last executing test programs: 24m36.338204354s ago: executing program 1 (id=2013): syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r0], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000680)={0x25, 0x0}) getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f00000000c0)=0x8000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) 24m33.728110866s ago: executing program 0 (id=2014): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r1, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x98, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff7fff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x46e}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffff801}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 24m33.294227757s ago: executing program 1 (id=2015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0xfeff, 0x0, 0x1, 0x0, @empty, @broadcast}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x24000040) ioctl$TCSETS(r5, 0x804c4700, &(0x7f0000000040)={0x80000001, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r6 = syz_open_pts(r5, 0x141040) syz_open_pts(r6, 0x80802) 24m30.062405491s ago: executing program 0 (id=2017): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_loaded', 0x0, 0x28) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) 24m29.818243036s ago: executing program 1 (id=2019): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6a0000c5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x9, 0x1]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 00000000000000004'], 0x2a, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x400, 0x200) io_setup(0x9, &(0x7f0000000500)=0x0) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 24m28.902808772s ago: executing program 0 (id=2020): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000880)=0x1c, 0x800) sendmsg$inet6(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)="f7b1180c2a677a95f4fda993e56ce34d86eb889ed88e99", 0x17}, {0x0}, {&(0x7f0000000940)="54b7bb0e9141379b92e31582e45770006cfd8ab918d7ea6a3eaf9d0c9344dd467f7e140e683560a8b19ef4d2884d607355f65178a47c0a52", 0x38}], 0x3, &(0x7f0000001a40)=[@hopopts={{0x6c, 0x29, 0x36, {0x33, 0xa, '\x00', [@ra={0x5, 0x2, 0xd}, @ra={0x5, 0x2, 0xd}, @generic={0x72, 0x36, "f38d19625fc9e89e0c319980e35f92cd242269a5242fff0be233a21d249f6db60a62457152d7c72abeed62dfbfaa12af7e7532ee05e3"}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x3}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0x29, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x3}}], 0xa8}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffe11, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMDTEST(r5, 0x8040640a, &(0x7f00000000c0)={0x1, 0x30000, 0xffffffff, 0x3, 0x10, 0x6, 0x40, 0x6, 0x80, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x134, 0x0, 0x148, 0x0, 0x148, 0x2fc, 0x240, 0x240, 0x2fc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xcc, 0x134, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xfffffffffffffe00, {0x8}}}, @common=@ttl={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0xa3, 0x394, 0xb1, 'snmp_trap\x00', 'syz1\x00', {0x3}}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x29}, 0x0, 0x188, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x24}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x33, 0x3, 0x0, 0x0, 0xf6, 0x8, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ec) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5428a090000000000003d68c95f01"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 24m28.812786053s ago: executing program 1 (id=2021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8, 0x2) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000600)}, {&(0x7f0000000380)='#', 0x1}], 0x2) 24m25.212157168s ago: executing program 1 (id=2032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_loaded', 0x0, 0x28) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) 24m24.585021428s ago: executing program 3 (id=2025): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x2beb01, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x2284, &(0x7f00000001c0)=@physical={0x0, 0x2, [{0x6, 0x5, 0xa, 0xa, 0xf, 0x0, 0x3, 0x6, 0xb, 0x1, 0x1, 0x80, 0x7c}, {0x1, 0x5, 0x1, 0x3, 0x4, 0x1, 0x2, 0x9, 0x6, 0x1, 0x7, 0x7, 0xffbffffa}, {0x6, 0xd, 0x0, 0xd, 0x6, 0x1, 0x0, 0x8, 0x8, 0x0, 0x80000001, 0xcae}, {0x1, 0xb, 0x3, 0xc, 0x8, 0x0, 0x3, 0x5, 0x8, 0x1, 0x4, 0x4}]}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xc}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) 24m23.678067998s ago: executing program 3 (id=2026): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r1, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x98, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff7fff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x46e}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffff801}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 24m21.530345071s ago: executing program 3 (id=2028): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_loaded', 0x0, 0x28) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) 24m21.438568454s ago: executing program 0 (id=2029): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6a0000c5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x9, 0x1]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 0000000000000000409'], 0x2a, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x400, 0x200) io_setup(0x9, &(0x7f0000000500)=0x0) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 24m20.186356587s ago: executing program 0 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0xfeff, 0x0, 0x1, 0x0, @empty, @broadcast}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x24000040) ioctl$TCSETS(r5, 0x804c4700, &(0x7f0000000040)={0x80000001, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r6 = syz_open_pts(r5, 0x141040) syz_open_pts(r6, 0x80802) 24m19.886410159s ago: executing program 3 (id=2033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8, 0x2) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000600)}, {&(0x7f0000000380)='#', 0x1}], 0x2) 24m19.883845116s ago: executing program 1 (id=2041): socket$inet_sctp(0x2, 0x5, 0x84) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)=0x6, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042bbd7000000000000000ffff", @ANYRES32=0x0], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) 24m17.358199548s ago: executing program 0 (id=2034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff00"/56], 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x20, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000500), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) ftruncate(r0, 0xfffffd83) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080), 0x80) keyctl$clear(0x7, r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f00000002c0)) close_range(r3, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007926000000000000bf670800000000005607000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f153bf0f5bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae625a14bddcf5b3e72b420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d6287805319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8098f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b39a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d57158dc308c08dc0a8dc99bdfeaff43eb24134e63a5efd08c6c2d51983265b60afcc5effad8f52ec152ab4ed39c2dbd04e3fefd9217a0246660301d5b7d7a9ea72c2cdec5a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 24m14.040782828s ago: executing program 3 (id=2037): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_loaded', 0x0, 0x28) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) 24m4.646735025s ago: executing program 32 (id=2041): socket$inet_sctp(0x2, 0x5, 0x84) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)=0x6, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042bbd7000000000000000ffff", @ANYRES32=0x0], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) 24m1.015373313s ago: executing program 33 (id=2034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff00"/56], 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x20, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_loaded', 0x0, 0x28) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) 37.133384959s ago: executing program 2 (id=4784): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x2) pipe(&(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80000001, 0x0, 0x0, 0x8, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000000]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d27, 0x6f0d, 0x1, 0x0, 0x4}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 27.282488552s ago: executing program 2 (id=4791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x104) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, 0x0, 0x20040040) dup(r3) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x6, 0x0, 0x17, 0x0, 0x0, 0x8, 0x67}]}}}}}}}, 0x0) 27.278368755s ago: executing program 6 (id=4792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e0000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 27.181507767s ago: executing program 4 (id=4794): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x18}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x600) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r7 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r9 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000000c0)='@\x00', 0x0, r5) 23.326192962s ago: executing program 2 (id=4795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000001980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@newtaction={0x50, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x5, 0x6, 'v'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x50}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000000), 0x4) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='keyring\x00', r6) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="01ac0f0002ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='Go\x00', 0x3, r6) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x120183, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4f68}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x24000840) close(0x3) 23.325479583s ago: executing program 5 (id=4796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e0000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.418004098s ago: executing program 6 (id=4797): syz_open_dev$usbmon(&(0x7f0000000300), 0x0, 0x305c80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRES16=r7, @ANYBLOB="050427bd700006dbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x20008011) 21.792148233s ago: executing program 2 (id=4798): timer_gettime(0x0, &(0x7f0000000080)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) getsockname$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket(0x27, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffdbd, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) r5 = epoll_create1(0x0) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00008fc000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000922000/0x2000)=nil, 0x2000, 0x0, 0x81010, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_io_uring_submit(r6, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x20, 0x4004, @fd_index=0xa, 0x3, 0x4, 0x401, 0x5, 0x1, {0x2}}) r11 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB="8a4f367693f9aef9f4700632d8938f3dc44e33d66b1833a960d9bd2d57c9176318c2b123e23b2b62e42af730fdfab7964d661aadb3d3ade5eabe95f84e794710e33527d3c7681d36ef74568c6216ffe2dd4bd0367f686c42810edd4c0f299723fe0ba8950be79a5614c8dd2a8da777bb9f14cfa36e5ce3a6a27795bae0f172301d7b46420680c64b", @ANYRES64=0x0], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000026000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/133, 0x85, 0x1, &(0x7f0000000500)=""/234, 0xea}, &(0x7f0000000640)=0x40) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 21.333118171s ago: executing program 5 (id=4799): r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x608180, 0x0, 0x5}, 0x18) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x1) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4c, 0x11e41e7a, 0x3, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x18c) r4 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x10, 0x2, 0x42}, &(0x7f0000000340), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000dc0)='syz0\x00', 0x1ff) 6.568874751s ago: executing program 4 (id=4800): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x2) pipe(&(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80000001, 0x0, 0x0, 0x8, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000000]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d27, 0x6f0d, 0x1, 0x0, 0x4}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.556841134s ago: executing program 5 (id=4801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) listen(r1, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r2, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESHEX, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, 0x0, 0x0, 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$dsp1(0xffffff9c, 0x0, 0x840, 0x0) madvise(&(0x7f0000177000/0x1000)=nil, 0x1000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 6.523740781s ago: executing program 2 (id=4802): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000001540)=ANY=[@ANYBLOB="1c0008000100000000003d000000d4f3004000000000008490783fffffffac1414aa0000000094c9f0c7983f5acb1c0c2a923b296d0b4f9b22cf4459336f0e1e0bdd698d99dd50c96bf58a92d82ad48d26745d340a6850d495a392b1291a21ec21b5f1c67245b9fe36fa15a3f13a7c6d8607cfa3067cd338a29817b5545a46ca7aeb493f07e435cf58d84d29d1c989879b6abd0443429cff8ac0b46bacc12c8f14bc864c991729419e7525364d7a00fbd54b7761f6525be29588d9f18365231ba40be592c3758e23657a4016de9b81d150cf39e8682bca8a07ae2c61f95d92a8a7d550d48bbcb1c523a232e5de84fb3e7c2f2969ed3da96733e0e998fc9b1afaaba475def81a8eaba32460643410bff7f2040831a0871de46f90f0fdabf561839725f8fcef5a89cab9a3847c224da0191f454f6c7d10bea92d42e94bd321948059fcea01c67c3cc8b49c29fc98cb63cf206b0629a3b0e563f486197dd2ff4135cac8fa7b501c424bbd2eeeb2c074c5eb4425989aa82eba6c74a47fca32805127daa50bd51c6f85d796142c7ddbb16769414767e8471b6eda790dd941d6939f13f82c8009a76f45799756bd1a62ac3a8ae0ed79846a9230e7b17ef2ab97714fe3472cf50f1ff89c525f7fd09434ea1fa5018363d1a134ee95d2f229ed2d85f6f4878a11fff396403fb19d55fb1e85", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be000000907800000e0300050200000000000000000002d58838068b91000000"], 0x4e) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xcb, 0x0, 0x0) readv(r7, &(0x7f0000000500)=[{0x0}, {&(0x7f0000001780)=""/222, 0xde}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/59, 0x3b}], 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 6.523499329s ago: executing program 6 (id=4803): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r2) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x418c00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 6.500983374s ago: executing program 4 (id=4804): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000001c0)={0x2, 0x0, @raw_data}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) 6.500657851s ago: executing program 5 (id=4805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e0000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.499369461s ago: executing program 6 (id=4806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000001980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000000), 0x4) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='keyring\x00', r6) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="01ac0f0002ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='Go\x00', 0x3, r6) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x120183, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4f68}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x24000840) close(0x3) 6.458353173s ago: executing program 4 (id=4807): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be000000907800000e0300050200000000000000000002d58838068b91000000"], 0x4e) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xcb, 0x0, 0x0) readv(r7, &(0x7f0000000500)=[{&(0x7f0000001780)=""/222, 0xde}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/59, 0x3b}], 0x3) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 5.664411824s ago: executing program 5 (id=4808): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e0000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.540695775s ago: executing program 2 (id=4809): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x18}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x600) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r7 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r9 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000000c0)='@\x00', 0x0, r5) 5.467517264s ago: executing program 6 (id=4810): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r2) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x418c00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 3.716542519s ago: executing program 4 (id=4811): r0 = socket$alg(0x26, 0x5, 0x0) timerfd_settime(0xffffffffffffffff, 0x7, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x11, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000500)={0x3, 'veth1_vlan\x00', {0x8}, 0x3}) ptrace$peekuser(0x3, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r3 = syz_io_uring_setup(0xa6e, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bind(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = openat$cachefiles(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000440)={0x12, 0x70, &(0x7f00000003c0)="6777992544f071c2d9c8ccd22ae15f8eeeae8067ff7402b1104640cb73148668bbabf9ffae5bd380372acaf422499d64a51553c737ee4f71a362a6c1640be83a3e3c119aab6d7fe48f5a17971040fdb52fc7811323cbde47b89c97db75aa3611749401866527ab16b1d88c30c2a77e5e"}) read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0xffffffffffffff41) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9201400104b5d864d00"/25], 0x19) 204.978777ms ago: executing program 6 (id=4812): timer_gettime(0x0, &(0x7f0000000080)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) getsockname$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket(0x27, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffdbd, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) r5 = epoll_create1(0x0) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00008fc000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000922000/0x2000)=nil, 0x2000, 0x0, 0x81010, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_io_uring_submit(r6, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x20, 0x4004, @fd_index=0xa, 0x3, 0x4, 0x401, 0x5, 0x1, {0x2}}) r11 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB="8a4f367693f9aef9f4700632d8938f3dc44e33d66b1833a960d9bd2d57c9176318c2b123e23b2b62e42af730fdfab7964d661aadb3d3ade5eabe95f84e794710e33527d3c7681d36ef74568c6216ffe2dd4bd0367f686c42810edd4c0f299723fe0ba8950be79a5614c8dd2a8da777bb9f14cfa36e5ce3a6a27795bae0f172301d7b46420680c64b", @ANYRES64=0x0], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000026000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/133, 0x85, 0x1, &(0x7f0000000500)=""/234, 0xea}, &(0x7f0000000640)=0x40) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00221f000000543f000000dfffffffffffffff0000dd5d660b7637145e9b26108a6e594c01acdbed79311f5db7a37696444db31833372e2fe77cb43938abd8fb6ed4665beae8bde8ad5387a239377f720bc44679f62da5a6dc315042bfb7d829250e5a5fb28258c1f720f4fd993ef7ee6b57d9598a9d08a409d5b70a46815006ef857ee7356d9469520d67e1b1d5ea9ee5264ab794b86ee15af16c4c7307a4032309164193b28f52d0954a6ae14c06edaf97dd0638140b201ffee8cdc6c28d86bceaa36897edc8d20500000000000000afe0b12ceeec4e776fdde2f0f48890d6a64df3af0608784e977928cefd0c25ed81767002562f80b5bd326cfdf7b5540cc011563aa1a2d5358e6c550b63eb7a9b9aa926756ca1d966f16188f66426ce2bcc2876320ccac8c5e4b26a92def8d7f9848499ac5ca60c00725f35ae528887ecaaaeb4126a93523a5507f7010023b0b06f0e6b94a45dc5e6786a85073250e7ab19c7ec4bbc12c6beef4ad7d6a7a7b991494bb334f9fa970156ece2762a8514726239cdfadfa717540a43ec6114dc400102c9456c93e1b7841e8107898cd593649d585e1e6d83bc6ea9e89a241c21f102181add76c3c0652b5cd9c51ebc7420d03e01929ef48d1220f34ace9c0cbf0b81f78a652df2e9d9afff"], 0x0}, 0x0) 235.789µs ago: executing program 5 (id=4813): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000100)={0xf0200e7, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [], 0x2f}) openat(r6, &(0x7f0000000000)='./file0\x00', 0x44804, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 0s ago: executing program 4 (id=4814): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000740)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=4819): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0073][T29161] PINGv6 47KB 154KB [ 2363.625828][T29161] RAWv6 121KB 247KB [ 2363.628212][T29161] UDPv6 31KB 157KB [ 2363.630355][T29161] tw_sock_TCPv6 31KB 63KB [ 2363.693710][T29161] request_sock_TCPv6 31KB 46KB [ 2363.698321][T29161] TCPv6 168KB 303KB [ 2363.705514][T29161] ip_vs_conn 25KB 32KB [ 2363.708507][T29161] nf_conntrack 32KB 55KB [ 2363.753782][T29161] wg_peer 79KB 148KB [ 2363.767427][T29161] allowedips_node 16KB 31KB [ 2363.782812][T29161] ubi_wl_entry_slab 2KB 3KB [ 2363.785315][ T40] audit: type=1326 audit(2364.305:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29168 comm="syz.2.4553" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 2363.804884][T29161] t10_alua_lu_gp_cache 8KB 15KB [ 2363.812670][T29161] scsi_sense_cache 60KB 60KB [ 2363.815802][T29161] virtio_scsi_cmd 21KB 24KB [ 2363.820720][T29161] bio-136 60KB 72KB [ 2363.825707][T29161] io_kiocb 5KB 39KB [ 2363.833723][T29161] bio-264 38KB 55KB [ 2363.841199][T29161] mqueue_inode_cache 43KB 185KB [ 2363.847715][T29161] f2fs_bio_post_read_ctx 30KB 31KB [ 2363.849905][T29161] jfs_mp 14KB 15KB [ 2363.851888][T29161] fuse_request 13KB 63KB [ 2363.853957][T29161] cifs_small_rq 28KB 32KB [ 2363.859250][T29161] cifs_request 67KB 67KB [ 2363.861215][T29161] cifs_mpx_ids 8KB 15KB [ 2363.863219][T29161] cifs_io_subrequest 42KB 47KB [ 2363.872412][T29161] cifs_io_request 105KB 111KB [ 2363.879257][T29161] nfs_commit_data 24KB 31KB [ 2363.882814][T29161] nfs_write_data 38KB 63KB [ 2363.892122][T29161] ecryptfs_sb_cache 22KB 47KB [ 2363.894100][T29161] jbd2_inode 22KB 27KB [ 2363.905183][T29161] ext4_system_zone 1KB 3KB [ 2363.916167][T29161] ext4_io_end_vec 7KB 15KB [ 2363.923107][T29161] kioctx 22KB 159KB [ 2363.926346][T29161] aio_kiocb 17KB 39KB [ 2363.934603][T29161] userfaultfd_ctx_cache 35KB 94KB [ 2363.938345][T29161] fanotify_fid_event 11KB 15KB [ 2363.940388][T29161] fanotify_mark 22KB 23KB [ 2363.948300][T29161] dnotify_mark 22KB 23KB [ 2363.950277][T29161] dnotify_struct 5KB 7KB [ 2363.964816][T29161] fasync_cache 37KB 39KB [ 2363.966861][T29161] zspage 206KB 208KB [ 2363.974360][T29161] zs_handle 257KB 260KB [ 2363.978797][T29161] pid_namespace 26KB 108KB [ 2363.980776][T29161] kvm_gmem_inode_cache 42KB 61KB [ 2363.989733][T29161] kvm_vcpu 73KB 313KB [ 2364.002267][T29161] kvm_mmu_page_header 34KB 50KB [ 2364.007583][T29161] pte_list_desc 37KB 51KB [ 2364.009527][T29161] x86_emulator 80KB 253KB [ 2364.017003][T29161] rpc_buffers 57KB 159KB [ 2364.024605][T29161] rpc_tasks 15KB 62KB [ 2364.028142][T29161] UNIX-STREAM 82KB 255KB [ 2364.033168][T29161] UNIX 250KB 414KB [ 2364.035608][T29161] ip4-frags 9KB 15KB [ 2364.039735][T29161] mfc_cache 13KB 16KB [ 2364.044007][T29161] MPTCP 94KB 245KB [ 2364.047865][T29161] request_sock_subflow_v4 50KB 61KB [ 2364.050093][T29161] tcp_bind2_bucket 19KB 40KB [ 2364.053845][T29161] tcp_bind_bucket 42KB 48KB [ 2364.056023][T29161] inet_peer 13KB 16KB [ 2364.057920][T29161] xfrm_dst 27KB 55KB [ 2364.064901][T29161] xfrm_state 17KB 159KB [ 2364.067494][T29161] ip_fib_trie 24KB 40KB [ 2364.072078][T29161] ip_fib_alias 53KB 86KB [ 2364.075302][T29161] rtable 33KB 104KB [ 2364.077240][T29161] PING 49KB 157KB [ 2364.081092][T29161] RAW 80KB 159KB [ 2364.083094][T29161] UDP 87KB 223KB [ 2364.087845][T29161] tw_sock_TCP 26KB 47KB [ 2364.090088][T29161] request_sock_TCP 27KB 38KB [ 2364.091996][T29161] TCP 370KB 438KB [ 2364.094871][T29161] fs_bio_integrity 7KB 8KB [ 2364.098261][T29161] hugetlbfs_inode_cache 36KB 188KB [ 2364.102083][T29161] fscache_cookie_jar 6KB 15KB [ 2364.104501][T29161] netfs_subrequest 57KB 85KB [ 2364.107090][T29161] netfs_request 152KB 207KB [ 2364.109527][T29161] bio-280 21KB 23KB [ 2364.111441][T29161] ep_head 2KB 12KB [ 2364.113347][T29161] eventpoll_pwq 6KB 31KB [ 2364.115710][T29161] eventpoll_epi 47KB 86KB [ 2364.119839][T29161] inotify_inode_mark 24KB 46KB [ 2364.121767][T29161] sgpool-128 314KB 386KB [ 2364.125105][T29161] sgpool-64 197KB 286KB [ 2364.129582][T29161] sgpool-32 111KB 252KB [ 2364.132765][T29161] sgpool-16 93KB 140KB [ 2364.134677][T29161] sgpool-8 110KB 125KB [ 2364.138344][T29161] bio_crypt_ctx 9KB 11KB [ 2364.140593][T29161] bio_integrity_data 7KB 8KB [ 2364.146070][T29161] request_queue 214KB 242KB [ 2364.148018][T29161] blkdev_ioc 28KB 47KB [ 2364.150144][T29161] bio-200 426KB 468KB [ 2364.152036][T29161] biovec-max 1045KB 1105KB [ 2364.154913][T29161] biovec-128 153KB 255KB [ 2364.156866][T29161] biovec-64 240KB 283KB [ 2364.159953][T29161] biovec-16 128KB 140KB [ 2364.162759][T29161] mm_slot 10KB 27KB [ 2364.165063][T29161] ksm_mm_slot 14KB 16KB [ 2364.167050][T29161] ksm_stable_node 10KB 15KB [ 2364.169068][T29161] ksm_rmap_item 7KB 19KB [ 2364.171008][T29161] user_namespace 10KB 30KB [ 2364.174561][T29161] uid_cache 21KB 39KB [ 2364.178097][T29161] iommu_iova_magazine 1001KB 1039KB [ 2364.182568][T29161] iommu_iova 290KB 292KB [ 2364.185155][T29161] dmaengine-unmap-256 26KB 30KB [ 2364.187117][T29161] dmaengine-unmap-128 14KB 30KB [ 2364.189618][T29161] dmaengine-unmap-16 7KB 8KB [ 2364.196065][T29161] dmaengine-unmap-2 3KB 4KB [ 2364.201681][T29161] QIPCRTR 57KB 125KB [ 2364.203816][T29161] audit_buffer 20KB 42KB [ 2364.208239][T29161] skbuff_ext_cache 19KB 40KB [ 2364.210221][T29161] skbuff_small_head 1199KB 1373KB [ 2364.213326][T29161] skbuff_fclone_cache 199KB 250KB [ 2364.215596][T29161] skbuff_head_cache 1380KB 1429KB [ 2364.217635][T29161] configfs_dir_cache 29KB 32KB [ 2364.220793][T29161] file_lease_cache 24KB 31KB [ 2364.225341][T29161] file_lock_cache 25KB 63KB [ 2364.227329][T29161] file_lock_ctx 36KB 43KB [ 2364.231636][T29161] fsnotify_inode_mark_connector 29KB 47KB [ 2364.234126][T29161] posix_timers_cache 26KB 56KB [ 2364.254972][T29161] taskstats 73KB 159KB [ 2364.258369][T29161] mem_cgroup_per_node 129KB 185KB [ 2364.287361][T29161] mem_cgroup 165KB 216KB [ 2364.312078][T29161] proc_dir_entry 684KB 906KB [ 2364.318437][T29161] pde_opener 6KB 15KB [ 2364.325454][T29161] seq_file 19KB 63KB [ 2364.337477][T29161] sigqueue 12KB 35KB [ 2364.347705][T29161] shmem_inode_cache 7418KB 7599KB [ 2364.363850][T29161] kernfs_iattrs_cache 23KB 27KB [ 2364.387472][T29161] kernfs_node_cache 32192KB 32237KB [ 2364.393752][T29161] mnt_cache 120KB 145KB [ 2364.399450][T29161] bfilp 42KB 63KB [ 2364.407340][T29161] filp 343KB 567KB [ 2364.412367][T29161] names_cache 140KB 228KB [ 2364.423308][T29161] net_namespace 135KB 261KB [ 2364.426836][T29161] ima_iint_cache 30KB 63KB [ 2364.438114][T29161] lsm_inode_cache 2621KB 2673KB [ 2364.445508][T29161] lsm_file_cache 130KB 248KB [ 2364.451764][T29161] key_jar 45KB 86KB [ 2364.464907][T29161] uts_namespace 78KB 108KB [ 2364.467687][T29161] nsproxy 15KB 35KB [ 2364.469700][T29161] vm_area_struct 914KB 1187KB [ 2364.474458][T29161] fs_cache 33KB 64KB [ 2364.481183][T29161] files_cache 152KB 239KB [ 2364.505432][T29161] signal_cache 842KB 1879KB [ 2364.507476][T29161] sighand_cache 1054KB 2284KB [ 2364.515064][T29161] task_struct 4347KB 4828KB [ 2364.517146][T29161] cred 148KB 344KB [ 2364.527431][T29161] anon_vma_chain 366KB 401KB [ 2364.529457][T29161] anon_vma 345KB 431KB [ 2364.541338][T29161] pid 145KB 351KB [ 2364.547719][T29175] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2364.548725][T29161] Acpi-Operand 195KB 328KB [ 2364.562633][T29161] Acpi-ParseExt 11KB 31KB [ 2364.564667][T29161] Acpi-Parse 12KB 23KB [ 2364.578489][T29161] Acpi-State 16KB 27KB [ 2364.583132][T29161] Acpi-Namespace 35KB 52KB [ 2364.589902][T29161] shared_policy_node 11KB 16KB [ 2364.592233][T29161] numa_policy 10KB 20KB [ 2364.594262][T29161] perf_event 52KB 93KB [ 2364.609650][T29161] trace_event_file 540KB 540KB [ 2364.611776][T29161] ftrace_event_field 1031KB 1031KB [ 2364.635004][T29161] pool_workqueue 2244KB 2256KB [ 2364.637048][T29161] task_group 73KB 94KB [ 2364.644968][T29161] maple_node 671KB 1448KB [ 2364.653320][T29161] mm_struct 336KB 520KB [ 2364.659931][T29161] vmap_area 567KB 653KB [ 2364.675099][T29161] debug_objects_cache 3429KB 7728KB [ 2364.677145][T29161] page->ptl 130KB 153KB [ 2364.679090][T29161] kmalloc-cg-8k 2048KB 2208KB [ 2364.681110][T29161] kmalloc-cg-4k 17536KB 18208KB [ 2364.683130][T29161] kmalloc-cg-2k 12548KB 12928KB [ 2364.685760][T29161] kmalloc-cg-1k 3176KB 3712KB [ 2364.687636][T29161] kmalloc-cg-512 1510KB 1536KB [ 2364.695676][T29161] kmalloc-cg-256 598KB 656KB [ 2364.700354][T29161] kmalloc-cg-128 288KB 324KB [ 2364.706456][T29161] kmalloc-cg-64 87KB 104KB [ 2364.708619][T29161] kmalloc-cg-32 53KB 168KB [ 2364.716720][T29161] kmalloc-cg-16 5KB 32KB [ 2364.724845][T29161] kmalloc-cg-8 26KB 48KB [ 2364.727130][T29161] kmalloc-cg-192 81KB 112KB [ 2364.739975][T29161] kmalloc-cg-96 57KB 76KB [ 2364.744387][T29161] kmalloc-8k 7248KB 7360KB [ 2364.749006][T29161] kmalloc-4k 28272KB 29648KB [ 2364.753108][T29177] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2364.758060][T29161] kmalloc-2k 13852KB 14400KB [ 2364.765034][T29161] kmalloc-1k 6962KB 8640KB [ 2364.774943][T29161] kmalloc-512 11272KB 11696KB [ 2364.777000][T29161] kmalloc-256 4774KB 5208KB [ 2364.782890][T29161] kmalloc-128 3716KB 4748KB [ 2364.785771][T29177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4554'. [ 2364.799425][T29161] kmalloc-64 3095KB 3232KB [ 2364.804444][T29161] kmalloc-32 1949KB 2348KB [ 2364.825197][T29161] kmalloc-16 516KB 604KB [ 2364.827407][T29161] kmalloc-8 496KB 588KB [ 2364.829347][T29161] kmalloc-192 2921KB 3124KB [ 2364.831627][T29161] kmalloc-96 3094KB 4344KB [ 2364.834254][T29161] kmem_cache_node 213KB 220KB [ 2364.846268][T29161] kmem_cache 175KB 218KB [ 2364.848368][T29161] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz5,task=syz.5.4559,pid=29161,uid=0 [ 2364.854431][T29161] Out of memory (oom_kill_allocating_task): Killed process 29161 (syz.5.4559) total-vm:104052kB, anon-rss:24kB, file-rss:21508kB, shmem-rss:2356kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 2365.456395][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 2365.706831][T29186] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2365.757785][T29186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4556'. [ 2365.855841][T29193] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2365.872647][T29193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4558'. [ 2366.386252][T29202] netlink: 'syz.6.4560': attribute type 7 has an invalid length. [ 2366.391753][T29202] netlink: 'syz.6.4560': attribute type 8 has an invalid length. [ 2367.105401][T29211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2367.118515][T29211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4562'. [ 2368.954086][T29227] netlink: 'syz.2.4566': attribute type 7 has an invalid length. [ 2368.978448][T29227] netlink: 'syz.2.4566': attribute type 8 has an invalid length. [ 2369.209001][T29224] lo speed is unknown, defaulting to 1000 [ 2369.710924][T29236] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2369.728758][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4568'. [ 2369.861225][T29235] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2369.883314][T29235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4567'. [ 2369.928449][T29228] syz.4.4563 (29228): drop_caches: 2 [ 2370.817858][T29253] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2370.839911][T29256] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2370.842315][T29253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'. [ 2371.566105][T29264] overlayfs: missing 'lowerdir' [ 2371.692155][T29256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4569'. [ 2371.957170][T29267] netlink: 'syz.6.4573': attribute type 7 has an invalid length. [ 2371.966114][T29267] netlink: 'syz.6.4573': attribute type 8 has an invalid length. [ 2373.531934][T29282] overlayfs: missing 'lowerdir' [ 2373.551349][T29280] netlink: 'syz.5.4576': attribute type 7 has an invalid length. [ 2373.559929][T29280] netlink: 'syz.5.4576': attribute type 8 has an invalid length. [ 2373.931209][T29286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4577'. [ 2374.637344][T29291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4575'. [ 2376.059976][T29300] lo speed is unknown, defaulting to 1000 [ 2376.111910][T29308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2376.119002][T29308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4580'. [ 2376.388430][T29316] netlink: 'syz.6.4583': attribute type 7 has an invalid length. [ 2376.409672][T29316] netlink: 'syz.6.4583': attribute type 8 has an invalid length. [ 2377.033826][T29327] netlink: 'syz.6.4586': attribute type 7 has an invalid length. [ 2377.041183][T29327] netlink: 'syz.6.4586': attribute type 8 has an invalid length. [ 2377.371050][T29333] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2377.394416][T29333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4584'. [ 2377.654886][T29330] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2377.669967][T29330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4585'. [ 2378.010220][T29344] overlayfs: missing 'lowerdir' [ 2379.618655][T29357] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4589'. [ 2379.952526][ T40] audit: type=1326 audit(2380.465:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2379.962218][ T40] audit: type=1326 audit(2380.465:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2379.971806][ T40] audit: type=1326 audit(2380.475:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2379.983534][ T40] audit: type=1326 audit(2380.475:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2379.992907][ T40] audit: type=1326 audit(2380.475:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2380.001837][ T40] audit: type=1326 audit(2380.475:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2380.009771][ T40] audit: type=1326 audit(2380.475:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2380.017363][ T40] audit: type=1326 audit(2380.485:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2380.023850][ T40] audit: type=1326 audit(2380.485:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2380.031125][ T40] audit: type=1326 audit(2380.485:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29358 comm="syz.2.4590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2381.118614][T29375] lo speed is unknown, defaulting to 1000 [ 2381.152336][T29373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2381.166632][T29373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4593'. [ 2381.274015][T29378] netlink: 'syz.4.4594': attribute type 7 has an invalid length. [ 2381.276789][T29378] netlink: 'syz.4.4594': attribute type 8 has an invalid length. [ 2381.950966][T29385] netlink: 'syz.5.4596': attribute type 7 has an invalid length. [ 2381.960020][T29385] netlink: 'syz.5.4596': attribute type 8 has an invalid length. [ 2382.223369][T29389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2382.253543][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4595'. [ 2382.916318][T29398] netlink: 'syz.6.4598': attribute type 7 has an invalid length. [ 2382.933323][T29398] netlink: 'syz.6.4598': attribute type 8 has an invalid length. [ 2383.359725][T29401] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2383.376648][T29401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4597'. [ 2383.475910][T29410] overlayfs: missing 'lowerdir' [ 2383.482499][T29409] netlink: 'syz.6.4600': attribute type 7 has an invalid length. [ 2383.496849][T29409] netlink: 'syz.6.4600': attribute type 8 has an invalid length. [ 2385.933702][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4601'. [ 2388.794485][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 2388.794505][ T40] audit: type=1326 audit(2389.305:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.828871][ T40] audit: type=1326 audit(2389.335:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.870537][ T40] audit: type=1326 audit(2389.385:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.885610][ T40] audit: type=1326 audit(2389.405:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.900240][ T40] audit: type=1326 audit(2389.405:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.913858][ T40] audit: type=1326 audit(2389.405:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.921631][ T40] audit: type=1326 audit(2389.405:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.928825][ T40] audit: type=1326 audit(2389.405:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.935672][ T40] audit: type=1326 audit(2389.405:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2388.942958][ T40] audit: type=1326 audit(2389.445:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.5.4603" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2389.173969][T29442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2390.717954][ T5349] syslogd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2390.737608][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT(full) [ 2390.737640][ T5349] Tainted: [L]=SOFTLOCKUP [ 2390.737651][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2390.737662][ T5349] Call Trace: [ 2390.737731][ T5349] [ 2390.737741][ T5349] dump_stack_lvl+0x100/0x190 [ 2390.739042][ T5349] dump_header+0xfb/0x606 [ 2390.739278][ T5349] oom_kill_process.cold+0xd/0x330 [ 2390.739301][ T5349] out_of_memory+0x1256/0x14f0 [ 2390.739749][ T5349] ? __pfx_out_of_memory+0x10/0x10 [ 2390.739786][ T5349] __alloc_frozen_pages_noprof+0x232d/0x2bc0 [ 2390.740040][ T5349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2390.740083][ T5349] ? __lock_acquire+0x4a5/0x2630 [ 2390.740335][ T5349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2390.740476][ T5349] ? policy_nodemask+0xed/0x4f0 [ 2390.740579][ T5349] alloc_pages_mpol+0x1fb/0x540 [ 2390.740602][ T5349] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2390.740624][ T5349] ? swap_entry_swapped+0x20c/0x2a0 [ 2390.740653][ T5349] ? __pfx_swap_entry_swapped+0x10/0x10 [ 2390.740680][ T5349] folio_alloc_mpol_noprof+0x36/0x260 [ 2390.740709][ T5349] swap_cache_alloc_folio+0x1a8/0x300 [ 2390.740742][ T5349] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 2390.740770][ T5349] ? stack_depot_save_flags+0x27/0x9d0 [ 2390.741844][ T5349] ? __lock_acquire+0x4a5/0x2630 [ 2390.741882][ T5349] swap_cluster_readahead+0x53b/0x770 [ 2390.741912][ T5349] ? kmem_cache_free+0x127/0x6c0 [ 2390.741942][ T5349] ? sock_recvmsg+0x1a4/0x1f0 [ 2390.742667][ T5349] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2390.742715][ T5349] ? get_vma_policy+0x23d/0x3b0 [ 2390.742740][ T5349] swapin_readahead+0x160/0x12c0 [ 2390.742777][ T5349] ? __pfx_swapin_readahead+0x10/0x10 [ 2390.742804][ T5349] ? find_held_lock+0x2b/0x80 [ 2390.742826][ T5349] ? swap_table_get+0x103/0x2c0 [ 2390.742859][ T5349] ? swap_table_get+0x10d/0x2c0 [ 2390.742885][ T5349] ? swap_cache_get_folio+0x286/0x350 [ 2390.742913][ T5349] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 2390.742940][ T5349] ? __pfx_get_swap_device+0x10/0x10 [ 2390.742969][ T5349] ? do_swap_page+0x931/0x6180 [ 2390.743112][ T5349] do_swap_page+0x931/0x6180 [ 2390.743149][ T5349] ? __pfx_do_swap_page+0x10/0x10 [ 2390.743179][ T5349] ? sock_recvmsg+0x10c/0x1f0 [ 2390.743205][ T5349] ? rcu_is_watching+0x12/0xc0 [ 2390.743295][ T5349] ? __pte_offset_map+0x179/0x310 [ 2390.743321][ T5349] __handle_mm_fault+0x192f/0x2a00 [ 2390.743355][ T5349] ? reacquire_held_locks+0xce/0x1e0 [ 2390.743384][ T5349] ? __pfx___handle_mm_fault+0x10/0x10 [ 2390.743415][ T5349] ? lock_vma_under_rcu+0x17c/0x590 [ 2390.743459][ T5349] handle_mm_fault+0x36d/0xa20 [ 2390.743493][ T5349] do_user_addr_fault+0x5a3/0x12f0 [ 2390.743664][ T5349] exc_page_fault+0x6f/0xd0 [ 2390.744593][ T5349] asm_exc_page_fault+0x26/0x30 [ 2390.744614][ T5349] RIP: 0033:0x7f90a194adfc [ 2390.744639][ T5349] Code: 8d 0d c8 6c 13 00 4c 8b 04 c1 48 8d 0d 7d 6c 13 00 0f b6 04 01 88 44 24 16 49 39 de 0f 84 2e 02 00 00 84 d2 0f 84 26 02 00 00 <4c> 8b 15 15 10 18 00 4c 8b 1d fe 0f 18 00 48 89 d9 31 f6 45 31 c9 [ 2390.744658][ T5349] RSP: 002b:00007ffe8ce8e120 EFLAGS: 00010206 [ 2390.744727][ T5349] RAX: 0000000000000005 RBX: 0000558c933c6951 RCX: 00007f90a1a81a60 [ 2390.744740][ T5349] RDX: 0000000000000036 RSI: 00007ffe8ce8e1b0 RDI: 000000000000000a [ 2390.744752][ T5349] RBP: 0000000000000000 R08: 1999999999999999 R09: 00007f90a1ace3c0 [ 2390.744764][ T5349] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558c933c6951 [ 2390.744777][ T5349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000558c5fcdcd98 [ 2390.744805][ T5349] [ 2390.972841][ T5349] Mem-Info: [ 2390.974444][ T5349] active_anon:1028 inactive_anon:4219 isolated_anon:0 [ 2390.974444][ T5349] active_file:1073 inactive_file:3673 isolated_file:0 [ 2390.974444][ T5349] unevictable:1768 dirty:2 writeback:11 [ 2390.974444][ T5349] slab_reclaimable:10702 slab_unreclaimable:89023 [ 2390.974444][ T5349] mapped:28322 shmem:4607 pagetables:1762 [ 2390.974444][ T5349] sec_pagetables:379 bounce:0 [ 2390.974444][ T5349] kernel_misc_reclaimable:0 [ 2390.974444][ T5349] free:8152 free_pcp:78 free_cma:0 [ 2391.010195][ T5349] Node 0 active_anon:228kB inactive_anon:3432kB active_file:1704kB inactive_file:8356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4224kB dirty:4kB writeback:8kB shmem:5436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7072kB pagetables:1332kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2391.056927][ T5349] Node 1 active_anon:1292kB inactive_anon:15556kB active_file:2184kB inactive_file:4276kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:108964kB dirty:4kB writeback:36kB shmem:12392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6952kB pagetables:5716kB sec_pagetables:372kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2391.093549][ T5349] Node 0 DMA free:1492kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:536kB active_file:136kB inactive_file:128kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.123403][ T5349] lowmem_reserve[]: 0 283 283 283 283 [ 2391.129459][ T5349] Node 0 DMA32 free:7420kB boost:29352kB min:42400kB low:45660kB high:48920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1004kB inactive_anon:1664kB active_file:2040kB inactive_file:5332kB unevictable:3536kB writepending:12kB zspages:412kB present:1032196kB managed:290692kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:0kB free_cma:0kB [ 2391.170355][ T5349] lowmem_reserve[]: 0 0 0 0 0 [ 2391.172723][ T5349] Node 1 DMA32 free:24132kB boost:6144kB min:53288kB low:65072kB high:76856kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3632kB inactive_anon:12240kB active_file:3404kB inactive_file:3132kB unevictable:3536kB writepending:40kB zspages:7092kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.196688][ T5349] lowmem_reserve[]: 0 0 0 0 0 [ 2391.199072][ T5349] Node 0 DMA: 4*4kB (M) 12*8kB (M) 7*16kB (UM) 7*32kB (UM) 3*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1408kB [ 2391.211266][ T5349] Node 0 DMA32: 80*4kB (UM) 77*8kB (UME) 53*16kB (UME) 31*32kB (UME) 32*64kB (UME) 9*128kB (UME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6744kB [ 2391.232909][ T5349] Node 1 DMA32: 807*4kB (ME) 609*8kB (UME) 379*16kB (UME) 175*32kB (UM) 69*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24180kB [ 2391.240245][ T5349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2391.243266][ T5349] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2391.251396][ T5349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2391.254804][ T5349] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2391.258382][ T5349] 8115 total pagecache pages [ 2391.260579][ T5349] 1183 pages in swap cache [ 2391.262476][ T5349] Free swap = 77068kB [ 2391.264229][ T5349] Total swap = 124996kB [ 2391.269965][ T5349] 524155 pages RAM [ 2391.271945][ T5349] 0 pages HighMem/MovableOnly [ 2391.274334][ T5349] 210589 pages reserved [ 2391.279408][ T5349] 0 pages cma reserved [ 2391.281153][ T5349] Unreclaimable slab info: [ 2391.283069][ T5349] Name Used Total [ 2391.292130][ T5349] bio-184 19KB 24KB [ 2391.294980][ T5349] pid_3 38KB 63KB [ 2391.302031][ T5349] pid_2 50KB 94KB [ 2391.313313][ T5349] bio-464 17KB 31KB [ 2391.316049][ T5349] bio-528 19KB 31KB [ 2391.318335][ T5349] bio-544 19KB 31KB [ 2391.321235][ T5349] bio-552 19KB 31KB [ 2391.324433][ T5349] afs_inode_cache 25KB 30KB [ 2391.346317][ T5349] zswap_entry 636KB 743KB [ 2391.354808][ T5349] AF_VSOCK 50KB 153KB [ 2391.356885][ T5349] sw_flow_stats 30KB 44KB [ 2391.363907][ T5349] sw_flow 70KB 122KB [ 2391.368816][ T5349] batadv_tt_change_cache 9KB 16KB [ 2391.373645][ T5349] batadv_tl_cache 26KB 32KB [ 2391.380179][ T5349] ceph_osd_request 30KB 159KB [ 2391.385274][ T5349] ceph_msg 12KB 38KB [ 2391.389314][ T5349] IEEE-802.15.4-MAC 34KB 62KB [ 2391.393759][ T5349] IEEE-802.15.4-RAW 46KB 126KB [ 2391.404388][ T5349] p9_req_t 19KB 39KB [ 2391.406991][ T5349] INET6_SMC 35KB 58KB [ 2391.409792][ T5349] INET_SMC 90KB 187KB [ 2391.412415][ T5349] SMC6 103KB 187KB [ 2391.421460][ T5349] SMC 37KB 250KB [ 2391.427359][ T5349] TIPC 34KB 154KB [ 2391.431800][ T5349] rds_tcp_connection 57KB 94KB [ 2391.434553][ T5349] RDS 70KB 216KB [ 2391.437007][ T5349] rds_connection 32KB 62KB [ 2391.439554][ T5349] SCTPv6 92KB 210KB [ 2391.441990][ T5349] SCTP 41KB 183KB [ 2391.444331][ T5349] sctp_chunk 8KB 70KB [ 2391.451555][ T5349] sctp_bind_bucket 11KB 20KB [ 2391.462097][ T5349] PNPIPE 58KB 154KB [ 2391.464892][ T5349] PHONET 16KB 31KB [ 2391.470012][ T5349] L2TP/IPv6 52KB 159KB [ 2391.478487][ T5349] L2TP/IP 49KB 94KB [ 2391.480644][ T5349] KCM 62KB 124KB [ 2391.482657][ T5349] kcm_mux 66KB 126KB [ 2391.490911][ T5349] RXRPC 38KB 192KB [ 2391.495208][ T5349] rxrpc_call_jar 116KB 223KB [ 2391.499406][ T5349] can_gw 7KB 8KB [ 2391.502043][ T5349] can_receiver 24KB 35KB [ 2391.504184][ T5349] net_bridge_fdb_entry 24KB 35KB [ 2391.514964][ T5349] nf-frags 34KB 63KB [ 2391.519801][ T5349] MPTCPv6 60KB 223KB [ 2391.528349][ T5349] request_sock_subflow_v6 12KB 15KB [ 2391.533565][ T5349] ip6-frags 18KB 31KB [ 2391.543402][ T5349] fib6_node 44KB 80KB [ 2391.546217][ T5349] ip6_dst_cache 47KB 148KB [ 2391.550021][ T5349] mfc6_cache 20KB 24KB [ 2391.556857][ T5349] PINGv6 57KB 185KB [ 2391.561916][ T5349] RAWv6 144KB 247KB [ 2391.566371][ T5349] UDPv6 24KB 157KB [ 2391.570769][ T5349] tw_sock_TCPv6 31KB 63KB [ 2391.575140][ T5349] request_sock_TCPv6 31KB 46KB [ 2391.579473][ T5349] TCPv6 135KB 273KB [ 2391.581484][ T5349] ip_vs_conn 25KB 32KB [ 2391.586197][ T5349] nf_conntrack 32KB 55KB [ 2391.589021][ T5349] wg_peer 79KB 148KB [ 2391.591346][ T5349] allowedips_node 16KB 31KB [ 2391.593807][ T5349] ubi_wl_entry_slab 2KB 3KB [ 2391.596225][ T5349] t10_alua_lu_gp_cache 8KB 15KB [ 2391.598235][ T5349] scsi_sense_cache 60KB 60KB [ 2391.600248][ T5349] virtio_scsi_cmd 21KB 24KB [ 2391.602179][ T5349] bio-136 52KB 68KB [ 2391.604176][ T5349] io_kiocb 5KB 39KB [ 2391.607600][ T5349] bio-264 37KB 55KB [ 2391.609772][ T5349] mqueue_inode_cache 42KB 185KB [ 2391.612047][ T5349] f2fs_bio_post_read_ctx 30KB 31KB [ 2391.614565][ T5349] jfs_mp 14KB 15KB [ 2391.616841][ T5349] fuse_request 11KB 63KB [ 2391.619245][ T5349] cifs_small_rq 28KB 32KB [ 2391.621407][ T5349] cifs_request 67KB 67KB [ 2391.623529][ T5349] cifs_mpx_ids 8KB 15KB [ 2391.626287][ T5349] cifs_io_subrequest 42KB 47KB [ 2391.630907][ T5349] cifs_io_request 105KB 111KB [ 2391.633189][ T5349] nfs_commit_data 24KB 31KB [ 2391.635334][ T5349] nfs_write_data 38KB 63KB [ 2391.637398][ T5349] ecryptfs_sb_cache 22KB 47KB [ 2391.639528][ T5349] jbd2_inode 22KB 27KB [ 2391.641499][ T5349] ext4_system_zone 1KB 3KB [ 2391.643415][ T5349] ext4_io_end_vec 7KB 15KB [ 2391.656988][ T5349] kioctx 22KB 159KB [ 2391.659067][ T5349] aio_kiocb 17KB 39KB [ 2391.663430][ T5349] userfaultfd_ctx_cache 32KB 94KB [ 2391.667773][ T5349] fanotify_fid_event 11KB 15KB [ 2391.674853][ T5349] fanotify_mark 22KB 23KB [ 2391.679279][ T5349] dnotify_mark 22KB 23KB [ 2391.681196][ T5349] dnotify_struct 5KB 7KB [ 2391.697031][ T5349] fasync_cache 37KB 39KB [ 2391.699616][ T5349] zspage 189KB 204KB [ 2391.702326][ T5349] zs_handle 226KB 268KB [ 2391.704513][ T5349] pid_namespace 45KB 123KB [ 2391.708736][ T5349] kvm_gmem_inode_cache 42KB 61KB [ 2391.713141][ T5349] kvm_vcpu 41KB 250KB [ 2391.717939][ T5349] kvm_mmu_page_header 29KB 38KB [ 2391.723418][ T5349] pte_list_desc 34KB 51KB [ 2391.725423][ T5349] x86_emulator 83KB 253KB [ 2391.736104][ T5349] rpc_buffers 57KB 159KB [ 2391.740601][ T5349] rpc_tasks 15KB 62KB [ 2391.747890][ T5349] UNIX-STREAM 104KB 255KB [ 2391.749963][ T5349] UNIX 276KB 414KB [ 2391.759433][ T5349] ip4-frags 9KB 15KB [ 2391.764163][ T5349] mfc_cache 13KB 16KB [ 2391.774792][ T5349] MPTCP 91KB 245KB [ 2391.777345][ T5349] request_sock_subflow_v4 50KB 61KB [ 2391.779855][ T5349] tcp_bind2_bucket 24KB 36KB [ 2391.781926][ T5349] tcp_bind_bucket 29KB 40KB [ 2391.783872][ T5349] inet_peer 13KB 16KB [ 2391.794762][ T5349] xfrm_dst 27KB 55KB [ 2391.797013][ T5349] xfrm_state 17KB 159KB [ 2391.799111][ T5349] ip_fib_trie 24KB 40KB [ 2391.801272][ T5349] ip_fib_alias 53KB 86KB [ 2391.803275][ T5349] rtable 28KB 104KB [ 2391.814837][ T5349] PING 49KB 157KB [ 2391.819101][ T5349] RAW 78KB 159KB [ 2391.823850][ T5349] UDP 80KB 223KB [ 2391.831793][ T5349] tw_sock_TCP 26KB 47KB [ 2391.845171][ T5349] request_sock_TCP 27KB 38KB [ 2391.847421][ T5349] TCP 445KB 497KB [ 2391.849619][ T5349] fs_bio_integrity 7KB 8KB [ 2391.852298][ T5349] hugetlbfs_inode_cache 36KB 188KB [ 2391.854375][ T5349] fscache_cookie_jar 6KB 15KB [ 2391.874885][ T5349] netfs_subrequest 57KB 85KB [ 2391.884609][ T5349] netfs_request 152KB 207KB [ 2391.890181][ T5349] bio-280 21KB 23KB [ 2391.900096][ T5349] ep_head 2KB 12KB [ 2391.905128][ T5349] eventpoll_pwq 6KB 31KB [ 2391.912473][T29447] netlink: 'syz.6.4607': attribute type 7 has an invalid length. [ 2391.917270][ T5349] eventpoll_epi 47KB 86KB [ 2391.922872][T29447] netlink: 'syz.6.4607': attribute type 8 has an invalid length. [ 2391.929691][ T5349] inotify_inode_mark 33KB 46KB [ 2391.943189][ T5349] sgpool-128 174KB 327KB [ 2391.956475][ T5349] sgpool-64 172KB 318KB [ 2391.969518][ T5349] sgpool-32 84KB 220KB [ 2391.984574][ T5349] sgpool-16 75KB 156KB [ 2391.996543][ T5349] sgpool-8 99KB 132KB [ 2392.008316][ T5349] bio_crypt_ctx 9KB 11KB [ 2392.014542][ T5349] bio_integrity_data 7KB 8KB [ 2392.020449][ T5349] request_queue 214KB 242KB [ 2392.026603][ T5349] blkdev_ioc 27KB 47KB [ 2392.033219][ T5349] bio-200 458KB 492KB [ 2392.038228][ T5349] biovec-max 1156KB 1198KB [ 2392.044811][ T5349] biovec-128 108KB 255KB [ 2392.051538][ T5349] biovec-64 258KB 283KB [ 2392.059266][ T5349] biovec-16 104KB 109KB [ 2392.066649][ T5349] mm_slot 10KB 27KB [ 2392.074062][ T5349] ksm_mm_slot 14KB 16KB [ 2392.082329][ T5349] ksm_stable_node 10KB 15KB [ 2392.094914][ T5349] ksm_rmap_item 7KB 19KB [ 2392.104683][ T5349] user_namespace 10KB 30KB [ 2392.106738][ T5349] uid_cache 21KB 39KB [ 2392.114886][ T5349] iommu_iova_magazine 1008KB 1039KB [ 2392.118016][ T5349] iommu_iova 287KB 292KB [ 2392.124913][ T5349] dmaengine-unmap-256 26KB 30KB [ 2392.131610][ T5349] dmaengine-unmap-128 14KB 30KB [ 2392.134815][ T5349] dmaengine-unmap-16 7KB 8KB [ 2392.137136][ T5349] dmaengine-unmap-2 3KB 4KB [ 2392.139244][ T5349] QIPCRTR 57KB 125KB [ 2392.143270][ T5349] audit_buffer 35KB 50KB [ 2392.151239][ T5349] skbuff_ext_cache 19KB 40KB [ 2392.162333][ T5349] skbuff_small_head 937KB 1049KB [ 2392.164675][ T5349] skbuff_fclone_cache 131KB 218KB [ 2392.168103][ T5349] skbuff_head_cache 1236KB 1304KB [ 2392.170530][ T5349] configfs_dir_cache 29KB 32KB [ 2392.178339][ T5349] file_lease_cache 24KB 31KB [ 2392.184944][ T5349] file_lock_cache 17KB 63KB [ 2392.187005][ T5349] file_lock_ctx 36KB 43KB [ 2392.189099][ T5349] fsnotify_inode_mark_connector 27KB 47KB [ 2392.191670][ T5349] posix_timers_cache 26KB 56KB [ 2392.193958][ T5349] taskstats 138KB 243KB [ 2392.196408][ T5349] mem_cgroup_per_node 129KB 185KB [ 2392.199011][ T5349] mem_cgroup 165KB 216KB [ 2392.202036][ T5349] proc_dir_entry 712KB 906KB [ 2392.204397][ T5349] pde_opener 6KB 15KB [ 2392.207599][ T5349] seq_file 24KB 70KB [ 2392.210090][ T5349] sigqueue 17KB 39KB [ 2392.212412][ T5349] shmem_inode_cache 7439KB 7599KB [ 2392.216147][ T5349] kernfs_iattrs_cache 23KB 27KB [ 2392.220303][ T5349] kernfs_node_cache 32466KB 32524KB [ 2392.222961][ T5349] mnt_cache 129KB 153KB [ 2392.229711][ T5349] bfilp 42KB 63KB [ 2392.232811][ T5349] filp 384KB 567KB [ 2392.235506][ T5349] names_cache 204KB 232KB [ 2392.239035][ T5349] net_namespace 106KB 261KB [ 2392.241278][ T5349] ima_iint_cache 29KB 63KB [ 2392.243635][ T5349] lsm_inode_cache 2698KB 2720KB [ 2392.246295][ T5349] lsm_file_cache 146KB 248KB [ 2392.248505][ T5349] key_jar 34KB 86KB [ 2392.250691][ T5349] uts_namespace 78KB 108KB [ 2392.253619][ T5349] nsproxy 14KB 35KB [ 2392.262798][ T5349] vm_area_struct 990KB 1187KB [ 2392.266071][ T5349] fs_cache 38KB 64KB [ 2392.277309][ T5349] files_cache 146KB 239KB [ 2392.281934][ T5349] signal_cache 855KB 1879KB [ 2392.283920][ T5349] sighand_cache 1098KB 2284KB [ 2392.289496][ T5349] task_struct 4606KB 4856KB [ 2392.294434][ T5349] cred 153KB 344KB [ 2392.304445][ T5349] anon_vma_chain 383KB 401KB [ 2392.308371][ T5349] anon_vma 359KB 431KB [ 2392.310452][ T5349] pid 156KB 351KB [ 2392.316091][ T5349] Acpi-Operand 195KB 328KB [ 2392.318343][ T5349] Acpi-ParseExt 11KB 31KB [ 2392.320345][ T5349] Acpi-Parse 12KB 23KB [ 2392.322435][ T5349] Acpi-State 16KB 27KB [ 2392.324178][ T5349] Acpi-Namespace 35KB 52KB [ 2392.326457][ T5349] shared_policy_node 11KB 16KB [ 2392.328897][ T5349] numa_policy 9KB 20KB [ 2392.331001][ T5349] perf_event 52KB 93KB [ 2392.333047][ T5349] trace_event_file 540KB 540KB [ 2392.335080][ T5349] ftrace_event_field 1031KB 1031KB [ 2392.337028][ T5349] pool_workqueue 2254KB 2272KB [ 2392.338969][ T5349] task_group 73KB 94KB [ 2392.340940][ T5349] maple_node 728KB 1448KB [ 2392.342883][ T5349] mm_struct 382KB 551KB [ 2392.344961][ T5349] vmap_area 453KB 645KB [ 2392.347591][ T5349] debug_objects_cache 3519KB 7888KB [ 2392.350207][ T5349] page->ptl 140KB 153KB [ 2392.350913][T29453] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2392.352289][ T5349] kmalloc-cg-8k 2048KB 2208KB [ 2392.357189][ T5349] kmalloc-cg-4k 17864KB 18240KB [ 2392.360900][ T5349] kmalloc-cg-2k 12764KB 13024KB [ 2392.364977][ T5349] kmalloc-cg-1k 3220KB 3776KB [ 2392.368018][ T5349] kmalloc-cg-512 1595KB 1600KB [ 2392.370169][ T5349] kmalloc-cg-256 629KB 656KB [ 2392.372583][ T5349] kmalloc-cg-128 289KB 324KB [ 2392.377178][ T5349] kmalloc-cg-64 90KB 104KB [ 2392.381401][ T5349] kmalloc-cg-32 61KB 168KB [ 2392.383800][ T5349] kmalloc-cg-16 5KB 32KB [ 2392.386689][ T5349] kmalloc-cg-8 27KB 48KB [ 2392.390023][ T5349] kmalloc-cg-192 88KB 108KB [ 2392.394241][ T5349] kmalloc-cg-96 76KB 80KB [ 2392.397435][ T5349] kmalloc-8k 6608KB 6752KB [ 2392.401449][ T5349] kmalloc-4k 29280KB 29984KB [ 2392.404438][ T5349] kmalloc-2k 13708KB 14464KB [ 2392.408049][ T5349] kmalloc-1k 7104KB 8640KB [ 2392.414037][ T5349] kmalloc-512 11391KB 11712KB [ 2392.415798][T29449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 2392.417095][ T5349] kmalloc-256 4762KB 5216KB [ 2392.424339][ T5349] kmalloc-128 3713KB 4752KB [ 2392.444245][ T5349] kmalloc-64 3153KB 3236KB [ 2392.449468][ T5349] kmalloc-32 1999KB 2348KB [ 2392.462119][ T5349] kmalloc-16 528KB 648KB [ 2392.468859][ T5349] kmalloc-8 505KB 588KB [ 2392.472922][ T5349] kmalloc-192 2914KB 3120KB [ 2392.477005][ T5349] kmalloc-96 3120KB 4344KB [ 2392.480620][ T5349] kmem_cache_node 213KB 220KB [ 2392.484445][ T5349] kmem_cache 175KB 218KB [ 2392.494902][ T5349] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syslogd,pid=5349,uid=0 [ 2392.504615][ T5349] Out of memory (oom_kill_allocating_task): Killed process 5349 (syslogd) total-vm:4044kB, anon-rss:0kB, file-rss:20kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:0 [ 2392.599065][T29459] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2392.621772][T29459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4610'. [ 2392.767436][T29462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2393.050479][T29456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4608'. [ 2394.153195][T29471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2394.181473][T29471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 2394.967052][T29477] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2394.977728][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4612'. [ 2395.927603][T29494] input: syz0 as /devices/virtual/input/input78 [ 2398.515051][ T54] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2398.523617][T17694] Bluetooth: hci3: command 0x0406 tx timeout [ 2398.527386][ T54] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2400.701054][T29501] netlink: 'syz.6.4617': attribute type 7 has an invalid length. [ 2400.716950][T29501] netlink: 'syz.6.4617': attribute type 8 has an invalid length. [ 2400.745156][T17694] Bluetooth: hci4: command 0x0406 tx timeout [ 2400.747487][ T54] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2400.749766][ T54] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2400.850881][T29505] netlink: 'syz.4.4618': attribute type 7 has an invalid length. [ 2400.860056][T29505] netlink: 'syz.4.4618': attribute type 8 has an invalid length. [ 2401.696703][T29517] syz.2.4620 (29517): drop_caches: 2 [ 2401.707246][T29511] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2401.735876][T29511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4619'. [ 2402.824932][T17694] Bluetooth: hci5: command 0x0406 tx timeout [ 2402.827359][ T54] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2402.829495][ T54] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 2403.004626][T29505] ieee80211 phy205: Failed to add default virtual iface [ 2403.740952][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 2403.740965][ T40] audit: type=1800 audit(2404.255:3150): pid=29521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4621" name="file1" dev="overlay" ino=3463 res=0 errno=0 [ 2404.555793][T29541] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2404.560047][T29541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4623'. [ 2404.586878][T29539] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2404.613544][T29531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4622'. [ 2404.824414][T29538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4624'. [ 2404.971599][T29548] random: crng reseeded on system resumption [ 2405.928051][T29552] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2405.940812][T29552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4626'. [ 2406.279918][T29558] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2406.290487][T29558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4628'. [ 2406.761954][ C3] blk_print_req_error: 33 callbacks suppressed [ 2406.761970][ C3] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 2406.775911][T29565] loop7: detected capacity change from 16384 to 0 [ 2406.920260][T29570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4629'. [ 2406.925826][T29570] nbd: must specify at least one socket [ 2407.228875][T29560] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4627'. [ 2407.233668][T29560] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4627'. [ 2407.252755][ T40] audit: type=1326 audit(2407.765:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2407.262113][ T40] audit: type=1326 audit(2407.775:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2407.280438][ T40] audit: type=1326 audit(2407.785:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2407.294666][ T40] audit: type=1326 audit(2407.785:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc6ff7 code=0x7ffc0000 [ 2407.308514][ T40] audit: type=1326 audit(2407.785:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2407.324826][ T40] audit: type=1326 audit(2407.785:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2407.354463][ T40] audit: type=1326 audit(2407.785:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc6ff7 code=0x7ffc0000 [ 2407.375216][ T40] audit: type=1326 audit(2407.785:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2407.396429][ T40] audit: type=1326 audit(2407.795:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.748791][T29579] netlink: 'syz.2.4631': attribute type 7 has an invalid length. [ 2408.752037][T29579] netlink: 'syz.2.4631': attribute type 8 has an invalid length. [ 2408.772423][ T40] kauditd_printk_skb: 288 callbacks suppressed [ 2408.772440][ T40] audit: type=1326 audit(2409.185:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.782149][ T40] audit: type=1326 audit(2409.295:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc6ff7 code=0x7ffc0000 [ 2408.819238][ T40] audit: type=1326 audit(2409.305:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.843491][ T40] audit: type=1326 audit(2409.305:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc6ff7 code=0x7ffc0000 [ 2408.861595][ T40] audit: type=1326 audit(2409.305:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.882849][ T40] audit: type=1326 audit(2409.325:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.906406][ T40] audit: type=1326 audit(2409.325:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc6ff7 code=0x7ffc0000 [ 2408.931516][ T40] audit: type=1326 audit(2409.325:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.950760][ T40] audit: type=1326 audit(2409.335:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fcc code=0x7ffc0000 [ 2408.969942][ T40] audit: type=1326 audit(2409.335:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29568 comm="syz.5.4637" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc6ff7 code=0x7ffc0000 [ 2410.852518][T29598] siw: device registration error -23 [ 2410.991420][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.292302][T29588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4632'. [ 2411.573756][T29599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4635'. [ 2411.582259][T29601] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2411.588468][T29604] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2411.728312][T29601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4634'. [ 2412.954943][T29615] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2412.962493][T29615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4636'. [ 2416.087211][T29638] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4642'. [ 2416.142324][T29638] syzkaller0: entered promiscuous mode [ 2416.150682][T29638] syzkaller0: entered allmulticast mode [ 2416.194078][T29635] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2416.206378][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4643'. [ 2416.755564][T29641] o2cb: This node has not been configured. [ 2416.764879][T29641] o2cb: Cluster check failed. Fix errors before retrying. [ 2416.769131][T29641] (syz.5.4641,29641,1):user_dlm_register:674 ERROR: status = -22 [ 2416.777732][T29641] (syz.5.4641,29641,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2417.154306][T29641] team0: Port device dummy0 removed [ 2417.175592][T29641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2417.282985][T23859] udevd[23859]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 2417.397964][T29640] lo speed is unknown, defaulting to 1000 [ 2419.478203][T29672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4647'. [ 2419.516378][T29667] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2419.542663][T29661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2420.622448][T29681] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2420.626215][T29681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4649'. [ 2421.391061][T29696] overlayfs: missing 'lowerdir' [ 2422.043416][T29699] netlink: 'syz.5.4652': attribute type 7 has an invalid length. [ 2422.046174][T29699] netlink: 'syz.5.4652': attribute type 8 has an invalid length. [ 2423.605035][T28536] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2423.760640][T28536] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2423.772104][T28536] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2423.785571][T28536] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2423.805127][T28536] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2423.808976][T28536] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.833769][T28536] usb 9-1: config 0 descriptor?? [ 2424.871006][T29707] syz.2.4653 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 2424.881379][T29707] CPU: 2 UID: 0 PID: 29707 Comm: syz.2.4653 Tainted: G L syzkaller #0 PREEMPT(full) [ 2424.881402][T29707] Tainted: [L]=SOFTLOCKUP [ 2424.881406][T29707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2424.881413][T29707] Call Trace: [ 2424.881553][T29707] [ 2424.881562][T29707] dump_stack_lvl+0x100/0x190 [ 2424.883975][T29707] dump_header+0xfb/0x606 [ 2424.884142][T29707] oom_kill_process.cold+0xd/0x330 [ 2424.884156][T29707] out_of_memory+0x1256/0x14f0 [ 2424.884734][T29707] ? __pfx_out_of_memory+0x10/0x10 [ 2424.884754][T29707] __alloc_frozen_pages_noprof+0x232d/0x2bc0 [ 2424.884959][T29707] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2424.885071][T29707] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2424.885092][T29707] ? __lock_acquire+0x4a5/0x2630 [ 2424.885266][T29707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2424.885351][T29707] ? policy_nodemask+0xed/0x4f0 [ 2424.885419][T29707] alloc_pages_mpol+0x1fb/0x540 [ 2424.885431][T29707] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2424.885444][T29707] ? swap_entry_swapped+0x20c/0x2a0 [ 2424.885457][T29707] ? __pfx_swap_entry_swapped+0x10/0x10 [ 2424.885472][T29707] folio_alloc_mpol_noprof+0x36/0x260 [ 2424.885487][T29707] swap_cache_alloc_folio+0x1a8/0x300 [ 2424.885506][T29707] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 2424.885527][T29707] swap_cluster_readahead+0x53b/0x770 [ 2424.885547][T29707] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2424.885565][T29707] ? __lock_acquire+0x4a5/0x2630 [ 2424.885582][T29707] ? __xa_set_mark+0xd1/0x120 [ 2424.886463][T29707] ? get_vma_policy+0x23d/0x3b0 [ 2424.886478][T29707] swapin_readahead+0x160/0x12c0 [ 2424.886499][T29707] ? __pfx_swapin_readahead+0x10/0x10 [ 2424.886515][T29707] ? find_held_lock+0x2b/0x80 [ 2424.886529][T29707] ? swap_table_get+0x103/0x2c0 [ 2424.886547][T29707] ? swap_table_get+0x10d/0x2c0 [ 2424.886563][T29707] ? swap_cache_get_folio+0x286/0x350 [ 2424.886579][T29707] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 2424.886593][T29707] ? __pfx_get_swap_device+0x10/0x10 [ 2424.886608][T29707] ? do_swap_page+0x931/0x6180 [ 2424.886687][T29707] do_swap_page+0x931/0x6180 [ 2424.886704][T29707] ? do_wp_page+0x173c/0x4350 [ 2424.886720][T29707] ? __pfx_do_swap_page+0x10/0x10 [ 2424.886737][T29707] ? do_raw_spin_lock+0x128/0x260 [ 2424.886750][T29707] ? rcu_is_watching+0x12/0xc0 [ 2424.886764][T29707] ? __pte_offset_map+0x179/0x310 [ 2424.886779][T29707] __handle_mm_fault+0x192f/0x2a00 [ 2424.886798][T29707] ? reacquire_held_locks+0xce/0x1e0 [ 2424.886815][T29707] ? __pfx___handle_mm_fault+0x10/0x10 [ 2424.886833][T29707] ? lock_vma_under_rcu+0x17c/0x590 [ 2424.886866][T29707] handle_mm_fault+0x36d/0xa20 [ 2424.886911][T29707] do_user_addr_fault+0x5a3/0x12f0 [ 2424.886991][T29707] exc_page_fault+0x6f/0xd0 [ 2424.887007][T29707] asm_exc_page_fault+0x26/0x30 [ 2424.887019][T29707] RIP: 0023:0xf7019120 [ 2424.887031][T29707] Code: 68 88 00 00 00 e9 20 ff ff ff ff a3 40 00 00 00 68 00 00 00 00 e9 00 00 00 00 ff a3 44 00 00 00 68 00 00 00 00 e9 00 00 00 00 a3 48 00 00 00 68 80 00 00 00 e9 f0 fe ff ff ff a3 4c 00 00 00 [ 2424.887041][T29707] RSP: 002b:00000000ffcac04c EFLAGS: 00010212 [ 2424.887126][T29707] RAX: 0000000031614cf8 RBX: 00000000f73c2ff4 RCX: 0000000031024238 [ 2424.887133][T29707] RDX: 00000000005f0acc RSI: 00000000f7f25610 RDI: 0000000000000000 [ 2424.887140][T29707] RBP: 00000000ffcac0f8 R08: 0000000000000000 R09: 0000000000000000 [ 2424.887146][T29707] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2424.887152][T29707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2424.887166][T29707] [ 2425.114973][T29707] Mem-Info: [ 2425.116097][T29707] active_anon:1497 inactive_anon:2104 isolated_anon:0 [ 2425.116097][T29707] active_file:3767 inactive_file:6141 isolated_file:0 [ 2425.116097][T29707] unevictable:3816 dirty:140 writeback:0 [ 2425.116097][T29707] slab_reclaimable:10831 slab_unreclaimable:89183 [ 2425.116097][T29707] mapped:27444 shmem:3981 pagetables:1763 [ 2425.116097][T29707] sec_pagetables:388 bounce:0 [ 2425.116097][T29707] kernel_misc_reclaimable:0 [ 2425.116097][T29707] free:15848 free_pcp:973 free_cma:0 [ 2425.157815][T29707] Node 0 active_anon:3204kB inactive_anon:5136kB active_file:14800kB inactive_file:4200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8516kB dirty:172kB writeback:0kB shmem:11460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7060kB pagetables:1340kB sec_pagetables:1172kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2425.177278][T29707] Node 1 active_anon:3312kB inactive_anon:2700kB active_file:3132kB inactive_file:17136kB unevictable:11728kB isolated(anon):0kB isolated(file):0kB mapped:101284kB dirty:388kB writeback:0kB shmem:4588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7076kB pagetables:5712kB sec_pagetables:380kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2425.203602][T29707] Node 0 DMA free:1712kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116kB inactive_anon:0kB active_file:152kB inactive_file:724kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2425.232504][T29707] lowmem_reserve[]: 0 283 283 283 283 [ 2425.242815][T29707] Node 0 DMA32 free:10620kB boost:29352kB min:42400kB low:45660kB high:48920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2720kB inactive_anon:4724kB active_file:2608kB inactive_file:15532kB unevictable:3536kB writepending:160kB zspages:532kB present:1032196kB managed:290692kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2425.254375][T29707] lowmem_reserve[]: 0 0 0 0 0 [ 2425.258366][T29707] Node 1 DMA32 free:59060kB boost:53248kB min:100392kB low:112176kB high:123960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1008kB inactive_anon:4612kB active_file:1172kB inactive_file:15328kB unevictable:11728kB writepending:316kB zspages:6920kB present:1048432kB managed:948212kB mlocked:8192kB bounce:0kB free_pcp:772kB local_pcp:32kB free_cma:0kB [ 2425.332101][T29707] lowmem_reserve[]: 0 0 0 0 0 [ 2425.350465][T29707] Node 0 DMA: 47*4kB (U) 7*8kB (U) 7*16kB (U) 11*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1412kB [ 2425.364682][T29707] Node 0 DMA32: 43*4kB (U) 80*8kB (UE) 68*16kB (UE) 49*32kB (UE) 43*64kB (UE) 10*128kB (U) 5*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 9292kB [ 2425.403079][T29707] Node 1 DMA32: 9*4kB (U) 549*8kB (U) 2388*16kB (UM) 206*32kB (UME) 64*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53580kB [ 2425.439332][T29707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2425.446930][T29707] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2425.461777][T29707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2425.467979][T29707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2425.480703][T29707] 14606 total pagecache pages [ 2425.489922][T29707] 1254 pages in swap cache [ 2425.497796][T29707] Free swap = 82984kB [ 2425.499388][T29707] Total swap = 124996kB [ 2425.509481][T29707] 524155 pages RAM [ 2425.514870][T29707] 0 pages HighMem/MovableOnly [ 2425.531493][T29707] 210589 pages reserved [ 2425.534914][T29707] 0 pages cma reserved [ 2425.543314][T29707] Unreclaimable slab info: [ 2425.548661][T29707] Name Used Total [ 2425.558021][T29707] bio-184 19KB 24KB [ 2425.982549][T29707] pid_3 38KB 63KB [ 2425.985307][T29707] pid_2 62KB 98KB [ 2426.001822][T29707] bio-464 17KB 31KB [ 2426.024507][T29707] bio-528 19KB 31KB [ 2426.038043][T29707] bio-544 19KB 31KB [ 2426.047749][T29707] bio-552 19KB 31KB [ 2426.054439][T29707] afs_inode_cache 25KB 30KB [ 2426.059879][T29707] zswap_entry 734KB 794KB [ 2426.061903][T29707] AF_VSOCK 48KB 153KB [ 2426.073812][T29707] sw_flow_stats 30KB 44KB [ 2426.082734][T29707] sw_flow 70KB 122KB [ 2426.093738][T29707] batadv_tt_change_cache 9KB 16KB [ 2426.101209][T29707] batadv_tl_cache 26KB 32KB [ 2426.109288][T29707] ceph_osd_request 30KB 159KB [ 2426.115280][T29707] ceph_msg 12KB 38KB [ 2426.117280][T29707] IEEE-802.15.4-MAC 34KB 62KB [ 2426.128416][T29707] IEEE-802.15.4-RAW 43KB 126KB [ 2426.130491][T29707] p9_req_t 19KB 39KB [ 2426.135040][T29707] INET6_SMC 35KB 58KB [ 2426.140489][T29707] INET_SMC 90KB 187KB [ 2426.143097][T29707] SMC6 103KB 187KB [ 2426.160560][T29707] SMC 28KB 250KB [ 2426.169986][T29707] TIPC 32KB 154KB [ 2426.173745][T28536] usbhid 9-1:0.0: can't add hid device: -71 [ 2426.179667][T28536] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2426.183089][T29707] rds_tcp_connection 57KB 94KB [ 2426.188326][T29707] RDS 66KB 216KB [ 2426.190754][T29707] rds_connection 31KB 62KB [ 2426.195786][T28536] usb 9-1: USB disconnect, device number 22 [ 2426.198668][T29707] SCTPv6 78KB 210KB [ 2426.203682][T29707] SCTP 41KB 183KB [ 2426.212605][T29707] sctp_chunk 8KB 70KB [ 2426.226511][T29707] sctp_bind_bucket 11KB 20KB [ 2426.236769][T29707] PNPIPE 58KB 154KB [ 2426.238788][T29707] PHONET 16KB 31KB [ 2426.253593][T29707] L2TP/IPv6 50KB 159KB [ 2426.264053][T29707] L2TP/IP 49KB 94KB [ 2426.283296][T29707] KCM 62KB 124KB [ 2426.305127][T29707] kcm_mux 66KB 126KB [ 2426.307467][T29707] RXRPC 36KB 192KB [ 2426.325784][T29707] rxrpc_call_jar 120KB 223KB [ 2426.333822][T29707] can_gw 7KB 8KB [ 2426.357742][T29707] can_receiver 24KB 35KB [ 2426.359781][T29707] net_bridge_fdb_entry 24KB 35KB [ 2426.380421][T29707] nf-frags 34KB 63KB [ 2426.382430][T29707] MPTCPv6 95KB 255KB [ 2426.394467][T29707] request_sock_subflow_v6 12KB 15KB [ 2426.402540][T29707] ip6-frags 18KB 31KB [ 2426.404564][T29707] fib6_node 52KB 80KB [ 2426.413831][T29707] ip6_dst_cache 45KB 148KB [ 2426.431673][T29707] mfc6_cache 20KB 24KB [ 2426.447015][T29707] PINGv6 43KB 154KB [ 2426.449084][T29707] RAWv6 148KB 247KB [ 2426.456264][T29707] UDPv6 65KB 184KB [ 2426.464997][T29707] tw_sock_TCPv6 31KB 63KB [ 2426.467059][T29707] request_sock_TCPv6 31KB 46KB [ 2426.475717][T29707] TCPv6 151KB 303KB [ 2426.477797][T29707] ip_vs_conn 25KB 32KB [ 2426.485226][T29707] nf_conntrack 32KB 55KB [ 2426.487454][T29707] wg_peer 79KB 148KB [ 2426.495663][T29707] allowedips_node 16KB 31KB [ 2426.497663][T29707] ubi_wl_entry_slab 2KB 3KB [ 2426.515353][T29707] t10_alua_lu_gp_cache 8KB 15KB [ 2426.517556][T29707] scsi_sense_cache 60KB 60KB [ 2426.535944][T29707] virtio_scsi_cmd 21KB 24KB [ 2426.538399][T29707] bio-136 59KB 76KB [ 2426.553160][T29707] io_kiocb 5KB 39KB [ 2426.558266][T29707] bio-264 37KB 55KB [ 2426.560269][T29707] mqueue_inode_cache 40KB 185KB [ 2426.567201][T29707] f2fs_bio_post_read_ctx 30KB 31KB [ 2426.575365][T29707] jfs_mp 14KB 15KB [ 2426.578164][T29707] fuse_request 10KB 63KB [ 2426.593366][T29707] cifs_small_rq 28KB 32KB [ 2426.596023][T29707] cifs_request 67KB 67KB [ 2426.600748][T29707] cifs_mpx_ids 8KB 15KB [ 2426.603330][T29707] cifs_io_subrequest 42KB 47KB [ 2426.607442][T29707] cifs_io_request 105KB 111KB [ 2426.610332][T29707] nfs_commit_data 24KB 31KB [ 2426.612805][T29707] nfs_write_data 38KB 63KB [ 2426.618189][T29707] ecryptfs_sb_cache 22KB 47KB [ 2426.622247][T29707] jbd2_inode 22KB 27KB [ 2426.625619][T29707] ext4_system_zone 1KB 3KB [ 2426.628305][T29707] ext4_io_end_vec 7KB 15KB [ 2426.631038][T29707] kioctx 32KB 191KB [ 2426.633616][T29707] aio_kiocb 17KB 39KB [ 2426.637435][T29707] userfaultfd_ctx_cache 31KB 94KB [ 2426.640146][T29707] fanotify_fid_event 11KB 15KB [ 2426.642165][T29707] fanotify_mark 22KB 23KB [ 2426.644282][T29707] dnotify_mark 22KB 23KB [ 2426.647219][T29707] dnotify_struct 5KB 7KB [ 2426.649713][T29707] fasync_cache 37KB 39KB [ 2426.652389][T29707] zspage 204KB 224KB [ 2426.654968][T29707] zs_handle 255KB 280KB [ 2426.662625][T29707] pid_namespace 44KB 123KB [ 2426.664614][T29707] kvm_gmem_inode_cache 42KB 61KB [ 2426.667261][T29707] kvm_vcpu 146KB 344KB [ 2426.669221][T29707] kvm_mmu_page_header 39KB 50KB [ 2426.671176][T29707] pte_list_desc 30KB 47KB [ 2426.673492][T29707] x86_emulator 54KB 189KB [ 2426.676737][T29707] rpc_buffers 57KB 159KB [ 2426.679293][T29707] rpc_tasks 15KB 62KB [ 2426.681286][T29707] UNIX-STREAM 89KB 255KB [ 2426.683615][T29707] UNIX 667KB 714KB [ 2426.687469][T29707] ip4-frags 9KB 15KB [ 2426.689835][T29707] mfc_cache 13KB 16KB [ 2426.692635][T29707] MPTCP 91KB 245KB [ 2426.701247][T29707] request_sock_subflow_v4 50KB 61KB [ 2426.707939][T29707] tcp_bind2_bucket 25KB 48KB [ 2426.710221][T29707] tcp_bind_bucket 32KB 68KB [ 2426.717897][T29707] inet_peer 13KB 16KB [ 2426.720217][T29707] xfrm_dst 27KB 55KB [ 2426.722169][T29707] xfrm_state 17KB 159KB [ 2426.724226][T29707] ip_fib_trie 24KB 40KB [ 2426.734986][T29707] ip_fib_alias 53KB 86KB [ 2426.751325][T29707] rtable 30KB 104KB [ 2426.755254][T29707] PING 49KB 157KB [ 2426.757446][T29707] RAW 75KB 159KB [ 2426.759513][T29707] UDP 72KB 223KB [ 2426.761453][T29707] tw_sock_TCP 26KB 47KB [ 2426.763377][T29707] request_sock_TCP 27KB 38KB [ 2426.774939][T29707] TCP 305KB 383KB [ 2426.785251][T29707] fs_bio_integrity 7KB 8KB [ 2426.787746][T29707] hugetlbfs_inode_cache 33KB 188KB [ 2426.789728][T29707] fscache_cookie_jar 6KB 15KB [ 2426.791634][T29707] netfs_subrequest 57KB 85KB [ 2426.793562][T29707] netfs_request 152KB 207KB [ 2426.798084][T29707] bio-280 21KB 23KB [ 2426.805081][T29707] ep_head 2KB 12KB [ 2426.808696][T29707] eventpoll_pwq 6KB 31KB [ 2426.812057][T29707] eventpoll_epi 47KB 86KB [ 2426.814103][T29707] inotify_inode_mark 30KB 42KB [ 2426.818315][T29707] sgpool-128 314KB 446KB [ 2426.826081][T29707] sgpool-64 244KB 446KB [ 2426.829001][T29707] sgpool-32 150KB 315KB [ 2426.830958][T29707] sgpool-16 120KB 187KB [ 2426.832930][T29707] sgpool-8 175KB 214KB [ 2426.838395][T29707] bio_crypt_ctx 9KB 11KB [ 2426.852445][T29707] bio_integrity_data 7KB 8KB [ 2426.854427][T29707] request_queue 214KB 242KB [ 2426.857456][T29707] blkdev_ioc 26KB 47KB [ 2426.860203][T29707] bio-200 685KB 737KB [ 2426.862152][T29707] biovec-max 1823KB 1997KB [ 2426.863944][T29707] biovec-128 252KB 382KB [ 2426.866324][T29707] biovec-64 384KB 441KB [ 2426.871245][T29707] biovec-16 158KB 171KB [ 2426.873147][T29707] mm_slot 10KB 27KB [ 2426.876091][T29707] ksm_mm_slot 14KB 16KB [ 2426.878375][T29707] ksm_stable_node 10KB 15KB [ 2426.884801][T29707] ksm_rmap_item 7KB 19KB [ 2426.887035][T29707] user_namespace 10KB 30KB [ 2426.888897][T29707] uid_cache 21KB 39KB [ 2426.895297][T29707] iommu_iova_magazine 997KB 1071KB [ 2426.897335][T29707] iommu_iova 297KB 308KB [ 2426.902724][T29707] dmaengine-unmap-256 26KB 30KB [ 2426.908678][T29707] dmaengine-unmap-128 14KB 30KB [ 2426.913234][T29707] dmaengine-unmap-16 7KB 8KB [ 2426.916566][T29707] dmaengine-unmap-2 3KB 4KB [ 2426.920903][T29707] QIPCRTR 56KB 125KB [ 2426.922870][T29707] audit_buffer 22KB 50KB [ 2426.930854][T29707] skbuff_ext_cache 19KB 40KB [ 2426.933154][T29707] skbuff_small_head 988KB 1049KB [ 2426.938807][T29707] skbuff_fclone_cache 126KB 191KB [ 2426.940622][T29707] skbuff_head_cache 1093KB 1164KB [ 2426.945360][T29707] configfs_dir_cache 29KB 32KB [ 2426.949606][T29707] file_lease_cache 24KB 31KB [ 2426.951641][T29707] file_lock_cache 14KB 63KB [ 2426.953668][T29707] file_lock_ctx 36KB 43KB [ 2426.956377][T29707] fsnotify_inode_mark_connector 24KB 43KB [ 2426.958676][T29707] posix_timers_cache 26KB 48KB [ 2426.968356][T29707] taskstats 89KB 219KB [ 2426.970314][T29707] mem_cgroup_per_node 129KB 185KB [ 2426.972350][T29707] mem_cgroup 165KB 216KB [ 2426.974254][T29707] proc_dir_entry 685KB 906KB [ 2426.985701][T29707] pde_opener 5KB 15KB [ 2426.989209][T29707] seq_file 28KB 86KB [ 2426.991144][T29707] sigqueue 16KB 43KB [ 2426.993196][T29707] shmem_inode_cache 7419KB 7599KB [ 2426.996489][T29707] kernfs_iattrs_cache 23KB 27KB [ 2427.003494][T29707] kernfs_node_cache 32632KB 32636KB [ 2427.006580][T29707] mnt_cache 124KB 153KB [ 2427.008467][T29707] bfilp 41KB 63KB [ 2427.030035][T29707] filp 501KB 567KB [ 2427.035693][T29707] names_cache 292KB 300KB [ 2427.038027][T29707] net_namespace 87KB 232KB [ 2427.040353][T29707] ima_iint_cache 28KB 63KB [ 2427.042732][T29707] lsm_inode_cache 2765KB 2768KB [ 2427.057208][T29707] lsm_file_cache 194KB 244KB [ 2427.065534][T29707] key_jar 26KB 86KB [ 2427.075609][T29707] uts_namespace 78KB 108KB [ 2427.087293][T29707] nsproxy 11KB 35KB [ 2427.094427][T29707] vm_area_struct 913KB 1179KB [ 2427.101436][T29707] fs_cache 36KB 64KB [ 2427.103629][T29707] files_cache 140KB 223KB [ 2427.111240][T29707] signal_cache 855KB 1879KB [ 2427.113295][T29707] sighand_cache 1093KB 2284KB [ 2427.117618][T29707] task_struct 4449KB 4828KB [ 2427.127525][T29707] cred 141KB 340KB [ 2427.129614][T29707] anon_vma_chain 372KB 409KB [ 2427.139935][T29707] anon_vma 347KB 431KB [ 2427.144100][T29707] pid 145KB 351KB [ 2427.151544][T29707] Acpi-Operand 195KB 328KB [ 2427.158075][T29707] Acpi-ParseExt 11KB 31KB [ 2427.160199][T29707] Acpi-Parse 12KB 23KB [ 2427.162212][T29707] Acpi-State 16KB 27KB [ 2427.164305][T29727] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2427.172469][T29725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2427.172491][T29727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4659'. [ 2427.179747][T29707] Acpi-Namespace 35KB 52KB [ 2427.185923][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4658'. [ 2427.189398][T29707] shared_policy_node 11KB 16KB [ 2427.191499][T29707] numa_policy 9KB 20KB [ 2427.203492][T29707] perf_event 52KB 93KB [ 2427.206475][T29707] trace_event_file 540KB 540KB [ 2427.210060][T29707] ftrace_event_field 1031KB 1031KB [ 2427.222873][T29707] pool_workqueue 2271KB 2288KB [ 2427.225886][T29707] task_group 73KB 94KB [ 2427.241290][T29707] maple_node 675KB 1448KB [ 2427.245092][T29707] mm_struct 318KB 520KB [ 2427.247318][T29707] vmap_area 518KB 637KB [ 2427.250753][T29707] debug_objects_cache 3553KB 7984KB [ 2427.254073][T29707] page->ptl 133KB 149KB [ 2427.261079][T29707] kmalloc-cg-8k 2144KB 2208KB [ 2427.267283][T29707] kmalloc-cg-4k 18008KB 18368KB [ 2427.279509][T29707] kmalloc-cg-2k 12800KB 13056KB [ 2427.284295][T29707] kmalloc-cg-1k 3192KB 3776KB [ 2427.287205][T29707] kmalloc-cg-512 1284KB 1648KB [ 2427.289387][T29707] kmalloc-cg-256 612KB 656KB [ 2427.292982][T29707] kmalloc-cg-128 297KB 324KB [ 2427.298588][T29707] kmalloc-cg-64 79KB 104KB [ 2427.303008][T29707] kmalloc-cg-32 65KB 168KB [ 2427.307313][T29707] kmalloc-cg-16 6KB 32KB [ 2427.312352][T29707] kmalloc-cg-8 30KB 48KB [ 2427.316532][T29707] kmalloc-cg-192 78KB 108KB [ 2427.321565][T29707] kmalloc-cg-96 64KB 72KB [ 2427.325099][T29707] kmalloc-8k 6224KB 6320KB [ 2427.330745][T29707] kmalloc-4k 27248KB 28544KB [ 2427.335963][T29707] kmalloc-2k 14168KB 14624KB [ 2427.340726][T29707] kmalloc-1k 7050KB 8640KB [ 2427.344576][T29707] kmalloc-512 11419KB 11728KB [ 2427.344867][T29732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3772261014 (241424704896 ns) > initial count (133065151744 ns). Using initial count to start timer. [ 2427.351283][T29707] kmalloc-256 4765KB 5232KB [ 2427.363265][T29707] kmalloc-128 3727KB 4752KB [ 2427.369480][T29707] kmalloc-64 3139KB 3236KB [ 2427.376564][T29707] kmalloc-32 2110KB 2380KB [ 2427.381411][T29707] kmalloc-16 533KB 692KB [ 2427.391954][T29707] kmalloc-8 504KB 588KB [ 2427.401402][T29707] kmalloc-192 3061KB 3136KB [ 2427.407002][T29707] kmalloc-96 3119KB 4344KB [ 2427.416114][T29707] kmem_cache_node 213KB 220KB [ 2427.424321][T29707] kmem_cache 176KB 218KB [ 2427.431751][T29707] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.4653,pid=29707,uid=0 [ 2427.478677][T29707] Out of memory (oom_kill_allocating_task): Killed process 29707 (syz.2.4653) total-vm:104196kB, anon-rss:60kB, file-rss:21300kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 2429.618992][T29751] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2430.480743][T29756] netlink: 'syz.4.4664': attribute type 7 has an invalid length. [ 2430.491051][T29756] netlink: 'syz.4.4664': attribute type 8 has an invalid length. [ 2430.797437][T29742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4661'. [ 2430.962239][T29761] lo speed is unknown, defaulting to 1000 [ 2432.645328][T29778] random: crng reseeded on system resumption [ 2432.811865][T29779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4668'. [ 2432.835715][T29767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4665'. [ 2433.053677][T29781] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2433.056134][T29781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2433.096267][T29781] vhci_hcd vhci_hcd.0: Device attached [ 2433.355191][ T6048] usb 46-1: SetAddress Request (76) to port 0 [ 2433.358328][ T6048] usb 46-1: new SuperSpeed USB device number 76 using vhci_hcd [ 2433.915895][T29783] vhci_hcd: connection reset by peer [ 2433.920489][ T100] vhci_hcd vhci_hcd.4: stop threads [ 2433.925409][ T100] vhci_hcd vhci_hcd.4: release socket [ 2433.930244][ T100] vhci_hcd vhci_hcd.4: disconnect device [ 2434.241378][ T40] kauditd_printk_skb: 281 callbacks suppressed [ 2434.241416][ T40] audit: type=1326 audit(2434.755:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2434.283656][ T40] audit: type=1326 audit(2434.785:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2434.307809][ T40] audit: type=1326 audit(2434.815:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2434.310836][T29788] fuse: Unknown parameter '16²Ÿ]0x0000000000000005' [ 2434.331226][ T40] audit: type=1326 audit(2434.815:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2434.357230][ T40] audit: type=1326 audit(2434.845:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2434.750756][T29793] netlink: 'syz.2.4669': attribute type 1 has an invalid length. [ 2434.810718][T29793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2435.801534][T29808] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2435.811033][T29808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4673'. [ 2435.850877][T29813] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2435.855296][T29813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4672'. [ 2435.957957][T29799] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2435.989316][T29799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4671'. [ 2436.877815][ T40] audit: type=1326 audit(2437.395:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2436.886523][ T40] audit: type=1326 audit(2437.395:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.2.4669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 2437.189854][T29818] netlink: 'syz.6.4674': attribute type 7 has an invalid length. [ 2437.192453][T29818] netlink: 'syz.6.4674': attribute type 8 has an invalid length. [ 2437.639946][T29821] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2437.725448][T29824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4675'. [ 2437.783711][T29821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4676'. [ 2438.578666][T29835] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2438.639466][ T6048] usb 46-1: device descriptor read/8, error -110 [ 2438.651168][T29835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4678'. [ 2438.923872][T29845] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 2439.200681][T29849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4680'. [ 2439.226243][ T6048] usb usb46-port1: attempt power cycle [ 2439.236234][T29848] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2439.905999][ T6048] usb usb46-port1: unable to enumerate USB device [ 2440.680580][T29866] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2440.693797][T29866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4684'. [ 2440.705267][T29859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4681'. [ 2440.782601][T29868] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2440.792027][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4683'. [ 2441.376011][T29880] random: crng reseeded on system resumption [ 2441.930692][T29884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4687'. [ 2442.221097][T29890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'. [ 2442.221528][T29882] netlink: 'syz.2.4686': attribute type 7 has an invalid length. [ 2442.237736][T29882] netlink: 'syz.2.4686': attribute type 8 has an invalid length. [ 2443.402164][T29899] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2443.411425][T29899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 2444.165628][T29901] overlayfs: missing 'lowerdir' [ 2444.637042][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4689'. [ 2445.393699][ T40] audit: type=1326 audit(2445.905:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.427364][ T40] audit: type=1326 audit(2445.905:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.465080][ T40] audit: type=1326 audit(2445.915:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.472646][ T40] audit: type=1326 audit(2445.915:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.494515][ T40] audit: type=1326 audit(2445.925:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.509410][ T40] audit: type=1326 audit(2445.925:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.526666][ T40] audit: type=1326 audit(2445.925:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.547352][ T40] audit: type=1326 audit(2445.925:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.564804][ T40] audit: type=1326 audit(2445.925:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2445.577586][ T40] audit: type=1326 audit(2445.925:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29909 comm="syz.4.4692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2446.149134][T29922] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2446.166944][T29922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4695'. [ 2446.327822][T29920] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2446.353131][T29920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4693'. [ 2447.327479][T29932] overlayfs: missing 'lowerdir' [ 2447.587987][T29934] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2447.688189][T29934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4696'. [ 2448.915900][T29951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4705'. [ 2449.487592][T29944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2449.866178][T29954] netlink: 'syz.5.4699': attribute type 7 has an invalid length. [ 2449.868852][T29954] netlink: 'syz.5.4699': attribute type 8 has an invalid length. [ 2450.460467][T29944] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2450.463644][T29944] overlayfs: failed to look up (tracing) for ino (-66) [ 2450.850480][T29945] fuse: fd is not a fuse device [ 2452.718900][T29965] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2452.756197][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'. [ 2455.036830][T29978] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2455.047260][T29978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4707'. [ 2455.095274][T29972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2455.122058][T29972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4702'. [ 2456.370870][T29989] netlink: 'syz.6.4709': attribute type 7 has an invalid length. [ 2456.376238][T29989] netlink: 'syz.6.4709': attribute type 8 has an invalid length. [ 2456.516255][T29995] netlink: 'syz.5.4710': attribute type 7 has an invalid length. [ 2456.521114][T29995] netlink: 'syz.5.4710': attribute type 8 has an invalid length. [ 2457.227752][T29987] overlayfs: missing 'lowerdir' [ 2458.285010][T25993] lo speed is unknown, defaulting to 1000 [ 2458.286871][T25993] syz2: Port: 1 Link DOWN [ 2461.646946][T30000] netlink: 'syz.5.4711': attribute type 13 has an invalid length. [ 2461.654933][T30000] netlink: 'syz.5.4711': attribute type 17 has an invalid length. [ 2462.009312][T30000] gretap0: refused to change device tx_queue_len [ 2462.028653][T30000] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2462.055509][T22872] lo speed is unknown, defaulting to 1000 [ 2462.062670][T22872] syz2: Port: 1 Link ACTIVE [ 2466.166144][T30026] netlink: 'syz.6.4717': attribute type 7 has an invalid length. [ 2466.169521][T30026] netlink: 'syz.6.4717': attribute type 8 has an invalid length. [ 2467.757307][T30038] overlayfs: missing 'lowerdir' [ 2468.264660][T30042] netlink: 'syz.5.4721': attribute type 7 has an invalid length. [ 2468.269286][T30042] netlink: 'syz.5.4721': attribute type 8 has an invalid length. [ 2469.045006][T30028] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2469.974356][T30058] lo speed is unknown, defaulting to 1000 [ 2470.789112][T25993] kernel read not supported for file /dsp (pid: 25993 comm: kworker/1:2) [ 2471.370510][T30062] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2471.820271][T30066] fuse: fd is not a fuse device [ 2472.111684][T30062] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2472.115185][T30062] overlayfs: failed to look up (tracing) for ino (-66) [ 2472.436965][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.690131][T30064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4723'. [ 2478.398170][T30088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4730'. [ 2478.517809][T30111] overlayfs: missing 'lowerdir' [ 2478.707729][ T5670] dhcpcd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2478.794566][ T5670] CPU: 2 UID: 0 PID: 5670 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 2478.794587][ T5670] Tainted: [L]=SOFTLOCKUP [ 2478.794591][ T5670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2478.794598][ T5670] Call Trace: [ 2478.794713][ T5670] [ 2478.794719][ T5670] dump_stack_lvl+0x100/0x190 [ 2478.795611][ T5670] dump_header+0xfb/0x606 [ 2478.795736][ T5670] oom_kill_process.cold+0xd/0x330 [ 2478.795750][ T5670] out_of_memory+0x1256/0x14f0 [ 2478.795974][ T5670] ? __pfx_out_of_memory+0x10/0x10 [ 2478.795994][ T5670] __alloc_frozen_pages_noprof+0x232d/0x2bc0 [ 2478.796125][ T5670] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2478.796147][ T5670] ? __lock_acquire+0x4a5/0x2630 [ 2478.796311][ T5670] ? zswap_entry_free+0x38e/0x640 [ 2478.796329][ T5670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2478.796397][ T5670] ? policy_nodemask+0xed/0x4f0 [ 2478.796467][ T5670] alloc_pages_mpol+0x1fb/0x540 [ 2478.796480][ T5670] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2478.796492][ T5670] ? swap_entry_swapped+0x20c/0x2a0 [ 2478.796504][ T5670] ? __pfx_swap_entry_swapped+0x10/0x10 [ 2478.796518][ T5670] folio_alloc_mpol_noprof+0x36/0x260 [ 2478.796533][ T5670] swap_cache_alloc_folio+0x1a8/0x300 [ 2478.796552][ T5670] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 2478.796572][ T5670] swap_cluster_readahead+0x411/0x770 [ 2478.796592][ T5670] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2478.796611][ T5670] ? rcu_is_watching+0x12/0xc0 [ 2478.796677][ T5670] ? get_vma_policy+0x23d/0x3b0 [ 2478.796691][ T5670] swapin_readahead+0x160/0x12c0 [ 2478.796711][ T5670] ? __pfx_swapin_readahead+0x10/0x10 [ 2478.796727][ T5670] ? find_held_lock+0x2b/0x80 [ 2478.796740][ T5670] ? swap_table_get+0x103/0x2c0 [ 2478.796758][ T5670] ? swap_table_get+0x10d/0x2c0 [ 2478.796773][ T5670] ? swap_cache_get_folio+0x286/0x350 [ 2478.796789][ T5670] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 2478.796804][ T5670] ? __pfx_get_swap_device+0x10/0x10 [ 2478.796819][ T5670] ? do_swap_page+0x931/0x6180 [ 2478.796890][ T5670] do_swap_page+0x931/0x6180 [ 2478.796912][ T5670] ? __pfx_do_swap_page+0x10/0x10 [ 2478.796931][ T5670] ? rcu_is_watching+0x12/0xc0 [ 2478.796943][ T5670] ? __pte_offset_map+0x179/0x310 [ 2478.796958][ T5670] __handle_mm_fault+0x192f/0x2a00 [ 2478.796977][ T5670] ? reacquire_held_locks+0xce/0x1e0 [ 2478.796994][ T5670] ? __pfx___handle_mm_fault+0x10/0x10 [ 2478.797016][ T5670] ? lock_vma_under_rcu+0x17c/0x590 [ 2478.797041][ T5670] handle_mm_fault+0x36d/0xa20 [ 2478.797059][ T5670] do_user_addr_fault+0x5a3/0x12f0 [ 2478.797132][ T5670] exc_page_fault+0x6f/0xd0 [ 2478.797908][ T5670] asm_exc_page_fault+0x26/0x30 [ 2478.797920][ T5670] RIP: 0033:0x7f5e9133f3b3 [ 2478.797931][ T5670] Code: 25 00 03 00 00 e8 4d b1 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 66 1d 15 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 2478.797942][ T5670] RSP: 002b:00007ffe17d33540 EFLAGS: 00010202 [ 2478.798002][ T5670] RAX: 0000000000000000 RBX: 00007f5e912b5780 RCX: 0000000000000000 [ 2478.798009][ T5670] RDX: 0000000000000408 RSI: 00007ffe17d33590 RDI: 0000000000000007 [ 2478.798015][ T5670] RBP: 00007ffe17d33ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.798021][ T5670] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f2778a65e0 [ 2478.798027][ T5670] R13: 000055f2a0c39d40 R14: 0000000000000000 R15: 00007ffe17d33a50 [ 2478.798042][ T5670] [ 2478.936144][T30115] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2479.181471][ T5670] Mem-Info: [ 2479.182579][ T5670] active_anon:2828 inactive_anon:5095 isolated_anon:0 [ 2479.182579][ T5670] active_file:1643 inactive_file:2251 isolated_file:0 [ 2479.182579][ T5670] unevictable:1768 dirty:43 writeback:0 [ 2479.182579][ T5670] slab_reclaimable:11016 slab_unreclaimable:90218 [ 2479.182579][ T5670] mapped:32933 shmem:8397 pagetables:1874 [ 2479.182579][ T5670] sec_pagetables:401 bounce:0 [ 2479.182579][ T5670] kernel_misc_reclaimable:0 [ 2479.182579][ T5670] free:15929 free_pcp:1004 free_cma:0 [ 2479.689640][ T5670] Node 0 active_anon:11520kB inactive_anon:4048kB active_file:340kB inactive_file:8624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:13704kB dirty:152kB writeback:0kB shmem:18916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6988kB pagetables:1324kB sec_pagetables:1220kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2479.724949][T25993] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 2479.749347][ T5670] Node 1 active_anon:1224kB inactive_anon:3756kB active_file:772kB inactive_file:15764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101172kB dirty:36kB writeback:0kB shmem:3756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7244kB pagetables:6288kB sec_pagetables:392kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2479.805578][ T5670] Node 0 DMA free:2508kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:12kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.847524][ T5670] lowmem_reserve[]: 0 283 283 283 283 [ 2479.860165][ T5670] Node 0 DMA32 free:15572kB boost:29352kB min:42400kB low:45660kB high:48920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10548kB inactive_anon:1804kB active_file:272kB inactive_file:2828kB unevictable:3536kB writepending:0kB zspages:1120kB present:1032196kB managed:290692kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:80kB free_cma:0kB [ 2479.892649][T25993] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2479.904643][T25993] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2479.922896][ T5670] lowmem_reserve[]: 0 0 0 0 0 [ 2479.924572][T25993] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2479.930243][ T5670] Node 1 DMA32 free:58828kB boost:2048kB min:49192kB low:60976kB high:72760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:440kB inactive_anon:4612kB active_file:2880kB inactive_file:11328kB unevictable:3536kB writepending:136kB zspages:7496kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1668kB local_pcp:800kB free_cma:0kB [ 2479.945955][T25993] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2479.974767][ T5670] lowmem_reserve[]: 0 0 0 0 0 [ 2479.976350][ T5670] Node 0 DMA: 50*4kB (UM) 7*8kB (UM) 11*16kB (UM) 12*32kB (UM) 5*64kB (UM) 3*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2544kB [ 2479.986070][ T5670] Node 0 DMA32: 0*4kB 154*8kB (U) 217*16kB (U) 48*32kB (UE) 40*64kB (UE) 11*128kB (UE) 5*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 12000kB [ 2480.004793][ T5670] Node 1 DMA32: 428*4kB (UME) 817*8kB (UME) 2734*16kB (UME) 143*32kB (UME) 35*64kB (UME) 3*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59192kB [ 2480.009857][ T5670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2480.012912][ T5670] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2480.024774][ T5670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2480.027869][ T5670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2480.031286][ T5670] 9858 total pagecache pages [ 2480.032933][ T5670] 1286 pages in swap cache [ 2480.034435][ T5670] Free swap = 85928kB [ 2480.044763][ T5670] Total swap = 124996kB [ 2480.046173][ T5670] 524155 pages RAM [ 2480.049614][ T5670] 0 pages HighMem/MovableOnly [ 2480.051366][ T5670] 210589 pages reserved [ 2480.056044][ T5670] 0 pages cma reserved [ 2480.057394][ T5670] Unreclaimable slab info: [ 2480.065289][ T5670] Name Used Total [ 2480.067490][ T5670] bio-184 19KB 24KB [ 2480.069443][ T5670] pid_3 38KB 63KB [ 2480.071465][ T5670] pid_2 44KB 78KB [ 2480.073738][ T5670] bio-464 17KB 31KB [ 2480.086304][ T5670] bio-528 19KB 31KB [ 2480.088364][ T5670] bio-544 19KB 31KB [ 2480.095244][ T5670] bio-552 19KB 31KB [ 2480.097309][ T5670] afs_inode_cache 25KB 30KB [ 2480.105705][ T5670] zswap_entry 841KB 897KB [ 2480.109981][ T5670] AF_VSOCK 48KB 153KB [ 2480.112056][ T5670] sw_flow_stats 30KB 44KB [ 2480.124801][ T5670] sw_flow 70KB 122KB [ 2480.126830][ T5670] batadv_tt_change_cache 9KB 16KB [ 2480.128916][ T5670] batadv_tl_cache 26KB 32KB [ 2480.130850][ T5670] ceph_osd_request 30KB 159KB [ 2480.132813][ T5670] ceph_msg 12KB 38KB [ 2480.147136][ T5670] IEEE-802.15.4-MAC 34KB 62KB [ 2480.149122][ T5670] IEEE-802.15.4-RAW 43KB 126KB [ 2480.155005][ T5670] p9_req_t 17KB 39KB [ 2480.157287][ T5670] INET6_SMC 35KB 58KB [ 2480.159898][ T5670] INET_SMC 90KB 187KB [ 2480.162588][ T5670] SMC6 103KB 187KB [ 2480.165633][ T5670] SMC 25KB 250KB [ 2480.167594][T25993] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2480.170705][ T5670] TIPC 27KB 154KB [ 2480.175792][ T5670] rds_tcp_connection 57KB 94KB [ 2480.179289][ T5670] RDS 66KB 216KB [ 2480.183137][ T5670] rds_connection 31KB 62KB [ 2480.208963][T25993] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2480.212543][T25993] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2480.216058][T25993] usb 11-1: Product: syz [ 2480.217564][T25993] usb 11-1: Manufacturer: syz [ 2480.233106][T30108] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2480.271222][T25993] cdc_wdm 11-1:1.0: skipping garbage [ 2480.275665][T25993] cdc_wdm 11-1:1.0: skipping garbage [ 2480.286611][T25993] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 2480.289046][T25993] cdc_wdm 11-1:1.0: Unknown control protocol [ 2480.522033][ T5670] SCTPv6 69KB 210KB [ 2480.524046][ T5670] SCTP 35KB 183KB [ 2480.526582][ T5670] sctp_chunk 8KB 70KB [ 2480.528526][ T5670] sctp_bind_bucket 11KB 20KB [ 2480.530670][ T5670] PNPIPE 58KB 154KB [ 2480.533089][ T5670] PHONET 16KB 31KB [ 2480.535470][ T5670] L2TP/IPv6 46KB 159KB [ 2480.538887][ T5670] L2TP/IP 47KB 94KB [ 2480.542629][ T5670] KCM 62KB 124KB [ 2480.546164][ T5670] kcm_mux 66KB 126KB [ 2480.548798][ T5670] RXRPC 30KB 192KB [ 2480.551288][ T5670] rxrpc_call_jar 127KB 223KB [ 2480.554012][ T5670] can_gw 7KB 8KB [ 2480.557252][ T5670] can_receiver 24KB 35KB [ 2480.560285][ T5670] net_bridge_fdb_entry 24KB 35KB [ 2480.563507][ T5670] nf-frags 34KB 63KB [ 2480.567471][ T5670] MPTCPv6 82KB 223KB [ 2480.570052][ T5670] request_sock_subflow_v6 12KB 15KB [ 2480.572821][ T5670] ip6-frags 18KB 31KB [ 2480.575815][ T5670] fib6_node 44KB 80KB [ 2480.578971][ T5670] ip6_dst_cache 37KB 148KB [ 2480.581908][ T5670] mfc6_cache 20KB 24KB [ 2480.584408][ T5670] PINGv6 49KB 185KB [ 2480.586986][ T5670] RAWv6 138KB 247KB [ 2480.589630][ T5670] UDPv6 56KB 182KB [ 2480.592326][ T5670] tw_sock_TCPv6 31KB 63KB [ 2480.595125][ T5670] request_sock_TCPv6 31KB 46KB [ 2480.597810][ T5670] TCPv6 108KB 273KB [ 2480.600826][ T5670] ip_vs_conn 25KB 32KB [ 2480.603547][ T5670] nf_conntrack 32KB 55KB [ 2480.614943][ T5670] wg_peer 79KB 148KB [ 2480.617814][ T5670] allowedips_node 16KB 31KB [ 2480.622851][ T5670] ubi_wl_entry_slab 2KB 3KB [ 2480.627928][ T5670] t10_alua_lu_gp_cache 8KB 15KB [ 2480.633138][ T5670] scsi_sense_cache 60KB 60KB [ 2480.641542][ T5670] virtio_scsi_cmd 21KB 24KB [ 2480.644034][ T5670] bio-136 61KB 80KB [ 2480.648690][ T5670] io_kiocb 5KB 39KB [ 2480.654671][ T5670] bio-264 37KB 55KB [ 2480.662499][ T5670] mqueue_inode_cache 56KB 185KB [ 2480.675083][ T5670] f2fs_bio_post_read_ctx 30KB 31KB [ 2480.687707][ T5670] jfs_mp 14KB 15KB [ 2480.695495][ T5670] fuse_request 10KB 63KB [ 2480.706693][ T5670] cifs_small_rq 28KB 32KB [ 2480.714170][ T5670] cifs_request 67KB 67KB [ 2480.728819][ T5670] cifs_mpx_ids 8KB 15KB [ 2480.738738][ T5670] cifs_io_subrequest 42KB 47KB [ 2480.748220][ T5670] cifs_io_request 105KB 111KB [ 2480.760873][ T5670] nfs_commit_data 24KB 31KB [ 2480.774123][ T5670] nfs_write_data 38KB 63KB [ 2480.783701][ T5670] ecryptfs_sb_cache 22KB 47KB [ 2480.794179][ T5670] jbd2_inode 22KB 27KB [ 2480.801559][ T5670] ext4_system_zone 1KB 3KB [ 2480.809206][ T5670] ext4_io_end_vec 7KB 15KB [ 2480.822347][ T5670] kioctx 32KB 191KB [ 2480.826293][ T5670] aio_kiocb 17KB 39KB [ 2480.840256][ T5670] userfaultfd_ctx_cache 44KB 94KB [ 2480.848619][ T5670] fanotify_fid_event 11KB 15KB [ 2480.857238][ T5670] fanotify_mark 22KB 23KB [ 2480.862910][ T5670] dnotify_mark 22KB 23KB [ 2480.873192][ T5670] dnotify_struct 5KB 7KB [ 2480.882871][ T5670] fasync_cache 37KB 39KB [ 2480.898061][ T5670] zspage 226KB 244KB [ 2480.907159][ T5670] zs_handle 301KB 308KB [ 2480.921492][ T5670] pid_namespace 43KB 123KB [ 2480.929092][ T5670] kvm_gmem_inode_cache 42KB 61KB [ 2480.939971][ T5670] kvm_vcpu 93KB 281KB [ 2480.942695][ T5670] kvm_mmu_page_header 29KB 50KB [ 2480.947154][ T5670] pte_list_desc 34KB 51KB [ 2480.949718][ T5670] x86_emulator 63KB 253KB [ 2480.962382][ T5670] rpc_buffers 57KB 159KB [ 2480.964408][ T5670] rpc_tasks 15KB 62KB [ 2480.984112][ T5670] UNIX-STREAM 72KB 255KB [ 2480.990695][ T5670] UNIX 595KB 609KB [ 2480.996551][ T5670] ip4-frags 9KB 15KB [ 2480.998514][ T5670] mfc_cache 13KB 16KB [ 2481.033444][ T5670] MPTCP 91KB 245KB [ 2481.049321][ T5670] request_sock_subflow_v4 50KB 61KB [ 2481.062713][ T5670] tcp_bind2_bucket 18KB 40KB [ 2481.073047][ T5670] tcp_bind_bucket 39KB 64KB [ 2481.086558][ T5670] inet_peer 13KB 16KB [ 2481.102840][ T5670] xfrm_dst 27KB 55KB [ 2481.110478][ T5670] xfrm_state 17KB 159KB [ 2481.124641][ T5670] ip_fib_trie 24KB 40KB [ 2481.135343][ T5670] ip_fib_alias 53KB 86KB [ 2481.137501][ T5670] rtable 31KB 104KB [ 2481.154420][ T5670] PING 49KB 157KB [ 2481.156806][ T5670] RAW 73KB 159KB [ 2481.173075][ T5670] UDP 114KB 223KB [ 2481.188871][ T5670] tw_sock_TCP 25KB 47KB [ 2481.191308][ T5670] request_sock_TCP 27KB 38KB [ 2481.202060][ T5670] TCP 260KB 321KB [ 2481.204377][ T5670] fs_bio_integrity 7KB 8KB [ 2481.212304][ T5670] hugetlbfs_inode_cache 33KB 188KB [ 2481.214377][ T5670] fscache_cookie_jar 6KB 15KB [ 2481.225022][ T5670] netfs_subrequest 57KB 85KB [ 2481.236027][ T5670] netfs_request 152KB 207KB [ 2481.250366][ T5670] bio-280 21KB 23KB [ 2481.258918][ T5670] ep_head 4KB 12KB [ 2481.275452][ T5670] eventpoll_pwq 17KB 31KB [ 2481.281657][ T5670] eventpoll_epi 59KB 86KB [ 2481.287927][ T5670] inotify_inode_mark 37KB 54KB [ 2481.296924][ T5670] sgpool-128 505KB 714KB [ 2481.299017][ T5670] sgpool-64 295KB 446KB [ 2481.306963][ T5670] sgpool-32 121KB 315KB [ 2481.309108][ T5670] sgpool-16 150KB 234KB [ 2481.313701][ T5670] sgpool-8 213KB 250KB [ 2481.315763][ T5670] bio_crypt_ctx 9KB 11KB [ 2481.324894][ T5670] bio_integrity_data 7KB 8KB [ 2481.327101][ T5670] request_queue 214KB 242KB [ 2481.329117][ T5670] blkdev_ioc 26KB 47KB [ 2481.331360][ T5670] bio-200 686KB 769KB [ 2481.333631][ T5670] biovec-max 1377KB 1606KB [ 2481.345253][ T5670] biovec-128 259KB 286KB [ 2481.347309][ T5670] biovec-64 437KB 567KB [ 2481.354854][ T5670] biovec-16 178KB 195KB [ 2481.357906][ T5670] mm_slot 10KB 27KB [ 2481.360431][ T5670] ksm_mm_slot 14KB 16KB [ 2481.363053][ T5670] ksm_stable_node 10KB 15KB [ 2481.374795][ T5670] ksm_rmap_item 7KB 19KB [ 2481.378759][ T5670] user_namespace 10KB 30KB [ 2481.383312][ T5670] uid_cache 21KB 39KB [ 2481.387981][ T5670] iommu_iova_magazine 1011KB 1071KB [ 2481.394776][ T5670] iommu_iova 311KB 332KB [ 2481.404790][ T5670] dmaengine-unmap-256 26KB 30KB [ 2481.407130][ T5670] dmaengine-unmap-128 14KB 30KB [ 2481.409424][ T5670] dmaengine-unmap-16 7KB 8KB [ 2481.412173][ T5670] dmaengine-unmap-2 3KB 4KB [ 2481.416170][ T5670] QIPCRTR 56KB 125KB [ 2481.427303][ T5670] audit_buffer 13KB 42KB [ 2481.432235][ T5670] skbuff_ext_cache 19KB 40KB [ 2481.439219][ T5670] skbuff_small_head 732KB 787KB [ 2481.450762][ T5670] skbuff_fclone_cache 95KB 175KB [ 2481.456456][ T5670] skbuff_head_cache 1000KB 1109KB [ 2481.463331][ T5670] configfs_dir_cache 29KB 32KB [ 2481.470225][ T5670] file_lease_cache 24KB 31KB [ 2481.513802][ T5670] file_lock_cache 17KB 63KB [ 2481.523883][ T5670] file_lock_ctx 36KB 43KB [ 2481.528224][ T5670] fsnotify_inode_mark_connector 30KB 51KB [ 2481.537661][ T5670] posix_timers_cache 26KB 48KB [ 2481.539968][ T5670] taskstats 41KB 159KB [ 2481.550895][ T5670] mem_cgroup_per_node 129KB 185KB [ 2481.556114][ T5670] mem_cgroup 165KB 216KB [ 2481.560690][ T5670] proc_dir_entry 691KB 917KB [ 2481.565689][ T5670] pde_opener 5KB 15KB [ 2481.570579][ T5670] seq_file 24KB 86KB [ 2481.584937][ T5670] sigqueue 15KB 35KB [ 2481.587897][ T5670] shmem_inode_cache 7584KB 7729KB [ 2481.590701][ T5670] kernfs_iattrs_cache 23KB 27KB [ 2481.593503][ T5670] kernfs_node_cache 33033KB 33074KB [ 2481.604907][ T5670] mnt_cache 129KB 153KB [ 2481.607640][ T5670] bfilp 41KB 63KB [ 2481.610702][ T5670] filp 643KB 669KB [ 2481.613619][ T5670] names_cache 404KB 416KB [ 2481.617877][ T5670] net_namespace 106KB 222KB [ 2481.623231][ T5670] ima_iint_cache 27KB 63KB [ 2481.631270][ T5670] lsm_inode_cache 2809KB 2819KB [ 2481.644776][ T5670] lsm_file_cache 254KB 275KB [ 2481.646844][ T5670] key_jar 19KB 86KB [ 2481.648890][ T5670] uts_namespace 78KB 108KB [ 2481.651008][ T5670] nsproxy 9KB 35KB [ 2481.653209][ T5670] vm_area_struct 1058KB 1164KB [ 2481.663601][T25993] usb 11-1: USB disconnect, device number 31 [ 2481.665839][ T5670] fs_cache 41KB 64KB [ 2481.665856][ T5670] files_cache 156KB 223KB [ 2481.665872][ T5670] signal_cache 828KB 1879KB [ 2481.665888][ T5670] sighand_cache 1061KB 2284KB [ 2481.665902][ T5670] task_struct 4366KB 4800KB [ 2481.665919][ T5670] cred 146KB 340KB [ 2481.684865][ T5670] anon_vma_chain 455KB 472KB [ 2481.687136][ T5670] anon_vma 413KB 431KB [ 2481.689131][ T5670] pid 149KB 351KB [ 2481.691084][ T5670] Acpi-Operand 195KB 328KB [ 2481.693157][ T5670] Acpi-ParseExt 11KB 31KB [ 2481.704954][ T5670] Acpi-Parse 12KB 23KB [ 2481.707275][ T5670] Acpi-State 16KB 27KB [ 2481.709195][ T5670] Acpi-Namespace 35KB 52KB [ 2481.711118][ T5670] shared_policy_node 11KB 16KB [ 2481.713069][ T5670] numa_policy 9KB 20KB [ 2481.724938][ T5670] perf_event 52KB 93KB [ 2481.727336][ T5670] trace_event_file 540KB 540KB [ 2481.729409][ T5670] ftrace_event_field 1031KB 1031KB [ 2481.731711][ T5670] pool_workqueue 2265KB 2288KB [ 2481.733670][ T5670] task_group 73KB 94KB [ 2481.744993][ T5670] maple_node 733KB 1448KB [ 2481.749514][ T5670] mm_struct 376KB 520KB [ 2481.751536][ T5670] vmap_area 358KB 804KB [ 2481.756568][ T5670] debug_objects_cache 3613KB 8044KB [ 2481.763159][ T5670] page->ptl 133KB 149KB [ 2481.766793][ T5670] kmalloc-cg-8k 2080KB 2240KB [ 2481.768853][ T5670] kmalloc-cg-4k 18040KB 18472KB [ 2481.770912][ T5670] kmalloc-cg-2k 12976KB 13200KB [ 2481.772857][ T5670] kmalloc-cg-1k 3210KB 3776KB [ 2481.784802][ T5670] kmalloc-cg-512 1335KB 1740KB [ 2481.786868][ T5670] kmalloc-cg-256 610KB 656KB [ 2481.791041][ T5670] kmalloc-cg-128 290KB 324KB [ 2481.795219][ T5670] kmalloc-cg-64 85KB 104KB [ 2481.800095][ T5670] kmalloc-cg-32 49KB 168KB [ 2481.804100][ T5670] kmalloc-cg-16 9KB 32KB [ 2481.807527][ T5670] kmalloc-cg-8 28KB 48KB [ 2481.814761][ T5670] kmalloc-cg-192 78KB 108KB [ 2481.817029][ T5670] kmalloc-cg-96 60KB 88KB [ 2481.821589][ T5670] kmalloc-8k 5264KB 5984KB [ 2481.826212][ T5670] kmalloc-4k 26920KB 27856KB [ 2481.833276][ T5670] kmalloc-2k 14200KB 14656KB [ 2481.837802][ T5670] kmalloc-1k 7074KB 8672KB [ 2481.845790][ T5670] kmalloc-512 11461KB 11744KB [ 2481.848062][ T5670] kmalloc-256 4786KB 5224KB [ 2481.850431][ T5670] kmalloc-128 3720KB 4760KB [ 2481.852407][ T5670] kmalloc-64 3138KB 3244KB [ 2481.854372][ T5670] kmalloc-32 2138KB 2404KB [ 2481.871305][ T5670] kmalloc-16 549KB 756KB [ 2481.873334][ T5670] kmalloc-8 507KB 596KB [ 2481.881066][ T5670] kmalloc-192 3197KB 3240KB [ 2481.885203][ T5670] kmalloc-96 3106KB 4340KB [ 2481.891815][ T5670] kmem_cache_node 213KB 220KB [ 2481.893790][ T5670] kmem_cache 176KB 218KB [ 2481.909437][ T5670] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=dhcpcd,pid=5670,uid=0 [ 2481.920287][ T5670] Out of memory (oom_kill_allocating_task): Killed process 5670 (dhcpcd) total-vm:3844kB, anon-rss:0kB, file-rss:8kB, shmem-rss:0kB, UID:0 pgtables:52kB oom_score_adj:0 [ 2482.247361][T30123] overlayfs: missing 'lowerdir' [ 2486.029162][T30138] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2486.538937][T30148] siw: device registration error -23 [ 2488.572965][T30154] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2488.576971][T30154] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2492.099821][T30162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2492.121268][T30162] netlink: 'syz.6.4742': attribute type 1 has an invalid length. [ 2492.198263][T30165] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4742'. [ 2493.107506][T30162] bond3: entered promiscuous mode [ 2493.112694][T30162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2494.240569][T30178] ceph: No mds server is up or the cluster is laggy [ 2494.316541][T25993] libceph: connect (1)[c::]:6789 error -101 [ 2494.318613][T25993] libceph: mon0 (1)[c::]:6789 connect error [ 2494.335993][T30183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2494.339482][T30183] 8021q: adding VLAN 0 to HW filter on device team0 [ 2494.355204][T30183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2494.751071][T30189] overlayfs: missing 'lowerdir' [ 2495.852540][T30204] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2495.922899][T30200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4751'. [ 2496.113177][T30207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2496.148325][T30203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'. [ 2499.244471][T30228] overlayfs: missing 'lowerdir' [ 2499.553338][T30234] mkiss: ax0: crc mode is auto. [ 2501.555146][T16285] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 2501.636636][T30247] /dev/nullb0: Can't open blockdev [ 2501.717959][T30246] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2501.724307][T30246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4763'. [ 2501.727383][T16285] usb 11-1: Using ep0 maxpacket: 16 [ 2501.733972][T16285] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 2501.739968][T16285] usb 11-1: config 0 has no interface number 0 [ 2501.746497][T16285] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 2501.757021][T16285] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2501.760258][T16285] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2501.764946][T16285] usb 11-1: Product: syz [ 2501.766329][T16285] usb 11-1: SerialNumber: syz [ 2501.778647][T16285] usb 11-1: config 0 descriptor?? [ 2501.786803][T16285] usbhid 11-1:0.8: couldn't find an input interrupt endpoint [ 2503.466443][T16285] usb 11-1: USB disconnect, device number 32 [ 2504.525879][T30255] siw: device registration error -23 [ 2505.512394][T30252] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2505.530675][T30252] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2505.534096][T30252] overlayfs: failed to look up (tracing) for ino (-66) [ 2505.749373][T30252] fuse: fd is not a fuse device [ 2510.344113][T30266] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2510.363098][T30266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'. [ 2533.454019][T30353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4793'. [ 2533.868062][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.293959][T30348] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2534.356569][T30348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4792'. [ 2534.942109][T30363] netlink: 'syz.2.4795': attribute type 6 has an invalid length. [ 2537.763453][T30372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4796'. [ 2539.328523][T15898] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2539.495600][T15898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2539.509730][T15898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2539.527564][T15898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2539.552539][T15898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2539.569631][T15898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.595386][T15898] usb 7-1: config 0 descriptor?? [ 2543.918944][T15898] usbhid 7-1:0.0: can't add hid device: -71 [ 2543.926919][T15898] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2543.969385][T15898] usb 7-1: USB disconnect, device number 26 [ 2561.604945][T16285] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 2561.767140][T16285] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.772071][T16285] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.783735][T16285] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2561.792606][T16285] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2561.797062][T16285] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.801448][T16285] usb 11-1: config 0 descriptor?? [ 2564.104982][T16285] usbhid 11-1:0.0: can't add hid device: -71 [ 2564.107603][T16285] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 2564.119063][T16285] usb 11-1: USB disconnect, device number 33 [ 2573.347999][T30452] ------------[ cut here ]------------ [ 2573.349864][T30452] inode->i_blocks [ 2573.349872][T30452] WARNING: mm/shmem.c:1433 at shmem_evict_inode+0x93b/0xc40, CPU#1: syz.6.4819/30452 [ 2573.354253][T30452] Modules linked in: [ 2573.355979][T30452] CPU: 1 UID: 0 PID: 30452 Comm: syz.6.4819 Tainted: G L syzkaller #0 PREEMPT(full) [ 2573.359788][T30452] Tainted: [L]=SOFTLOCKUP [ 2573.361235][T30452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2573.364605][T30452] RIP: 0010:shmem_evict_inode+0x93b/0xc40 [ 2573.366865][T30452] Code: fe e8 09 b4 b7 ff 45 85 ff 75 ac e8 4f b9 b7 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 10 24 90 ff e9 e5 fd ff ff e8 36 b9 b7 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 28 b9 b7 ff 4c 89 e2 48 b8 00 00 00 00 [ 2573.373549][T30452] RSP: 0000:ffffc9000e8bf6f8 EFLAGS: 00010293 [ 2573.375697][T30452] RAX: 0000000000000000 RBX: ffff88802a0b0d50 RCX: ffffffff82510743 [ 2573.378187][T30452] RDX: ffff888028bcca00 RSI: ffffffff82510dea RDI: ffff888028bcca00 [ 2573.380916][T30452] RBP: ffffc9000e8bf820 R08: 0000000000000007 R09: 0000000000000000 [ 2573.383457][T30452] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 2573.386156][T30452] R13: 0000000000000000 R14: ffff88802a0b0d80 R15: 0000000000000000 [ 2573.389308][T30452] FS: 0000000000000000(0000) GS:ffff8880971e8000(0000) knlGS:0000000000000000 [ 2573.392816][T30452] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2573.395053][T30452] CR2: 00007fda07e00020 CR3: 000000006c7e0000 CR4: 0000000000352ef0 [ 2573.397674][T30452] DR0: 000000006000003f DR1: 0000000000000000 DR2: 0000000000000000 [ 2573.400429][T30452] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2573.403309][T30452] Call Trace: [ 2573.404604][T30452] [ 2573.405699][T30452] ? inode_wait_for_writeback+0x171/0x390 [ 2573.407676][T30452] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2573.409529][T30452] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2573.412002][T30452] ? find_held_lock+0x2b/0x80 [ 2573.413764][T30452] ? evict+0x37e/0xad0 [ 2573.415428][T30452] ? evict+0x37e/0xad0 [ 2573.416758][T30452] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2573.418534][T30452] evict+0x3c2/0xad0 [ 2573.419836][T30452] ? find_held_lock+0x2b/0x80 [ 2573.421395][T30452] ? __pfx_evict+0x10/0x10 [ 2573.422946][T30452] ? iput.part.0+0x5fd/0xf50 [ 2573.424851][T30452] iput.part.0+0x605/0xf50 [ 2573.426530][T30452] ? __pfx_inode_just_drop+0x10/0x10 [ 2573.428419][T30452] iput+0x35/0x40 [ 2573.429660][T30452] dentry_unlink_inode+0x2a1/0x490 [ 2573.431346][T30452] __dentry_kill+0x1d0/0x600 [ 2573.432845][T30452] finish_dput+0x76/0x480 [ 2573.434309][T30452] dput.part.0+0x456/0x570 [ 2573.435959][T30452] dput+0x1f/0x30 [ 2573.437475][T30452] __fput+0x519/0xb50 [ 2573.439229][T30452] ? _raw_spin_unlock_irq+0x23/0x50 [ 2573.441080][T30452] task_work_run+0x150/0x240 [ 2573.442729][T30452] ? __pfx_task_work_run+0x10/0x10 [ 2573.444396][T30452] ? do_raw_spin_unlock+0x145/0x1e0 [ 2573.446304][T30452] do_exit+0x8d2/0x2a60 [ 2573.447825][T30452] ? __pfx_do_exit+0x10/0x10 [ 2573.449341][T30452] ? do_raw_spin_lock+0x128/0x260 [ 2573.451040][T30452] ? find_held_lock+0x2b/0x80 [ 2573.452720][T30452] ? get_signal+0x7e0/0x21e0 [ 2573.454533][T30452] do_group_exit+0xd5/0x2a0 [ 2573.456383][T30452] get_signal+0x1ec7/0x21e0 [ 2573.458159][T30452] ? __pfx_get_signal+0x10/0x10 [ 2573.459898][T30452] ? do_futex+0x192/0x350 [ 2573.461426][T30452] arch_do_signal_or_restart+0x91/0x770 [ 2573.463589][T30452] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2573.465921][T30452] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 2573.467894][T30452] ? rcu_is_watching+0x12/0xc0 [ 2573.469513][T30452] exit_to_user_mode_loop+0x86/0x4a0 [ 2573.471522][T30452] ? __do_fast_syscall_32+0x373/0x950 [ 2573.473578][T30452] __do_fast_syscall_32+0x608/0x950 [ 2573.475670][T30452] do_fast_syscall_32+0x32/0x70 [ 2573.477389][T30452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2573.479583][T30452] RIP: 0023:0xf70befcc [ 2573.480901][T30452] Code: Unable to access opcode bytes at 0xf70befa2. [ 2573.483123][T30452] RSP: 002b:00000000f54ad5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 2573.485821][T30452] RAX: fffffffffffffe00 RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 2573.488515][T30452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 2573.491438][T30452] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 2573.494346][T30452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2573.497111][T30452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2573.499861][T30452] [ 2573.500878][T30452] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2573.503673][T30452] CPU: 1 UID: 0 PID: 30452 Comm: syz.6.4819 Tainted: G L syzkaller #0 PREEMPT(full) [ 2573.507328][T30452] Tainted: [L]=SOFTLOCKUP [ 2573.508872][T30452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2573.512237][T30452] Call Trace: [ 2573.513354][T30452] [ 2573.514325][T30452] dump_stack_lvl+0x100/0x190 [ 2573.515878][T30452] vpanic+0x552/0x970 [ 2573.517170][T30452] ? __pfx_vpanic+0x10/0x10 [ 2573.518751][T30452] panic+0xd1/0xe0 [ 2573.520053][T30452] ? __pfx_panic+0x10/0x10 [ 2573.521786][T30452] ? check_panic_on_warn+0x1f/0x90 [ 2573.523606][T30452] check_panic_on_warn.cold+0x19/0x34 [ 2573.525433][T30452] ? shmem_evict_inode+0x93b/0xc40 [ 2573.527161][T30452] __warn.cold+0x191/0x328 [ 2573.528656][T30452] __report_bug+0x296/0x3d0 [ 2573.530372][T30452] ? shmem_evict_inode+0x93b/0xc40 [ 2573.532201][T30452] ? __pfx___report_bug+0x10/0x10 [ 2573.533999][T30452] ? find_held_lock+0x2b/0x80 [ 2573.535706][T30452] ? inode_set_ctime_current+0x9c/0x870 [ 2573.537751][T30452] ? rcu_is_watching+0x12/0xc0 [ 2573.539410][T30452] ? timestamp_truncate+0x22e/0x2f0 [ 2573.541255][T30452] ? shmem_evict_inode+0x93b/0xc40 [ 2573.542941][T30452] report_bug+0xb2/0x220 [ 2573.544400][T30452] ? shmem_evict_inode+0x93b/0xc40 [ 2573.546237][T30452] handle_bug+0x16a/0x2a0 [ 2573.547718][T30452] exc_invalid_op+0x17/0x50 [ 2573.549264][T30452] asm_exc_invalid_op+0x1a/0x20 [ 2573.551097][T30452] RIP: 0010:shmem_evict_inode+0x93b/0xc40 [ 2573.553287][T30452] Code: fe e8 09 b4 b7 ff 45 85 ff 75 ac e8 4f b9 b7 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 10 24 90 ff e9 e5 fd ff ff e8 36 b9 b7 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 28 b9 b7 ff 4c 89 e2 48 b8 00 00 00 00 [ 2573.559135][T30452] RSP: 0000:ffffc9000e8bf6f8 EFLAGS: 00010293 [ 2573.561273][T30452] RAX: 0000000000000000 RBX: ffff88802a0b0d50 RCX: ffffffff82510743 [ 2573.564230][T30452] RDX: ffff888028bcca00 RSI: ffffffff82510dea RDI: ffff888028bcca00 [ 2573.567175][T30452] RBP: ffffc9000e8bf820 R08: 0000000000000007 R09: 0000000000000000 [ 2573.569822][T30452] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 2573.572388][T30452] R13: 0000000000000000 R14: ffff88802a0b0d80 R15: 0000000000000000 [ 2573.574931][T30452] ? shmem_evict_inode+0x293/0xc40 [ 2573.576550][T30452] ? shmem_evict_inode+0x93a/0xc40 [ 2573.578190][T30452] ? shmem_evict_inode+0x93a/0xc40 [ 2573.580037][T30452] ? inode_wait_for_writeback+0x171/0x390 [ 2573.582088][T30452] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2573.584163][T30452] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2573.586255][T30452] ? find_held_lock+0x2b/0x80 [ 2573.587859][T30452] ? evict+0x37e/0xad0 [ 2573.589309][T30452] ? evict+0x37e/0xad0 [ 2573.590675][T30452] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2573.592448][T30452] evict+0x3c2/0xad0 [ 2573.593750][T30452] ? find_held_lock+0x2b/0x80 [ 2573.595270][T30452] ? __pfx_evict+0x10/0x10 [ 2573.596812][T30452] ? iput.part.0+0x5fd/0xf50 [ 2573.598649][T30452] iput.part.0+0x605/0xf50 [ 2573.600253][T30452] ? __pfx_inode_just_drop+0x10/0x10 [ 2573.602198][T30452] iput+0x35/0x40 [ 2573.603521][T30452] dentry_unlink_inode+0x2a1/0x490 [ 2573.605208][T30452] __dentry_kill+0x1d0/0x600 [ 2573.606772][T30452] finish_dput+0x76/0x480 [ 2573.608197][T30452] dput.part.0+0x456/0x570 [ 2573.609673][T30452] dput+0x1f/0x30 [ 2573.610914][T30452] __fput+0x519/0xb50 [ 2573.612295][T30452] ? _raw_spin_unlock_irq+0x23/0x50 [ 2573.614361][T30452] task_work_run+0x150/0x240 [ 2573.616177][T30452] ? __pfx_task_work_run+0x10/0x10 [ 2573.617914][T30452] ? do_raw_spin_unlock+0x145/0x1e0 [ 2573.619595][T30452] do_exit+0x8d2/0x2a60 [ 2573.620941][T30452] ? __pfx_do_exit+0x10/0x10 [ 2573.622492][T30452] ? do_raw_spin_lock+0x128/0x260 [ 2573.624117][T30452] ? find_held_lock+0x2b/0x80 [ 2573.625789][T30452] ? get_signal+0x7e0/0x21e0 [ 2573.627430][T30452] do_group_exit+0xd5/0x2a0 [ 2573.628961][T30452] get_signal+0x1ec7/0x21e0 [ 2573.630507][T30452] ? __pfx_get_signal+0x10/0x10 [ 2573.632195][T30452] ? do_futex+0x192/0x350 [ 2573.633744][T30452] arch_do_signal_or_restart+0x91/0x770 [ 2573.635698][T30452] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2573.637926][T30452] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 2573.639863][T30452] ? rcu_is_watching+0x12/0xc0 [ 2573.641611][T30452] exit_to_user_mode_loop+0x86/0x4a0 [ 2573.643481][T30452] ? __do_fast_syscall_32+0x373/0x950 [ 2573.645309][T30452] __do_fast_syscall_32+0x608/0x950 [ 2573.647357][T30452] do_fast_syscall_32+0x32/0x70 [ 2573.649375][T30452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2573.651902][T30452] RIP: 0023:0xf70befcc [ 2573.653240][T30452] Code: Unable to access opcode bytes at 0xf70befa2. [ 2573.655353][T30452] RSP: 002b:00000000f54ad5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 2573.657993][T30452] RAX: fffffffffffffe00 RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 2573.660670][T30452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 2573.663501][T30452] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 2573.666015][T30452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2573.668617][T30452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2573.671416][T30452] [ 2573.673651][T30452] Kernel Offset: disabled [ 2573.675124][T30452] Rebooting in 86400 seconds..