last executing test programs: 1m10.380432015s ago: executing program 1 (id=276): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000a40)=""/4096) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) 1m8.174480042s ago: executing program 1 (id=280): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m6.172863591s ago: executing program 1 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffffa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000011c0)={'syz1\x00', {0x3c3, 0x9, 0x0, 0xa}, 0x1d, [0x80, 0x0, 0x4, 0x0, 0x4, 0x4, 0x1, 0x8, 0x10, 0x400, 0x5, 0xde11, 0x9, 0xfffffff1, 0xff, 0x5, 0x4, 0x81, 0x9, 0x5, 0x7f, 0x2, 0x2, 0x7fff, 0x80000000, 0x1, 0x40000, 0xffff8000, 0x0, 0x800, 0xf, 0xa54, 0x2, 0x5, 0xe, 0x2, 0x8, 0xfee, 0x62b, 0x7, 0x3, 0x4, 0x4, 0x7fffffff, 0x55, 0x7ff, 0x6a1, 0xf, 0x0, 0x3, 0x6, 0xb, 0x2, 0x6, 0x0, 0x1, 0xff, 0x2, 0x0, 0x80000001, 0x5d2c, 0xff, 0x7f], [0x1, 0x7ff, 0x0, 0x80000001, 0x2e, 0x0, 0x2e, 0xae, 0x5, 0x2, 0x5, 0x3, 0x9, 0x9, 0x8000, 0x9, 0x80000001, 0xfffffffb, 0x4, 0x1, 0x0, 0x5, 0x3, 0x696d, 0x8, 0x2, 0x6, 0x1, 0x86000000, 0x8, 0x4, 0x6, 0x3, 0x6, 0xfffffffa, 0x2c4, 0x9, 0x7, 0x800, 0x4, 0x4, 0xf, 0x0, 0x9, 0x7, 0x9, 0x7, 0x6, 0xe254, 0x101, 0x1, 0x4c9, 0x2, 0xfffffffb, 0x5, 0x1f2cde0a, 0x40, 0x5, 0x1bef, 0x1, 0xd95, 0x3, 0xfffffffe, 0x8], [0xffffffff, 0x8, 0xfffffffc, 0x80000001, 0x1, 0x1, 0xfffffff8, 0x8, 0x2, 0xc, 0x2, 0x9, 0x2, 0x7ff, 0x4a, 0x3, 0xffff, 0xf5, 0x101, 0x5, 0x6, 0xffffffff, 0xd, 0x80000000, 0x6, 0x8, 0x7, 0x1, 0xfff, 0x7f, 0x7, 0x7f, 0x80000000, 0x8, 0x1, 0x5, 0x5, 0x6, 0x8001, 0x101, 0xbc60, 0x2, 0x1, 0xb, 0x2, 0x4, 0x154, 0xa4, 0x5, 0x625, 0x7, 0xa977, 0x64, 0x1ff, 0x4, 0x6, 0x8, 0x8, 0xc, 0x20000007, 0x8, 0x7fff, 0xc], [0x5, 0x6, 0x9, 0x2, 0x2, 0x2, 0x9, 0x2, 0x7, 0x5, 0x6, 0x24a5, 0x0, 0x2, 0x9, 0x0, 0xe402, 0x2, 0xf0000000, 0x8000, 0x8000, 0x67c, 0xffff, 0x8000, 0x7, 0x7fffffff, 0xfff, 0x3, 0x9, 0x4, 0x3, 0x1, 0x7ff, 0x80, 0x2, 0x80000001, 0xc, 0x9, 0x101, 0x80eb, 0x6, 0xfffffffc, 0x7fff, 0x8, 0x1ff, 0x9, 0x7, 0x4a, 0x70a, 0x400, 0xefe, 0x4, 0xfffeffff, 0x7, 0xfffffff3, 0x3, 0x7, 0x800, 0x2, 0x6, 0xc, 0x10000, 0x3, 0x6]}, 0x45c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 1m3.646630178s ago: executing program 1 (id=288): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 58.458464148s ago: executing program 1 (id=297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) fsopen(0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 55.053222531s ago: executing program 1 (id=300): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, 0x0, 0x0, 0xd, 0xfffffffffffffffc}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x80}, 0x300}, 0x8040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r4}, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000040)) 38.567507867s ago: executing program 32 (id=300): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, 0x0, 0x0, 0xd, 0xfffffffffffffffc}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x80}, 0x300}, 0x8040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r4}, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000040)) 16.746004676s ago: executing program 4 (id=370): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/43, 0x2b}], 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x80, 0x0, 0x271}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x83fd, 0x1fffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 15.215561342s ago: executing program 0 (id=374): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) lseek(r3, 0x1000000, 0x0) 13.254491298s ago: executing program 0 (id=375): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x4000040) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x1) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) write$sndseq(r5, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @raw32={[0x3, 0x7]}}, {0x0, 0x0, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) 13.119016858s ago: executing program 4 (id=377): geteuid() set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x20}}, 0x40) dup3(r2, r0, 0x80000) 12.881937278s ago: executing program 2 (id=378): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r3, 0x800799c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}, 0x1c) sendfile(0xffffffffffffffff, r3, 0x0, 0xfeff) 11.966131893s ago: executing program 3 (id=380): getpid() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) getpgid(0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) 11.604041426s ago: executing program 2 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r3) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000200)='\x00', 0x0, r3) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) close(r3) 11.599381947s ago: executing program 0 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746420009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004040) 11.169425708s ago: executing program 0 (id=383): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) r4 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 11.143314185s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x10f, 0x20000011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) connect$unix(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) semop(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2004000, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 11.14259738s ago: executing program 4 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fstat(0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f0000000580)}) read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) keyctl$set_reqkey_keyring(0xe, 0x1) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 8.9152601s ago: executing program 0 (id=386): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/43, 0x2b}], 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x80, 0x0, 0x271}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x83fd, 0x1fffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 8.687124685s ago: executing program 2 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.686496099s ago: executing program 4 (id=388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0xb, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) 8.60580025s ago: executing program 3 (id=389): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r4, &(0x7f0000000240)='}', 0x61) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 6.822262761s ago: executing program 4 (id=390): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 6.710178946s ago: executing program 3 (id=391): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}, 0x1c) sendfile(r4, r3, 0x0, 0xfeff) 5.641947397s ago: executing program 2 (id=392): fsopen(0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.41030018s ago: executing program 3 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000011) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x0, 0x0, 0x0) 5.079731057s ago: executing program 0 (id=394): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4010) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) 3.230454399s ago: executing program 3 (id=395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x80001) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x400, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x0) 2.05750475s ago: executing program 2 (id=396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$fb0(0xffffffffffffff9c, 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x10}}], 0x28}}], 0x1, 0x4004000) close_range(r3, 0xffffffffffffffff, 0x0) 208.871438ms ago: executing program 2 (id=397): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x1000000, 0xfc1b2d1c5df073ab, 0x8, 0x441, 0xfc, 0x400008, 0x0, 0x0, 0x80, 0xb66}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2001c0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) 0s ago: executing program 4 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 54.213520][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.226322][ T5481] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. syzkaller login: [ 81.091767][ T5805] cgroup: Unknown subsys name 'net' [ 81.331468][ T5805] cgroup: Unknown subsys name 'cpuset' [ 81.387343][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.140006][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.890836][ T989] cfg80211: failed to load regulatory.db [ 87.078230][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.080848][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.084227][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.085442][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.087129][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.127740][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.130968][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.184224][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.199697][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.200688][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.205603][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.208473][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.217497][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.235268][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.238083][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.238841][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.241544][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.249363][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.250166][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.277357][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.294999][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.305553][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.319142][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.336768][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.337627][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.026348][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.288896][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 88.343788][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.361550][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.574472][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.827503][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.828729][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.829468][ T5825] bridge_slave_0: entered allmulticast mode [ 88.832247][ T5825] bridge_slave_0: entered promiscuous mode [ 88.884932][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885022][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.885444][ T5825] bridge_slave_1: entered allmulticast mode [ 88.895662][ T5825] bridge_slave_1: entered promiscuous mode [ 89.208161][ T59] Bluetooth: hci1: command tx timeout [ 89.286734][ T59] Bluetooth: hci0: command tx timeout [ 89.366791][ T5135] Bluetooth: hci3: command tx timeout [ 89.367147][ T5135] Bluetooth: hci2: command tx timeout [ 89.367299][ T59] Bluetooth: hci4: command tx timeout [ 89.467467][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.467604][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.467726][ T5822] bridge_slave_0: entered allmulticast mode [ 89.469198][ T5822] bridge_slave_0: entered promiscuous mode [ 89.583309][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.637416][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.637537][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.637696][ T5822] bridge_slave_1: entered allmulticast mode [ 89.639454][ T5822] bridge_slave_1: entered promiscuous mode [ 89.655157][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.655272][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.655471][ T5829] bridge_slave_0: entered allmulticast mode [ 89.658124][ T5829] bridge_slave_0: entered promiscuous mode [ 89.665326][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.665681][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.665797][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.665950][ T5831] bridge_slave_0: entered allmulticast mode [ 89.676389][ T5831] bridge_slave_0: entered promiscuous mode [ 89.849165][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.849326][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.849490][ T5829] bridge_slave_1: entered allmulticast mode [ 89.852164][ T5829] bridge_slave_1: entered promiscuous mode [ 89.917830][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.917958][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.918120][ T5831] bridge_slave_1: entered allmulticast mode [ 89.920834][ T5831] bridge_slave_1: entered promiscuous mode [ 90.261128][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.261723][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.261842][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.262014][ T5830] bridge_slave_0: entered allmulticast mode [ 90.264255][ T5830] bridge_slave_0: entered promiscuous mode [ 90.429280][ T5825] team0: Port device team_slave_0 added [ 90.509971][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.510339][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.510453][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.510570][ T5830] bridge_slave_1: entered allmulticast mode [ 90.511996][ T5830] bridge_slave_1: entered promiscuous mode [ 90.523320][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.525130][ T5825] team0: Port device team_slave_1 added [ 90.530455][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.729530][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.810479][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.169493][ T5822] team0: Port device team_slave_0 added [ 91.172701][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.238589][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.238600][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.238613][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.286698][ T59] Bluetooth: hci1: command tx timeout [ 91.324216][ T5822] team0: Port device team_slave_1 added [ 91.327013][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.329525][ T5829] team0: Port device team_slave_0 added [ 91.330880][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.330892][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.330914][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.376727][ T59] Bluetooth: hci0: command tx timeout [ 91.446812][ T59] Bluetooth: hci3: command tx timeout [ 91.446845][ T59] Bluetooth: hci4: command tx timeout [ 91.446865][ T59] Bluetooth: hci2: command tx timeout [ 91.521367][ T5831] team0: Port device team_slave_0 added [ 91.648922][ T5829] team0: Port device team_slave_1 added [ 91.664856][ T5831] team0: Port device team_slave_1 added [ 91.918144][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.918155][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.918169][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.920469][ T5830] team0: Port device team_slave_0 added [ 92.058297][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.058312][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.058335][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.060740][ T5830] team0: Port device team_slave_1 added [ 92.062068][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.062079][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.062092][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.157016][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.157030][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.157047][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.279114][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.279129][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.279152][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.359519][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.359533][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.359556][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.450655][ T5825] hsr_slave_0: entered promiscuous mode [ 92.451561][ T5825] hsr_slave_1: entered promiscuous mode [ 92.543665][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.543677][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.543691][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.659355][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.659368][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.659382][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.012693][ T5822] hsr_slave_0: entered promiscuous mode [ 93.013514][ T5822] hsr_slave_1: entered promiscuous mode [ 93.014143][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 93.014228][ T5822] Cannot create hsr debugfs directory [ 93.176270][ T5829] hsr_slave_0: entered promiscuous mode [ 93.177799][ T5829] hsr_slave_1: entered promiscuous mode [ 93.178559][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 93.178580][ T5829] Cannot create hsr debugfs directory [ 93.190523][ T5831] hsr_slave_0: entered promiscuous mode [ 93.191710][ T5831] hsr_slave_1: entered promiscuous mode [ 93.192557][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 93.192578][ T5831] Cannot create hsr debugfs directory [ 93.366618][ T59] Bluetooth: hci1: command tx timeout [ 93.446646][ T59] Bluetooth: hci0: command tx timeout [ 93.526662][ T59] Bluetooth: hci2: command tx timeout [ 93.526691][ T59] Bluetooth: hci4: command tx timeout [ 93.526711][ T59] Bluetooth: hci3: command tx timeout [ 93.554401][ T5830] hsr_slave_0: entered promiscuous mode [ 93.555706][ T5830] hsr_slave_1: entered promiscuous mode [ 93.573733][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 93.573763][ T5830] Cannot create hsr debugfs directory [ 95.060534][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.105373][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.123019][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.177400][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.308383][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.343890][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.381617][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.436360][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.447350][ T5135] Bluetooth: hci1: command tx timeout [ 95.536763][ T5135] Bluetooth: hci0: command tx timeout [ 95.579500][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.607023][ T5135] Bluetooth: hci4: command tx timeout [ 95.607063][ T5135] Bluetooth: hci2: command tx timeout [ 95.607079][ T5135] Bluetooth: hci3: command tx timeout [ 95.635557][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.675915][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.723911][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.860725][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.898418][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.945102][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.990930][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.049726][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.144100][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.175809][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.229171][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.269309][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.269548][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.359242][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.359460][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.397291][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.397473][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.428726][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.527749][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.575827][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.578844][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.579037][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.615395][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.615517][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.696083][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.766426][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.804390][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.805266][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.864704][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.864910][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.905296][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.956217][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.979117][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.981983][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.052576][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.052784][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.122846][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.208184][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.210646][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.255275][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.278773][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.278900][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.465070][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.593045][ T5825] veth0_vlan: entered promiscuous mode [ 97.689101][ T5825] veth1_vlan: entered promiscuous mode [ 97.729572][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.831061][ T5829] veth0_vlan: entered promiscuous mode [ 97.881672][ T5829] veth1_vlan: entered promiscuous mode [ 97.965571][ T5825] veth0_macvtap: entered promiscuous mode [ 97.994288][ T5825] veth1_macvtap: entered promiscuous mode [ 98.109877][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.123071][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.129659][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.139522][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.142467][ T5829] veth0_macvtap: entered promiscuous mode [ 98.203607][ T5829] veth1_macvtap: entered promiscuous mode [ 98.206122][ T1010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.226455][ T1010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.253187][ T1010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.255354][ T1010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.365786][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.443528][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.548948][ T1216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.573036][ T1216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.611517][ T1216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.631022][ T1216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.651863][ T5831] veth0_vlan: entered promiscuous mode [ 98.655876][ T5830] veth0_vlan: entered promiscuous mode [ 98.681032][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.681056][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.814064][ T5831] veth1_vlan: entered promiscuous mode [ 98.830782][ T5830] veth1_vlan: entered promiscuous mode [ 98.837992][ T5822] veth0_vlan: entered promiscuous mode [ 98.884827][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.884845][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.008024][ T5822] veth1_vlan: entered promiscuous mode [ 99.024075][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.024094][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.138601][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.138621][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.139381][ T5831] veth0_macvtap: entered promiscuous mode [ 99.211389][ T5831] veth1_macvtap: entered promiscuous mode [ 99.230132][ T5830] veth0_macvtap: entered promiscuous mode [ 99.309632][ T5830] veth1_macvtap: entered promiscuous mode [ 99.324431][ T5822] veth0_macvtap: entered promiscuous mode [ 99.375403][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.428710][ T5822] veth1_macvtap: entered promiscuous mode [ 99.777889][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.799957][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.824593][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.833363][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.833436][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.841367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.846586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.856562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.866162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.567120][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.609800][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.629535][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.729522][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.750088][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.751824][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.754317][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.755130][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.861658][ T3620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.921094][ T3620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.922260][ T3620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.925854][ T3620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.133040][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.133060][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.434949][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.434969][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.620234][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.620254][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.784411][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.784430][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.956558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.982900][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.982919][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.157325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.186555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.276570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.316572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.406574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.568320][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.568340][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.459959][ T5969] block device autoloading is deprecated and will be removed. [ 112.931753][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.677897][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.193547][ T6029] bridge0: entered promiscuous mode [ 116.193911][ T6029] vlan2: entered promiscuous mode [ 116.260334][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.388477][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.520417][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.073121][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.252137][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.257642][ T6042] overlayfs: failed to resolve './file1': -2 [ 117.325021][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.414207][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.443341][ T6030] 9pnet_virtio: no channels available for device syz [ 117.610303][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.684984][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.359613][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.752552][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 119.736234][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.000806][ T6083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.102719][ T6088] binder: BINDER_SET_CONTEXT_MGR already set [ 122.102729][ T6088] binder: 6085:6088 ioctl 4018620d 200000000ac0 returned -16 [ 122.103007][ T6088] binder: 6085:6088 ioctl c0306201 2000000003c0 returned -14 [ 122.597961][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.419472][ T6088] syz.3.39 (6088): drop_caches: 2 [ 123.689950][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 125.068295][ T5907] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.505037][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.505437][ T5907] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.cf [ 125.505516][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.925307][ T5907] usb 2-1: config 0 descriptor?? [ 125.957441][ T6128] binder_alloc: 6122: binder_alloc_buf, no vma [ 125.996150][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 126.348821][ T6132] cgroup: fork rejected by pids controller in /syz0 [ 126.440763][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.441850][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.445547][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 126.463244][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 126.468687][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 126.487115][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 126.487867][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 126.489307][ T5907] pwc: recv_control_msg error -32 req 02 val 2100 [ 126.496347][ T5907] pwc: recv_control_msg error -32 req 04 val 1500 [ 126.497293][ T5907] pwc: recv_control_msg error -32 req 02 val 2500 [ 126.820135][ T5907] pwc: recv_control_msg error -71 req 02 val 2600 [ 126.826695][ T5907] pwc: recv_control_msg error -71 req 02 val 2900 [ 126.830010][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 126.830691][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 126.831112][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.032490][ T5907] pwc: Registered as video103. [ 127.088866][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 127.156313][ T5907] usb 2-1: USB disconnect, device number 2 [ 127.505570][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.705171][ T37] audit: type=1326 audit(1759299280.874:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705224][ T37] audit: type=1326 audit(1759299280.874:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705264][ T37] audit: type=1326 audit(1759299280.874:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705301][ T37] audit: type=1326 audit(1759299280.874:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705339][ T37] audit: type=1326 audit(1759299280.874:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705376][ T37] audit: type=1326 audit(1759299280.874:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705413][ T37] audit: type=1326 audit(1759299280.874:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705451][ T37] audit: type=1326 audit(1759299280.874:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705488][ T37] audit: type=1326 audit(1759299280.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 131.705525][ T37] audit: type=1326 audit(1759299280.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34f7eec9 code=0x7ffc0000 [ 133.003852][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.003956][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.111134][ T6491] 9pnet_virtio: no channels available for device syz [ 143.975159][ T6551] syz.0.92 (6551): drop_caches: 2 [ 144.214418][ T6548] 9pnet_virtio: no channels available for device syz [ 147.185050][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.555852][ T6576] bond_slave_0: entered promiscuous mode [ 147.555969][ T6576] bond_slave_1: entered promiscuous mode [ 147.574219][ T6576] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.590898][ T6576] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 148.486855][ T6002] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 148.743151][ T6002] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.743173][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.743184][ T6002] usb 4-1: Product: syz [ 148.743191][ T6002] usb 4-1: Manufacturer: syz [ 148.743198][ T6002] usb 4-1: SerialNumber: syz [ 148.798781][ T6002] usb 4-1: config 0 descriptor?? [ 149.046465][ T6002] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 151.292124][ T6002] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 151.306993][ T6002] usb 4-1: USB disconnect, device number 2 [ 151.656681][ T1588] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 151.806642][ T1588] usb 3-1: Using ep0 maxpacket: 8 [ 151.859485][ T1588] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 151.859502][ T1588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.956738][ T1588] usb 3-1: config 0 descriptor?? [ 152.144645][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 152.145494][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 152.340655][ T6614] team0: entered promiscuous mode [ 152.340677][ T6614] team_slave_0: entered promiscuous mode [ 152.341846][ T6614] team_slave_1: entered promiscuous mode [ 152.380605][ T6614] bond0: entered promiscuous mode [ 152.380628][ T6614] bond_slave_0: entered promiscuous mode [ 152.380896][ T6614] bond_slave_1: entered promiscuous mode [ 152.414212][ T6614] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.959917][ T1588] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 155.959936][ T1588] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 155.960296][ T1588] asix 3-1:0.0: probe with driver asix failed with error -71 [ 155.977256][ T1588] usb 3-1: USB disconnect, device number 2 [ 158.736676][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.983766][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 159.287307][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.287340][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.287378][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 159.287399][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.393514][ T9] usb 5-1: config 0 descriptor?? [ 160.219845][ T6669] sctp: [Deprecated]: syz.2.123 (pid 6669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.219845][ T6669] Use struct sctp_sack_info instead [ 161.157148][ T9] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 161.492066][ T9] usb 5-1: USB disconnect, device number 2 [ 162.417572][ T6677] 9pnet_virtio: no channels available for device syz [ 162.729836][ T6678] fido_id[6678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 163.878026][ T6693] input: syz1 as /devices/virtual/input/input6 [ 165.838367][ T6703] Zero length message leads to an empty skb [ 173.956409][ T6748] syz.2.148 (6748) used greatest stack depth: 18936 bytes left [ 176.367420][ T6792] 9pnet_virtio: no channels available for device syz [ 183.608541][ T6838] 9pnet_virtio: no channels available for device syz [ 185.684486][ T6855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.790185][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 187.842810][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 187.842838][ T37] audit: type=1326 audit(1759299337.014:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 187.843887][ T37] audit: type=1326 audit(1759299337.014:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 187.843931][ T37] audit: type=1326 audit(1759299337.014:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 187.957017][ T1588] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 188.360222][ T37] audit: type=1326 audit(1759299337.014:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.360573][ T37] audit: type=1326 audit(1759299337.014:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.360781][ T37] audit: type=1326 audit(1759299337.034:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.361019][ T37] audit: type=1326 audit(1759299337.064:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.361345][ T37] audit: type=1326 audit(1759299337.064:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.361551][ T37] audit: type=1326 audit(1759299337.064:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.361782][ T37] audit: type=1326 audit(1759299337.064:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b95ceec9 code=0x7ffc0000 [ 188.881696][ T1588] usb 1-1: Using ep0 maxpacket: 16 [ 189.285240][ T1588] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 189.285270][ T1588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.285289][ T1588] usb 1-1: Product: syz [ 189.285300][ T1588] usb 1-1: Manufacturer: syz [ 189.285313][ T1588] usb 1-1: SerialNumber: syz [ 189.350238][ T1588] usb 1-1: config 0 descriptor?? [ 189.365697][ T1588] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 190.940710][ T1588] gp8psk: usb in 128 operation failed. [ 190.941149][ T1588] gp8psk: usb in 137 operation failed. [ 190.941174][ T1588] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.942411][ T1588] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 190.942498][ T1588] usb 1-1: media controller created [ 191.382244][ T1588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.918392][ T1588] gp8psk_fe: Frontend revision 1 attached [ 192.114365][ T1588] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 192.118918][ T1588] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 193.088955][ T6889] 9pnet_virtio: no channels available for device syz [ 193.152448][ T1588] gp8psk: usb in 138 operation failed. [ 193.152459][ T1588] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 193.152466][ T1588] gp8psk: found Genpix USB device pID = 201 (hex) [ 193.239149][ T1588] usb 1-1: USB disconnect, device number 2 [ 193.403934][ T6895] 9pnet_virtio: no channels available for device syz [ 194.323556][ T1588] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 195.389067][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.389149][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.193713][ T6927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.845732][ T6954] 9pnet_virtio: no channels available for device syz [ 204.254364][ T6967] 9pnet_virtio: no channels available for device syz [ 209.163440][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.296201][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.552487][ T7006] 9pnet_virtio: no channels available for device syz [ 209.663116][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 209.688294][ T7010] netlink: 'syz.2.217': attribute type 83 has an invalid length. [ 209.872465][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.899647][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 209.901519][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.901534][ T5836] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.903468][ T5836] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 209.903484][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.903494][ T5836] usb 4-1: Product: syz [ 209.903501][ T5836] usb 4-1: Manufacturer: syz [ 209.903508][ T5836] usb 4-1: SerialNumber: syz [ 210.813348][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.897715][ T5836] usb 4-1: config 0 descriptor?? [ 211.430826][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.948018][ T7015] Bluetooth: hci0: command 0x0406 tx timeout [ 211.950287][ T7015] Bluetooth: hci1: command 0x0406 tx timeout [ 211.950326][ T7015] Bluetooth: hci4: command 0x0406 tx timeout [ 211.950348][ T7015] Bluetooth: hci3: command 0x0406 tx timeout [ 211.951732][ T7015] Bluetooth: hci2: command 0x0406 tx timeout [ 212.467539][ T5892] usb 4-1: USB disconnect, device number 3 [ 218.551058][ T7060] 9pnet_virtio: no channels available for device syz [ 223.496786][ T7098] process 'syz.2.239' launched './file0' with NULL argv: empty string added [ 225.666778][ T1588] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 225.847906][ T1588] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 225.847934][ T1588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.847951][ T1588] usb 4-1: Product: syz [ 225.847962][ T1588] usb 4-1: Manufacturer: syz [ 225.847973][ T1588] usb 4-1: SerialNumber: syz [ 225.868925][ T1588] usb 4-1: config 0 descriptor?? [ 225.873466][ T7121] netlink: 'syz.0.244': attribute type 32 has an invalid length. [ 226.106726][ T1588] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.048165][ T7131] ======================================================= [ 227.048165][ T7131] WARNING: The mand mount option has been deprecated and [ 227.048165][ T7131] and is ignored by this kernel. Remove the mand [ 227.048165][ T7131] option from the mount to silence this warning. [ 227.048165][ T7131] ======================================================= [ 227.927762][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.697920][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.990469][ T1588] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 229.042783][ T1588] usb 4-1: USB disconnect, device number 4 [ 229.742066][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.282755][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.508955][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.979431][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.144420][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.420179][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.448047][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.102153][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.322132][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 236.322196][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 236.376032][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x13 [ 236.379156][ T7180] kvm_intel: kvm [7179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x53 [ 236.381441][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 236.381509][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 236.426336][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 236.426409][ T7180] kvm: kvm [7179]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 237.150853][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.750291][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.050371][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20003. Sending cookies. [ 239.231438][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.349313][ T7195] syz.4.263 (7195) used greatest stack depth: 18904 bytes left [ 239.413463][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.324416][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.587494][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.905387][ T7238] Invalid source name [ 248.036962][ T7247] ceph: No mds server is up or the cluster is laggy [ 253.556716][ T1588] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 256.932154][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.934000][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.100865][ T1588] usb 2-1: Using ep0 maxpacket: 16 [ 257.330861][ T1588] usb 2-1: device descriptor read/all, error -71 [ 269.026726][ T6002] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 270.046711][ T6002] usb 4-1: Using ep0 maxpacket: 32 [ 270.049327][ T6002] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 270.049356][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.121989][ T6002] usb 4-1: config 0 descriptor?? [ 270.196248][ T6002] gspca_main: sunplus-2.14.0 probing 041e:400b [ 271.601371][ T6002] gspca_sunplus: reg_w_riv err -110 [ 271.601441][ T6002] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 273.949645][ T5836] usb 4-1: USB disconnect, device number 5 [ 275.409768][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.045230][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.315341][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.477723][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.302293][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.023683][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.125552][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.441807][ T7446] Bluetooth: MGMT ver 1.23 [ 278.941616][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.365112][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.378370][ T5135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.384222][ T5135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.385268][ T5135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.386130][ T5135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.407022][ T5135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.503490][ T7472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.821219][ T5832] Bluetooth: hci5: command tx timeout [ 285.595015][ T7500] program syz.0.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.846652][ T5832] Bluetooth: hci5: command tx timeout [ 288.671464][ T5832] Bluetooth: hci5: command tx timeout [ 288.823050][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 288.823068][ T37] audit: type=1326 audit(1759299437.994:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 288.823111][ T37] audit: type=1326 audit(1759299437.994:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 288.823149][ T37] audit: type=1326 audit(1759299437.994:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 288.823188][ T37] audit: type=1326 audit(1759299437.994:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 289.873013][ T37] audit: type=1326 audit(1759299439.044:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 289.873063][ T37] audit: type=1326 audit(1759299439.044:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 289.873108][ T37] audit: type=1326 audit(1759299439.044:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 289.873146][ T37] audit: type=1326 audit(1759299439.044:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 289.874897][ T37] audit: type=1326 audit(1759299439.044:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f309be40d5c code=0x7ffc0000 [ 289.874945][ T37] audit: type=1326 audit(1759299439.044:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be3eec9 code=0x7ffc0000 [ 290.215463][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 290.726685][ T5832] Bluetooth: hci5: command tx timeout [ 296.593657][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.358'. [ 296.593693][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.358'. [ 298.134548][ T7575] batadv0: entered promiscuous mode [ 298.136195][ T7575] team0: entered promiscuous mode [ 298.136214][ T7575] team_slave_0: entered promiscuous mode [ 298.136439][ T7575] team_slave_1: entered promiscuous mode [ 298.148540][ T7575] debugfs: 'hsr1' already exists in 'hsr' [ 298.148568][ T7575] Cannot create hsr debugfs directory [ 298.149482][ T7575] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 298.965150][ T1179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.199845][ T1179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.012170][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 310.844625][ T1179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.536300][ T7710] syz.3.393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.285713][ T7722] ------------[ cut here ]------------ [ 316.285729][ T7722] WARNING: CPU: 0 PID: 7722 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 316.285759][ T7722] Modules linked in: [ 316.285783][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.2.397 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 316.285796][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.285803][ T7722] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 316.285817][ T7722] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 316.285825][ T7722] RSP: 0018:ffffc9000637f8e0 EFLAGS: 00010283 [ 316.285834][ T7722] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 316.285842][ T7722] RDX: ffffc9000e20a000 RSI: 00000000000000ac RDI: 00000000000000ad [ 316.285850][ T7722] RBP: ffffc9000637fa70 R08: 0000000000000000 R09: 0000000000000000 [ 316.285856][ T7722] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 316.285864][ T7722] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888031842791 [ 316.285871][ T7722] FS: 00007f79c58166c0(0000) GS:ffff888127017000(0000) knlGS:0000000000000000 [ 316.285880][ T7722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.285886][ T7722] CR2: 000000110c31f2da CR3: 0000000039cfe000 CR4: 00000000003526f0 [ 316.285896][ T7722] Call Trace: [ 316.285903][ T7722] [ 316.285912][ T7722] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 316.285931][ T7722] ? __pfx_cgroup_freeze+0x10/0x10 [ 316.285943][ T7722] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 316.285958][ T7722] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.285972][ T7722] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 316.285990][ T7722] ? mutex_lock_nested+0x154/0x1d0 [ 316.286002][ T7722] ? cgroup_kn_lock_live+0x13c/0x230 [ 316.286023][ T7722] cgroup_freeze_write+0x156/0x1c0 [ 316.286035][ T7722] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 316.286046][ T7722] ? kernfs_root+0x1c/0x230 [ 316.286055][ T7722] ? kernfs_root+0x1c/0x230 [ 316.286065][ T7722] ? kernfs_root+0x1ea/0x230 [ 316.286074][ T7722] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 316.286085][ T7722] cgroup_file_write+0x39b/0x740 [ 316.286102][ T7722] ? __pfx_cgroup_file_write+0x10/0x10 [ 316.286124][ T7722] ? __pfx_cgroup_file_write+0x10/0x10 [ 316.286136][ T7722] kernfs_fop_write_iter+0x3b0/0x540 [ 316.286155][ T7722] vfs_write+0x5d5/0xb40 [ 316.286171][ T7722] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 316.286184][ T7722] ? __pfx_vfs_write+0x10/0x10 [ 316.286194][ T7722] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 316.286212][ T7722] ? mutex_lock_nested+0x154/0x1d0 [ 316.286223][ T7722] ? fdget_pos+0x253/0x320 [ 316.286242][ T7722] ksys_write+0x14b/0x260 [ 316.286255][ T7722] ? __pfx_ksys_write+0x10/0x10 [ 316.286265][ T7722] ? rcu_is_watching+0x15/0xb0 [ 316.286279][ T7722] ? do_syscall_64+0xbe/0x3b0 [ 316.286292][ T7722] do_syscall_64+0xfa/0x3b0 [ 316.286300][ T7722] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.286315][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.286325][ T7722] ? clear_bhb_loop+0x60/0xb0 [ 316.286338][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.286347][ T7722] RIP: 0033:0x7f79c75aeec9 [ 316.286360][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.286368][ T7722] RSP: 002b:00007f79c5816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.286378][ T7722] RAX: ffffffffffffffda RBX: 00007f79c7805fa0 RCX: 00007f79c75aeec9 [ 316.286385][ T7722] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 316.286392][ T7722] RBP: 00007f79c7631f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.286398][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.286404][ T7722] R13: 00007f79c7806038 R14: 00007f79c7805fa0 R15: 00007ffe0e1114d8 [ 316.286421][ T7722] [ 316.286427][ T7722] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 316.286435][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.2.397 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 316.286446][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.286452][ T7722] Call Trace: [ 316.286456][ T7722] [ 316.286460][ T7722] dump_stack_lvl+0x99/0x250 [ 316.286470][ T7722] ? __asan_memcpy+0x40/0x70 [ 316.286480][ T7722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.286509][ T7722] ? __pfx__printk+0x10/0x10 [ 316.286544][ T7722] vpanic+0x281/0x750 [ 316.286561][ T7722] ? __pfx__printk+0x10/0x10 [ 316.286582][ T7722] ? __pfx_vpanic+0x10/0x10 [ 316.286593][ T7722] ? is_bpf_text_address+0x26/0x2b0 [ 316.286610][ T7722] panic+0xb9/0xc0 [ 316.286620][ T7722] ? __pfx_panic+0x10/0x10 [ 316.286639][ T7722] __warn+0x31b/0x4b0 [ 316.286649][ T7722] ? cgroup_freeze+0x80a/0xf90 [ 316.286664][ T7722] ? cgroup_freeze+0x80a/0xf90 [ 316.286677][ T7722] report_bug+0x2be/0x4f0 [ 316.286692][ T7722] ? cgroup_freeze+0x80a/0xf90 [ 316.286705][ T7722] ? cgroup_freeze+0x80a/0xf90 [ 316.286718][ T7722] ? cgroup_freeze+0x80c/0xf90 [ 316.286730][ T7722] handle_bug+0x84/0x160 [ 316.286741][ T7722] exc_invalid_op+0x1a/0x50 [ 316.286752][ T7722] asm_exc_invalid_op+0x1a/0x20 [ 316.286761][ T7722] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 316.286773][ T7722] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 316.286781][ T7722] RSP: 0018:ffffc9000637f8e0 EFLAGS: 00010283 [ 316.286790][ T7722] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 316.286797][ T7722] RDX: ffffc9000e20a000 RSI: 00000000000000ac RDI: 00000000000000ad [ 316.286803][ T7722] RBP: ffffc9000637fa70 R08: 0000000000000000 R09: 0000000000000000 [ 316.286810][ T7722] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 316.286817][ T7722] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888031842791 [ 316.286828][ T7722] ? cgroup_freeze+0x809/0xf90 [ 316.286848][ T7722] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 316.286865][ T7722] ? __pfx_cgroup_freeze+0x10/0x10 [ 316.286876][ T7722] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 316.286890][ T7722] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.286904][ T7722] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 316.286921][ T7722] ? mutex_lock_nested+0x154/0x1d0 [ 316.286932][ T7722] ? cgroup_kn_lock_live+0x13c/0x230 [ 316.286952][ T7722] cgroup_freeze_write+0x156/0x1c0 [ 316.286964][ T7722] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 316.286973][ T7722] ? kernfs_root+0x1c/0x230 [ 316.286982][ T7722] ? kernfs_root+0x1c/0x230 [ 316.286992][ T7722] ? kernfs_root+0x1ea/0x230 [ 316.287001][ T7722] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 316.287011][ T7722] cgroup_file_write+0x39b/0x740 [ 316.287029][ T7722] ? __pfx_cgroup_file_write+0x10/0x10 [ 316.287050][ T7722] ? __pfx_cgroup_file_write+0x10/0x10 [ 316.287062][ T7722] kernfs_fop_write_iter+0x3b0/0x540 [ 316.287080][ T7722] vfs_write+0x5d5/0xb40 [ 316.287094][ T7722] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 316.287107][ T7722] ? __pfx_vfs_write+0x10/0x10 [ 316.287117][ T7722] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 316.287134][ T7722] ? mutex_lock_nested+0x154/0x1d0 [ 316.287145][ T7722] ? fdget_pos+0x253/0x320 [ 316.287163][ T7722] ksys_write+0x14b/0x260 [ 316.287176][ T7722] ? __pfx_ksys_write+0x10/0x10 [ 316.287186][ T7722] ? rcu_is_watching+0x15/0xb0 [ 316.287201][ T7722] ? do_syscall_64+0xbe/0x3b0 [ 316.287213][ T7722] do_syscall_64+0xfa/0x3b0 [ 316.287222][ T7722] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.287236][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.287245][ T7722] ? clear_bhb_loop+0x60/0xb0 [ 316.287258][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.287267][ T7722] RIP: 0033:0x7f79c75aeec9 [ 316.287276][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.287283][ T7722] RSP: 002b:00007f79c5816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.287293][ T7722] RAX: ffffffffffffffda RBX: 00007f79c7805fa0 RCX: 00007f79c75aeec9 [ 316.287300][ T7722] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 316.287306][ T7722] RBP: 00007f79c7631f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.287312][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.287318][ T7722] R13: 00007f79c7806038 R14: 00007f79c7805fa0 R15: 00007ffe0e1114d8 [ 316.287335][ T7722] [ 316.287644][ T7722] Kernel Offset: disabled