (executing program) 1970/01/01 00:16:18 fetching corpus: 4814, signal 258857/279730 (executing program) 1970/01/01 00:16:19 fetching corpus: 4864, signal 259764/280257 (executing program) 1970/01/01 00:16:21 fetching corpus: 4914, signal 260287/280625 (executing program) 1970/01/01 00:16:22 fetching corpus: 4964, signal 261154/281066 (executing program) 1970/01/01 00:16:24 fetching corpus: 5014, signal 261590/281411 (executing program) 1970/01/01 00:16:26 fetching corpus: 5064, signal 262291/281797 (executing program) 1970/01/01 00:16:29 fetching corpus: 5113, signal 262905/282149 (executing program) 1970/01/01 00:16:32 fetching corpus: 5163, signal 263658/282541 (executing program) 1970/01/01 00:16:33 fetching corpus: 5213, signal 264107/282822 (executing program) 1970/01/01 00:16:36 fetching corpus: 5263, signal 264739/283154 (executing program) 1970/01/01 00:16:38 fetching corpus: 5311, signal 265473/283549 (executing program) 1970/01/01 00:16:40 fetching corpus: 5361, signal 265892/283840 (executing program) 1970/01/01 00:16:43 fetching corpus: 5411, signal 266473/284153 (executing program) 1970/01/01 00:16:45 fetching corpus: 5460, signal 267397/284545 (executing program) 1970/01/01 00:16:48 fetching corpus: 5509, signal 268287/284902 (executing program) 1970/01/01 00:16:49 fetching corpus: 5558, signal 268795/285167 (executing program) 1970/01/01 00:16:52 fetching corpus: 5608, signal 269336/285431 (executing program) 1970/01/01 00:16:55 fetching corpus: 5658, signal 269966/285697 (executing program) 1970/01/01 00:16:57 fetching corpus: 5708, signal 270487/285927 (executing program) 1970/01/01 00:16:59 fetching corpus: 5758, signal 271279/286252 (executing program) 1970/01/01 00:17:01 fetching corpus: 5807, signal 272415/286583 (executing program) 1970/01/01 00:17:04 fetching corpus: 5857, signal 273287/286854 (executing program) 1970/01/01 00:17:06 fetching corpus: 5907, signal 273881/287071 (executing program) 1970/01/01 00:17:07 fetching corpus: 5957, signal 274463/287269 (executing program) 1970/01/01 00:17:09 fetching corpus: 6007, signal 275202/287477 (executing program) 1970/01/01 00:17:11 fetching corpus: 6057, signal 275983/287673 (executing program) 1970/01/01 00:17:13 fetching corpus: 6107, signal 276420/287808 (executing program) 1970/01/01 00:17:15 fetching corpus: 6157, signal 277316/288024 (executing program) 1970/01/01 00:17:17 fetching corpus: 6206, signal 277745/288162 (executing program) 1970/01/01 00:17:20 fetching corpus: 6256, signal 278363/288327 (executing program) 1970/01/01 00:17:22 fetching corpus: 6305, signal 279119/288483 (executing program) 1970/01/01 00:17:23 fetching corpus: 6355, signal 279910/288665 (executing program) 1970/01/01 00:17:24 fetching corpus: 6405, signal 280355/288774 (executing program) 1970/01/01 00:17:26 fetching corpus: 6455, signal 280865/288883 (executing program) 1970/01/01 00:17:29 fetching corpus: 6505, signal 281442/289009 (executing program) 1970/01/01 00:17:31 fetching corpus: 6555, signal 282152/289129 (executing program) 1970/01/01 00:17:34 fetching corpus: 6605, signal 282826/289225 (executing program) 1970/01/01 00:17:36 fetching corpus: 6655, signal 283464/289317 (executing program) 1970/01/01 00:17:40 fetching corpus: 6704, signal 284057/289406 (executing program) 1970/01/01 00:17:41 fetching corpus: 6754, signal 284709/289478 (executing program) 1970/01/01 00:17:43 fetching corpus: 6804, signal 285471/289549 (executing program) 1970/01/01 00:17:46 fetching corpus: 6854, signal 286013/289592 (executing program) 1970/01/01 00:17:50 fetching corpus: 6903, signal 286505/289638 (executing program) 1970/01/01 00:17:53 fetching corpus: 6953, signal 287111/289690 (executing program) 1970/01/01 00:17:55 fetching corpus: 7003, signal 287597/289716 (executing program) 1970/01/01 00:17:56 fetching corpus: 7053, signal 288107/289737 (executing program) 1970/01/01 00:17:57 fetching corpus: 7074, signal 288223/289761 (executing program) 1970/01/01 00:17:57 fetching corpus: 7074, signal 288223/289776 (executing program) 1970/01/01 00:17:57 fetching corpus: 7074, signal 288223/289776 (executing program) 1970/01/01 00:20:07 starting 2 fuzzer processes [ 1208.051450][ T2923] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=2923 'syz-fuzzer' 00:20:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) 00:20:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@ipv6_newroute={0x44, 0x18, 0x5, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev}}, @RTA_OIF={0x8}, @RTA_METRICS={0x4}, @RTA_PREF={0x5}]}, 0x44}}, 0x0) [ 1239.793292][ T2942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.958976][ T2942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.648203][ T2943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.785201][ T2943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.402842][ T2942] hsr_slave_0: entered promiscuous mode [ 1258.444036][ T2942] hsr_slave_1: entered promiscuous mode [ 1260.037890][ T2943] hsr_slave_0: entered promiscuous mode [ 1260.177092][ T2943] hsr_slave_1: entered promiscuous mode [ 1260.194764][ T2943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.218853][ T2943] Cannot create hsr debugfs directory [ 1268.930588][ T2942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1269.166050][ T2942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1269.259807][ T2942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1269.385168][ T2942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1271.478803][ T2943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1271.608926][ T2943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1271.719855][ T2943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1271.853097][ T2943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1283.295167][ T2942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.391631][ T2943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.113762][ T2942] veth0_vlan: entered promiscuous mode [ 1334.364756][ T2943] veth0_vlan: entered promiscuous mode [ 1335.031274][ T2942] veth1_vlan: entered promiscuous mode [ 1335.190098][ T2943] veth1_vlan: entered promiscuous mode [ 1336.999507][ T2943] veth0_macvtap: entered promiscuous mode [ 1337.534217][ T2943] veth1_macvtap: entered promiscuous mode [ 1337.776151][ T2942] veth0_macvtap: entered promiscuous mode [ 1338.031588][ T2942] veth1_macvtap: entered promiscuous mode [ 1339.504941][ T2943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.510330][ T2943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.512247][ T2943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.514110][ T2943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.873533][ T2942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.881716][ T2942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.884119][ T2942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.909059][ T2942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.875424][ T3637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1347.884403][ T3637] IPv6: NLM_F_CREATE should be set when creating new route [ 1347.889419][ T3637] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.023471][ T3638] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 00:22:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@ipv6_newroute={0x44, 0x18, 0x5, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev}}, @RTA_OIF={0x8}, @RTA_METRICS={0x4}, @RTA_PREF={0x5}]}, 0x44}}, 0x0) [ 1353.803168][ T3640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:22:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@ipv6_newroute={0x44, 0x18, 0x5, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev}}, @RTA_OIF={0x8}, @RTA_METRICS={0x4}, @RTA_PREF={0x5}]}, 0x44}}, 0x0) [ 1355.819137][ T3636] syz-executor.0: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 1355.933968][ T3636] CPU: 1 PID: 3636 Comm: syz-executor.0 Not tainted 6.5.0-rc1-syzkaller-00028-gef21fa7c198e #0 [ 1355.936164][ T3636] Hardware name: riscv-virtio,qemu (DT) [ 1355.938076][ T3636] Call Trace: [ 1355.939398][ T3636] [] dump_backtrace+0x2e/0x3c [ 1355.941464][ T3636] [] show_stack+0x34/0x40 [ 1355.943265][ T3636] [] dump_stack_lvl+0xe8/0x154 [ 1355.945020][ T3636] [] dump_stack+0x1c/0x24 [ 1355.947130][ T3636] [] warn_alloc+0x170/0x232 [ 1355.949032][ T3636] [] __vmalloc_node_range+0xcd8/0xec2 [ 1355.950883][ T3636] [] vzalloc+0xa0/0xb6 [ 1355.952592][ T3636] [] xt_counters_alloc+0x70/0x8e [ 1355.954764][ T3636] [] __do_replace+0xac/0x66e [ 1355.957415][ T3636] [] do_replace.constprop.0+0x2c6/0x366 [ 1355.959306][ T3636] [] do_ipt_set_ctl+0x2fe/0x562 [ 1355.961148][ T3636] [] nf_setsockopt+0x6c/0xac [ 1355.962810][ T3636] [] ip_setsockopt+0xd2/0xe6 [ 1355.964429][ T3636] [] tcp_setsockopt+0x76/0xb4 [ 1355.976141][ T3636] [] sock_common_setsockopt+0x6a/0x7c [ 1355.977941][ T3636] [] __sys_setsockopt+0x256/0x42c [ 1355.979492][ T3636] [] sys_setsockopt+0x3a/0x4c [ 1355.981150][ T3636] [] syscall_handler+0xfa/0x148 [ 1355.982782][ T3636] [] do_trap_ecall_u+0x9c/0x9e [ 1355.984377][ T3636] [] ret_from_exception+0x0/0x64 [ 1356.141847][ T3636] Mem-Info: [ 1356.144990][ T3636] active_anon:65033 inactive_anon:40 isolated_anon:0 [ 1356.144990][ T3636] active_file:0 inactive_file:38943 isolated_file:0 [ 1356.144990][ T3636] unevictable:768 dirty:6 writeback:0 [ 1356.144990][ T3636] slab_reclaimable:5653 slab_unreclaimable:26113 [ 1356.144990][ T3636] mapped:9204 shmem:811 pagetables:411 [ 1356.144990][ T3636] sec_pagetables:0 bounce:0 [ 1356.144990][ T3636] kernel_misc_reclaimable:0 [ 1356.144990][ T3636] free:216624 free_pcp:621 free_cma:3968 [ 1356.244015][ T3636] Node 0 active_anon:260132kB inactive_anon:160kB active_file:0kB inactive_file:155772kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:36816kB dirty:24kB writeback:0kB shmem:3244kB writeback_tmp:0kB kernel_stack:5632kB pagetables:1644kB sec_pagetables:0kB all_unreclaimable? no [ 1356.322481][ T3636] Node 0 DMA32 free:866496kB boost:0kB min:5068kB low:6672kB high:8276kB reserved_highatomic:0KB active_anon:260132kB inactive_anon:160kB active_file:0kB inactive_file:155772kB unevictable:3072kB writepending:24kB present:2097152kB managed:1610204kB mlocked:0kB bounce:0kB free_pcp:2844kB local_pcp:1648kB free_cma:15872kB [ 1356.369812][ T3636] lowmem_reserve[]: 0 0 0 [ 1356.372702][ T3636] Node 0 DMA32: 220*4kB (ME) 108*8kB (UME) 37*16kB (UME) 67*32kB (UM) 11*64kB (UME) 9*128kB (UME) 2*256kB (UM) 3*512kB (MEC) 4*1024kB (UMC) 1*2048kB (C) 208*4096kB (MC) = 866496kB [ 1356.404990][ T3636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.460265][ T3636] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1356.463073][ T3636] 39757 total pagecache pages [ 1356.464300][ T3636] 0 pages in swap cache [ 1356.499316][ T3636] Free swap = 124996kB [ 1356.514960][ T3636] Total swap = 124996kB [ 1356.575153][ T3636] 524288 pages RAM [ 1356.620768][ T3636] 0 pages HighMem/MovableOnly [ 1356.641784][ T3636] 121737 pages reserved [ 1356.643318][ T3636] 4096 pages cma reserved [ 1358.722766][ T3642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:22:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@ipv6_newroute={0x44, 0x18, 0x5, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev}}, @RTA_OIF={0x8}, @RTA_METRICS={0x4}, @RTA_PREF={0x5}]}, 0x44}}, 0x0) 00:22:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) [ 1366.583719][ T3646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1369.672472][ T3650] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 00:22:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) [ 1376.285007][ T3654] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 [ 1384.399872][ T3649] syz-executor.0: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 1384.404622][ T3649] CPU: 0 PID: 3649 Comm: syz-executor.0 Not tainted 6.5.0-rc1-syzkaller-00028-gef21fa7c198e #0 [ 1384.408785][ T3649] Hardware name: riscv-virtio,qemu (DT) [ 1384.410142][ T3649] Call Trace: [ 1384.411272][ T3649] [] dump_backtrace+0x2e/0x3c [ 1384.413139][ T3649] [] show_stack+0x34/0x40 [ 1384.415018][ T3649] [] dump_stack_lvl+0xe8/0x154 [ 1384.417607][ T3649] [] dump_stack+0x1c/0x24 [ 1384.419342][ T3649] [] warn_alloc+0x170/0x232 [ 1384.420983][ T3649] [] __vmalloc_node_range+0xcd8/0xec2 [ 1384.422847][ T3649] [] vzalloc+0xa0/0xb6 [ 1384.424638][ T3649] [] xt_counters_alloc+0x70/0x8e [ 1384.427187][ T3649] [] __do_replace+0xac/0x66e [ 1384.429149][ T3649] [] do_replace.constprop.0+0x2c6/0x366 [ 1384.431097][ T3649] [] do_ipt_set_ctl+0x2fe/0x562 [ 1384.432971][ T3649] [] nf_setsockopt+0x6c/0xac [ 1384.434757][ T3649] [] ip_setsockopt+0xd2/0xe6 [ 1384.437092][ T3649] [] tcp_setsockopt+0x76/0xb4 [ 1384.438923][ T3649] [] sock_common_setsockopt+0x6a/0x7c [ 1384.440733][ T3649] [] __sys_setsockopt+0x256/0x42c [ 1384.442545][ T3649] [] sys_setsockopt+0x3a/0x4c [ 1384.444323][ T3649] [] syscall_handler+0xfa/0x148 [ 1384.447227][ T3649] [] do_trap_ecall_u+0x9c/0x9e [ 1384.449192][ T3649] [] ret_from_exception+0x0/0x64 [ 1384.691245][ T3649] Mem-Info: [ 1384.703267][ T3649] active_anon:65162 inactive_anon:43 isolated_anon:0 [ 1384.703267][ T3649] active_file:0 inactive_file:38958 isolated_file:0 [ 1384.703267][ T3649] unevictable:768 dirty:0 writeback:0 [ 1384.703267][ T3649] slab_reclaimable:5669 slab_unreclaimable:26391 [ 1384.703267][ T3649] mapped:9261 shmem:819 pagetables:445 [ 1384.703267][ T3649] sec_pagetables:0 bounce:0 [ 1384.703267][ T3649] kernel_misc_reclaimable:0 [ 1384.703267][ T3649] free:214715 free_pcp:429 free_cma:3968 [ 1384.758218][ T3649] Node 0 active_anon:260648kB inactive_anon:172kB active_file:0kB inactive_file:155832kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:37044kB dirty:0kB writeback:0kB shmem:3276kB writeback_tmp:0kB kernel_stack:5728kB pagetables:1780kB sec_pagetables:0kB all_unreclaimable? no [ 1384.764503][ T3649] Node 0 DMA32 free:858608kB boost:0kB min:5068kB low:6672kB high:8276kB reserved_highatomic:0KB active_anon:260648kB inactive_anon:172kB active_file:0kB inactive_file:155832kB unevictable:3072kB writepending:0kB present:2097152kB managed:1610204kB mlocked:0kB bounce:0kB free_pcp:1836kB local_pcp:964kB free_cma:15872kB [ 1384.784162][ T3649] lowmem_reserve[]: 0 0 0 [ 1384.806957][ T3649] Node 0 DMA32: 112*4kB (UE) 88*8kB (UME) 31*16kB (ME) 14*32kB (ME) 13*64kB (ME) 9*128kB (UME) 2*256kB (ME) 4*512kB (UMEC) 4*1024kB (UMC) 2*2048kB (UC) 206*4096kB (MC) = 858608kB [ 1384.918126][ T3649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.920229][ T3649] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1384.922036][ T3649] 39777 total pagecache pages [ 1384.923323][ T3649] 0 pages in swap cache [ 1384.924520][ T3649] Free swap = 124996kB [ 1384.958904][ T3649] Total swap = 124996kB [ 1384.960436][ T3649] 524288 pages RAM [ 1384.961493][ T3649] 0 pages HighMem/MovableOnly [ 1384.962543][ T3649] 121737 pages reserved [ 1384.963552][ T3649] 4096 pages cma reserved 00:23:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) 00:23:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) [ 1398.892492][ T3659] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 [ 1402.122479][ T3661] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 [ 1410.661845][ T3657] warn_alloc: 1 callbacks suppressed [ 1410.662294][ T3657] syz-executor.0: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 1410.688568][ T3657] CPU: 1 PID: 3657 Comm: syz-executor.0 Not tainted 6.5.0-rc1-syzkaller-00028-gef21fa7c198e #0 [ 1410.690561][ T3657] Hardware name: riscv-virtio,qemu (DT) [ 1410.691851][ T3657] Call Trace: [ 1410.693429][ T3657] [] dump_backtrace+0x2e/0x3c [ 1410.696254][ T3657] [] show_stack+0x34/0x40 [ 1410.699095][ T3657] [] dump_stack_lvl+0xe8/0x154 [ 1410.701846][ T3657] [] dump_stack+0x1c/0x24 [ 1410.704555][ T3657] [] warn_alloc+0x170/0x232 [ 1410.706302][ T3657] [] __vmalloc_node_range+0xcd8/0xec2 [ 1410.709313][ T3657] [] vzalloc+0xa0/0xb6 [ 1410.711967][ T3657] [] xt_counters_alloc+0x70/0x8e [ 1410.714926][ T3657] [] __do_replace+0xac/0x66e [ 1410.716791][ T3657] [] do_replace.constprop.0+0x2c6/0x366 [ 1410.719854][ T3657] [] do_ipt_set_ctl+0x2fe/0x562 [ 1410.722843][ T3657] [] nf_setsockopt+0x6c/0xac [ 1410.725643][ T3657] [] ip_setsockopt+0xd2/0xe6 [ 1410.728212][ T3657] [] tcp_setsockopt+0x76/0xb4 [ 1410.731868][ T3657] [] sock_common_setsockopt+0x6a/0x7c [ 1410.737087][ T3657] [] __sys_setsockopt+0x256/0x42c [ 1410.739079][ T3657] [] sys_setsockopt+0x3a/0x4c [ 1410.741744][ T3657] [] syscall_handler+0xfa/0x148 [ 1410.744461][ T3657] [] do_trap_ecall_u+0x9c/0x9e [ 1410.747480][ T3657] [] ret_from_exception+0x0/0x64 [ 1410.847530][ T3657] Mem-Info: [ 1410.863265][ T3657] active_anon:65059 inactive_anon:42 isolated_anon:0 [ 1410.863265][ T3657] active_file:0 inactive_file:38961 isolated_file:0 [ 1410.863265][ T3657] unevictable:768 dirty:10 writeback:0 [ 1410.863265][ T3657] slab_reclaimable:5669 slab_unreclaimable:26892 [ 1410.863265][ T3657] mapped:9210 shmem:820 pagetables:427 [ 1410.863265][ T3657] sec_pagetables:0 bounce:0 [ 1410.863265][ T3657] kernel_misc_reclaimable:0 [ 1410.863265][ T3657] free:212805 free_pcp:561 free_cma:3968 [ 1410.942190][ T3657] Node 0 active_anon:260236kB inactive_anon:168kB active_file:0kB inactive_file:155844kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:36840kB dirty:40kB writeback:0kB shmem:3280kB writeback_tmp:0kB kernel_stack:5696kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no [ 1410.969184][ T3657] Node 0 DMA32 free:850968kB boost:0kB min:5068kB low:6672kB high:8276kB reserved_highatomic:0KB active_anon:260236kB inactive_anon:168kB active_file:0kB inactive_file:155844kB unevictable:3072kB writepending:40kB present:2097152kB managed:1610204kB mlocked:0kB bounce:0kB free_pcp:2804kB local_pcp:1996kB free_cma:15872kB [ 1410.975251][ T3657] lowmem_reserve[]: 0 0 0 [ 1411.049478][ T3657] Node 0 DMA32: 228*4kB (UME) 97*8kB (UME) 32*16kB (ME) 76*32kB (UME) 18*64kB (UME) 11*128kB (UME) 2*256kB (ME) 3*512kB (MEC) 4*1024kB (UMC) 1*2048kB (C) 204*4096kB (MC) = 850968kB [ 1411.101650][ T3657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.103413][ T3657] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1411.105182][ T3657] 39784 total pagecache pages [ 1411.177442][ T3657] 0 pages in swap cache [ 1411.178999][ T3657] Free swap = 124996kB [ 1411.181078][ T3657] Total swap = 124996kB [ 1411.182317][ T3657] 524288 pages RAM [ 1411.183464][ T3657] 0 pages HighMem/MovableOnly [ 1411.184700][ T3657] 121737 pages reserved [ 1411.258976][ T3657] 4096 pages cma reserved 00:23:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) 00:23:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000400000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000070000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1) [ 1421.210924][ T3667] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 [ 1421.342698][ T3668] x_tables: ip_tables: CT target: only valid in raw table, not 18446744073709551615 [ 1434.964244][ T3665] warn_alloc: 1 callbacks suppressed [ 1434.964643][ T3665] syz-executor.1: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 1435.014744][ T3665] CPU: 0 PID: 3665 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller-00028-gef21fa7c198e #0 [ 1435.019715][ T3665] Hardware name: riscv-virtio,qemu (DT) [ 1435.021413][ T3665] Call Trace: [ 1435.022592][ T3665] [] dump_backtrace+0x2e/0x3c [ 1435.024414][ T3665] [] show_stack+0x34/0x40 [ 1435.027034][ T3665] [] dump_stack_lvl+0xe8/0x154 [ 1435.028909][ T3665] [] dump_stack+0x1c/0x24 [ 1435.030666][ T3665] [] warn_alloc+0x170/0x232 [ 1435.032265][ T3665] [] __vmalloc_node_range+0xcd8/0xec2 [ 1435.034053][ T3665] [] vzalloc+0xa0/0xb6 [ 1435.035690][ T3665] [] xt_counters_alloc+0x70/0x8e [ 1435.037516][ T3665] [] __do_replace+0xac/0x66e [ 1435.039294][ T3665] [] do_replace.constprop.0+0x2c6/0x366 [ 1435.041183][ T3665] [] do_ipt_set_ctl+0x2fe/0x562 [ 1435.042960][ T3665] [] nf_setsockopt+0x6c/0xac [ 1435.044639][ T3665] [] ip_setsockopt+0xd2/0xe6 [ 1435.046662][ T3665] [] tcp_setsockopt+0x76/0xb4 [ 1435.048500][ T3665] [] sock_common_setsockopt+0x6a/0x7c [ 1435.050330][ T3665] [] __sys_setsockopt+0x256/0x42c [ 1435.052031][ T3665] [] sys_setsockopt+0x3a/0x4c [ 1435.053699][ T3665] [] syscall_handler+0xfa/0x148 [ 1435.056818][ T3665] [] do_trap_ecall_u+0x9c/0x9e [ 1435.059463][ T3665] [] ret_from_exception+0x0/0x64 [ 1435.147848][ T3665] Mem-Info: [ 1435.149342][ T3665] active_anon:63635 inactive_anon:44 isolated_anon:0 [ 1435.149342][ T3665] active_file:0 inactive_file:38967 isolated_file:0 [ 1435.149342][ T3665] unevictable:768 dirty:0 writeback:0 [ 1435.149342][ T3665] slab_reclaimable:5670 slab_unreclaimable:26876 [ 1435.149342][ T3665] mapped:9210 shmem:822 pagetables:427 [ 1435.149342][ T3665] sec_pagetables:0 bounce:0 [ 1435.149342][ T3665] kernel_misc_reclaimable:0 [ 1435.149342][ T3665] free:213394 free_pcp:1024 free_cma:3968 [ 1435.154536][ T3665] Node 0 active_anon:254540kB inactive_anon:176kB active_file:0kB inactive_file:155868kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:36840kB dirty:0kB writeback:0kB shmem:3288kB writeback_tmp:0kB kernel_stack:5696kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no [ 1435.191904][ T3665] Node 0 DMA32 free:853576kB boost:0kB min:5068kB low:6672kB high:8276kB reserved_highatomic:0KB active_anon:254540kB inactive_anon:176kB active_file:0kB inactive_file:155868kB unevictable:3072kB writepending:0kB present:2097152kB managed:1610204kB mlocked:0kB bounce:0kB free_pcp:4100kB local_pcp:1908kB free_cma:15872kB [ 1435.249935][ T3665] lowmem_reserve[]: 0 0 0 [ 1435.252763][ T3665] Node 0 DMA32: 442*4kB (UME) 214*8kB (ME) 59*16kB (UME) 126*32kB (UME) 33*64kB (UME) 8*128kB (ME) 3*256kB (UME) 3*512kB (MEC) 4*1024kB (MC) 2*2048kB (MC) 203*4096kB (MC) = 853576kB [ 1435.297158][ T3665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.299213][ T3665] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1435.301032][ T3665] 39789 total pagecache pages [ 1435.302295][ T3665] 0 pages in swap cache [ 1435.303479][ T3665] Free swap = 124996kB [ 1435.304734][ T3665] Total swap = 124996kB [ 1435.337008][ T3665] 524288 pages RAM [ 1435.338567][ T3665] 0 pages HighMem/MovableOnly [ 1435.339871][ T3665] 121737 pages reserved [ 1435.341148][ T3665] 4096 pages cma reserved 00:24:04 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:05 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:24:08 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:10 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:24:14 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:24:17 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:24:23 executing program 1: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b66, 0x0) 00:24:26 executing program 1: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:27 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b66, 0x0) 00:24:30 executing program 1: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="0301130010061f000000000000000114000000320000ac14140eef06e63a808a8972bd0f72e410820c520f0604e4fdfe4b8894305af79f6b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) 00:24:31 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b66, 0x0) 00:24:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7f}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xff000000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x58}}, 0xc000) 00:24:34 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b66, 0x0) [ 1476.032959][ T3699] sch_fq: defrate 0 ignored. 00:24:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7f}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xff000000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x58}}, 0xc000) 00:24:38 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) [ 1479.854720][ T3703] sch_fq: defrate 0 ignored. 00:24:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7f}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xff000000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x58}}, 0xc000) [ 1483.412743][ T3709] sch_fq: defrate 0 ignored. 00:24:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7f}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xff000000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x58}}, 0xc000) 00:24:44 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) [ 1486.480259][ T3712] sch_fq: defrate 0 ignored. 00:24:49 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:24:51 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:24:56 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:24:58 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:03 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:06 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:11 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:12 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:17 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:17 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:23 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:23 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:29 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:30 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:34 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:36 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:40 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+'], 0x10) 00:25:43 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000740)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x2}, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='keiking\x00', 0xffffffffffffffff) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='syzkaller\x00', r0) 00:25:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:25:46 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000740)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x2}, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='keiking\x00', 0xffffffffffffffff) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='syzkaller\x00', r0) 00:25:49 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000740)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x2}, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='keiking\x00', 0xffffffffffffffff) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='syzkaller\x00', r0) 00:25:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:25:52 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000740)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x2}, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='keiking\x00', 0xffffffffffffffff) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='syzkaller\x00', r0) 00:25:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:25:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:26:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:26:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:26:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 00:26:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1574.862198][ T3812] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 00:26:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) [ 1580.201846][ T28] audit: type=1804 audit(1579.660:2): pid=3814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/31/cgroup.controllers" dev="vda" ino=699 res=1 errno=0 [ 1580.357751][ T28] audit: type=1804 audit(1579.800:3): pid=3814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/31/cgroup.controllers" dev="vda" ino=699 res=1 errno=0 00:26:21 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) 00:26:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 00:26:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) 00:26:28 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) [ 1591.872006][ T28] audit: type=1804 audit(1591.330:4): pid=3828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/32/cgroup.controllers" dev="vda" ino=698 res=1 errno=0 [ 1592.073295][ T28] audit: type=1804 audit(1591.530:5): pid=3828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/32/cgroup.controllers" dev="vda" ino=698 res=1 errno=0 00:26:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 00:26:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1601.107333][ T28] audit: type=1804 audit(1600.570:6): pid=3838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir4088620934/syzkaller.jmLyeR/33/cgroup.controllers" dev="vda" ino=701 res=1 errno=0 [ 1601.360938][ T28] audit: type=1804 audit(1600.830:7): pid=3838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir4088620934/syzkaller.jmLyeR/33/cgroup.controllers" dev="vda" ino=701 res=1 errno=0 [ 1606.347191][ T28] audit: type=1804 audit(1605.810:8): pid=3846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/33/cgroup.controllers" dev="vda" ino=698 res=1 errno=0 [ 1606.522992][ T28] audit: type=1804 audit(1605.990:9): pid=3846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/33/cgroup.controllers" dev="vda" ino=698 res=1 errno=0 00:26:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 00:26:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1615.091765][ T28] audit: type=1804 audit(1614.560:10): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir4088620934/syzkaller.jmLyeR/34/cgroup.controllers" dev="vda" ino=700 res=1 errno=0 [ 1615.197247][ T28] audit: type=1804 audit(1614.650:11): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir4088620934/syzkaller.jmLyeR/34/cgroup.controllers" dev="vda" ino=700 res=1 errno=0 [ 1620.670421][ T28] audit: type=1804 audit(1620.130:12): pid=3865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/34/cgroup.controllers" dev="vda" ino=701 res=1 errno=0 [ 1620.848352][ T28] audit: type=1804 audit(1620.310:13): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir1012532050/syzkaller.bqBQoI/34/cgroup.controllers" dev="vda" ino=701 res=1 errno=0 00:27:00 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 00:27:12 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) 00:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x54, r1, 0x605, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) 00:27:17 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) 00:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x54, r1, 0x605, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) 00:27:21 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r4, r2, 0x11, 0x0, r1}, 0x14) 00:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x54, r1, 0x605, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) 00:27:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x54, r1, 0x605, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) 00:27:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:27:50 executing program 1: syz_clone3(&(0x7f0000000200)={0x110000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:27:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) [ 1673.887802][ T3917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 00:27:54 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:27:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 00:27:59 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 00:28:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 00:28:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:18 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @window, @window], 0x200002d4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xa, &(0x7f00000001c0)=[@mss, @window, @window, @timestamp], 0x4) keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:28:24 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 00:28:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005400)=[{{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0, 0x3a}, {0x0}, {&(0x7f0000002980)="a6", 0x1}], 0x3}}], 0x2, 0x0) 00:28:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005400)=[{{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0, 0x3a}, {0x0}, {&(0x7f0000002980)="a6", 0x1}], 0x3}}], 0x2, 0x0) 00:30:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @window, @window], 0x200002d4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xa, &(0x7f00000001c0)=[@mss, @window, @window, @timestamp], 0x4) keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:30:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005400)=[{{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0, 0x3a}, {0x0}, {&(0x7f0000002980)="a6", 0x1}], 0x3}}], 0x2, 0x0) 00:31:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005400)=[{{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0, 0x3a}, {0x0}, {&(0x7f0000002980)="a6", 0x1}], 0x3}}], 0x2, 0x0) 00:31:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @window, @window], 0x200002d4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xa, &(0x7f00000001c0)=[@mss, @window, @window, @timestamp], 0x4) keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 1960.263795][ T3972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1960.490008][ T3972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1985.914159][ T3972] hsr_slave_0: entered promiscuous mode [ 1986.049601][ T3972] hsr_slave_1: entered promiscuous mode [ 1986.120219][ T3972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1986.123587][ T3972] Cannot create hsr debugfs directory [ 1998.084654][ T3972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.291277][ T3972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.638972][ T3972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2002.057962][ T3972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.222837][ T3972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2007.402504][ T3972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2007.572292][ T3972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2007.801484][ T3972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2024.774896][ T3972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2102.637212][ T3191] hsr_slave_0: left promiscuous mode [ 2102.686550][ T3191] hsr_slave_1: left promiscuous mode [ 2116.433682][ T3191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2117.383149][ T3191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2121.551722][ T3191] bond0 (unregistering): Released all slaves [ 2165.027493][ T10] hsr_slave_0: left promiscuous mode [ 2165.054581][ T10] hsr_slave_1: left promiscuous mode [ 2165.188893][ T10] veth1_macvtap: left promiscuous mode [ 2165.193376][ T10] veth0_macvtap: left promiscuous mode [ 2165.209840][ T10] veth1_vlan: left promiscuous mode [ 2165.222546][ T10] veth0_vlan: left promiscuous mode [ 2175.475356][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2175.799712][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2178.798363][ T10] bond0 (unregistering): Released all slaves [ 2191.476800][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2191.604248][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2213.714431][ T4333] hsr_slave_0: entered promiscuous mode [ 2213.823180][ T4333] hsr_slave_1: entered promiscuous mode [ 2230.561646][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2230.818769][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2231.090939][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2231.294571][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2251.540765][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2290.583027][ T10] hsr_slave_0: left promiscuous mode [ 2290.644206][ T10] hsr_slave_1: left promiscuous mode [ 2302.553880][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2303.189597][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2306.860627][ T10] bond0 (unregistering): Released all slaves [ 2315.250643][ T29] INFO: task syz-executor.1:3969 blocked for more than 430 seconds. [ 2315.255328][ T29] Not tainted 6.5.0-rc1-syzkaller-00028-gef21fa7c198e #0 [ 2315.301578][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2315.303876][ T29] task:syz-executor.1 state:D stack:0 pid:3969 ppid:2943 flags:0x00000004 [ 2315.349431][ T29] Call Trace: [ 2315.351247][ T29] [] __schedule+0x794/0x1884 [ 2315.408917][ T29] [] schedule+0x78/0xfe [ 2315.411768][ T29] [] __lock_sock+0x11e/0x1fc [ 2315.414722][ T29] [] lock_sock_nested+0xbc/0xbe [ 2315.451833][ T29] [] sockopt_lock_sock+0x58/0x5a [ 2315.454473][ T29] [] do_tcp_setsockopt+0x1aa/0x1894 [ 2315.503335][ T29] [] tcp_setsockopt+0xb0/0xb4 [ 2315.539076][ T29] [] sock_common_setsockopt+0x6a/0x7c [ 2315.541945][ T29] [] __sys_setsockopt+0x256/0x42c [ 2315.544246][ T29] [] sys_setsockopt+0x3a/0x4c [ 2315.578807][ T29] [] syscall_handler+0xfa/0x148 [ 2315.581578][ T29] [] do_trap_ecall_u+0x9c/0x9e [ 2315.583964][ T29] [] ret_from_exception+0x0/0x64 [ 2315.681797][ T29] [ 2315.681797][ T29] Showing all locks held in the system: [ 2315.684289][ T29] 1 lock held by rcu_tasks_kthre/13: [ 2315.727594][ T29] #0: ffffffff851826f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x32/0x740 [ 2315.733849][ T29] 1 lock held by rcu_tasks_trace/14: [ 2315.794917][ T29] #0: ffffffff85182c30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x32/0x740 [ 2315.803101][ T29] 1 lock held by khungtaskd/29: [ 2315.804009][ T29] #0: ffffffff851829c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x40/0x1f6 [ 2315.827846][ T29] 2 locks held by getty/2887: [ 2315.828895][ T29] #0: ff6000000e97c098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 2315.832779][ T29] #1: ff2000000007d2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb02/0xcf0 [ 2315.886263][ T29] 2 locks held by kworker/u4:3/2951: [ 2315.887816][ T29] #0: ff60000008469138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x5a8/0xe0a [ 2315.891355][ T29] #1: ff200000007d7cf0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x5a8/0xe0a [ 2315.949246][ T29] 1 lock held by syz-executor.1/3968: [ 2315.950584][ T29] 1 lock held by syz-executor.1/3969: [ 2315.951815][ T29] #0: ff600000147025f0 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x58/0x5a [ 2315.955160][ T29] 1 lock held by rm/4761: [ 2315.998034][ T29] 1 lock held by modprobe/4762: [ 2315.999711][ T29] [ 2316.000703][ T29] ============================================= [ 2316.000703][ T29] [ 2316.002444][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2316.004162][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.5.0-rc1-syzkaller-00028-gef21fa7c198e #0 [ 2316.006049][ T29] Hardware name: riscv-virtio,qemu (DT) [ 2316.007755][ T29] Call Trace: [ 2316.008813][ T29] [] dump_backtrace+0x2e/0x3c [ 2316.010479][ T29] [] show_stack+0x34/0x40 [ 2316.012121][ T29] [] dump_stack_lvl+0xe8/0x154 [ 2316.013721][ T29] [] dump_stack+0x1c/0x24 [ 2316.015323][ T29] [] panic+0x27c/0x648 [ 2316.017532][ T29] [] watchdog+0x804/0xd4e [ 2316.019116][ T29] [] kthread+0x1bc/0x22c [ 2316.020615][ T29] [] ret_from_fork+0xa/0x1c [ 2316.022486][ T29] SMP: stopping secondary CPUs [ 2316.025469][ T29] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:33:55 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff835a185c mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000020a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff80005a9c vstvec 0000000000000000 mepc ffffffff801431da sepc ffffffff8015f9ec vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp a0334000000b474a x0/zero 0000000000000000 x1/ra ffffffff801d192c x2/sp ff20000000017ab0 x3/gp ffffffff85f8e200 x4/tp ff6000000b676600 x5/t0 0000000000046600 x6/t1 fffffffef0a02248 x7/t2 3839316337616631 x8/s0 ff20000000017ae0 x9/s1 ffffffff8519e780 x10/a0 ffffffff8519e780 x11/a1 00000000000f0000 x12/a2 ffffffff801d191c x13/a3 0000000000000000 x14/a4 ff6000000b676600 x15/a5 0000000000000000 x16/a6 fffffffef0a02249 x17/a7 ffffffff85011243 x18/s2 ffffffff801d192c x19/s3 0000000200000120 x20/s4 0000021af1416500 x21/s5 ffffffff85011200 x22/s6 0000000000989680 x23/s7 ffffffff85fbc600 x24/s8 ffffffff85fb8580 x25/s9 ffffffff801efa10 x26/s10 ff20000000017bc0 x27/s11 0000021af0b9d324 x28/t3 ff20000000017a20 x29/t4 fffffffef0a02248 x30/t5 fffffffef0a02249 x31/t6 ffffffff87c80f08 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8029c292 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff80005a9c vstvec 0000000000000000 mepc ffffffff80010b50 sepc ffffffff8055d7ce vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch ff600000128f4c80 satp a0335000000b65d0 x0/zero 0000000000000000 x1/ra 00ffffff82a0e090 x2/sp 00fffffff5400ba0 x3/gp ffffffff85f8e200 x4/tp 0000000000000000 x5/t0 0000000000000007 x6/t1 0000000000000000 x7/t2 0000000000000002 x8/s0 00fffffff5400e70 x9/s1 00fffffff5400bd0 x10/a0 00ffffff8290d000 x11/a1 00000000000f36a8 x12/a2 0000000000000000 x13/a3 0000000000000802 x14/a4 00000000000ef000 x15/a5 0000000000000040 x16/a6 0000000000000000 x17/a7 00000000000000de x18/s2 0000000000000000 x19/s3 0000000000000000 x20/s4 0000000000000002 x21/s5 0000000000000000 x22/s6 00fffffff5400ed8 x23/s7 00ffffff82a2acf8 x24/s8 00fffffff5400bd0 x25/s9 00ffffff82a01000 x26/s10 00ffffff82a2c068 x27/s11 00000000000f36a8 x28/t3 0000000000000005 x29/t4 0000000000000038 x30/t5 00000000000f3000 x31/t6 0000000000000fff f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000