last executing test programs: 1h4m16.439470599s ago: executing program 0 (id=64): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1h3m54.0851694s ago: executing program 0 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1h3m45.872710621s ago: executing program 0 (id=69): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 1h3m37.507130985s ago: executing program 0 (id=71): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 1h3m32.217893071s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x4100, 0x8000c62) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1h3m20.147177623s ago: executing program 0 (id=76): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc421"], 0x564) 1h2m15.176560796s ago: executing program 32 (id=76): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc421"], 0x564) 59m17.274874913s ago: executing program 1 (id=96): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x427e}], 0x2, 0x0, 0x0, 0x0) close(r0) 59m8.193147058s ago: executing program 1 (id=97): socket(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) 58m55.611070018s ago: executing program 1 (id=98): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 58m37.341331471s ago: executing program 1 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 58m29.415361016s ago: executing program 1 (id=100): socket$inet(0x2, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521}, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 58m15.144697396s ago: executing program 1 (id=101): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 57m58.054255908s ago: executing program 33 (id=101): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 29m46.640900027s ago: executing program 3 (id=252): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) 29m34.014278101s ago: executing program 3 (id=254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000004b80)="6665b7eb86ad797c72f4cb4a7097d3337e00037a2c7599edc65652aa69222eff1a0db7fbb6951f6cb94a55ea9b3a2f84d0d4bd42757126762bf71f9e0119b209c8cc0c1ef8fd80e1d72b62d9eb235d8ba29900f53e4e081abb1da58b6ce9e81a444c53f0257e8994fda87b3c2ef2217d1d40dc1981d5af52e754d3859589b8d89ebfa3507da03c9dc0e406481193ed1811d7f12a3bb8f5edb96cb9b3b7f803300715a16601dddda10169af70e4d4c1fd8d193d13398be7b7740872be82f296ea65654d16f99591aa2834b19aefd3b1b735fe36b4ec756b5ccf462fa87a9f5b2d6bc4abdfe3398b317754e72eb8cf1ea0ffbdc322dfe22c6d7152dd87c60b3582503bfd8814b76c0101c86df8d2e44f345ad6addf7fdc4e4cdbed6fe5247887fcb95ffb8ceeac4011d167d460c36a9664eedbc3e0f2639e5292b50ebb80cd8b5968b06a1b75031ce0ad75955c9b68a34f066351dff9f54d06a61ef5cf342bb8790c3fa9a365a8687ae9afdbd59197abac597ddc1721885c37e3cf2a76210ff32ea340b23f34088931acb277b278db2fe4193cb5028f7a6d57fed93a67ef02ec12ee3b5a5aad20a5c6918d6f1d079cb238093c7969ca6806352e63caa60ee401826a38c0aad39c5d1280ad6f3873c7352cf57b21f92d06b12f6fa6f2e77542d3b754898e20bcfcbc5aaca12a9c6b098f3dcdcab0a5d09510f3e7b095862f2d61fb5f73405933f2bff34272f5b8d89300a224e7c109b45881a7a82c0ca132e4841e8165f7947c9fdd00c80a84aa98dbbbcf36916eec925441782f83ad8908793cfe75ed2dd53fac195e65392e8cfad7c8c5db62f274f7644cb2b42f5ece706ee90ab4bd4ed78d7371c0fa72696666085f367910bad519ff952ed03b5a45f8c097c6b9117892ad41f5168138b9c6b05094c303618228b05b7eb428cc5079cb2ae5f7b0265bad000f5b448361b3268a4d8e8facee3199a8b63a60e43619dc06efb6f6855c2d9fe754fc04ddaa9ff89930621fc34751428082ef4566533204c22ca0d3eb99cb9f9969a3711376ef037b625ae58f46b3c9d9b2ea75c76654e2956f3a97526f31b182ad37125d9621795af12aef149c867ae51baa34fbb43077aa6f7e650872febb9e4503aadc59c6fb74e49cb91db819e30ae7fbad46f7b3fe49f3082794e17051261d85b8cd17b26658261a3cbb39100cb86b1a8bb143c0f59730591800d9ea062c63664e7b222730b3c0a344e1629dceb4dcc04dad69578ddfee041996759ca8815a106696a59c1daf8e2485a27df26bf64c9487cb90f439943caafc736e7cf82ccd3b2b2abd28ece16f7aeb5b020655a24e1602637930e75143c69bcf559296411031240fc00cab74b29b107361734e28448be0d30720c0088d5e055f7586864b09b39cf8de05abe0f110b910a09c5a1a07c1a24b4edddf0668754820eaa061ea7e787c0337835b7e47a843d3ccd8fb1989e36675283d2f5e5b749527d5465917432d2ae16beda43fe09b74e12a6b2bc14f747251ce413c3e489cf043abd9d6e0c641a74e71941f08d931d6f1448640e737116d69629de194ba2179affc9344fe775e5cfda6fb998898d37d00c2e29e5eae0b0e7a87c35a1437de24", 0x480}], 0x1}}], 0x2, 0x4000001) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca01020301090212"], 0x0) pwritev(r0, 0x0, 0x0, 0x6, 0x8000) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = dup(r0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) 29m17.092700271s ago: executing program 3 (id=257): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x6, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 29m1.117122325s ago: executing program 3 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 28m48.639640046s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 28m36.574076661s ago: executing program 3 (id=267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="3821507f13", 0x5, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 27m49.034763324s ago: executing program 34 (id=267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="3821507f13", 0x5, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 7m12.5516149s ago: executing program 2 (id=390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 6m50.741874713s ago: executing program 2 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@private=0xffffffff, @dev={0xac, 0x14, 0x14, 0x23}, r6}, 0xc) 6m15.767428263s ago: executing program 2 (id=395): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x68}}, 0x0) 5m47.178863277s ago: executing program 2 (id=397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 5m30.096068665s ago: executing program 2 (id=399): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xd94fd5c211a3c2ca}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x45004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) 5m16.595624228s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 4m19.914335859s ago: executing program 35 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 1m45.735060556s ago: executing program 4 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m28.514622656s ago: executing program 4 (id=413): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0]}}, &(0x7f00000001c0)=""/257, 0x2d, 0x101, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 52.947832086s ago: executing program 4 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 38.460422947s ago: executing program 4 (id=415): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0x37}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000018c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 27.235660239s ago: executing program 4 (id=416): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 0s ago: executing program 4 (id=417): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34316' (ED25519) to the list of known hosts. syzkaller login: [ 581.077381][ T3192] cgroup: Unknown subsys name 'net' [ 581.628261][ T3192] cgroup: Unknown subsys name 'cpuset' [ 581.757430][ T3192] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 681.226818][ T3192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 832.100681][ T3200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.293150][ T3200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.196177][ T3202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.391889][ T3202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.126074][ T3200] hsr_slave_0: entered promiscuous mode [ 848.432190][ T3200] hsr_slave_1: entered promiscuous mode [ 850.743282][ T3202] hsr_slave_0: entered promiscuous mode [ 850.761122][ T3202] hsr_slave_1: entered promiscuous mode [ 850.793544][ T3202] debugfs: 'hsr0' already exists in 'hsr' [ 850.797703][ T3202] Cannot create hsr debugfs directory [ 859.990272][ T3200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 860.362839][ T3200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 860.907192][ T3200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 861.072187][ T3200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 863.863790][ T3202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 864.128629][ T3202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 864.243234][ T3202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 864.391424][ T3202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 873.550091][ T3200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.522559][ T3202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.391064][ T3200] veth0_vlan: entered promiscuous mode [ 935.439551][ T3200] veth1_vlan: entered promiscuous mode [ 939.093308][ T3202] veth0_vlan: entered promiscuous mode [ 939.290523][ T3200] veth0_macvtap: entered promiscuous mode [ 940.207977][ T3200] veth1_macvtap: entered promiscuous mode [ 940.472207][ T3202] veth1_vlan: entered promiscuous mode [ 943.837959][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.863292][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.936626][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.938443][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.977253][ T3202] veth0_macvtap: entered promiscuous mode [ 945.709127][ T3202] veth1_macvtap: entered promiscuous mode [ 949.479155][ T3200] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 949.644867][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.667248][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.670846][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.673344][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.900547][ T3817] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 960.751935][ T3818] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 994.971514][ T3839] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 996.408499][ T3814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 997.101764][ T3814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.103681][ T3814] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.224958][ T3814] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 997.226604][ T3814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 997.228089][ T3814] usb 2-1: SerialNumber: syz [ 1000.535585][ T3814] usb 2-1: 0:2 : does not exist [ 1003.769451][ T3814] usb 2-1: USB disconnect, device number 2 [ 1023.166916][ T3877] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1095.050254][ T3937] process 'syz.1.31' launched './file0' with NULL argv: empty string added [ 1123.221785][ T3964] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 1158.719533][ T3982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1190.741311][ T3998] syz.1.47 (3998): drop_caches: 2 [ 1199.881657][ T3997] syz.1.47 (3997): drop_caches: 2 [ 1206.827844][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 1240.076603][ T4024] kvm [4024]: VCPU exit error -95 [ 1240.079384][ T4024] kvm [4024]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 1240.081220][ T4024] kvm [4024]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 1240.513560][ T4024] kvm [4024]: VCPU exit error -95 [ 1240.516881][ T4024] kvm [4024]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 1240.522553][ T4024] kvm [4024]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 1250.111295][ T4038] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 1250.773537][ T4039] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 1263.402547][ T3814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1263.667449][ T3814] usb 2-1: Using ep0 maxpacket: 32 [ 1263.922803][ T3814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.937841][ T3814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.940524][ T3814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1263.943581][ T3814] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1263.948379][ T3814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.132812][ T3814] usb 2-1: config 0 descriptor?? [ 1267.319133][ T3814] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input0 [ 1267.802754][ T3814] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input1 [ 1268.248743][ T3814] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1274.906929][ C1] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 1275.107609][ T3813] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 1275.113010][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1276.293733][ T9] usb 2-1: USB disconnect, device number 3 [ 1329.220864][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 1329.262235][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 1341.938583][ T3197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.902877][ T3197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.569701][ T3197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.742490][ T3197] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.821228][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.088383][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.303216][ T3197] bond0 (unregistering): Released all slaves [ 1375.108216][ T3197] hsr_slave_0: left promiscuous mode [ 1375.261981][ T3197] hsr_slave_1: left promiscuous mode [ 1376.242542][ T3197] veth1_macvtap: left promiscuous mode [ 1376.311963][ T3197] veth0_macvtap: left promiscuous mode [ 1376.392298][ T3197] veth1_vlan: left promiscuous mode [ 1376.417990][ T3197] veth0_vlan: left promiscuous mode [ 1464.788754][ T4214] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 1499.640780][ T4160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.132260][ T4160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.077246][ T4160] hsr_slave_0: entered promiscuous mode [ 1536.157532][ T4160] hsr_slave_1: entered promiscuous mode [ 1561.190447][ T4160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1561.731744][ T4160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1562.418592][ T4160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1562.859495][ T4160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1569.902469][ T4497] hsr0: entered promiscuous mode [ 1571.887173][ T4490] hsr0: left promiscuous mode [ 1591.150809][ T4160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.123425][ T4541] ======================================================= [ 1623.123425][ T4541] WARNING: The mand mount option has been deprecated and [ 1623.123425][ T4541] and is ignored by this kernel. Remove the mand [ 1623.123425][ T4541] option from the mount to silence this warning. [ 1623.123425][ T4541] ======================================================= [ 1636.362206][ T3322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.809996][ T3322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.338540][ T3322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.677005][ T3322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.909118][ T3322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.313629][ T3322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.591997][ T3322] bond0 (unregistering): Released all slaves [ 1663.970670][ T3322] hsr_slave_0: left promiscuous mode [ 1664.188423][ T3322] hsr_slave_1: left promiscuous mode [ 1665.381595][ T3322] veth1_macvtap: left promiscuous mode [ 1665.413787][ T3322] veth0_macvtap: left promiscuous mode [ 1665.429806][ T3322] veth1_vlan: left promiscuous mode [ 1665.433545][ T3322] veth0_vlan: left promiscuous mode [ 1745.820896][ T4160] veth0_vlan: entered promiscuous mode [ 1746.691742][ T4160] veth1_vlan: entered promiscuous mode [ 1751.391436][ T4160] veth0_macvtap: entered promiscuous mode [ 1752.682664][ T4160] veth1_macvtap: entered promiscuous mode [ 1754.959026][ T3422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.053142][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.102586][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.188249][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.323926][ T4575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.693104][ T4575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.819697][ T4575] hsr_slave_0: entered promiscuous mode [ 1794.882896][ T4575] hsr_slave_1: entered promiscuous mode [ 1794.970114][ T4575] debugfs: 'hsr0' already exists in 'hsr' [ 1794.971409][ T4575] Cannot create hsr debugfs directory [ 1819.163098][ T4575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1819.442196][ T4575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1819.812079][ T4575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1820.507993][ T4575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1858.137042][ T4575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1909.158504][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 1909.160989][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 1940.147773][ T4988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.343430][ T4988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.482359][ T4575] veth0_vlan: entered promiscuous mode [ 1986.052249][ T4575] veth1_vlan: entered promiscuous mode [ 1991.380594][ T4575] veth0_macvtap: entered promiscuous mode [ 1992.307366][ T4575] veth1_macvtap: entered promiscuous mode [ 1998.489113][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.491765][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.539699][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.542356][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.158463][ T5062] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure [ 2076.242983][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.331142][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.627603][ T31] audit: type=1804 audit(2390.228:2): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.138" name="bus" dev="ramfs" ino=6243 res=1 errno=0 [ 2140.738395][ T5093] kvm [5093]: VCPU exit error -95 [ 2140.739706][ T5093] kvm [5093]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 2140.741007][ T5093] kvm [5093]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 2140.800264][ T5093] kvm [5093]: VCPU exit error -95 [ 2140.801629][ T5093] kvm [5093]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 2140.802918][ T5093] kvm [5093]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 2254.432380][ T5148] 0xfffffffffffffffd-0x000000020000 : "" [ 2254.449582][ T5148] mtd: partition "" is out of reach -- disabled [ 2256.897193][ T5148] ftl_cs: FTL header not found. [ 2258.575572][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801cfc7800: rx timeout, send abort [ 2258.592361][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf801cfc7800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 2271.495638][ T31] audit: type=1804 audit(2526.088:3): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.155" name="file2" dev="ramfs" ino=5008 res=1 errno=0 [ 2372.310789][ T31] audit: type=1804 audit(2626.908:4): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.166" name="/newroot/39/file0" dev="fuse" ino=1 res=1 errno=0 [ 2409.691680][ T5223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.939866][ T5223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2415.934441][ C1] hrtimer: interrupt took 1125800 ns [ 2467.871949][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 2654.435615][ T5319] fuse: Bad value for 'fd' [ 2691.787283][ T3462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2694.197955][ T3462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2696.209785][ T3462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.041665][ T3462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2702.436875][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 2702.998505][ T5340] veth0_macvtap: left promiscuous mode [ 2737.649536][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2738.383708][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2739.269993][ T3462] bond0 (unregistering): Released all slaves [ 2742.018188][ T3462] hsr_slave_0: left promiscuous mode [ 2742.217066][ T3462] hsr_slave_1: left promiscuous mode [ 2743.198522][ T3462] veth1_macvtap: left promiscuous mode [ 2743.200379][ T3462] veth0_macvtap: left promiscuous mode [ 2743.223501][ T3462] veth1_vlan: left promiscuous mode [ 2743.259137][ T3462] veth0_vlan: left promiscuous mode [ 2787.801083][ T5380] xt_hashlimit: size too large, truncated to 1048576 [ 2907.201841][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2907.838473][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2922.749103][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 2922.753754][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 2956.401769][ T5367] hsr_slave_0: entered promiscuous mode [ 2956.628474][ T5367] hsr_slave_1: entered promiscuous mode [ 2956.828007][ T5367] debugfs: 'hsr0' already exists in 'hsr' [ 2956.830231][ T5367] Cannot create hsr debugfs directory [ 3008.132928][ T5367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3008.766383][ T5367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3009.633107][ T5367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3010.602076][ T5367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3057.858133][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3179.939796][ T31] audit: type=1326 audit(3434.488:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.232" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffaef33992 code=0x7fc00000 [ 3190.903277][ T5367] veth0_vlan: entered promiscuous mode [ 3192.831291][ T5367] veth1_vlan: entered promiscuous mode [ 3197.759694][ T5367] veth0_macvtap: entered promiscuous mode [ 3198.741117][ T5367] veth1_macvtap: entered promiscuous mode [ 3205.985402][ T3462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.026017][ T3462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.068098][ T5206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.070030][ T5206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.537094][ T5853] syz_tun: entered allmulticast mode [ 3255.327398][ T5864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3307.228439][ T5898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3307.230866][ T5898] IPv6: NLM_F_CREATE should be set when creating new route [ 3339.501419][ T5920] Zero length message leads to an empty skb [ 3343.920523][ T5371] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3369.911672][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3370.243864][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3403.336143][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 3423.152126][ T5967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3431.579324][ T5970] syz_tun: entered allmulticast mode [ 3492.650369][ T5367] syz_tun (unregistering): left allmulticast mode [ 3496.707816][ T5907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3498.763232][ T5907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3501.081102][ T5907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3524.609677][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3525.419495][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3525.610843][ T5907] bond0 (unregistering): Released all slaves [ 3529.201010][ T5907] hsr_slave_0: left promiscuous mode [ 3529.338306][ T5907] hsr_slave_1: left promiscuous mode [ 3530.167619][ T5907] veth1_macvtap: left promiscuous mode [ 3530.169273][ T5907] veth0_macvtap: left promiscuous mode [ 3530.171442][ T5907] veth1_vlan: left promiscuous mode [ 3530.173490][ T5907] veth0_vlan: left promiscuous mode [ 3531.738357][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 3568.248508][ T6036] bond0: entered promiscuous mode [ 3568.251065][ T6036] bond_slave_0: entered promiscuous mode [ 3568.259874][ T6036] bond_slave_1: entered promiscuous mode [ 3568.436102][ T6036] gretap0: entered promiscuous mode [ 3568.550041][ T6036] hsr1: entered promiscuous mode [ 3629.560129][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3630.331711][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3663.810312][ T6247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.287'. [ 3674.051326][ T6000] hsr_slave_0: entered promiscuous mode [ 3674.120022][ T6000] hsr_slave_1: entered promiscuous mode [ 3674.188049][ T6000] debugfs: 'hsr0' already exists in 'hsr' [ 3674.189869][ T6000] Cannot create hsr debugfs directory [ 3695.021730][ T6352] syz_tun (unregistering): left allmulticast mode [ 3702.183616][ T6000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3702.820823][ T6000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3703.730751][ T6000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3704.551523][ T6000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3747.749766][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3854.168195][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 3873.011360][ T6460] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 3873.179255][ T6460] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 3889.368949][ T6467] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 3953.890546][ T6500] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 3953.893053][ T6500] netlink: 152 bytes leftover after parsing attributes in process `syz.2.307'. [ 3955.157223][ T6500] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 3972.887052][ T6000] veth0_vlan: entered promiscuous mode [ 3975.230934][ T6000] veth1_vlan: entered promiscuous mode [ 3985.865285][ T6000] veth0_macvtap: entered promiscuous mode [ 3989.062510][ T6000] veth1_macvtap: entered promiscuous mode [ 3996.579854][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3996.591370][ T4715] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3996.594688][ T4715] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3996.774146][ T4715] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4038.460452][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 4080.528353][ T6557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4080.529662][ T6557] IPv6: NLM_F_CREATE should be set when creating new route [ 4231.059522][ T6629] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 4470.287758][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 4508.093761][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 4554.283824][ T6748] netlink: 'syz.2.370': attribute type 4 has an invalid length. [ 4682.699984][ T31] audit: type=1326 audit(4882.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.2.386" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffaef33992 code=0x0 [ 4693.081933][ T6816] lo speed is unknown, defaulting to 1000 [ 4693.126585][ T6816] lo speed is unknown, defaulting to 1000 [ 4693.515905][ T6816] lo speed is unknown, defaulting to 1000 [ 4694.356652][ T6816] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 4696.165827][ T6816] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 4700.568183][ T6816] lo speed is unknown, defaulting to 1000 [ 4701.168368][ T6816] lo speed is unknown, defaulting to 1000 [ 4714.987354][ T6826] syzkaller0: entered promiscuous mode [ 4715.003436][ T6826] syzkaller0: entered allmulticast mode [ 4879.749376][ T6874] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 4882.186388][ T5819] lo speed is unknown, defaulting to 1000 [ 4882.190411][ T5819] syz2: Port: 1 Link DOWN [ 4943.475524][ T6525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4946.898451][ T6525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4948.860226][ T6525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4951.168466][ T6525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4995.269411][ T6525] gretap0 (unregistering): left promiscuous mode [ 5001.173728][ T6525] bond0 (unregistering): left promiscuous mode [ 5001.175901][ T6525] bond_slave_0: left promiscuous mode [ 5001.197129][ T6525] bond_slave_1: left promiscuous mode [ 5002.684954][ T6525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5003.320411][ T6525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5003.653287][ T6525] bond0 (unregistering): Released all slaves [ 5004.261983][ T6882] lo speed is unknown, defaulting to 1000 [ 5008.238104][ T6525] hsr_slave_0: left promiscuous mode [ 5008.343086][ T6525] hsr_slave_1: left promiscuous mode [ 5009.252904][ T6525] veth1_macvtap: left promiscuous mode [ 5009.285974][ T6525] veth0_vlan: left promiscuous mode [ 5115.773539][ T6999] syz_tun: entered allmulticast mode [ 5116.586489][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 5117.816095][ T6999] syz_tun (unregistering): left allmulticast mode [ 5151.107846][ T6525] ------------[ cut here ]------------ [ 5151.114342][ T6525] conntrack cleanup blocked for 60s [ 5151.187106][ C1] WARNING: [] net/netfilter/nf_conntrack_core.c:2511 at nf_conntrack_cleanup_net_list+0x87e/0xa3c, CPU#1: kworker/u8:13/6525 [ 5151.190465][ C1] Modules linked in: [ 5151.192596][ C1] CPU: 1 UID: 0 PID: 6525 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT [ 5151.193856][ C1] Tainted: [L]=SOFTLOCKUP [ 5151.194113][ C1] Hardware name: riscv-virtio,qemu (DT) [ 5151.194868][ C1] Workqueue: netns cleanup_net [ 5151.196104][ C1] epc : nf_conntrack_cleanup_net_list+0x87e/0xa3c [ 5151.197043][ C1] ra : nf_conntrack_cleanup_net_list+0x87e/0xa3c [ 5151.197868][ C1] epc : ffffffff8565700e ra : ffffffff8565700e sp : ffff8f8002217660 [ 5151.198294][ C1] gp : ffffffff8a22a0c0 tp : ffffaf801c153500 t0 : ffffaf8072c906a0 [ 5151.198743][ C1] t1 : ffffffff8007a848 t2 : ffffaf8072c905a0 s0 : ffff8f80022177c0 [ 5151.199168][ C1] s1 : dfffffff00000000 a0 : ffffaf801c153508 a1 : ffffffff86dda2c0 [ 5151.199606][ C1] a2 : 0000000000000002 a3 : ffffffff8014b68c a4 : 0000000000000000 [ 5151.200040][ C1] a5 : 0000000000000000 a6 : 0000000000000003 a7 : 0000000041b58ab3 [ 5151.200426][ C1] s2 : ffffffff8a1133a5 s3 : 0000000000000000 s4 : 0000000000000001 [ 5151.200852][ C1] s5 : ffffaf8020321000 s6 : 0000000000000001 s7 : 0000000000000001 [ 5151.201276][ C1] s8 : fffffffef1472d94 s9 : 0000000000001000 s10: 0000000000000003 [ 5151.201661][ C1] s11: 0000000000000001 t3 : ffffffff87fb2860 t4 : fffff5ef0e594511 [ 5151.202113][ C1] t5 : fffff5ef0e594512 t6 : 0000000000000002 ssp : 0000000000000000 [ 5151.202521][ C1] status: 0000000200000120 badaddr: ffffffff8565700e cause: 0000000000000003 [ 5151.203104][ C1] [] nf_conntrack_cleanup_net_list+0x87e/0xa3c [ 5151.204173][ C1] [] nf_conntrack_pernet_exit+0xf2/0x12c [ 5151.204974][ C1] [] ops_undo_list+0x3e6/0x9c4 [ 5151.205697][ C1] [] cleanup_net+0x41e/0x8bc [ 5151.206440][ C1] [] process_one_work+0x972/0x2124 [ 5151.207227][ C1] [] worker_thread+0x540/0xcbc [ 5151.207976][ C1] [] kthread+0x31c/0x444 [ 5151.208646][ C1] [] ret_from_fork_kernel+0x94/0xef8 [ 5151.209349][ C1] [] ret_from_fork_kernel_asm+0x16/0x18 [ 5151.211215][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 5151.212233][ C1] CPU: 1 UID: 0 PID: 6525 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT [ 5151.213005][ C1] Tainted: [L]=SOFTLOCKUP [ 5151.213207][ C1] Hardware name: riscv-virtio,qemu (DT) [ 5151.213484][ C1] Workqueue: netns cleanup_net [ 5151.214308][ C1] Call Trace: [ 5151.214527][ C1] [] dump_backtrace+0x2e/0x3c [ 5151.215237][ C1] [] show_stack+0x30/0x3c [ 5151.215788][ C1] [] dump_stack_lvl+0x114/0x1ac [ 5151.216608][ C1] [] dump_stack+0x1c/0x28 [ 5151.217451][ C1] [] vpanic+0x334/0x760 [ 5151.218055][ C1] [] trace_suspend_resume+0x0/0x420 [ 5151.218657][ C1] [] check_panic_on_warn+0xc0/0xe4 [ 5151.219266][ C1] [] __warn+0x216/0x654 [ 5151.219836][ C1] [] __report_bug+0x1d4/0x2ac [ 5151.220572][ C1] [] report_bug+0xd8/0x28c [ 5151.221357][ C1] [] handle_break+0x13a/0x30c [ 5151.222036][ C1] [] do_trap_break+0x188/0x358 [ 5151.222654][ C1] [] handle_exception+0x15e/0x16a [ 5151.223386][ C1] [] nf_conntrack_cleanup_net_list+0x87e/0xa3c [ 5151.224160][ C1] [] nf_conntrack_pernet_exit+0xf2/0x12c [ 5151.225160][ C1] [] ops_undo_list+0x3e6/0x9c4 [ 5151.226009][ C1] [] cleanup_net+0x41e/0x8bc [ 5151.226754][ C1] [] process_one_work+0x972/0x2124 [ 5151.227698][ C1] [] worker_thread+0x540/0xcbc [ 5151.228528][ C1] [] kthread+0x31c/0x444 [ 5151.229260][ C1] [] ret_from_fork_kernel+0x94/0xef8 [ 5151.229956][ C1] [] ret_from_fork_kernel_asm+0x16/0x18 [ 5151.231120][ C1] SMP: stopping secondary CPUs