last executing test programs: 2m16.148611265s ago: executing program 4 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x143143, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m14.69096345s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) wait4(r1, 0x0, 0x4, &(0x7f0000000680)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r3, 0x9012}], 0x1, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f00000021c0)=[{r3, 0x1000}], 0x1, 0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x1, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000001080)=ANY=[@ANYRESOCT=r1, @ANYBLOB, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m12.958684321s ago: executing program 3 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002400), 0x20000, 0x0) fchown(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket(0x10, 0x3, 0x0) unshare(0x400) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 2m9.320054268s ago: executing program 3 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0xd, 0x7, 0x1, 0x2, 0x52}}, {0x4}}]}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048001}, 0x40044) 2m7.153691832s ago: executing program 3 (id=15): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) set_robust_list(&(0x7f0000000280)={0x0, 0x5, &(0x7f00000001c0)}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000640)}, {&(0x7f0000000580)="3be859", 0x3}, {0x0}], 0x3}}], 0x1, 0x9200000000000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) 2m5.892150596s ago: executing program 3 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) wait4(r1, 0x0, 0x4, &(0x7f0000000680)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r4, 0x9012}], 0x1, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f00000021c0)=[{r4, 0x1000}], 0x1, 0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x1, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000001080)=ANY=[@ANYRESOCT=r1, @ANYBLOB, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.715228576s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002400), 0x20000, 0x0) fchown(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket(0x10, 0x3, 0x0) unshare(0x400) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 2m0.523325908s ago: executing program 32 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x143143, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m48.387088951s ago: executing program 33 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002400), 0x20000, 0x0) fchown(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket(0x10, 0x3, 0x0) unshare(0x400) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 6.253266766s ago: executing program 2 (id=172): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, 0x0, 0x0, 0xffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.843996646s ago: executing program 2 (id=174): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 5.787340392s ago: executing program 2 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "741cb976"}]}}, 0x0}, 0x0) 4.03831211s ago: executing program 0 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec85"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) rt_sigaction(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 4.015234749s ago: executing program 2 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) get_robust_list(0xffffffffffffffff, 0x0, 0x0) 3.910666662s ago: executing program 0 (id=183): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 3.843828391s ago: executing program 2 (id=184): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50) 3.806568538s ago: executing program 0 (id=185): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) set_robust_list(&(0x7f0000000280)={0x0, 0x5, &(0x7f00000001c0)}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000640)}, {&(0x7f0000000580)="3be859", 0x3}, {0x0}], 0x3}}], 0x1, 0x9200000000000000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r1 = dup(r0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.673770596s ago: executing program 0 (id=186): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 3.619960032s ago: executing program 1 (id=187): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) 3.141779439s ago: executing program 1 (id=188): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newtaction={0x94, 0x13, 0x53b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_sample={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x28}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}}, 0x0) 2.082383638s ago: executing program 1 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 1.853952604s ago: executing program 2 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "741cb976"}]}}, 0x0}, 0x0) 887.841243ms ago: executing program 0 (id=191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec85"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) rt_sigaction(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 746.317458ms ago: executing program 0 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r6) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socket$packet(0x11, 0x3, 0x300) 693.770813ms ago: executing program 1 (id=193): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 179.974737ms ago: executing program 1 (id=194): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) set_robust_list(&(0x7f0000000280)={0x0, 0x5, &(0x7f00000001c0)}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000640)}, {&(0x7f0000000580)="3be859", 0x3}, {0x0}], 0x3}}], 0x1, 0x9200000000000000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r1 = dup(r0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 1 (id=195): r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r1, 0x4b3c, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000004200), 0x0, 0x0, 0x2) umount2(&(0x7f0000000500)='./file0\x00', 0x2) rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = epoll_create1(0x0) r7 = socket(0x10, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x6071, 0x0, 0xe7}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000380)={0xa0000003}) r8 = fcntl$dupfd(r0, 0x0, r0) r9 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 86.833702][ T10] cfg80211: failed to load regulatory.db [ 87.223943][ T5857] cgroup: Unknown subsys name 'net' [ 87.464982][ T5857] cgroup: Unknown subsys name 'cpuset' [ 87.520589][ T5857] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.480340][ T5857] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.902404][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.924272][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.927019][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.937753][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.942757][ T5889] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.947212][ T5889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.952196][ T5889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.954135][ T5889] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.954529][ T5889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.955276][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.956232][ T5889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.957835][ T5889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.959514][ T5889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.960637][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.967283][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.968402][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.968853][ T5889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.970518][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.971446][ T5889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.972272][ T5889] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.979608][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.996711][ T5889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.089177][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.095768][ T5886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.106874][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.048149][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 95.154170][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 95.171451][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 95.530936][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 95.536795][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 95.941280][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.942392][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.942805][ T5871] bridge_slave_0: entered allmulticast mode [ 95.944748][ T5871] bridge_slave_0: entered promiscuous mode [ 96.031098][ T5187] Bluetooth: hci1: command tx timeout [ 96.031227][ T5187] Bluetooth: hci3: command tx timeout [ 96.106836][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.107005][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.107421][ T5871] bridge_slave_1: entered allmulticast mode [ 96.109359][ T5871] bridge_slave_1: entered promiscuous mode [ 96.110751][ T5877] Bluetooth: hci2: command tx timeout [ 96.111290][ T5877] Bluetooth: hci4: command tx timeout [ 96.189833][ T5187] Bluetooth: hci0: command tx timeout [ 96.391073][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.391186][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.391521][ T5870] bridge_slave_0: entered allmulticast mode [ 96.393293][ T5870] bridge_slave_0: entered promiscuous mode [ 96.396725][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.396901][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.397067][ T5879] bridge_slave_0: entered allmulticast mode [ 96.399157][ T5879] bridge_slave_0: entered promiscuous mode [ 96.510968][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.511098][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.511278][ T5870] bridge_slave_1: entered allmulticast mode [ 96.514108][ T5870] bridge_slave_1: entered promiscuous mode [ 96.514978][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.515157][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.515402][ T5879] bridge_slave_1: entered allmulticast mode [ 96.517332][ T5879] bridge_slave_1: entered promiscuous mode [ 96.694300][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.964209][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.101615][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.101740][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.101945][ T5880] bridge_slave_0: entered allmulticast mode [ 97.104230][ T5880] bridge_slave_0: entered promiscuous mode [ 97.107030][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.107158][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.107326][ T5876] bridge_slave_0: entered allmulticast mode [ 97.109494][ T5876] bridge_slave_0: entered promiscuous mode [ 97.203897][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.293788][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.294200][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.294329][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.294503][ T5880] bridge_slave_1: entered allmulticast mode [ 97.296438][ T5880] bridge_slave_1: entered promiscuous mode [ 97.297294][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.297417][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.297551][ T5876] bridge_slave_1: entered allmulticast mode [ 97.299413][ T5876] bridge_slave_1: entered promiscuous mode [ 97.383273][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.386703][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.532116][ T5871] team0: Port device team_slave_0 added [ 97.803182][ T5871] team0: Port device team_slave_1 added [ 97.943821][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.947000][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.022932][ T5870] team0: Port device team_slave_0 added [ 98.025458][ T5879] team0: Port device team_slave_0 added [ 98.029169][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.036198][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.109920][ T5187] Bluetooth: hci3: command tx timeout [ 98.109952][ T5187] Bluetooth: hci1: command tx timeout [ 98.112642][ T5870] team0: Port device team_slave_1 added [ 98.114942][ T5879] team0: Port device team_slave_1 added [ 98.189853][ T5877] Bluetooth: hci4: command tx timeout [ 98.189889][ T5877] Bluetooth: hci2: command tx timeout [ 98.269882][ T5187] Bluetooth: hci0: command tx timeout [ 98.273457][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.273470][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.273489][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.911515][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.911533][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.911560][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.062629][ T5880] team0: Port device team_slave_0 added [ 99.065058][ T5876] team0: Port device team_slave_0 added [ 99.077887][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.077903][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.077931][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.081674][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.081689][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.081717][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.085921][ T5880] team0: Port device team_slave_1 added [ 99.089283][ T5876] team0: Port device team_slave_1 added [ 99.095732][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.095747][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.095777][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.097509][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.097522][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.097551][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.583774][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.583788][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.583807][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.585090][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.585104][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.585131][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.746126][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.746144][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.746162][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.747109][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.747119][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.747138][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.757599][ T5871] hsr_slave_0: entered promiscuous mode [ 99.761284][ T5871] hsr_slave_1: entered promiscuous mode [ 100.126203][ T5870] hsr_slave_0: entered promiscuous mode [ 100.127476][ T5870] hsr_slave_1: entered promiscuous mode [ 100.128649][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 100.128768][ T5870] Cannot create hsr debugfs directory [ 100.144833][ T5879] hsr_slave_0: entered promiscuous mode [ 100.146449][ T5879] hsr_slave_1: entered promiscuous mode [ 100.147634][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 100.147662][ T5879] Cannot create hsr debugfs directory [ 100.189806][ T5187] Bluetooth: hci1: command tx timeout [ 100.189842][ T5187] Bluetooth: hci3: command tx timeout [ 100.269934][ T5877] Bluetooth: hci2: command tx timeout [ 100.269970][ T5877] Bluetooth: hci4: command tx timeout [ 100.350420][ T5187] Bluetooth: hci0: command tx timeout [ 100.797027][ T5876] hsr_slave_0: entered promiscuous mode [ 100.798056][ T5876] hsr_slave_1: entered promiscuous mode [ 100.798752][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 100.798775][ T5876] Cannot create hsr debugfs directory [ 100.947351][ T5880] hsr_slave_0: entered promiscuous mode [ 100.948398][ T5880] hsr_slave_1: entered promiscuous mode [ 100.949097][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 100.949121][ T5880] Cannot create hsr debugfs directory [ 102.159287][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.199134][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.213678][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.268194][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.269821][ T5187] Bluetooth: hci3: command tx timeout [ 102.269852][ T5187] Bluetooth: hci1: command tx timeout [ 102.350167][ T5187] Bluetooth: hci2: command tx timeout [ 102.350226][ T5877] Bluetooth: hci4: command tx timeout [ 102.386729][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.418574][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.430339][ T5877] Bluetooth: hci0: command tx timeout [ 102.456772][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.510167][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.634437][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.670884][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.708061][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.738638][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.855887][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.895768][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.946078][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.995355][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.053047][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.166353][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.207121][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.227954][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.238681][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.267893][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.326677][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.327429][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.376587][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.377201][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.432723][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.514908][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.534489][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.561826][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.561966][ T1422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.603833][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.603947][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.677668][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.708847][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.742070][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.742259][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.799423][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.799623][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.880408][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.912263][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.919624][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.922277][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.959193][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.959348][ T1414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.038811][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.069059][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.105381][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.107181][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.173312][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.175776][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.481022][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.827302][ T5870] veth0_vlan: entered promiscuous mode [ 104.847983][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.898206][ T5870] veth1_vlan: entered promiscuous mode [ 104.984756][ T5871] veth0_vlan: entered promiscuous mode [ 105.005395][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.036769][ T5871] veth1_vlan: entered promiscuous mode [ 105.085148][ T5870] veth0_macvtap: entered promiscuous mode [ 105.103487][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.104068][ T5879] veth0_vlan: entered promiscuous mode [ 105.113244][ T5870] veth1_macvtap: entered promiscuous mode [ 105.162478][ T5879] veth1_vlan: entered promiscuous mode [ 105.203409][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.227326][ T5871] veth0_macvtap: entered promiscuous mode [ 105.243579][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.248469][ T5876] veth0_vlan: entered promiscuous mode [ 105.261166][ T5871] veth1_macvtap: entered promiscuous mode [ 105.279001][ T1418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.296320][ T1418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.313910][ T1418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331110][ T1418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.332087][ T5876] veth1_vlan: entered promiscuous mode [ 105.418819][ T5880] veth0_vlan: entered promiscuous mode [ 105.431347][ T5879] veth0_macvtap: entered promiscuous mode [ 105.436808][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.499180][ T5879] veth1_macvtap: entered promiscuous mode [ 105.509022][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.567699][ T5880] veth1_vlan: entered promiscuous mode [ 105.594603][ T1418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.616973][ T1413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.627237][ T1413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.658676][ T1413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.679206][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.679234][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.693634][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.712026][ T5876] veth0_macvtap: entered promiscuous mode [ 105.766978][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.783162][ T5876] veth1_macvtap: entered promiscuous mode [ 105.859264][ T1413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.859285][ T1413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.866727][ T1424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.915327][ T1424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.930327][ T1424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.969599][ T1424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.066593][ T5880] veth0_macvtap: entered promiscuous mode [ 106.081316][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.155081][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.155103][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.156875][ T5880] veth1_macvtap: entered promiscuous mode [ 106.202437][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.321570][ T1414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.323951][ T1414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.327928][ T1414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.335127][ T1414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.567223][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.567242][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.474369][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.753630][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.753652][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.769616][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.902536][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.904774][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.905030][ T1015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.905466][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.009517][ T1420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.009539][ T1420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.196114][ T1420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.196134][ T1420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.900690][ T1422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.900709][ T1422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.134668][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.134691][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.225110][ T6004] binder: 6003:6004 ioctl c0306201 0 returned -14 [ 109.416829][ T1422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.416848][ T1422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.262184][ T6011] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.459021][ T6045] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 117.465838][ T6044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 121.622310][ T37] audit: type=1326 audit(1760968866.166:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.624090][ T37] audit: type=1326 audit(1760968866.176:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.652300][ T37] audit: type=1326 audit(1760968866.206:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.652353][ T37] audit: type=1326 audit(1760968866.206:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.652398][ T37] audit: type=1326 audit(1760968866.206:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.652442][ T37] audit: type=1326 audit(1760968866.206:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.652486][ T37] audit: type=1326 audit(1760968866.206:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.652530][ T37] audit: type=1326 audit(1760968866.206:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.834709][ T37] audit: type=1326 audit(1760968866.386:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 121.834761][ T37] audit: type=1326 audit(1760968866.386:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 123.850707][ T6083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 123.982026][ T6089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 125.806087][ T5187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.823654][ T5187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.826213][ T5187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.011480][ T5187] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.715817][ T5987] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.882390][ T5187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.024764][ T5987] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.024792][ T5987] usb 3-1: config 0 has no interface number 0 [ 128.024866][ T5987] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.024890][ T5987] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.024928][ T5987] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.024950][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.162374][ T5987] usb 3-1: config 0 descriptor?? [ 129.379106][ T5987] usbhid 3-1:0.1: can't add hid device: -71 [ 129.379248][ T5987] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 129.455761][ T5987] usb 3-1: USB disconnect, device number 2 [ 129.949778][ T5877] Bluetooth: hci5: command tx timeout [ 130.345015][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 130.345032][ T37] audit: type=1326 audit(1760968874.896:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.352589][ T37] audit: type=1326 audit(1760968874.896:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.377304][ T37] audit: type=1326 audit(1760968874.926:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.387235][ T37] audit: type=1326 audit(1760968874.936:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.391480][ T37] audit: type=1326 audit(1760968874.936:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.395534][ T37] audit: type=1326 audit(1760968874.946:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.395582][ T37] audit: type=1326 audit(1760968874.946:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.562719][ T37] audit: type=1326 audit(1760968875.036:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 130.644382][ T37] audit: type=1326 audit(1760968875.176:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 132.029834][ T5877] Bluetooth: hci5: command tx timeout [ 135.059202][ T5877] Bluetooth: hci5: command tx timeout [ 135.674436][ T1015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.020929][ T6144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 137.070568][ T5877] Bluetooth: hci5: command tx timeout [ 137.142317][ T5187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.148207][ T5187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.149602][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.173862][ T5187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.174672][ T5187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.035538][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.036441][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.106163][ T1015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.299805][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.490770][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.490798][ T10] usb 2-1: config 0 has no interface number 0 [ 138.490847][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.490874][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.490913][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.490937][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.561166][ T10] usb 2-1: config 0 descriptor?? [ 138.583599][ T1015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.716375][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 138.913301][ T1015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.025144][ T10] uclogic 0003:256C:006D.0001: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 139.185513][ T6031] usb 2-1: USB disconnect, device number 2 [ 139.229918][ T5187] Bluetooth: hci1: command tx timeout [ 139.492286][ T6164] fido_id[6164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 140.281881][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.282029][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.282300][ T6100] bridge_slave_0: entered allmulticast mode [ 140.285035][ T6100] bridge_slave_0: entered promiscuous mode [ 140.369086][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.369303][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.369520][ T6100] bridge_slave_1: entered allmulticast mode [ 140.387116][ T6100] bridge_slave_1: entered promiscuous mode [ 140.678543][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.733688][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.735219][ T1015] bridge_slave_1: left allmulticast mode [ 140.735310][ T1015] bridge_slave_1: left promiscuous mode [ 140.739521][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.835943][ T1015] bridge_slave_0: left allmulticast mode [ 140.835973][ T1015] bridge_slave_0: left promiscuous mode [ 140.836200][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.309946][ T5187] Bluetooth: hci1: command tx timeout [ 146.721375][ T5187] Bluetooth: hci1: command tx timeout [ 149.233241][ T5187] Bluetooth: hci1: command tx timeout [ 149.235284][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 150.670816][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.732001][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.752624][ T1015] bond0 (unregistering): Released all slaves [ 151.578309][ T6227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.308117][ T6100] team0: Port device team_slave_0 added [ 152.842046][ T6100] team0: Port device team_slave_1 added [ 155.501692][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.501710][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.501737][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.505129][ T6153] chnl_net:caif_netlink_parms(): no params data found [ 155.567568][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.567583][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.567604][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.663058][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 158.841139][ T1015] hsr_slave_0: left promiscuous mode [ 158.859755][ T1015] hsr_slave_1: left promiscuous mode [ 158.860856][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.860971][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.901353][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.901379][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.961073][ T1015] veth1_macvtap: left promiscuous mode [ 158.961316][ T1015] veth0_macvtap: left promiscuous mode [ 158.961612][ T1015] veth1_vlan: left promiscuous mode [ 158.961887][ T1015] veth0_vlan: left promiscuous mode [ 160.429518][ T6265] capability: warning: `syz.2.72' uses deprecated v2 capabilities in a way that may be insecure [ 162.121651][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 163.293733][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 163.340305][ T6275] binder: 6274:6275 ioctl c0306201 200000000680 returned -14 [ 168.924814][ T6100] hsr_slave_0: entered promiscuous mode [ 168.925767][ T6100] hsr_slave_1: entered promiscuous mode [ 169.221499][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.221643][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.221800][ T6153] bridge_slave_0: entered allmulticast mode [ 169.226455][ T6153] bridge_slave_0: entered promiscuous mode [ 169.443165][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.443287][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.443454][ T6153] bridge_slave_1: entered allmulticast mode [ 169.459738][ T6153] bridge_slave_1: entered promiscuous mode [ 169.679800][ T5960] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 169.842331][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 169.842373][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.842416][ T5960] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 169.842438][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.848233][ T5960] usb 3-1: config 0 descriptor?? [ 169.849422][ T6310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.018467][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.977158][ T5960] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 170.977196][ T5960] cypress 0003:04B4:07B1.0002: item fetching failed at offset 3/5 [ 170.978020][ T5960] cypress 0003:04B4:07B1.0002: parse failed [ 170.978094][ T5960] cypress 0003:04B4:07B1.0002: probe with driver cypress failed with error -22 [ 171.085826][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.389930][ T6024] usb 3-1: USB disconnect, device number 3 [ 171.491587][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 172.085321][ T6153] team0: Port device team_slave_0 added [ 172.155977][ T6153] team0: Port device team_slave_1 added [ 172.264797][ T6337] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 173.435082][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.435172][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.435440][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.771200][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.771217][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.771243][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.727858][ T1418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.019530][ T6365] input: syz1 as /devices/virtual/input/input5 [ 177.135518][ T1418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.279446][ T6153] hsr_slave_0: entered promiscuous mode [ 177.283211][ T6153] hsr_slave_1: entered promiscuous mode [ 177.284261][ T6153] debugfs: 'hsr0' already exists in 'hsr' [ 177.284288][ T6153] Cannot create hsr debugfs directory [ 179.906276][ T1418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.050461][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 181.905674][ T6398] syz.2.102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 182.904624][ T1418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.416930][ T6100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.734819][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.747794][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.749402][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.751705][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.752655][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.428481][ T1418] bridge_slave_1: left allmulticast mode [ 186.428511][ T1418] bridge_slave_1: left promiscuous mode [ 186.428742][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.556602][ T6433] cgroup: Unknown subsys name 'cpuset' [ 187.621311][ T1418] bridge_slave_0: left allmulticast mode [ 187.621340][ T1418] bridge_slave_0: left promiscuous mode [ 187.621606][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.059160][ T5877] Bluetooth: hci2: command tx timeout [ 190.111867][ T5877] Bluetooth: hci2: command tx timeout [ 190.753775][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 192.190771][ T5877] Bluetooth: hci2: command tx timeout [ 192.420403][ T6452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 192.446186][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.500617][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.553604][ T1418] bond0 (unregistering): Released all slaves [ 194.285119][ T5877] Bluetooth: hci2: command tx timeout [ 196.253616][ T6153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.799774][ T1418] hsr_slave_0: left promiscuous mode [ 196.881257][ T1418] hsr_slave_1: left promiscuous mode [ 196.882184][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.882206][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.960799][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.960826][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.997612][ T5187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.029375][ T5187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.037790][ T5187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.046081][ T5187] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.046943][ T5187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.190781][ T1418] veth1_macvtap: left promiscuous mode [ 197.190891][ T1418] veth0_macvtap: left promiscuous mode [ 197.191154][ T1418] veth1_vlan: left promiscuous mode [ 197.191344][ T1418] veth0_vlan: left promiscuous mode [ 199.069782][ T5187] Bluetooth: hci5: command tx timeout [ 199.658775][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.659563][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.848765][ T37] audit: type=1326 audit(1760968945.396:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.851849][ T37] audit: type=1326 audit(1760968945.406:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.853508][ T37] audit: type=1326 audit(1760968945.406:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.853808][ T37] audit: type=1326 audit(1760968945.406:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.854274][ T37] audit: type=1326 audit(1760968945.406:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.854579][ T37] audit: type=1326 audit(1760968945.406:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.860742][ T37] audit: type=1326 audit(1760968945.406:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.860794][ T37] audit: type=1326 audit(1760968945.416:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.863211][ T37] audit: type=1326 audit(1760968945.416:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 200.863262][ T37] audit: type=1326 audit(1760968945.416:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e41efc9 code=0x7ffc0000 [ 201.335759][ T5187] Bluetooth: hci5: command tx timeout [ 201.484267][ T6512] binder: 6508:6512 ioctl c0306201 0 returned -14 [ 206.116795][ T5187] Bluetooth: hci5: command tx timeout [ 206.277672][ T6519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.209639][ T5187] Bluetooth: hci5: command tx timeout [ 208.510595][ T1418] team0 (unregistering): Port device team_slave_1 removed [ 208.680417][ T1418] team0 (unregistering): Port device team_slave_0 removed [ 210.473097][ T6510] ip6gretap1: entered allmulticast mode [ 215.439342][ T6419] chnl_net:caif_netlink_parms(): no params data found [ 215.925278][ T6024] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.975566][ T6485] chnl_net:caif_netlink_parms(): no params data found [ 217.151987][ T6024] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.152014][ T6024] usb 2-1: config 0 has no interface number 0 [ 217.152057][ T6024] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.152081][ T6024] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.152118][ T6024] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 217.152139][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.159092][ T6024] usb 2-1: config 0 descriptor?? [ 217.404303][ T5187] Bluetooth: hci3: command 0x0406 tx timeout [ 217.404338][ T5187] Bluetooth: hci0: command 0x0406 tx timeout [ 217.539497][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 217.877125][ T6024] uclogic 0003:256C:006D.0003: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 218.019869][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.020000][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.020243][ T6419] bridge_slave_0: entered allmulticast mode [ 218.029269][ T6419] bridge_slave_0: entered promiscuous mode [ 218.032967][ T5987] usb 2-1: USB disconnect, device number 3 [ 218.122267][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.122397][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.122633][ T6419] bridge_slave_1: entered allmulticast mode [ 218.130127][ T6419] bridge_slave_1: entered promiscuous mode [ 218.938487][ T6607] input: syz0 as /devices/virtual/input/input6 [ 220.683616][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.843219][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.926600][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.926740][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.927001][ T6485] bridge_slave_0: entered allmulticast mode [ 220.968542][ T6485] bridge_slave_0: entered promiscuous mode [ 221.288236][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.288413][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.288621][ T6485] bridge_slave_1: entered allmulticast mode [ 221.302189][ T6485] bridge_slave_1: entered promiscuous mode [ 225.136657][ T6419] team0: Port device team_slave_0 added [ 227.943568][ T6419] team0: Port device team_slave_1 added [ 229.236549][ T6485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.874667][ T6485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.409716][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 234.563148][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.563176][ T10] usb 3-1: config 0 has no interface number 0 [ 234.563222][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.563253][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.563292][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.563312][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.652321][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.652339][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.652367][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.890160][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 235.890178][ T37] audit: type=1326 audit(1760968980.436:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.890227][ T37] audit: type=1326 audit(1760968980.446:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.894439][ T37] audit: type=1326 audit(1760968980.446:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.895111][ T37] audit: type=1326 audit(1760968980.446:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.895160][ T37] audit: type=1326 audit(1760968980.446:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.895655][ T37] audit: type=1326 audit(1760968980.446:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.895698][ T37] audit: type=1326 audit(1760968980.446:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.895739][ T37] audit: type=1326 audit(1760968980.446:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.896095][ T37] audit: type=1326 audit(1760968980.446:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 235.896454][ T37] audit: type=1326 audit(1760968980.446:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2168efc9 code=0x7ffc0000 [ 236.110003][ T10] usb 3-1: config 0 descriptor?? [ 236.119930][ T10] usb 3-1: can't set config #0, error -71 [ 236.122696][ T10] usb 3-1: USB disconnect, device number 4 [ 237.278774][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.278793][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.278822][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.332883][ T6485] team0: Port device team_slave_0 added [ 237.774194][ T6485] team0: Port device team_slave_1 added [ 238.539876][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 238.702812][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.702840][ T31] usb 3-1: config 0 has no interface number 0 [ 238.702896][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.702924][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.702963][ T31] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 238.702987][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.775134][ T31] usb 3-1: config 0 descriptor?? [ 238.941638][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.941657][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.941747][ T6485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.971311][ T6419] hsr_slave_0: entered promiscuous mode [ 238.972981][ T6419] hsr_slave_1: entered promiscuous mode [ 238.974148][ T6419] debugfs: 'hsr0' already exists in 'hsr' [ 238.974176][ T6419] Cannot create hsr debugfs directory [ 239.000782][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.000797][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.000824][ T6485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.280677][ T31] uclogic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 239.436251][ T10] usb 3-1: USB disconnect, device number 5 [ 239.691613][ T6485] hsr_slave_0: entered promiscuous mode [ 239.696190][ T6485] hsr_slave_1: entered promiscuous mode [ 239.700456][ T6485] debugfs: 'hsr0' already exists in 'hsr' [ 239.700486][ T6485] Cannot create hsr debugfs directory [ 240.808780][ T6745] block device autoloading is deprecated and will be removed. [ 243.330429][ T6024] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.482259][ T6024] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.482287][ T6024] usb 3-1: config 0 has no interface number 0 [ 243.482336][ T6024] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.482363][ T6024] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.482400][ T6024] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.482423][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.491051][ T6024] usb 3-1: config 0 descriptor?? [ 243.925959][ T6024] uclogic 0003:256C:006D.0005: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 244.115607][ T5946] usb 3-1: USB disconnect, device number 6 [ 244.335976][ T6787] ------------[ cut here ]------------ [ 244.336001][ T6787] WARNING: CPU: 1 PID: 6787 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 244.336063][ T6787] Modules linked in: [ 244.336103][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.336126][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.336143][ T6787] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 244.336175][ T6787] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 244.336192][ T6787] RSP: 0018:ffffc90003cb78e0 EFLAGS: 00010283 [ 244.336208][ T6787] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 244.336230][ T6787] RDX: ffffc90010169000 RSI: 00000000000011af RDI: 00000000000011b0 [ 244.336244][ T6787] RBP: ffffc90003cb7a70 R08: 0000000000000000 R09: 0000000000000000 [ 244.336259][ T6787] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 244.336274][ T6787] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888030428791 [ 244.336287][ T6787] FS: 00007fa13b15d6c0(0000) GS:ffff888126cc8000(0000) knlGS:0000000000000000 [ 244.336304][ T6787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.336318][ T6787] CR2: 0000200000004200 CR3: 0000000039a54000 CR4: 00000000003526f0 [ 244.336334][ T6787] Call Trace: [ 244.336346][ T6787] [ 244.336362][ T6787] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 244.336402][ T6787] ? __pfx_cgroup_freeze+0x10/0x10 [ 244.336431][ T6787] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 244.336462][ T6787] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.336494][ T6787] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 244.336529][ T6787] ? mutex_lock_nested+0x154/0x1d0 [ 244.336553][ T6787] ? cgroup_kn_lock_live+0x13c/0x230 [ 244.336584][ T6787] cgroup_freeze_write+0x156/0x1c0 [ 244.336611][ T6787] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 244.336635][ T6787] ? kernfs_root+0x1c/0x230 [ 244.336661][ T6787] ? kernfs_root+0x1c/0x230 [ 244.336689][ T6787] ? kernfs_root+0x1ea/0x230 [ 244.336716][ T6787] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 244.336742][ T6787] cgroup_file_write+0x39e/0x740 [ 244.336770][ T6787] ? __pfx_cgroup_file_write+0x10/0x10 [ 244.336805][ T6787] ? __pfx_cgroup_file_write+0x10/0x10 [ 244.336824][ T6787] kernfs_fop_write_iter+0x3b0/0x540 [ 244.336853][ T6787] vfs_write+0x5d5/0xb40 [ 244.336889][ T6787] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 244.336913][ T6787] ? __pfx_vfs_write+0x10/0x10 [ 244.336942][ T6787] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 244.336978][ T6787] ? mutex_lock_nested+0x154/0x1d0 [ 244.337002][ T6787] ? fdget_pos+0x253/0x320 [ 244.337034][ T6787] ksys_write+0x14b/0x260 [ 244.337055][ T6787] ? __pfx_ksys_write+0x10/0x10 [ 244.337078][ T6787] ? do_syscall_64+0xbe/0xfa0 [ 244.337102][ T6787] do_syscall_64+0xfa/0xfa0 [ 244.337119][ T6787] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.337151][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.337171][ T6787] ? clear_bhb_loop+0x60/0xb0 [ 244.337197][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.337216][ T6787] RIP: 0033:0x7fa13cf1efc9 [ 244.337243][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.337259][ T6787] RSP: 002b:00007fa13b15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.337279][ T6787] RAX: ffffffffffffffda RBX: 00007fa13d176090 RCX: 00007fa13cf1efc9 [ 244.337294][ T6787] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 244.337306][ T6787] RBP: 00007fa13cfa1f91 R08: 0000000000000000 R09: 0000000000000000 [ 244.337320][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.337332][ T6787] R13: 00007fa13d176128 R14: 00007fa13d176090 R15: 00007ffedc0a1878 [ 244.337367][ T6787] [ 244.337381][ T6787] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.337396][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.337417][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.337429][ T6787] Call Trace: [ 244.337437][ T6787] [ 244.337445][ T6787] dump_stack_lvl+0x99/0x250 [ 244.337469][ T6787] ? __asan_memcpy+0x40/0x70 [ 244.337500][ T6787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.337524][ T6787] ? __pfx__printk+0x10/0x10 [ 244.337564][ T6787] vpanic+0x237/0x6d0 [ 244.337603][ T6787] ? __pfx_vpanic+0x10/0x10 [ 244.337636][ T6787] panic+0xb9/0xc0 [ 244.337656][ T6787] ? __pfx_panic+0x10/0x10 [ 244.337695][ T6787] __warn+0x31b/0x4b0 [ 244.337714][ T6787] ? cgroup_freeze+0x80a/0xf90 [ 244.337750][ T6787] ? cgroup_freeze+0x80a/0xf90 [ 244.337783][ T6787] report_bug+0x2be/0x4f0 [ 244.337815][ T6787] ? cgroup_freeze+0x80a/0xf90 [ 244.337850][ T6787] ? cgroup_freeze+0x80a/0xf90 [ 244.337883][ T6787] ? cgroup_freeze+0x80c/0xf90 [ 244.337915][ T6787] handle_bug+0x84/0x160 [ 244.337939][ T6787] exc_invalid_op+0x1a/0x50 [ 244.337962][ T6787] asm_exc_invalid_op+0x1a/0x20 [ 244.337982][ T6787] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 244.338013][ T6787] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 244.338031][ T6787] RSP: 0018:ffffc90003cb78e0 EFLAGS: 00010283 [ 244.338049][ T6787] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 244.338064][ T6787] RDX: ffffc90010169000 RSI: 00000000000011af RDI: 00000000000011b0 [ 244.338077][ T6787] RBP: ffffc90003cb7a70 R08: 0000000000000000 R09: 0000000000000000 [ 244.338091][ T6787] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 244.338106][ T6787] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888030428791 [ 244.338131][ T6787] ? cgroup_freeze+0x809/0xf90 [ 244.338197][ T6787] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 244.338244][ T6787] ? __pfx_cgroup_freeze+0x10/0x10 [ 244.338275][ T6787] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 244.338312][ T6787] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.338344][ T6787] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 244.338384][ T6787] ? mutex_lock_nested+0x154/0x1d0 [ 244.338409][ T6787] ? cgroup_kn_lock_live+0x13c/0x230 [ 244.338445][ T6787] cgroup_freeze_write+0x156/0x1c0 [ 244.338475][ T6787] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 244.338501][ T6787] ? kernfs_root+0x1c/0x230 [ 244.338528][ T6787] ? kernfs_root+0x1c/0x230 [ 244.338559][ T6787] ? kernfs_root+0x1ea/0x230 [ 244.338587][ T6787] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 244.338615][ T6787] cgroup_file_write+0x39e/0x740 [ 244.338645][ T6787] ? __pfx_cgroup_file_write+0x10/0x10 [ 244.338685][ T6787] ? __pfx_cgroup_file_write+0x10/0x10 [ 244.338705][ T6787] kernfs_fop_write_iter+0x3b0/0x540 [ 244.338739][ T6787] vfs_write+0x5d5/0xb40 [ 244.338778][ T6787] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 244.338804][ T6787] ? __pfx_vfs_write+0x10/0x10 [ 244.338835][ T6787] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 244.338875][ T6787] ? mutex_lock_nested+0x154/0x1d0 [ 244.338901][ T6787] ? fdget_pos+0x253/0x320 [ 244.338936][ T6787] ksys_write+0x14b/0x260 [ 244.338960][ T6787] ? __pfx_ksys_write+0x10/0x10 [ 244.338985][ T6787] ? do_syscall_64+0xbe/0xfa0 [ 244.339010][ T6787] do_syscall_64+0xfa/0xfa0 [ 244.339030][ T6787] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.339062][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.339084][ T6787] ? clear_bhb_loop+0x60/0xb0 [ 244.339113][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.339134][ T6787] RIP: 0033:0x7fa13cf1efc9 [ 244.339152][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.339169][ T6787] RSP: 002b:00007fa13b15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.339190][ T6787] RAX: ffffffffffffffda RBX: 00007fa13d176090 RCX: 00007fa13cf1efc9 [ 244.339206][ T6787] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 244.339219][ T6787] RBP: 00007fa13cfa1f91 R08: 0000000000000000 R09: 0000000000000000 [ 244.339240][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.339252][ T6787] R13: 00007fa13d176128 R14: 00007fa13d176090 R15: 00007ffedc0a1878 [ 244.339303][ T6787] [ 244.339660][ T6787] Kernel Offset: disabled