last executing test programs: 52.388309399s ago: executing program 1 (id=60): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x57) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3f, 0x4) bind$can_raw(r3, &(0x7f00000000c0), 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000151401"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086ddeff913e613c26d42000000fbac14140be000031762079f4b4d2f87e5feca6aab845013f232050039", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.538266035s ago: executing program 1 (id=62): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xd8, 0x0, {0x200003ae, 0x7f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 38.536510625s ago: executing program 0 (id=63): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 33.391609498s ago: executing program 0 (id=64): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) epoll_create1(0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), 0x0}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 27.624096712s ago: executing program 1 (id=65): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 27.623283352s ago: executing program 0 (id=66): bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 20.41374442s ago: executing program 1 (id=67): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 19.795114981s ago: executing program 0 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000000) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[], 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) 14.000702866s ago: executing program 1 (id=69): socket$inet6_udp(0xa, 0x2, 0x0) mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000000e020000000000000000000000000000020000000000000000000000090200000000005f"], 0x0, 0x44}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x80100) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) syz_io_uring_setup(0x2ddd, &(0x7f0000001200)={0x0, 0x0, 0x40, 0x0, 0x1000220}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.772901215s ago: executing program 0 (id=70): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r0, 0x0, 0xf03a0005) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20, &(0x7f0000002380)={[{@gid, 0x41}]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) sendfile(r3, r2, 0x0, 0x6) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280), 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x20, &(0x7f0000000180), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) mbind(&(0x7f0000eb6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 81.885746ms ago: executing program 0 (id=71): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=72): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18062' (ED25519) to the list of known hosts. syzkaller login: [ 416.227044][ T3196] cgroup: Unknown subsys name 'net' [ 416.649605][ T3196] cgroup: Unknown subsys name 'cpuset' [ 416.768749][ T3196] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 477.222074][ T3196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 609.079647][ T3207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.232453][ T3207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.905359][ T3209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.984633][ T3209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.479997][ T3207] hsr_slave_0: entered promiscuous mode [ 621.503345][ T3207] hsr_slave_1: entered promiscuous mode [ 627.416652][ T3209] hsr_slave_0: entered promiscuous mode [ 627.440584][ T3209] hsr_slave_1: entered promiscuous mode [ 627.472637][ T3209] debugfs: 'hsr0' already exists in 'hsr' [ 627.477947][ T3209] Cannot create hsr debugfs directory [ 630.546054][ T3207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.061889][ T3207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.385779][ T3207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.691589][ T3207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 635.721458][ T3209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 636.207799][ T3209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 636.321340][ T3209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 636.671420][ T3209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 646.029680][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.767212][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.877767][ T3207] veth0_vlan: entered promiscuous mode [ 689.401024][ T3207] veth1_vlan: entered promiscuous mode [ 691.738705][ T3207] veth0_macvtap: entered promiscuous mode [ 692.073038][ T3207] veth1_macvtap: entered promiscuous mode [ 694.282310][ T3209] veth0_vlan: entered promiscuous mode [ 694.639366][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.720488][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.801892][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.816910][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.571865][ T3209] veth1_vlan: entered promiscuous mode [ 698.298105][ T3209] veth0_macvtap: entered promiscuous mode [ 698.491428][ T3209] veth1_macvtap: entered promiscuous mode [ 698.967821][ T3207] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 700.778255][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.783137][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.799796][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.802343][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.842919][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 725.342046][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 725.496578][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 725.500071][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 725.502051][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 725.509939][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 725.511772][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 725.513537][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 725.530189][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 725.551028][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.168394][ T10] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 727.822648][ T10] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 728.258127][ T10] usb 2-1: USB disconnect, device number 2 [ 733.051658][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.057017][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.058995][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.060934][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.062801][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.066201][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.068202][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.070094][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.071953][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 733.074639][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.135751][ T3937] net_ratelimit: 2486 callbacks suppressed [ 738.136502][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.139715][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.141570][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.143380][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.147203][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.149871][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.151636][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.153472][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.156178][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 738.158422][ T3937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 744.710483][ T3941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 761.600270][ T3953] process 'syz.1.9' launched './file1' with NULL argv: empty string added [ 768.552642][ T3956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 768.588868][ T3956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 769.799897][ T3956] vlan2: entered allmulticast mode [ 769.802131][ T3956] hsr0: entered allmulticast mode [ 769.858358][ T3956] hsr_slave_0: entered allmulticast mode [ 769.862153][ T3956] hsr_slave_1: entered allmulticast mode [ 791.000784][ T3907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 791.670454][ T3907] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 791.696094][ T3907] usb 2-1: config 1 interface 0 has no altsetting 0 [ 791.956034][ T3907] usb 2-1: string descriptor 0 read error: -22 [ 791.962778][ T3907] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 791.990599][ T3907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.487598][ T3907] usbhid 2-1:1.0: can't add hid device: -32 [ 799.500526][ T3907] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 803.957365][ T3907] usb 2-1: USB disconnect, device number 3 [ 806.810058][ T3983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16'. [ 878.517783][ T62] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 878.860123][ T62] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 878.862394][ T62] usb 2-1: config 1 interface 0 has no altsetting 0 [ 879.196800][ T62] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 879.200585][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.216607][ T62] usb 2-1: Product: С [ 879.219616][ T62] usb 2-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 879.270264][ T62] usb 2-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 879.602253][ T4031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 885.299644][ T62] usbhid 2-1:1.0: can't add hid device: -71 [ 885.342909][ T62] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 885.565873][ T62] usb 2-1: USB disconnect, device number 4 [ 927.217027][ T931] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 927.701384][ T931] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 927.716792][ T931] usb 2-1: config 1 interface 0 has no altsetting 0 [ 927.736428][ T931] usb 2-1: language id specifier not provided by device, defaulting to English [ 927.927098][ T931] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 927.929284][ T931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.930962][ T931] usb 2-1: Product: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 927.932796][ T931] usb 2-1: Manufacturer: С [ 927.937998][ T931] usb 2-1: SerialNumber: ␁ [ 934.765198][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 935.152542][ T931] usbhid 2-1:1.0: can't add hid device: -71 [ 935.170159][ T931] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 935.331096][ T931] usb 2-1: USB disconnect, device number 5 [ 938.771519][ T3198] Process accounting resumed [ 940.053209][ T4092] Process accounting resumed [ 974.512955][ T4112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.46'. [ 999.818276][ T4128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.53'. [ 1031.650840][ T4147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'. [ 1597.671315][ T38] INFO: task syz.1.72:4174 blocked for more than 439 seconds. [ 1601.578250][ T38] Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 [ 1601.580555][ T38] Blocked by coredump. [ 1601.581727][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1601.583527][ T38] task:syz.1.72 state:D stack:0 pid:4174 tgid:4174 ppid:3207 task_flags:0x40044c flags:0x00000008 [ 1606.915549][ T38] Call Trace: [ 1606.916725][ T38] [] __schedule+0x1042/0x4106 [ 1606.918704][ T38] [] schedule+0xc4/0x35e [ 1606.919598][ T38] [] schedule_preempt_disabled+0x16/0x28 [ 1606.920643][ T38] [] rwsem_down_read_slowpath+0x58a/0x9f2 [ 1606.921609][ T38] [] down_read+0xe4/0x45e [ 1606.922466][ T38] [] do_exit+0x6c2/0x28e0 [ 1606.923323][ T38] [] do_group_exit+0xd4/0x26c [ 1612.081638][ T38] [] get_signal+0x207c/0x22fc [ 1612.082709][ T38] [] arch_do_signal_or_restart+0x6c0/0x25d6 [ 1620.387153][ T38] [] exit_to_user_mode_loop+0x90/0x134 [ 1620.389566][ T38] [] do_trap_ecall_u+0x3f0/0x530 [ 1620.391197][ T38] [] handle_exception+0x146/0x152 [ 1625.679194][ T38] [ 1625.679194][ T38] Showing all locks held in the system: [ 1625.681230][ T38] 1 lock held by kthreadd/2: [ 1625.682812][ T38] 4 locks held by kworker/0:0/9: [ 1627.278831][ T38] 1 lock held by kworker/R-mm_pe/14: [ 1627.280487][ T38] 3 locks held by kworker/1:0/24: [ 1627.281887][ T38] 1 lock held by kworker/u9:0/27: VM DIAGNOSIS: 09:10:35 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff817e3fc8 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b10d mtvec 00000000800004f0 stvec ffffffff863ed450 vstvec 0000000000000000 mepc ffffffff804fdf80 sepc ffffffff8016760c vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 901ff000000af41f x0/zero 0000000000000000 x1/ra ffffffff80078dd4 x2/sp ffff8f80000075f0 x3/gp ffffffff89c9e5c0 x4/tp ffffaf8015698000 x5/t0 ffffaf806ed27220 x6/t1 fffffffef21e8206 x7/t2 736174203a4f464e x8/s0 ffff8f8000007670 x9/s1 ffff8f8000007840 x10/a0 0000000000000007 x11/a1 ffffaf806ed25040 x12/a2 0000000000f00000 x13/a3 ffffffff803ef9cc x14/a4 0000000000000000 x15/a5 ffffaf8015698000 x16/a6 0000000000f00000 x17/a7 0000000000000003 x18/s2 ffff8f8000007940 x19/s3 ffffaf806ed25040 x20/s4 ffffaf806ed25040 x21/s5 000000010001fa84 x22/s6 ffffaf8018821c10 x23/s7 1ffff1f000000ee8 x24/s8 ffffffff863e8a20 x25/s9 ffffffff8686fc00 x26/s10 ffffaf806ed25040 x27/s11 ffffffff91047920 x28/t3 4e0b899600000000 x29/t4 fffff1ef00000ed8 x30/t5 00000000000000c8 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff804fdf80 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b10d mtvec 00000000800004f0 stvec ffffffff863ed450 vstvec 0000000000000000 mepc ffffffff8008f822 sepc ffffffff863e8dca vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 9011f0000009f791 x0/zero 0000000000000000 x1/ra ffffffff80078c72 x2/sp ffff8f80000179a0 x3/gp ffffffff89c9e5c0 x4/tp ffffaf801afab480 x5/t0 ffff8f8000017b30 x6/t1 0000000000000001 x7/t2 1ffff1f000002ef8 x8/s0 ffff8f8000017a40 x9/s1 ffff8f8000017a40 x10/a0 0000000000000006 x11/a1 ffffffff8006f204 x12/a2 0000000000000003 x13/a3 ffffffff80078c66 x14/a4 0000000000000000 x15/a5 ffffaf801afab480 x16/a6 0000000000f00000 x17/a7 000000002794c795 x18/s2 ffff8f8000017b50 x19/s3 ffffffff863e8a42 x20/s4 0000000000000000 x21/s5 dfffffff00000000 x22/s6 ffffffff817e1dd0 x23/s7 0000000000000001 x24/s8 0000000000000001 x25/s9 ffffffff90f84a28 x26/s10 ffffffff89cdf9a0 x27/s11 1ffff5f007f7156b x28/t3 29e476ff00000000 x29/t4 0000000000000000 x30/t5 ffffffffffffffff x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000