last executing test programs: 2h18m27.217793945s ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2h18m24.011032503s ago: executing program 0 (id=14): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r1) close(r2) getgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) 2h18m19.243329076s ago: executing program 0 (id=16): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2h18m14.499928397s ago: executing program 0 (id=17): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() unlinkat(0xffffffffffffffff, 0x0, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000c80)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r4 = dup(r3) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x5437, 0x0) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 2h18m2.660243823s ago: executing program 0 (id=20): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0xc000) 2h17m56.291037825s ago: executing program 0 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"1c2457923c11d4b8affbf50000ef00000000020000c90300", r2}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 2h17m10.033224772s ago: executing program 32 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"1c2457923c11d4b8affbf50000ef00000000020000c90300", r2}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 2h13m18.756244321s ago: executing program 1 (id=66): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) close(r1) close(r2) getgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) 2h13m13.22778518s ago: executing program 1 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) 2h13m9.978233521s ago: executing program 1 (id=70): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2c020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2h13m3.477913584s ago: executing program 1 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 2h12m57.978927471s ago: executing program 1 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2h12m55.291991993s ago: executing program 1 (id=77): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 2h12m47.186155926s ago: executing program 33 (id=77): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 1h35m44.392105913s ago: executing program 2 (id=743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 1h35m40.404825776s ago: executing program 2 (id=745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724"}) 1h35m36.698507184s ago: executing program 2 (id=747): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000a00)=""/67, 0x43}, {&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f0000000940)=""/106, 0x6a}], 0xb, 0x0, 0x0, 0xb00}}], 0x1, 0x2100, 0x0) 1h35m35.193445063s ago: executing program 2 (id=748): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0x3) close(0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1h35m30.519473285s ago: executing program 2 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 1h35m26.215769454s ago: executing program 2 (id=750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0x94, 0x0, 0x0) 1h34m39.893126514s ago: executing program 34 (id=750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0x94, 0x0, 0x0) 1h16m21.098801029s ago: executing program 4 (id=1000): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x1, 0x40000, 0x2000, {0x0, 0x0, 0x0, r2, 0x420}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x40}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40091}, 0x4000014) 1h16m16.707856244s ago: executing program 4 (id=1002): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/41, 0x0, 0x29, 0x1, 0x4e6a, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) clock_nanosleep(0x2, 0x1, 0x0, 0xfffffffffffffffe) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r6, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r7, 0xffffffffffffffff, 0x4}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 1h15m47.902223064s ago: executing program 4 (id=1004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 1h15m43.332980665s ago: executing program 4 (id=1006): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}}, 0x0) 1h15m37.35749457s ago: executing program 4 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1h15m32.018202969s ago: executing program 4 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) 1h14m42.781166844s ago: executing program 35 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) 28m39.418020868s ago: executing program 3 (id=1556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 28m30.257041687s ago: executing program 3 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 28m22.623686205s ago: executing program 3 (id=1558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86ddf06712e9001c0400000000000000eaebfd26d4eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7d5010035be8500", 0x13}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) 28m16.339016898s ago: executing program 3 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000020000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013600000000009500000000000000d37ccebe053f0d60"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 28m8.900818788s ago: executing program 3 (id=1562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000980)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x2000000, &(0x7f0000000440)="9771"}) 28m3.650602055s ago: executing program 3 (id=1564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) 27m17.363240717s ago: executing program 36 (id=1564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) 10m6.177575023s ago: executing program 6 (id=1747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 9m57.463196572s ago: executing program 6 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m24.81469287s ago: executing program 6 (id=1751): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0xffffff14, &(0x7f0000000000)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c0400000000002c0012800900010069706970000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 8m51.969309947s ago: executing program 6 (id=1754): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r1}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 8m21.672080161s ago: executing program 6 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x8, 0x0) listen(r7, 0x8b) 7m44.151892002s ago: executing program 6 (id=1758): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xa}, {0x1, 0xfff1}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x4045090) 6m55.699993954s ago: executing program 37 (id=1758): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xa}, {0x1, 0xfff1}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x4045090) 2m26.641293331s ago: executing program 5 (id=1770): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0xfffffffd}) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m53.237140039s ago: executing program 5 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x3) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x8, 0x0) listen(r6, 0x8b) ioctl$sock_TIOCOUTQ(r6, 0x5411, 0x0) 1m13.097515765s ago: executing program 5 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.513836495s ago: executing program 5 (id=1773): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51", 0x3f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 28.182516424s ago: executing program 5 (id=1774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x850) 0s ago: executing program 5 (id=1775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x12) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34595' (ED25519) to the list of known hosts. syzkaller login: [ 288.209692][ T3166] cgroup: Unknown subsys name 'net' [ 288.878519][ T3166] cgroup: Unknown subsys name 'cpuset' [ 288.963450][ T3166] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 342.683797][ T3166] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 425.041218][ T3172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.129582][ T3172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.063593][ T3175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.173779][ T3175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.384530][ T3172] hsr_slave_0: entered promiscuous mode [ 436.458257][ T3172] hsr_slave_1: entered promiscuous mode [ 440.341982][ T3175] hsr_slave_0: entered promiscuous mode [ 440.397791][ T3175] hsr_slave_1: entered promiscuous mode [ 440.414977][ T3175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.420244][ T3175] Cannot create hsr debugfs directory [ 448.233407][ T3172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 448.418552][ T3172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 448.654402][ T3172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 448.943370][ T3172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.242278][ T3175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 450.401154][ T3175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 450.718470][ T3175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 450.860374][ T3175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.681269][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.994220][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.231410][ T3172] veth0_vlan: entered promiscuous mode [ 493.794407][ T3172] veth1_vlan: entered promiscuous mode [ 495.609467][ T3175] veth0_vlan: entered promiscuous mode [ 496.139438][ T3172] veth0_macvtap: entered promiscuous mode [ 496.424840][ T3172] veth1_macvtap: entered promiscuous mode [ 496.590586][ T3175] veth1_vlan: entered promiscuous mode [ 498.919721][ T3172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.923168][ T3172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.925185][ T3172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.944609][ T3172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.142966][ T3175] veth0_macvtap: entered promiscuous mode [ 500.702797][ T3175] veth1_macvtap: entered promiscuous mode [ 501.637375][ T3175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.638909][ T3175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.640144][ T3175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.641288][ T3175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.687436][ T3172] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 514.001791][ T3871] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 514.418632][ T3871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.421045][ T3871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 514.492609][ T3871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 514.494018][ T3871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 514.495222][ T3871] usb 1-1: SerialNumber: syz [ 514.723030][ T3871] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 514.751651][ T3871] usb-storage 1-1:1.0: USB Mass Storage device detected [ 514.832151][ T3871] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 514.864538][ T3871] scsi host0: usb-storage 1-1:1.0 [ 516.053611][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 516.508525][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.513630][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.524568][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 516.538307][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.699292][ T3880] netlink: 'syz.0.4': attribute type 10 has an invalid length. [ 516.710778][ T3880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4'. [ 516.815126][ T10] usb 2-1: config 0 descriptor?? [ 517.722179][ T3880] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 518.687797][ T10] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 518.699463][ T10] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 518.702455][ T10] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 518.704315][ T10] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 518.717366][ T10] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 518.871701][ T10] aquacomputer_d5next 0003:0C70:F00D.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 519.396857][ T25] usb 1-1: USB disconnect, device number 2 [ 520.490965][ T3826] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 526.054716][ T3826] usb 2-1: device descriptor read/64, error -110 [ 526.418351][ T3826] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 526.628639][ T3826] usb 2-1: device descriptor read/64, error -32 [ 526.928196][ T3826] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 526.960348][ T3826] usb 2-1: device descriptor read/8, error -32 [ 527.220236][ T3826] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 527.241074][ T3826] usb 2-1: device descriptor read/8, error -32 [ 527.370887][ T3826] raw-gadget.1 gadget.1: failed to queue suspend event [ 527.423124][ T10] usb 2-1: USB disconnect, device number 2 [ 528.202144][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 528.283873][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 528.372740][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 528.374958][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 528.388114][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 528.467743][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 528.527597][ T10] usb 2-1: device descriptor read/64, error -32 [ 528.648760][ T10] raw-gadget.1 gadget.1: failed to queue suspend event [ 528.660577][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 528.757435][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 528.837272][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 528.839703][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 528.843727][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 528.917362][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 528.987419][ T10] usb 2-1: device descriptor read/64, error -32 [ 529.171532][ T10] raw-gadget.1 gadget.1: failed to queue suspend event [ 529.175193][ T10] usb usb2-port1: attempt power cycle [ 529.180884][ T10] raw-gadget.1 gadget.1: failed to queue disconnect event [ 529.192346][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 529.283587][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 529.320636][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 529.546516][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 529.627544][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 529.652292][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 529.655180][ T10] usb 2-1: device descriptor read/8, error -32 [ 529.779297][ T10] raw-gadget.1 gadget.1: failed to queue suspend event [ 529.791402][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 529.881951][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 530.008948][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 530.029326][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 530.033193][ T10] usb 2-1: device descriptor read/8, error -32 [ 530.139527][ T10] raw-gadget.1 gadget.1: failed to queue suspend event [ 530.157603][ T10] usb usb2-port1: unable to enumerate USB device [ 532.864511][ T3896] raw-gadget.1 gadget.1: failed to queue disconnect event [ 572.992292][ T3984] dvmrp1: entered allmulticast mode [ 633.683329][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.761588][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.873921][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.992401][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.771399][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.940445][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.041292][ T12] bond0 (unregistering): Released all slaves [ 651.768424][ T12] hsr_slave_0: left promiscuous mode [ 651.907356][ T12] hsr_slave_1: left promiscuous mode [ 652.631922][ T12] veth1_macvtap: left promiscuous mode [ 652.648420][ T12] veth0_macvtap: left promiscuous mode [ 652.671317][ T12] veth1_vlan: left promiscuous mode [ 652.692148][ T12] veth0_vlan: left promiscuous mode [ 688.428517][ T3871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 689.289960][ T3871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 689.357428][ T3871] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 689.359938][ T3871] usb 2-1: config 0 has no interface number 0 [ 689.362105][ T3871] usb 2-1: config 0 interface 120 has no altsetting 0 [ 689.750049][ T3871] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=76.4a [ 689.752465][ T3871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.754219][ T3871] usb 2-1: Product: syz [ 689.776607][ T3871] usb 2-1: Manufacturer: syz [ 689.778387][ T3871] usb 2-1: SerialNumber: syz [ 690.298950][ T3871] usb 2-1: config 0 descriptor?? [ 692.192154][ T3871] usbhid 2-1:0.120: couldn't find an input interrupt endpoint [ 692.247470][ T3871] usb 2-1: USB disconnect, device number 7 [ 703.248056][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 703.516527][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 703.611197][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.613251][ T25] usb 2-1: config 0 has no interface number 0 [ 703.615182][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.648235][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.650743][ T25] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 703.652535][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.883810][ T25] usb 2-1: config 0 descriptor?? [ 705.008506][ T4019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.110579][ T25] uclogic 0003:28BD:0094.0002: pen parameters not found [ 705.113387][ T25] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 705.148662][ T4019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.752674][ T3922] usb 2-1: USB disconnect, device number 8 [ 725.622676][ T4019] hsr_slave_0: entered promiscuous mode [ 725.644348][ T4019] hsr_slave_1: entered promiscuous mode [ 738.010900][ T4019] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 738.288628][ T4019] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 738.680312][ T4019] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 739.248457][ T4019] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 760.597418][ T4019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.003773][ T4019] veth0_vlan: entered promiscuous mode [ 826.316238][ T4019] veth1_vlan: entered promiscuous mode [ 828.383037][ T4019] veth0_macvtap: entered promiscuous mode [ 828.762193][ T4019] veth1_macvtap: entered promiscuous mode [ 831.290213][ T4019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.292694][ T4019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.294752][ T4019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.322821][ T4019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.655386][ T4547] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 840.243276][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 841.331767][ T4547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.512320][ T4559] bond1 (unregistering): Released all slaves [ 846.684226][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.757409][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.677243][ T4645] binder: Bad value for 'max' [ 875.329152][ T3277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.348805][ T3277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.143899][ T4649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.184473][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.397043][ T3277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.496807][ T3277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.095208][ T3277] dvmrp1 (unregistering): left allmulticast mode [ 891.691085][ T3277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.934600][ T3277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.115203][ T3277] bond0 (unregistering): Released all slaves [ 893.568436][ T3277] hsr_slave_0: left promiscuous mode [ 893.765145][ T3277] hsr_slave_1: left promiscuous mode [ 894.157243][ T3277] veth1_macvtap: left promiscuous mode [ 894.159376][ T3277] veth0_macvtap: left promiscuous mode [ 894.174344][ T3277] veth1_vlan: left promiscuous mode [ 894.187813][ T3277] veth0_vlan: left promiscuous mode [ 911.250758][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.369387][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.271685][ T4764] capability: warning: `syz.2.85' uses deprecated v2 capabilities in a way that may be insecure [ 953.853784][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.202399][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.427923][ T4674] hsr_slave_0: entered promiscuous mode [ 976.480016][ T4674] hsr_slave_1: entered promiscuous mode [ 976.529879][ T4674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.531189][ T4674] Cannot create hsr debugfs directory [ 982.779329][ T4997] Zero length message leads to an empty skb [ 991.329914][ T4674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 991.560410][ T4674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 991.990501][ T4674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 992.214401][ T4674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1013.743181][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.983676][ T4674] veth0_vlan: entered promiscuous mode [ 1089.483631][ T4674] veth1_vlan: entered promiscuous mode [ 1092.289209][ T4674] veth0_macvtap: entered promiscuous mode [ 1092.756744][ T4674] veth1_macvtap: entered promiscuous mode [ 1095.054165][ T4674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.076990][ T4674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.080779][ T4674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.083525][ T4674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.893726][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf802c345000: rx timeout, send abort [ 1112.907713][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf802c345000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1124.622247][ T5225] input: syz1 as /devices/virtual/input/input0 [ 1138.641015][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf802b15c800: rx timeout, send abort [ 1138.647264][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffffaf802b15c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1147.498632][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.614729][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.756502][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.829230][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.192130][ T5304] fuse: Bad value for 'fd' [ 1204.378904][ T5315] syz.3.135 uses obsolete (PF_INET,SOCK_PACKET) [ 1269.042198][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 1269.109141][ T5375] nbd: socks must be embedded in a SOCK_ITEM attr [ 1318.968019][ T5416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.051880][ T5416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.948623][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.010976][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.439924][ T5423] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 1326.444531][ T5423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.174'. [ 1326.618706][ T5423] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1341.638407][ T5441] team_slave_1: entered promiscuous mode [ 1346.491264][ T5446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.611477][ T5446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.658564][ T5446] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 1347.681612][ T5446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 1348.521212][ T5446] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1373.679239][ T5475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.778261][ T5475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.219804][ T5475] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 1374.221441][ T5475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.188'. [ 1374.222936][ T5475] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1383.442767][ T5486] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 1444.450781][ T5546] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1489.473448][ T5594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 1489.484930][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 1489.490437][ T5594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 1507.262842][ T5609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.572783][ T5609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.532268][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.583942][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.208242][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.229082][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.412473][ T5663] input: syz1 as /devices/virtual/input/input1 [ 1614.705132][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801d5d6c00: rx timeout, send abort [ 1614.716056][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf801d5d6c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1624.089048][ T5705] Illegal XDP return value 4294967274 on prog (id 21) dev syz_tun, expect packet loss! [ 1634.277061][ T5719] mmap: syz.2.254 (5719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1640.354029][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 1640.358964][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 1643.754015][ T5734] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 1643.766528][ T5734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.258'. [ 1643.768502][ T5734] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1652.073201][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 1652.077042][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 1661.923646][ T5759] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 1661.925055][ T5759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'. [ 1661.943129][ T5759] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1714.952377][ T5788] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 1714.953854][ T5788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 1714.955223][ T5788] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1718.768814][ T5792] binder: 5791:5792 ioctl c0306201 200000000240 returned -11 [ 1728.293132][ T5798] binder: 5797:5798 ioctl c0306201 200000000240 returned -11 [ 1731.563479][ T5803] binder: 5801:5803 ioctl c0306201 200000000240 returned -11 [ 1738.531609][ T5812] binder: 5811:5812 ioctl c0306201 200000000240 returned -11 [ 1739.903106][ T5814] binder: 5813:5814 ioctl 4018620d 0 returned -22 [ 1740.112956][ T5814] binder: 5813:5814 ioctl c0306201 200000000240 returned -11 [ 1746.520598][ T5826] binder: 5825:5826 ioctl 4018620d 0 returned -22 [ 1746.651207][ T5826] binder: 5825:5826 ioctl c0306201 200000000240 returned -11 [ 1778.353847][ T5850] binder: 5849:5850 ioctl c0306201 200000000240 returned -11 [ 1784.040745][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 1791.236850][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.245282][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.348795][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 1819.314921][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.390468][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.219427][ T5895] binder: 5894:5895 ioctl c0306201 200000000240 returned -11 [ 1838.637741][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.699597][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.843320][ T5915] binder: 5914:5915 ioctl c0306201 200000000240 returned -11 [ 1859.553319][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.610715][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.352801][ T5930] binder: 5929:5930 ioctl 4018620d 0 returned -22 [ 1871.410397][ T5930] binder: 5929:5930 ioctl c0306201 200000000240 returned -11 [ 1875.620463][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.652885][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.658703][ T5944] binder: 5943:5944 ioctl 4018620d 0 returned -22 [ 1878.762499][ T5944] binder: 5943:5944 ioctl c0306201 200000000240 returned -11 [ 1908.900278][ T5962] binder: 5960:5962 ioctl 4018620d 0 returned -22 [ 1908.958854][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.029327][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.861226][ T5962] binder: 5960:5962 ioctl c0306201 200000000240 returned -11 [ 1919.639265][ T5979] binder: BINDER_SET_CONTEXT_MGR already set [ 1919.641149][ T5979] binder: 5976:5979 ioctl 4018620d 200000000040 returned -16 [ 1919.714897][ T5979] binder: 5976:5979 ioctl c0306201 200000000240 returned -11 [ 1939.932626][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 1948.125149][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 1956.340713][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.404823][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.857050][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.880546][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.869871][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.900191][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.727442][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.861363][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.071947][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.112677][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.579223][ T6159] binder: 6158:6159 ioctl c0306201 200000000240 returned -11 [ 2050.125219][ T6185] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 2052.609383][ T6189] netlink: 68 bytes leftover after parsing attributes in process `syz.3.419'. [ 2058.179812][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.424'. [ 2086.688215][ T6241] ======================================================= [ 2086.688215][ T6241] WARNING: The mand mount option has been deprecated and [ 2086.688215][ T6241] and is ignored by this kernel. Remove the mand [ 2086.688215][ T6241] option from the mount to silence this warning. [ 2086.688215][ T6241] ======================================================= [ 2145.952761][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 2190.188668][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 2195.470582][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.578490][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.711118][ T6375] binder: 6372:6375 ioctl c0306201 0 returned -14 [ 2231.819572][ T6375] binder: 6372:6375 ioctl c0306201 200000000240 returned -11 [ 2245.618503][ T6390] binder: 6388:6390 ioctl c0306201 200000000240 returned -11 [ 2331.818794][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2331.901141][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2332.648446][ T6431] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 2332.650277][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.501'. [ 2332.652130][ T6431] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 2383.893730][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.515'. [ 2415.468694][ T6496] binder: 6495:6496 ioctl c0306201 200000000240 returned -11 [ 2418.897255][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2418.954970][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2419.289789][ T6502] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 2419.292103][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.524'. [ 2419.294413][ T6502] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 2567.522407][ T6635] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 2567.523872][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 2567.547154][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 2621.194406][ T6702] trusted_key: syz.2.596 sent an empty control message without MSG_MORE. [ 2627.863318][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2627.892566][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2653.894459][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2653.980163][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2670.086402][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2670.099299][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2679.534519][ T6781] process 'syz.3.624' launched '/dev/fd/3' with NULL argv: empty string added [ 2703.998035][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.002084][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.004685][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.008460][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.011060][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.013237][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.016324][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.018510][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.021158][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2704.023366][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 2724.562487][ T6821] input: syz0 as /devices/virtual/input/input2 [ 2757.739915][ T6858] veth0: entered promiscuous mode [ 2757.803501][ T6858] __nla_validate_parse: 41 callbacks suppressed [ 2757.803887][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 2806.699567][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.702351][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.704733][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.708612][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.710742][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.713178][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.717068][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.719394][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.721799][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2806.724040][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 2816.857315][ T6920] __nla_validate_parse: 38 callbacks suppressed [ 2816.857633][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.859828][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.861219][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.862583][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.864442][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.867135][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.868521][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.869920][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.871391][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2816.872762][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 2821.119715][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2821.174305][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2822.085101][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2822.157604][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2832.219156][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2832.263563][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2834.388293][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2834.420740][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2852.084534][ T6956] input: syz0 as /devices/virtual/input/input5 [ 2852.530290][ T6957] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 2853.657205][ T6964] __nla_validate_parse: 40 callbacks suppressed [ 2853.657510][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 2853.682144][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2853.777288][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2858.066580][ T6957] syz.3.683: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2858.079812][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.3.683 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 2858.080857][ T6957] Hardware name: riscv-virtio,qemu (DT) [ 2858.081495][ T6957] Call Trace: [ 2858.081903][ T6957] [] dump_backtrace+0x2e/0x3c [ 2858.084526][ T6957] [] show_stack+0x30/0x3c [ 2858.084956][ T6957] [] dump_stack_lvl+0x12e/0x1a6 [ 2858.085619][ T6957] [] dump_stack+0x1c/0x24 [ 2858.086241][ T6957] [] warn_alloc+0x170/0x292 [ 2858.086774][ T6957] [] __vmalloc_node_range_noprof+0xe3c/0x11b0 [ 2858.087471][ T6957] [] vmalloc_user_noprof+0xfc/0x128 [ 2858.088105][ T6957] [] xskq_create+0xf2/0x1ae [ 2858.088562][ T6957] [] xsk_setsockopt+0x5b6/0x908 [ 2858.089015][ T6957] [] do_sock_setsockopt+0x208/0x400 [ 2858.089458][ T6957] [] __sys_setsockopt+0x142/0x1e6 [ 2858.089942][ T6957] [] __riscv_sys_setsockopt+0xa6/0x114 [ 2858.090444][ T6957] [] syscall_handler+0x94/0x118 [ 2858.090956][ T6957] [] do_trap_ecall_u+0x396/0x530 [ 2858.091438][ T6957] [] handle_exception+0x146/0x152 [ 2858.152668][ T6957] Mem-Info: [ 2858.159678][ T6957] active_anon:7384 inactive_anon:0 isolated_anon:0 [ 2858.159678][ T6957] active_file:1224 inactive_file:34976 isolated_file:0 [ 2858.159678][ T6957] unevictable:768 dirty:25 writeback:0 [ 2858.159678][ T6957] slab_reclaimable:2610 slab_unreclaimable:27509 [ 2858.159678][ T6957] mapped:12614 shmem:4812 pagetables:1032 [ 2858.159678][ T6957] sec_pagetables:0 bounce:0 [ 2858.159678][ T6957] kernel_misc_reclaimable:0 [ 2858.159678][ T6957] free:207576 free_pcp:5745 free_cma:52608 [ 2858.171963][ T6957] Node 0 active_anon:29536kB inactive_anon:0kB active_file:4896kB inactive_file:139904kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50456kB dirty:100kB writeback:0kB shmem:19248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6816kB pagetables:4128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2858.177672][ T6957] Node 0 DMA32 free:830304kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29536kB inactive_anon:0kB active_file:4896kB inactive_file:139904kB unevictable:3072kB writepending:100kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:22980kB local_pcp:14960kB free_cma:210432kB [ 2858.187074][ T6957] lowmem_reserve[]: 0 0 0 [ 2858.190967][ T6957] Node 0 DMA32: 318*4kB (UME) 197*8kB (M) 22*16kB (ME) 19*32kB (ME) 38*64kB (ME) 6*128kB (UME) 6*256kB (ME) 9*512kB (UMEC) 6*1024kB (UMC) 0*2048kB 198*4096kB (MC) = 830304kB [ 2858.276676][ T6957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2858.278915][ T6957] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2858.280892][ T6957] 41012 total pagecache pages [ 2858.282363][ T6957] 0 pages in swap cache [ 2858.283743][ T6957] Free swap = 124996kB [ 2858.317111][ T6957] Total swap = 124996kB [ 2858.319250][ T6957] 524288 pages RAM [ 2858.324415][ T6957] 0 pages HighMem/MovableOnly [ 2858.328321][ T6957] 166404 pages reserved [ 2858.329675][ T6957] 52736 pages cma reserved [ 2863.448221][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.491730][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2874.684320][ T6978] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 2878.184797][ T6978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2878.936452][ T7016] input: syz0 as /devices/virtual/input/input6 [ 2879.450983][ T6986] bond1: (slave veth0_to_bond): making interface the new active one [ 2879.623674][ T6986] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2879.772767][ T6991] bond1: entered allmulticast mode [ 2879.774983][ T6991] veth0_to_bond: entered allmulticast mode [ 2886.482769][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2886.552483][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2890.531516][ T36] audit: type=1326 audit(2889.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2890.567493][ T36] audit: type=1326 audit(2889.790:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2890.803280][ T36] audit: type=1326 audit(2890.030:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2890.827614][ T36] audit: type=1326 audit(2890.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2890.860652][ T36] audit: type=1326 audit(2890.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 2890.878760][ T36] audit: type=1326 audit(2890.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2890.909441][ T36] audit: type=1326 audit(2890.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2890.976800][ T36] audit: type=1326 audit(2890.180:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2891.007343][ T36] audit: type=1326 audit(2890.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2891.057450][ T36] audit: type=1326 audit(2890.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.589371][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 2895.589922][ T36] audit: type=1326 audit(2894.810:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.696646][ T36] audit: type=1326 audit(2894.910:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.722089][ T36] audit: type=1326 audit(2894.950:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.793317][ T36] audit: type=1326 audit(2894.990:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.836445][ T36] audit: type=1326 audit(2895.060:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.872018][ T36] audit: type=1326 audit(2895.100:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.903830][ T36] audit: type=1326 audit(2895.100:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.916816][ T36] audit: type=1326 audit(2895.140:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.918480][ T36] audit: type=1326 audit(2895.140:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2895.920119][ T36] audit: type=1326 audit(2895.140:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.3.690" exe="/syz-executor" sig=0 arch=c00000f3 syscall=139 compat=0 ip=0x7fff841d05e8 code=0x7ffc0000 [ 2913.857031][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2914.070307][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2941.786523][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2941.883914][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.275193][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2966.389704][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2976.292587][ T7081] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2982.958257][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2982.964541][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3005.102781][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3005.163654][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.411359][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3026.520906][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.992118][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3035.103627][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3061.162083][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 3111.153700][ T7196] netlink: 27 bytes leftover after parsing attributes in process `syz.3.744'. [ 3111.281837][ T7196] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 3168.907026][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3168.941485][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3195.312833][ T7014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3197.542321][ T7014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3199.443186][ T7014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3201.377567][ T7014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3228.760779][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3229.040203][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3229.099694][ T7014] bond0 (unregistering): Released all slaves [ 3232.469781][ T7014] hsr_slave_0: left promiscuous mode [ 3232.578804][ T7014] hsr_slave_1: left promiscuous mode [ 3233.187922][ T7014] veth1_macvtap: left promiscuous mode [ 3233.191527][ T7014] veth0_macvtap: left promiscuous mode [ 3233.210401][ T7014] veth1_vlan: left promiscuous mode [ 3233.227923][ T7014] veth0_vlan: left promiscuous mode [ 3269.190981][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 3291.937870][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3292.237552][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3313.998985][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3314.112635][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.919079][ T7234] hsr_slave_0: entered promiscuous mode [ 3316.964619][ T7234] hsr_slave_1: entered promiscuous mode [ 3330.765152][ T7234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3331.258401][ T7234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3331.859925][ T7234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3332.630675][ T7234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3342.547496][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3342.571435][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3354.828282][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3368.237304][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 3368.237785][ T36] audit: type=1804 audit(3367.460:194): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.780" name="/" dev="pidfs" ino=7682 res=1 errno=0 [ 3387.008939][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3387.101138][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3407.608966][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3407.685229][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3408.488823][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3408.579326][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3421.307763][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3421.378144][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.957208][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3423.023856][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.147284][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3447.239416][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3455.161805][ T7234] veth0_vlan: entered promiscuous mode [ 3456.549085][ T7234] veth1_vlan: entered promiscuous mode [ 3460.110054][ T7234] veth0_macvtap: entered promiscuous mode [ 3460.392617][ T7234] veth1_macvtap: entered promiscuous mode [ 3463.453416][ T7234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3463.507840][ T7234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3463.510144][ T7234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3463.512104][ T7234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3478.987688][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3479.280148][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3484.738223][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3484.953428][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3485.404162][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3485.552582][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3494.514405][ T7795] netlink: 80 bytes leftover after parsing attributes in process `syz.4.793'. [ 3527.297903][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3527.354570][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3542.702588][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3542.738176][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3547.353440][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3547.391798][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3572.744220][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3572.775346][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3591.703678][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3591.809484][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3592.716776][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3592.899728][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3635.507253][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3635.805118][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3677.226812][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3677.329601][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3688.987276][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.081956][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3709.157973][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3709.188428][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3719.243923][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3719.362419][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3732.638709][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3732.652641][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3753.464617][ T7986] input: syz0 as /devices/virtual/input/input7 [ 3926.073747][ T8182] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 3944.749575][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3944.843491][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3955.534128][ T8212] veth1_to_team: entered promiscuous mode [ 3955.762942][ T8212] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 3963.599692][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3963.623671][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3969.287671][ T8223] pim6reg1: entered promiscuous mode [ 3969.290774][ T8223] pim6reg1: entered allmulticast mode [ 3990.147542][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3990.192161][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4073.319114][ T8322] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 4107.274776][ T8342] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 4173.394792][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4173.443946][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4192.411735][ T8461] binder: 8459:8461 ioctl c018620b 200000000100 returned -14 [ 4214.951164][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4214.979933][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4251.827846][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4251.892646][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4270.080509][ T8519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.999'. [ 4338.569627][ T8551] netlink: 'syz.3.1012': attribute type 16 has an invalid length. [ 4338.570941][ T8551] netlink: 'syz.3.1012': attribute type 3 has an invalid length. [ 4338.572062][ T8551] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1012'. [ 4395.880377][ T5318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4397.293888][ T5318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4398.492279][ T5318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4400.311924][ T5318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4416.942031][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4417.153687][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4417.281936][ T5318] bond0 (unregistering): Released all slaves [ 4419.504627][ T5318] hsr_slave_0: left promiscuous mode [ 4419.594289][ T5318] hsr_slave_1: left promiscuous mode [ 4420.390857][ T5318] veth1_macvtap: left promiscuous mode [ 4420.395079][ T5318] veth0_macvtap: left promiscuous mode [ 4420.451839][ T5318] veth1_vlan: left promiscuous mode [ 4420.462622][ T5318] veth0_vlan: left promiscuous mode [ 4431.557535][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4431.599800][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4521.703224][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4523.708851][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4573.339854][ T8573] hsr_slave_0: entered promiscuous mode [ 4573.423345][ T8573] hsr_slave_1: entered promiscuous mode [ 4577.387299][ T8906] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 4591.960870][ T8573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 4592.570414][ T8573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 4592.990061][ T8573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 4593.503604][ T8573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 4623.350858][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4642.252988][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1040'. [ 4752.638138][ T8573] veth0_vlan: entered promiscuous mode [ 4753.304385][ T8573] veth1_vlan: entered promiscuous mode [ 4762.005085][ T8573] veth0_macvtap: entered promiscuous mode [ 4763.224202][ T8573] veth1_macvtap: entered promiscuous mode [ 4768.798855][ T8573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4768.801685][ T8573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4768.803997][ T8573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4768.814540][ T8573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4779.008237][ T9104] binder: 9103:9104 ioctl c018620b 200000000100 returned -14 [ 4808.744616][ T9126] binder: 9124:9126 ioctl c018620b 200000000100 returned -14 [ 5077.038007][ T9290] block device autoloading is deprecated and will be removed. [ 5082.689457][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5082.772317][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5114.284189][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5114.368604][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5183.466950][ T9399] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 5196.921187][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 5209.263681][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5209.391901][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5251.862052][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5251.949436][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5281.639335][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5281.719993][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5292.326833][ T9473] binder: 9472:9473 ioctl c0306201 200000000240 returned -11 [ 5317.741067][ T9490] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 5355.874068][ T9505] syzkaller0: entered promiscuous mode [ 5355.887844][ T9505] syzkaller0: entered allmulticast mode [ 5395.012348][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5395.059546][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5408.034207][ T9549] binder: BINDER_SET_CONTEXT_MGR already set [ 5408.053083][ T9549] binder: 9547:9549 ioctl 4018620d 200000000040 returned -16 [ 5423.652733][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5423.668211][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5604.407531][ T9705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5604.519281][ T9705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5644.639527][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1222'. [ 5652.615143][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5652.758871][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5677.148505][ T9085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5678.700387][ T9085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5680.120278][ T9085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5681.553408][ T9085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5698.590441][ T9085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5698.938898][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5698.945081][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5698.978133][ T9085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5699.331556][ T9085] bond0 (unregistering): Released all slaves [ 5701.709546][ T9085] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 5701.711292][ T9085] veth0_to_bond: left allmulticast mode [ 5701.860801][ T9085] bond1 (unregistering): Released all slaves [ 5704.397902][ T9085] hsr_slave_0: left promiscuous mode [ 5704.488435][ T9085] hsr_slave_1: left promiscuous mode [ 5705.321056][ T9085] veth1_macvtap: left promiscuous mode [ 5705.324282][ T9085] veth0_macvtap: left promiscuous mode [ 5705.369716][ T9085] veth1_vlan: left promiscuous mode [ 5705.373649][ T9085] veth0_vlan: left promiscuous mode [ 5756.821138][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5756.867801][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5789.850038][ T9776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5790.233337][ T9776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5819.459608][ T9776] hsr_slave_0: entered promiscuous mode [ 5819.549973][ T9776] hsr_slave_1: entered promiscuous mode [ 5819.629812][ T9776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5819.631934][ T9776] Cannot create hsr debugfs directory [ 5844.810301][ T9776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 5845.425087][ T9776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 5845.973353][ T9776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 5846.568822][ T9776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 5873.534652][ T9776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5979.720224][ T9776] veth0_vlan: entered promiscuous mode [ 5980.641640][ T9776] veth1_vlan: entered promiscuous mode [ 5983.139330][ T9776] veth0_macvtap: entered promiscuous mode [ 5983.711830][ T9776] veth1_macvtap: entered promiscuous mode [ 5987.343170][ T9776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5987.350549][ T9776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5987.352515][ T9776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5987.354417][ T9776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6036.229993][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1265'. [ 6036.362707][T10323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1265'. [ 6110.619833][ C1] vkms_vblank_simulate: vblank timer overrun [ 6183.300323][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 6209.570143][T10456] binder: 10455:10456 ioctl 541b 0 returned -22 [ 6237.661282][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6237.763838][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6276.199349][T10527] binder: 10525:10527 ioctl c0306201 0 returned -14 [ 6317.202473][T10565] binder: 10563:10565 ioctl c0306201 0 returned -14 [ 6331.168848][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6331.200093][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6335.079294][ T36] audit: type=1326 audit(6334.290:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1312" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 6346.424416][T10580] binder: 10579:10580 ioctl c0306201 0 returned -14 [ 6362.780109][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6362.884096][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6387.504812][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6387.569773][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6554.964994][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 6617.570032][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6617.588916][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6618.864288][ T36] audit: type=1326 audit(6618.090:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.3.1395" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 6730.734957][T10851] netlink: 'syz.3.1423': attribute type 15 has an invalid length. [ 6758.246842][ T36] audit: type=1326 audit(6757.470:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6758.291670][ T36] audit: type=1326 audit(6757.500:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6758.721296][ T36] audit: type=1326 audit(6757.920:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6758.928623][ T36] audit: type=1326 audit(6758.130:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6758.949340][ T36] audit: type=1326 audit(6758.170:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6759.298425][ T36] audit: type=1326 audit(6758.500:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=424 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6759.301534][ T36] audit: type=1326 audit(6758.500:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6759.356717][ T36] audit: type=1326 audit(6758.500:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.5.1434" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 6954.719134][ T36] audit: type=1326 audit(6953.910:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.5.1493" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 6980.599415][ T36] audit: type=1326 audit(6979.830:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11057 comm="syz.5.1501" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 7064.119198][ T36] audit: type=1800 audit(7063.320:207): pid=11141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1530" name="memory.events" dev="tmpfs" ino=1274 res=0 errno=0 [ 7109.978728][T11188] binder: 11187:11188 ioctl c0306201 0 returned -14 [ 7109.994372][T11188] binder: 11187:11188 ioctl c0306201 200000000240 returned -11 [ 7138.220645][T11209] syz.5.1555: vmalloc error: size 54525952, failed to allocated page array size 106496, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 7138.224136][T11209] CPU: 1 UID: 0 PID: 11209 Comm: syz.5.1555 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 7138.224448][T11209] Hardware name: riscv-virtio,qemu (DT) [ 7138.224559][T11209] Call Trace: [ 7138.224656][T11209] [] dump_backtrace+0x2e/0x3c [ 7138.225019][T11209] [] show_stack+0x30/0x3c [ 7138.225300][T11209] [] dump_stack_lvl+0x12e/0x1a6 [ 7138.225644][T11209] [] dump_stack+0x1c/0x24 [ 7138.225984][T11209] [] warn_alloc+0x170/0x292 [ 7138.226286][T11209] [] __vmalloc_node_range_noprof+0xe3c/0x11b0 [ 7138.226650][T11209] [] __kvmalloc_node_noprof+0x46a/0x6ac [ 7138.226962][T11209] [] xt_alloc_entry_offsets+0x4a/0x76 [ 7138.227280][T11209] [] translate_table+0x2c8/0x195a [ 7138.227555][T11209] [] do_arpt_set_ctl+0x8ee/0xcd4 [ 7138.227837][T11209] [] nf_setsockopt+0x78/0xda [ 7138.228084][T11209] [] ip_setsockopt+0xd2/0xe6 [ 7138.228330][T11209] [] udp_setsockopt+0x7e/0xc2 [ 7138.228628][T11209] [] sock_common_setsockopt+0x90/0xc0 [ 7138.228951][T11209] [] do_sock_setsockopt+0x208/0x400 [ 7138.229272][T11209] [] __sys_setsockopt+0x142/0x1e6 [ 7138.229555][T11209] [] __riscv_sys_setsockopt+0xa6/0x114 [ 7138.229908][T11209] [] syscall_handler+0x94/0x118 [ 7138.230196][T11209] [] do_trap_ecall_u+0x396/0x530 [ 7138.230454][T11209] [] handle_exception+0x146/0x152 [ 7138.261916][T11209] Mem-Info: [ 7138.263800][T11209] active_anon:6581 inactive_anon:0 isolated_anon:0 [ 7138.263800][T11209] active_file:1224 inactive_file:36263 isolated_file:0 [ 7138.263800][T11209] unevictable:768 dirty:21 writeback:0 [ 7138.263800][T11209] slab_reclaimable:2871 slab_unreclaimable:27504 [ 7138.263800][T11209] mapped:12566 shmem:3320 pagetables:1246 [ 7138.263800][T11209] sec_pagetables:0 bounce:0 [ 7138.263800][T11209] kernel_misc_reclaimable:0 [ 7138.263800][T11209] free:210813 free_pcp:6727 free_cma:52608 [ 7138.332372][T11209] Node 0 active_anon:26324kB inactive_anon:0kB active_file:4896kB inactive_file:145052kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50264kB dirty:84kB writeback:0kB shmem:13280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7296kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 7138.429148][T11209] Node 0 DMA32 free:843252kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26324kB inactive_anon:0kB active_file:4896kB inactive_file:145052kB unevictable:3072kB writepending:84kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:26908kB local_pcp:13488kB free_cma:210432kB [ 7138.433794][T11209] lowmem_reserve[]: 0 0 0 [ 7138.448257][T11209] Node 0 DMA32: 1*4kB (E) 2*8kB (ME) 2*16kB (UE) 30*32kB (UE) 169*64kB (UME) 67*128kB (UME) 78*256kB (UM) 54*512kB (UMEC) 17*1024kB (UMEC) 6*2048kB (UME) 182*4096kB (MC) = 843188kB [ 7138.458408][T11209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 7138.459603][T11209] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 7138.460878][T11209] 40807 total pagecache pages [ 7138.462187][T11209] 0 pages in swap cache [ 7138.463433][T11209] Free swap = 124996kB [ 7138.464702][T11209] Total swap = 124996kB [ 7138.476997][T11209] 524288 pages RAM [ 7138.478629][T11209] 0 pages HighMem/MovableOnly [ 7138.480126][T11209] 166404 pages reserved [ 7138.481418][T11209] 52736 pages cma reserved [ 7164.639668][T11229] binder: 11227:11229 ioctl c0306201 200000000240 returned -11 [ 7186.607413][T11244] binder: 11243:11244 ioctl c0306201 200000000240 returned -11 [ 7266.060822][ T8379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7268.181877][ T8379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7269.490478][ T8379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7270.674142][ T8379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7289.353486][ T8379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7289.677818][ T8379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7290.013029][ T8379] bond0 (unregistering): Released all slaves [ 7292.538084][ T8379] hsr_slave_0: left promiscuous mode [ 7292.634377][ T8379] hsr_slave_1: left promiscuous mode [ 7293.240922][ T8379] veth1_macvtap: left promiscuous mode [ 7293.244003][ T8379] veth0_macvtap: left promiscuous mode [ 7293.301496][ T8379] veth1_vlan: left promiscuous mode [ 7293.306202][ T8379] veth0_vlan: left promiscuous mode [ 7348.268496][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1586'. [ 7356.964952][T11347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7357.698509][T11347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7387.271188][T11347] hsr_slave_0: entered promiscuous mode [ 7387.301631][T11347] hsr_slave_1: entered promiscuous mode [ 7387.374478][T11347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 7387.414049][T11347] Cannot create hsr debugfs directory [ 7395.954721][T11687] netlink: 'syz.5.1592': attribute type 10 has an invalid length. [ 7395.968583][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1592'. [ 7396.355889][T11687] vxcan0: entered promiscuous mode [ 7396.362538][T11687] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 7405.731150][T11728] pimreg: entered allmulticast mode [ 7407.564254][T11734] pimreg: left allmulticast mode [ 7413.131543][T11347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 7413.662937][T11347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 7414.483328][T11347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 7414.998738][T11347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 7442.023171][T11347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7457.764139][T11784] syz_tun: entered allmulticast mode [ 7459.834433][T11782] syz_tun: left allmulticast mode [ 7557.759334][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1604'. [ 7557.761792][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1604'. [ 7559.602647][T11834] erspan0: entered promiscuous mode [ 7560.132401][T11834] gretap0: entered promiscuous mode [ 7636.923803][T11347] veth0_vlan: entered promiscuous mode [ 7638.622884][T11347] veth1_vlan: entered promiscuous mode [ 7641.348960][T11347] veth0_macvtap: entered promiscuous mode [ 7641.776987][T11347] veth1_macvtap: entered promiscuous mode [ 7644.075038][T11347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7644.110048][T11347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7644.112016][T11347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7644.113985][T11347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7661.719185][T11908] binder: 11907:11908 ioctl c0306201 200000000240 returned -11 [ 7673.961476][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1614'. [ 7712.514624][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1620'. [ 7740.546730][T11980] binder: 11979:11980 ioctl c0306201 0 returned -14 [ 7740.565039][T11980] binder: 11979:11980 ioctl c0306201 200000000240 returned -11 [ 7743.611706][T11983] syzkaller1: entered promiscuous mode [ 7743.613856][T11983] syzkaller1: entered allmulticast mode [ 7758.320111][T11998] binder: 11997:11998 ioctl c0306201 0 returned -14 [ 7758.370848][T11998] binder: 11997:11998 ioctl c0306201 200000000240 returned -11 [ 7761.593194][T12003] syzkaller1: entered promiscuous mode [ 7761.641097][T12003] syzkaller1: entered allmulticast mode [ 7795.813627][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1648'. [ 7826.743046][T12045] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1654'. [ 7826.797616][T12045] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1654'. [ 7931.913704][T12088] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1670'. [ 7931.923534][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1670'. [ 7939.409315][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1673'. [ 7939.411177][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1673'. [ 8021.578693][T12167] netlink: 'syz.6.1693': attribute type 5 has an invalid length. [ 8124.582349][T12245] fuse: Invalid rootmode [ 8145.470834][T12256] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1722'. [ 8148.501874][T12258] fuse: Bad value for 'rootmode' [ 8174.663316][T12274] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1728'. [ 8177.724495][T12276] fuse: Bad value for 'rootmode' [ 8179.837544][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 8197.211800][T12294] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1734'. [ 8201.154356][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1736'. [ 8221.652240][T12323] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1740'. [ 8239.969738][T12340] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1746'. [ 8598.896788][T12426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8598.934859][T12426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8872.298141][ T37] INFO: task syz.6.1758:12384 blocked for more than 430 seconds. [ 8872.449141][ T37] Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 [ 8872.451273][ T37] Blocked by coredump. [ 8872.452657][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 8872.454586][ T37] task:syz.6.1758 state:D stack:0 pid:12384 tgid:12384 ppid:11347 task_flags:0x40044c flags:0x0000000c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 8872.590591][ T37] Call Trace: [ 8872.592414][ T37] [] __schedule+0x1022/0x4094 [ 8872.594309][ T37] [] schedule+0xc4/0x35e [ 8872.711452][ T37] [] schedule_timeout+0x1c6/0x2ae [ 8872.748240][ T37] [] __wait_for_common+0x1d2/0x3e8 [ 8872.750526][ T37] [] wait_for_completion+0x1a/0x22 [ 8872.752321][ T37] [] rcu_barrier+0x2dc/0x6cc [ 8872.754092][ T37] [] netdev_run_todo+0x294/0x10b4 [ 8872.866324][ T37] [] rtnl_unlock+0x14/0x1c [ 8872.868563][ T37] [] tun_chr_close+0xde/0x230 [ 8872.870416][ T37] [] __fput+0x382/0xa8c [ 8872.872245][ T37] [] ____fput+0x1c/0x26 [ 8872.873953][ T37] [] task_work_run+0x16a/0x25e [ 8872.963924][ T37] [] do_exit+0x844/0x28ca [ 8872.988260][ T37] [] do_group_exit+0xd4/0x26c [ 8872.990172][ T37] [] get_signal+0x207c/0x22fc [ 8872.992010][ T37] [] arch_do_signal_or_restart+0x5d8/0x24c6 [ 8872.993866][ T37] [] exit_to_user_mode_loop+0x90/0x134 [ 8873.150360][ T37] [] do_trap_ecall_u+0x3f0/0x530 [ 8873.152632][ T37] [] handle_exception+0x146/0x152 [ 8873.155282][ T37] [ 8873.155282][ T37] Showing all locks held in the system: [ 8873.222536][ T37] 1 lock held by kworker/R-mm_pe/14: [ 8873.224198][ T37] #0: ffffffff88291a28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x776/0xd68 [ 8873.303169][ T37] 1 lock held by khungtaskd/37: [ 8873.304651][ T37] #0: ffffffff883dc420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [ 8873.414160][ T37] 3 locks held by syslogd/2985: [ 8873.487770][ T37] 2 locks held by getty/3138: [ 8873.489636][ T37] #0: ffffaf801d3f70a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 8873.494218][ T37] #1: ffff8f800008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12b6 [ 8873.624265][ T37] 2 locks held by syz-executor/3166: [ 8873.736737][ T37] 1 lock held by kworker/R-wg-cr/8714: [ 8873.739207][ T37] 1 lock held by kworker/R-wg-cr/8717: [ 8873.741346][ T37] #0: ffffffff88291a28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x776/0xd68 [ 8873.887188][ T37] 1 lock held by kworker/R-wg-cr/8721: [ 8873.889107][ T37] #0: ffffffff88291a28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x776/0xd68 [ 8873.893630][ T37] 2 locks held by kworker/1:5/10301: [ 8873.895207][ T37] 1 lock held by kworker/1:6/10341: [ 8874.112630][ T37] #0: ffffffff88291a28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x36/0x3c4 [ 8874.177683][ T37] 2 locks held by kworker/1:1/10823: [ 8874.179645][ T37] 3 locks held by kworker/u9:19/11309: [ 8874.181150][ T37] 3 locks held by kworker/u9:28/11328: [ 8874.182630][ T37] 3 locks held by kworker/u9:29/11331: [ 8874.184130][ T37] 1 lock held by syz-executor/11347: [ 8874.311039][ T37] #0: ffffffff883ec640 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [ 8874.434014][ T37] 1 lock held by kworker/R-wg-cr/11489: [ 8874.451523][ T37] #0: ffffffff88291a28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x776/0xd68 [ 8874.495159][ T37] 4 locks held by kworker/R-wg-cr/11492: [ 8874.599114][ T37] 1 lock held by kworker/R-wg-cr/11495: [ 8874.600749][ T37] #0: ffffffff88291a28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x36/0x3c4 [ 8874.605280][ T37] 2 locks held by kworker/1:0/11753: [ 8874.710592][ T37] 2 locks held by kworker/1:4/11862: [ 8874.712226][ T37] 3 locks held by kworker/u9:1/12039: [ 8874.713691][ T37] 2 locks held by kworker/1:2/12364: [ 8874.715196][ T37] 3 locks held by kworker/1:3/12373: [ 8874.800051][ T37] 2 locks held by kworker/1:7/12377: [ 8874.801646][ T37] 2 locks held by kworker/1:8/12380: [ 8874.803141][ T37] 2 locks held by kworker/1:9/12383: [ 8874.804622][ T37] 1 lock held by syz.6.1758/12384: [ 8874.918488][ T37] #0: ffffffff883ec640 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [ 8874.923454][ T37] 2 locks held by kworker/1:10/12394: [ 8874.925009][ T37] 2 locks held by kworker/1:11/12406: [ 8875.031325][ T37] 2 locks held by syz-executor/12409: [ 8875.032935][ T37] 2 locks held by kworker/1:12/12411: [ 8875.034436][ T37] 2 locks held by kworker/1:13/12451: [ 8875.128775][ T37] 3 locks held by kworker/u9:4/12482: [ 8875.130699][ T37] 2 locks held by syz.5.1775/12594: [ 8875.132509][ T37] [ 8875.133690][ T37] ============================================= [ 8875.133690][ T37] [ 8875.249937][ T37] NMI backtrace for cpu 0 [ 8875.250504][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 8875.251022][ T37] Hardware name: riscv-virtio,qemu (DT) [ 8875.251202][ T37] Call Trace: [ 8875.251358][ T37] [] dump_backtrace+0x2e/0x3c [ 8875.251935][ T37] [] show_stack+0x30/0x3c [ 8875.252356][ T37] [] dump_stack_lvl+0x12e/0x1a6 [ 8875.252931][ T37] [] dump_stack+0x1c/0x24 [ 8875.253494][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 8875.254121][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [ 8875.254802][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 8875.255517][ T37] [] watchdog+0xcf2/0x11de [ 8875.256115][ T37] [] kthread+0x39c/0x7d4 [ 8875.256540][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 8875.256988][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 8875.272214][ T37] Sending NMI from CPU 0 to CPUs 1: [ 8875.274452][ C1] NMI backtrace for cpu 1 [ 8875.274979][ C1] CPU: 1 UID: 0 PID: 11492 Comm: kworker/R-wg-cr Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 8875.275572][ C1] Hardware name: riscv-virtio,qemu (DT) [ 8875.276151][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 8875.276966][ C1] epc : __local_bh_enable_ip+0x38e/0x5e8 [ 8875.277518][ C1] ra : __local_bh_enable_ip+0x38a/0x5e8 [ 8875.278120][ C1] epc : ffffffff80160e9a ra : ffffffff80160e96 sp : ffff8f8000016a10 [ 8875.278470][ C1] gp : ffffffff89c7e9c0 tp : ffffaf801bc09a40 t0 : ffff8f8000016960 [ 8875.278802][ C1] t1 : 00000000000001c8 t2 : fffffffff2f20000 s0 : ffff8f8000016a60 [ 8875.279169][ C1] s1 : 0000000000000102 a0 : 0000000000000001 a1 : ffffffff87d6da40 [ 8875.279490][ C1] a2 : 0000000000000003 a3 : 0000000000000101 a4 : 0000000000000001 [ 8875.279829][ C1] a5 : 0000000000054f20 a6 : 0000000000f00000 a7 : 0000000000000000 [ 8875.280144][ C1] s2 : ffffaf801bc09a40 s3 : ffffffff859e9a76 s4 : 0000000000000001 [ 8875.280472][ C1] s5 : ffffffff910373c0 s6 : 1ffff5f003781349 s7 : ffffffff89cbf9c0 [ 8875.280802][ C1] s8 : ffff8f8000016ca0 s9 : dfffffff00000000 s10: ffff8f8000016c40 [ 8875.281126][ C1] s11: ffffaf803b78cd00 t3 : 1ffff5f006ac4d03 t4 : ffffaf802c4b4128 [ 8875.281435][ C1] t5 : ffffffff876a8388 t6 : 0000000000000002 [ 8875.281700][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 8875.282067][ C1] [] __local_bh_enable_ip+0x38e/0x5e8 [ 8875.282678][ C1] [] ipt_do_table+0xe88/0x1c82 [ 8875.283162][ C1] [] iptable_mangle_hook+0x1b8/0x44a [ 8875.283609][ C1] [] nf_hook_slow+0xb8/0x1ec [ 8875.284220][ C1] [] __ip_local_out+0x498/0xbb2 [ 8875.284619][ C1] [] ip_local_out+0x2e/0x1a8 [ 8875.285013][ C1] [] synproxy_send_tcp.isra.0+0x3de/0x5d2 [ 8875.285551][ C1] [] synproxy_send_client_synack+0x6dc/0x8be [ 8875.286082][ C1] [] nft_synproxy_do_eval+0x8ac/0xa52 [ 8875.286635][ C1] [] nft_synproxy_eval+0x28/0x36 [ 8875.287211][ C1] [] nft_do_chain+0x328/0x1598 [ 8875.287728][ C1] [] nft_do_chain_inet+0x180/0x316 [ 8875.288276][ C1] [] nf_hook_slow+0xb8/0x1ec [ 8875.288869][ C1] [] ip_local_deliver+0x2ea/0x568 [ 8875.289465][ C1] [] ip_rcv_finish+0x1b0/0x2d2 [ 8875.290049][ C1] [] ip_rcv+0xd6/0x44e [ 8875.290588][ C1] [] __netif_receive_skb_one_core+0x106/0x16e [ 8875.291117][ C1] [] __netif_receive_skb+0x2c/0x144 [ 8875.291551][ C1] [] process_backlog+0x4f6/0x1cb0 [ 8875.291987][ C1] [] __napi_poll.constprop.0+0xaa/0x4ba [ 8875.292460][ C1] [] net_rx_action+0xad4/0xefc [ 8875.292897][ C1] [] handle_softirqs+0x4b2/0x132e [ 8875.293416][ C1] [] __irq_exit_rcu+0x18c/0x550 [ 8875.293945][ C1] [] irq_exit_rcu+0x10/0xf8 [ 8875.294449][ C1] [] handle_riscv_irq+0x40/0x4c [ 8875.294909][ C1] [] call_on_irq_stack+0x32/0x40 [ 8875.745906][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 8875.748576][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 8875.750326][ T37] Hardware name: riscv-virtio,qemu (DT) [ 8875.751472][ T37] Call Trace: [ 8875.752436][ T37] [] dump_backtrace+0x2e/0x3c [ 8875.753983][ T37] [] show_stack+0x30/0x3c [ 8875.755477][ T37] [] dump_stack_lvl+0x110/0x1a6 [ 8875.757027][ T37] [] dump_stack+0x1c/0x24 [ 8875.758484][ T37] [] panic+0x38c/0x86a [ 8875.759846][ T37] [] watchdog+0x78a/0x11de [ 8875.761611][ T37] [] kthread+0x39c/0x7d4 [ 8875.762955][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 8875.764395][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 8875.766568][ T37] SMP: stopping secondary CPUs [ 8875.770363][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:05:01 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff85835568 mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86324f84 vstvec 0000000000000000 mepc ffffffff8008eba2 sepc ffffffff802ffed6 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 9083f000000b24f2 x0/zero 0000000000000000 x1/ra ffffffff8573372a x2/sp ffff8f8000007150 x3/gp ffffffff89c7e9c0 x4/tp ffffaf8013e99a40 x5/t0 ffffaf8033bcb900 x6/t1 fffffffef222fe30 x7/t2 736174203a4f464e x8/s0 ffff8f80000071e0 x9/s1 ffffaf8033bcb8c0 x10/a0 0000000000000000 x11/a1 ffffffff87c1a798 x12/a2 0000000000000001 x13/a3 ffffffff857330c8 x14/a4 0000000000000000 x15/a5 fffff5ef036d1d00 x16/a6 0000000000f00000 x17/a7 ffffffff9117f187 x18/s2 ffffaf802f67b950 x19/s3 ffffaf801b68e800 x20/s4 ffffaf801bc30000 x21/s5 ffffffff9117e780 x22/s6 1ffff5f006779723 x23/s7 ffffaf8012b60500 x24/s8 1ffff5f006779732 x25/s9 1ffff5f00677972f x26/s10 ffffaf8033bcb918 x27/s11 ffffaf8033bcb990 x28/t3 f38912d900000000 x29/t4 fffffffef222fe30 x30/t5 fffffffef222fe31 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff804eb590 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86324f84 vstvec 0000000000000000 mepc ffffffff804eb590 sepc ffffffff819fbd32 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90e08000000b707e x0/zero 0000000000000000 x1/ra ffffffff85115972 x2/sp ffff8f8000016b40 x3/gp ffffffff89c7e9c0 x4/tp ffffaf801cd68000 x5/t0 ffff8f80000168d0 x6/t1 fffff5ef06faf168 x7/t2 fffffffff2f20000 x8/s0 ffff8f8000016b50 x9/s1 0000000000000002 x10/a0 ffffffff86b62260 x11/a1 ffffffff910373c8 x12/a2 ffffaf801cd68000 x13/a3 ffffffff800786e8 x14/a4 0000000000000000 x15/a5 ffffaf801cd68000 x16/a6 0000000000f00000 x17/a7 ffffaf8037d78b43 x18/s2 ffff8f80000169d0 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 dfffffff00000000 x22/s6 ffffffff862fce86 x23/s7 ffff8f8000016a90 x24/s8 dfffffff00000000 x25/s9 0000000000007fff x26/s10 ffffffff86324f84 x27/s11 ffffffff80000000 x28/t3 419ae79e00000000 x29/t4 fffff5ef06faf168 x30/t5 fffff5ef06faf169 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000