last executing test programs: 26m15.930436601s ago: executing program 32 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 22m32.004586387s ago: executing program 33 (id=853): mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='.\x00', 0x1a83066, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000a3f000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000021, 0x9}}], 0x20}) ioctl$KVM_RUN(r1, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000000)) 22m15.118236021s ago: executing program 34 (id=881): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x100403, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x8007fffd, 0x0, 0xe, "dce4f0020100000000001b347d5c00010200"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000001300)={0x2, 0x4f, 0x1000, 0xa2b, 0x18, "16a12379904418f759c3e93343f083cbdb4176"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") getpid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) chdir(&(0x7f0000000080)='./file0\x00') ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000280)={0x81ff, 0x4, 0x4, 0xfffff6a8, 0x6, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x4004}) 21m14.567557259s ago: executing program 35 (id=1007): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) 21m13.940411769s ago: executing program 36 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(&(0x7f00000002c0)=""/112) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 21m10.31208803s ago: executing program 37 (id=1020): futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x10fffffd) 20m15.325626037s ago: executing program 38 (id=1085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x38) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") 19m59.453422524s ago: executing program 39 (id=1144): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x202000, 0x1800, 0x7, 0x3}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3f, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x2, 0x7, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x9, 0x1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m26.347743841s ago: executing program 40 (id=1211): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x561, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x20060a0, 0x0) truncate(&(0x7f0000000d80)='./file2\x00', 0x7) 19m5.010619865s ago: executing program 41 (id=1250): mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x280440e, &(0x7f0000001c40)={[{@debug}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@delalloc}, {@noinit_itable}, {@noquota}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") 18m9.763560544s ago: executing program 42 (id=1395): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 17m18.169977462s ago: executing program 43 (id=1516): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) 16m58.710202407s ago: executing program 44 (id=1616): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) 15m16.982142523s ago: executing program 45 (id=1885): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 14m47.993634717s ago: executing program 46 (id=2001): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 14m44.833791305s ago: executing program 47 (id=2011): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@uid_gt}]}) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5f, 0x3}) 12m48.697674039s ago: executing program 48 (id=2445): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x208205, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@stripe={'stripe', 0x3d, 0x86}}, {@nojournal_checksum}, {@acl}]}, 0x81, 0x63d, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzGplyVYruxRTm5YKerChWD9cU7c92b7UB0Nd6kMpPVi1JFd4ZQtLhto1RIYcHEgghFxD8CX/QO7B5OpbCCS55RxwQnDIwQneMLM78rI/pEXW7srezwdGevNmdt/77tPbebOjtxPA0JrKfqQRRyLichIx2bBtImobp+r7Pfn27pVsSaJa/cc3SST1vGL/Z/XfB7IfScRYRHxyLuIXpdZy127fuTZfqda8FjGzvrI6s3b7zonllfmri1cXr8+d/NOp07N/njs1tytxFnGdv/C3X7/1+n//uPRp5UQSZ+JS+f8L0RTHbpmKqXhWD7ExfyQiTmeJNq/Ly6YIIRlwPdiZUv3vsRwRh2MySrFvc9tkLL850MoBPVUtRVSBIZVs9v/yYCsC9FkxDijO7XtxHryXjZyNiKePIlriH6l9NhJj+bnR/idJfp5UyM53D+5C+VkZP949+l62RIfPIUZ2oZxONu5FxK/atX+S1+1g/ilOFn8aacPjsvRsRIzWX4t0h+VPNa33+++vOf6/j3SOv7EdsnjP1H9n+ee2L+p+u8xBxw/AcHp4tn4g38jWnh//s5FhMf6JNuOfiTbHrp0Y9PHv8dnaAbx1/FMc78fyz8jTpnFYNua52P4py80ZX75x/p1O5TeO/7IlK78YC/bD43sRR5viv58P5pLN9k/atH+2y+Uuy/jrZ1+f77Rt0PFXH0Qca3v+8/yKVpaaWV9ZLfKark/OLC1XFmdrP9uW8dGjf3/QqfxBx5+1f3SIf6v2z/JWuyzjw4sPVjptm9g2/vSr0eRSnhqt5/xvfn395lzEaHKhvktD/snNB7Z9eyr2KZ4ji//479r3/y3izxt6o8v4V/957Ukt1XqVtOv2b3lXyT2rdlmHTrL4F3bY/m93Wcb3/7r1m6as8SKxVfzjrU+VdPuaAwAAAAAAwDBK82uwSTq9mU7T6enaHN5fxv60cmNt/fdLN25dX4g4nv8/ZDktrnRP1taTbH2u/v+wxfrJpvU/RMShiHi3NJ6vT1+5UVkYdPAAAAAAAAAAAAAAAAAAAACwRxyoz/8v7lP9Xak2/78r64d7XDug53p5gzlgb9P/YXjl/b+bO7j+p/d1AfrL8R+Gl/4Pw0v/h+Gl/8Pwau7/3g9geOjvMLz0fxhe+j8AAAAAvJIO/fbhF0lEbPxlPF8yo/Vt5YHWDOi1xj4+1tUjpnpWF6C/uuvzLUq7XQ+g/zYv/Xcz/R94pXR1jv+0/uWAva8OMABJu8x8cFDduvM/bPtIAAAAAAAAAAAAAKAHjh0x/x+GVRofD7oKwIC8wER+3wEALzlf/Q/Dyzk+sN0s/o7fE2b+PwAAAAAAAAAAAAD0zUS+JOl0/RagE5Gm09MRP4uIg1FOlpYri7MR8fOI+LxU3petzw260gAAAAAAAAAAAAAAAAAAAPCKWbt959p8pbJ4szHxQ0tOjxPF3cW62blDnV8kUdwFtZ8hd5uIpP+FjkfEXoi9N4mRhpwkYiNr+T1RsZtrsSeqkebVGOCbEgAAAAAAAAAAAAAAAAAADKmGucftHX2/zzUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP57fv//nSeSbZ5n0DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+nnwIAAP///jAzVw==") r0 = syz_io_uring_setup(0x31bc, &(0x7f0000000540)={0x0, 0xc3af, 0x8, 0x1, 0x278}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007480)='y.\\', 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, &(0x7f0000007580)='./file1\x00'}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11m6.179852051s ago: executing program 49 (id=2885): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x932, 0x0) 9m3.25290257s ago: executing program 50 (id=3197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x1, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 8m59.514539335s ago: executing program 51 (id=3212): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000004980)) 8m9.840971702s ago: executing program 52 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8m3.952187608s ago: executing program 53 (id=3365): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt(r0, 0x60ad, 0x3f93f75d, 0x0, 0x0) 7m59.237341009s ago: executing program 54 (id=3380): r0 = socket(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x48f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x68, 0x4000094}, 0x2a156798fac7537e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140"], 0xec}}, 0x0) 7m7.072247963s ago: executing program 55 (id=3577): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) write(r0, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 6m57.655857814s ago: executing program 56 (id=3606): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="654374dbb7c69ce3d8970aa7400000"], 0x40}}, 0x24000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) 5m51.347856291s ago: executing program 57 (id=3770): r0 = syz_io_uring_setup(0x7609, &(0x7f00000003c0)={0x0, 0xf5dc, 0x40, 0x2, 0x2c4}, &(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x3, 0x6, 0x6, 0x0]}, 0x20) r1 = memfd_secret(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={r2, 0x0, r3}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 5m47.262560511s ago: executing program 58 (id=3782): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r0, &(0x7f0000001300)="cffc", 0x2, 0x7ff) 5m33.076516546s ago: executing program 59 (id=3864): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x3, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 4m55.238295929s ago: executing program 60 (id=3915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b8a040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m50.587769827s ago: executing program 5 (id=3967): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 4m49.268198128s ago: executing program 5 (id=3971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}], 0x1, 0x119e75c40673edef) 4m47.942989391s ago: executing program 5 (id=3976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000405}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x14) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0x10001}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r4, r6, 0x0, 0x10000) 4m46.777800336s ago: executing program 5 (id=3980): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 4m45.667882887s ago: executing program 5 (id=3983): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x99, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") 4m44.860709995s ago: executing program 5 (id=3987): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x8a01) pwrite64(r0, &(0x7f0000000140)="7dab0a86855dd5c2fc7e4ed795c5627ed0d0ae7925fb720b2ac62e300d2712857f5676a78b9454832b7650c4ddce8af8e08c5911e003ba595f0bdc6280a0550b57e4f5b094e52e42088e0029eccfa6e2c3d802", 0x53, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8810) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="071c0600"], 0x14) 4m29.717732214s ago: executing program 61 (id=3987): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x8a01) pwrite64(r0, &(0x7f0000000140)="7dab0a86855dd5c2fc7e4ed795c5627ed0d0ae7925fb720b2ac62e300d2712857f5676a78b9454832b7650c4ddce8af8e08c5911e003ba595f0bdc6280a0550b57e4f5b094e52e42088e0029eccfa6e2c3d802", 0x53, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8810) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="071c0600"], 0x14) 4m14.245706579s ago: executing program 8 (id=4059): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') 4m13.751111503s ago: executing program 8 (id=4062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r3, 0x0, 0x0) 4m12.717571121s ago: executing program 8 (id=4063): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x1800807, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r6 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000002c0)={0xfc, "95466109683d67e2d47944f957b75eac4326dc008fe0f81af3cdb712a658d5d1ab3dbbbf3d44a941c22332999ba651c17e4edbe0e7e98677de153af5cd982d9e"}) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") 4m7.238516827s ago: executing program 8 (id=4067): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x110) r2 = syz_io_uring_setup(0x5015, &(0x7f0000000540)={0x0, 0xce93, 0x0, 0x5, 0x804e, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, 0x0, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) 4m6.471589664s ago: executing program 8 (id=4072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r3, 0x0, 0x0) 3m59.102100629s ago: executing program 8 (id=4083): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 3m57.395185509s ago: executing program 62 (id=4083): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 2m10.736875195s ago: executing program 9 (id=4370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.111996335s ago: executing program 9 (id=4374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}], 0x1, 0x119e75c40673edef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 2m8.912101691s ago: executing program 9 (id=4378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r5, 0x0, 0x0) 2m7.611924682s ago: executing program 9 (id=4383): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 2m2.028617484s ago: executing program 9 (id=4402): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) 1m59.445951624s ago: executing program 9 (id=4408): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)) 1m58.718831619s ago: executing program 63 (id=4408): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)) 1m56.77080541s ago: executing program 6 (id=4420): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r3, 0x0, 0x0, 0x3b2}]) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) setpriority(0x1, r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, 0xffffffffffffffff, 0xb18c000) fsmount(0xffffffffffffffff, 0x0, 0x8e) socket$netlink(0x10, 0x3, 0x4) 1m53.473788164s ago: executing program 6 (id=4424): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 1m52.791008766s ago: executing program 6 (id=4428): setns(0xc9, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r1, &(0x7f0000000280)='1', 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300000d000000000005000000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000100000000020c001480"], 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 1m51.753482305s ago: executing program 6 (id=4434): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 1m42.812540563s ago: executing program 6 (id=4466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a17d50100000000000000020000000900020073797a32000000000900010073797a30000000000c000340000000000000000220000000080a9fcb090e20aadf290000020000000900010073797a300000000014000000110001"], 0x80}}, 0x0) 1m42.784126695s ago: executing program 7 (id=4467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f74610000df100002800c0001400000000000000080080002"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m42.502599438s ago: executing program 7 (id=4469): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 1m42.24636344s ago: executing program 6 (id=4470): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r3, 0x0, 0x0, 0x3b2}]) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) setpriority(0x1, r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, 0xffffffffffffffff, 0xb18c000) fsmount(0xffffffffffffffff, 0x0, 0x8e) socket$netlink(0x10, 0x3, 0x4) 1m41.796900161s ago: executing program 7 (id=4471): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000480, 0x0, 0x0) syz_ublk_setup_io_uring(0x540e, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 1m40.720823952s ago: executing program 64 (id=4470): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r3, 0x0, 0x0, 0x3b2}]) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) setpriority(0x1, r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, 0xffffffffffffffff, 0xb18c000) fsmount(0xffffffffffffffff, 0x0, 0x8e) socket$netlink(0x10, 0x3, 0x4) 1m40.597431098s ago: executing program 7 (id=4475): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 1m36.517743259s ago: executing program 7 (id=4485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, @printk={@ld}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) 1m35.304330365s ago: executing program 7 (id=4490): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 1m34.405915268s ago: executing program 65 (id=4490): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 28.715990205s ago: executing program 3 (id=4869): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x4a, 0x0, 0x4}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0xee01) keyctl$chown(0x4, r3, 0xee00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5413, 0x0) read$msr(r1, &(0x7f0000000100)=""/60, 0x3c) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 25.779312883s ago: executing program 3 (id=4874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f74610000df100002800c0001400000000000000080080002"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 24.575276689s ago: executing program 3 (id=4879): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) 24.261855963s ago: executing program 3 (id=4880): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x9, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.850321583s ago: executing program 3 (id=4884): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$eJzs3d9vU1UcAPDv7X4wB8pICFEfDAkPYpCObf7AxER8NErE6Ds0W1nIOkrWjrBJIjzIiy+GF2MkMf4BvvtI/Af8K0iUhBgy9cEfqbndLXTrum61c4N+PsmFc+6PnvvtuefsnN42N4C+dTT9JxfxQkR8mUQcbNo2GNnGo6v7rTy8Pp0uSdRqH/+aRJKta+yfZP/vzzLPR8SPn0ecyLWWW1laniuUSsWFLD9enb8yXllaPnlpvjBbnC1enpyaOv361ORbb77Rs1hfOffH1x/efe/0F8dWvvr+/qHbSZyJA9m25jj+gxvNmaOFv7PUUJxZt+NEDwrbS5LdPgG6MpC186FI+4CDMZC1euDp91lE1IA+lWj/0Kca44DG3L5H8+AnxoN3VydA9diHm+MfXP1sJEbqc6PRlWTNzCid7471oPy0jB9+uXM7XWLzzyGe6ZAH2JYbNyPi1OBga/+fZP1f907VPzze3Poy+u3vD+ymu+n459WNxn+5R+Of2GD8s3+DttuNzu0/d78HxbSVjv/e3nD8+6jrGhvIcs/Wx3xDycVLpeKpiHguIo5HreOtj9Mr92rttjWP/9IlLb8xFszO4/7gvrXHzBSqhYgY7jLkNR7cjHixMf5NK7il/x+pj3XX13/6fpzbYhlHindeal1b+yu2FP/Oqn0X8fKG9f+4WpPN70+O16+H8cZV0er3W0d+alf+bsef1v/o5vGPJc33ayvbL+PbkT+L7bZ1e/0PJ5/U041GcK1QrS5MRAwnH7Sun3x8bCPf2D+N//ixzfu/ja7/dPJ1IUvX9m0e/63Dty50H//OSuOf2Vb9bz9x7/1Pv2lX/tbq/7V66ni2Juv/IuKfkZYXzOpiqyfYkzcRAAAAAAAA9ohcRByIJJd/lM7l8vnV73ccjtFcqVypnrhYXrw8E/Xfyo7FUK5xp/tg0/chJrLvwzbyk+vyUxFxKOK3rNhifrpcmtnl2AEAAAAAAAAAAAAAAAAAAGCv2N/m9/+pnwd2++yAHVd/sEGHhxiEh7zDU6njI/978aQnYE/q2P6Bp5b2D/1L+4f+pf1D/9L+oX9p/9C/tH/oX9o/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NS5s2fTpbby8Pp0mp+5urQ4V756cqZYmcvPL07np8sLV/Kz5fJsqZifLs93er1SuXxlYjIWr41Xi5XqeGVp+fx8efFy9fyl+cJs8Xxx6H+JCgAAAAAAAAAAAAAAAAAAAJ4slaXluUKpVFyQaJt4J/bEaexkgKu6OnwwS3w0ulfCkVibuJlV7/aO2sVOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+TcAAP//CskxYQ==") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(0x0) setpgid(r0, r0) setpgid(0x0, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x99, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") 22.566258213s ago: executing program 3 (id=4890): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) 18.346316121s ago: executing program 4 (id=4914): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 16.005386951s ago: executing program 4 (id=4926): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 14.907471842s ago: executing program 4 (id=4934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 14.639928855s ago: executing program 4 (id=4937): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 8.849706996s ago: executing program 1 (id=4959): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000240)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0xffff}}, {@test_dummy_encryption}]}, 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000019c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_winnt}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@rodir}, {@rodir}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@rodir}, {@shortname_win95}, {@fat=@showexec}, {@utf8no}, {@utf8no}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) 8.366955888s ago: executing program 4 (id=4962): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2000006) 7.635752293s ago: executing program 4 (id=4967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000405}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x14) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0x10001}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BLKCLOSEZONE(r6, 0x40101287, &(0x7f0000000000)={0x612, 0x3}) sendfile(r4, r6, 0x0, 0x10000) 7.123010357s ago: executing program 66 (id=4967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000405}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x14) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0x10001}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BLKCLOSEZONE(r6, 0x40101287, &(0x7f0000000000)={0x612, 0x3}) sendfile(r4, r6, 0x0, 0x10000) 6.925658146s ago: executing program 67 (id=4890): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) 6.862290869s ago: executing program 0 (id=4971): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ppoll(0x0, 0x0, &(0x7f0000006580)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 6.500205546s ago: executing program 0 (id=4973): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 5.13645661s ago: executing program 1 (id=4977): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d", 0x29, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0000000001ffff00"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000680)={0x7ffffffa, 0xdb3, 0x1, 0x7fff, 0xea, "f8b9697fccbe285905af0f0000009f00"}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 4.087797079s ago: executing program 1 (id=4980): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8919, &(0x7f0000000040)) 3.549832384s ago: executing program 2 (id=4981): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ppoll(0x0, 0x0, &(0x7f0000006580)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 3.259522338s ago: executing program 1 (id=4982): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) read$msr(r0, &(0x7f0000000100)=""/60, 0x3c) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 3.038847228s ago: executing program 2 (id=4983): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 2.808989969s ago: executing program 1 (id=4984): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000480, 0x0, 0x0) syz_ublk_setup_io_uring(0x540e, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 2.716351833s ago: executing program 2 (id=4985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='0\n', 0x2) 2.715965383s ago: executing program 0 (id=4986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.423084477s ago: executing program 2 (id=4987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a010400000000000000000a0000010900010073797a310000000008000a40000000020900020073797a320000000020000000000a010300000000000000000a0000060900010073797a31"], 0x7400}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.315868322s ago: executing program 0 (id=4988): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000042c0)='./file2\x00', &(0x7f0000000340), 0x4018, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000000008, 0x0) fcntl$setpipe(r0, 0x407, 0xb21) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r3 = syz_clone(0x88010000, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getpgrp(r3) ppoll(&(0x7f00000001c0)=[{r2, 0x24}], 0x1, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10000, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x410, &(0x7f0000000280)={[{@nojournal_checksum}, {@debug}, {@quota}, {@bsdgroups}, {@mblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8800000000000001}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x446680, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) creat(&(0x7f0000000140)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x10, 0x1, 0x434f) 2.315365302s ago: executing program 1 (id=4989): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000200)=[{0x3, 0x10, 0x800}], 0x1) r2 = semget(0x3, 0x4, 0x39c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000440)=""/133) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/161}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x2, 0x2, 0x5, 0x3, 0x7}}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) 2.246914175s ago: executing program 2 (id=4990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r5) sendmmsg$unix(r4, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 520.270326ms ago: executing program 2 (id=4991): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 331.412605ms ago: executing program 0 (id=4992): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ppoll(0x0, 0x0, &(0x7f0000006580)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 0s ago: executing program 0 (id=4993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f74610000df100002800c0001400000000000000080080002"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) kernel console output (not intermixed with test programs): gle Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1536.308699][T21540] Call Trace: [ 1536.312023][T21540] [ 1536.314994][T21540] dump_stack_lvl+0x188/0x24e [ 1536.319737][T21540] ? show_regs_print_info+0x12/0x12 [ 1536.324991][T21540] ? load_image+0x410/0x410 [ 1536.329558][T21540] ? __lock_acquire+0x7c40/0x7c40 [ 1536.334639][T21540] ? kasan_set_track+0x60/0x70 [ 1536.339461][T21540] ? slab_post_alloc_hook+0x4b/0x490 [ 1536.344806][T21540] should_fail_ex+0x390/0x4c0 [ 1536.349543][T21540] prepare_alloc_pages+0x1e1/0x5b0 [ 1536.354723][T21540] __alloc_pages+0x130/0x4f0 [ 1536.359383][T21540] ? zone_statistics+0x170/0x170 [ 1536.364398][T21540] __get_free_pages+0x8/0x30 [ 1536.369050][T21540] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1536.374653][T21540] ? __apply_to_page_range+0x97b/0xd10 [ 1536.380161][T21540] __apply_to_page_range+0x98d/0xd10 [ 1536.385502][T21540] ? kasan_populate_vmalloc+0x70/0x70 [ 1536.390942][T21540] alloc_vmap_area+0x179f/0x18d0 [ 1536.395980][T21540] ? vm_map_ram+0xab0/0xab0 [ 1536.400540][T21540] ? rcu_is_watching+0x11/0xa0 [ 1536.405409][T21540] __get_vm_area_node+0x158/0x330 [ 1536.410494][T21540] vmap+0xf5/0x2c0 [ 1536.414267][T21540] ? bpf_ringbuf_alloc+0x30e/0x530 [ 1536.419425][T21540] bpf_ringbuf_alloc+0x30e/0x530 [ 1536.424393][T21540] ringbuf_map_alloc+0x1ac/0x2d0 [ 1536.429384][T21540] map_create+0x524/0xff0 [ 1536.433750][T21540] ? security_bpf+0x7a/0xa0 [ 1536.438295][T21540] __sys_bpf+0x38b/0x780 [ 1536.442577][T21540] ? bpf_link_show_fdinfo+0x380/0x380 [ 1536.448021][T21540] ? lock_chain_count+0x20/0x20 [ 1536.452928][T21540] __x64_sys_bpf+0x78/0x90 [ 1536.457382][T21540] do_syscall_64+0x4c/0xa0 [ 1536.461823][T21540] ? clear_bhb_loop+0x60/0xb0 [ 1536.466525][T21540] ? clear_bhb_loop+0x60/0xb0 [ 1536.471231][T21540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1536.477165][T21540] RIP: 0033:0x7ff24f99e159 [ 1536.481607][T21540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.501268][T21540] RSP: 002b:00007ff2507b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1536.509739][T21540] RAX: ffffffffffffffda RBX: 00007ff24fc25fa0 RCX: 00007ff24f99e159 [ 1536.517750][T21540] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 0000000000000000 [ 1536.525770][T21540] RBP: 00007ff24fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1536.533776][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.541781][T21540] R13: 00007ff24fc26038 R14: 00007ff24fc25fa0 R15: 00007fffbd42a7a8 [ 1536.549817][T21540] [ 1536.904582][T21563] loop0: detected capacity change from 0 to 256 [ 1536.938396][T21558] netlink: 120 bytes leftover after parsing attributes in process `syz.9.4211'. [ 1536.957648][T21561] loop7: detected capacity change from 0 to 512 [ 1537.051509][T21561] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1537.135308][T21561] EXT4-fs (loop7): 1 truncate cleaned up [ 1537.181162][T21561] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1537.242282][T21561] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1537.267680][T21561] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1537.360832][T21573] overlayfs: missing 'lowerdir' [ 1539.848951][T21578] loop6: detected capacity change from 0 to 1024 [ 1539.994842][T19846] EXT4-fs (loop7): unmounting filesystem. [ 1540.651285][T21605] FAULT_INJECTION: forcing a failure. [ 1540.651285][T21605] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.775152][T21605] CPU: 1 PID: 21605 Comm: syz.7.4226 Not tainted syzkaller #0 [ 1540.782971][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1540.793171][T21605] Call Trace: [ 1540.796501][T21605] [ 1540.799472][T21605] dump_stack_lvl+0x188/0x24e [ 1540.804205][T21605] ? show_regs_print_info+0x12/0x12 [ 1540.809495][T21605] ? load_image+0x410/0x410 [ 1540.814062][T21605] ? __lock_acquire+0x7c40/0x7c40 [ 1540.819153][T21605] should_fail_ex+0x390/0x4c0 [ 1540.823901][T21605] should_failslab+0x5/0x20 [ 1540.828453][T21605] slab_pre_alloc_hook+0x59/0x300 [ 1540.833588][T21605] kmem_cache_alloc_node+0x5a/0x310 [ 1540.838835][T21605] ? alloc_vmap_area+0x6a3/0x18d0 [ 1540.843961][T21605] alloc_vmap_area+0x6a3/0x18d0 [ 1540.848921][T21605] ? vm_map_ram+0xab0/0xab0 [ 1540.853485][T21605] ? rcu_is_watching+0x11/0xa0 [ 1540.858316][T21605] __get_vm_area_node+0x158/0x330 [ 1540.863422][T21605] vmap+0xf5/0x2c0 [ 1540.867200][T21605] ? bpf_ringbuf_alloc+0x30e/0x530 [ 1540.872364][T21605] bpf_ringbuf_alloc+0x30e/0x530 [ 1540.877444][T21605] ringbuf_map_alloc+0x1ac/0x2d0 [ 1540.882449][T21605] map_create+0x524/0xff0 [ 1540.886841][T21605] ? security_bpf+0x7a/0xa0 [ 1540.891400][T21605] __sys_bpf+0x38b/0x780 [ 1540.895699][T21605] ? bpf_link_show_fdinfo+0x380/0x380 [ 1540.901153][T21605] ? lock_chain_count+0x20/0x20 [ 1540.906266][T21605] __x64_sys_bpf+0x78/0x90 [ 1540.910779][T21605] do_syscall_64+0x4c/0xa0 [ 1540.915247][T21605] ? clear_bhb_loop+0x60/0xb0 [ 1540.919975][T21605] ? clear_bhb_loop+0x60/0xb0 [ 1540.924749][T21605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1540.930720][T21605] RIP: 0033:0x7f24d659e159 [ 1540.935188][T21605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.954890][T21605] RSP: 002b:00007f24d749d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1540.963543][T21605] RAX: ffffffffffffffda RBX: 00007f24d6825fa0 RCX: 00007f24d659e159 [ 1540.971572][T21605] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 0000000000000000 [ 1540.979691][T21605] RBP: 00007f24d663506b R08: 0000000000000000 R09: 0000000000000000 [ 1540.987731][T21605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.995767][T21605] R13: 00007f24d6826038 R14: 00007f24d6825fa0 R15: 00007ffd35dd58f8 [ 1541.003808][T21605] [ 1541.577422][T21628] loop0: detected capacity change from 0 to 256 [ 1541.615777][T21624] loop6: detected capacity change from 0 to 512 [ 1541.644503][T21624] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1541.733021][T21624] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1541.747523][T21624] Quota error (device loop6): write_blk: dquota write failed [ 1541.754950][T21624] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1541.764133][T21624] Quota error (device loop6): write_blk: dquota write failed [ 1541.772618][T21624] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1541.782818][T21624] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.4231: Failed to acquire dquot type 1 [ 1541.805144][T21624] EXT4-fs (loop6): 1 truncate cleaned up [ 1541.810953][T21624] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1543.608909][T21638] loop7: detected capacity change from 0 to 8192 [ 1543.997319][T21642] overlayfs: missing 'lowerdir' [ 1544.540880][T21638] syz.7.4233: attempt to access beyond end of device [ 1544.540880][T21638] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1544.554414][T21638] Buffer I/O error on dev loop7, logical block 57847, async page read [ 1544.606328][T21638] syz.7.4233: attempt to access beyond end of device [ 1544.606328][T21638] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1544.622877][T21638] Buffer I/O error on dev loop7, logical block 57847, async page read [ 1544.783522][ T27] audit: type=1800 audit(1700000960.601:62): pid=21638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4233" name="file2" dev="loop7" ino=1049098 res=0 errno=0 [ 1545.992717][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.915084][T19846] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1546.923371][T19846] FAT-fs (loop7): Filesystem has been set read-only [ 1548.038530][T21682] hub 8-0:1.0: USB hub found [ 1548.591935][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1549.456987][T21682] hub 8-0:1.0: 1 port detected [ 1549.467371][T21684] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4244'. [ 1549.985034][ T4330] device hsr_slave_0 left promiscuous mode [ 1550.007405][ T4330] device hsr_slave_1 left promiscuous mode [ 1550.072768][T21692] loop9: detected capacity change from 0 to 256 [ 1550.079601][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.110718][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.307781][T21696] hub 8-0:1.0: USB hub found [ 1550.312674][T21696] hub 8-0:1.0: 1 port detected [ 1550.334872][ T4330] device bridge_slave_1 left promiscuous mode [ 1550.350584][T21700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1550.375095][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.569996][T21704] overlayfs: missing 'lowerdir' [ 1550.811940][ T4330] device bridge_slave_0 left promiscuous mode [ 1550.864397][T20795] EXT4-fs (loop6): unmounting filesystem. [ 1550.953555][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.989705][ T4330] device veth1_macvtap left promiscuous mode [ 1550.995817][ T4330] device veth0_macvtap left promiscuous mode [ 1551.002065][ T4330] device veth1_vlan left promiscuous mode [ 1551.007938][ T4330] device veth0_vlan left promiscuous mode [ 1552.617743][T21765] loop7: detected capacity change from 0 to 1024 [ 1553.546091][T21768] loop0: detected capacity change from 0 to 8192 [ 1554.270774][T21770] syz.0.4255: attempt to access beyond end of device [ 1554.270774][T21770] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1554.284502][T21770] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1554.305294][T21770] syz.0.4255: attempt to access beyond end of device [ 1554.305294][T21770] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1554.323352][T21770] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1554.332405][ T27] audit: type=1800 audit(1700000970.312:63): pid=21770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4255" name="file2" dev="loop0" ino=1049110 res=0 errno=0 [ 1554.471021][T21765] loop7: detected capacity change from 0 to 512 [ 1554.499903][T21765] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1554.516839][T21765] EXT4-fs (loop7): group descriptors corrupted! [ 1554.703457][T20062] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 1554.716478][T20062] FAT-fs (loop0): Filesystem has been set read-only [ 1557.290270][T21806] loop6: detected capacity change from 0 to 1024 [ 1558.007148][T21806] loop6: detected capacity change from 0 to 512 [ 1558.103436][T21806] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1558.140143][T21806] EXT4-fs (loop6): group descriptors corrupted! [ 1558.929010][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1559.126389][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1559.906515][T21835] loop0: detected capacity change from 0 to 512 [ 1559.947981][T21835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1559.992117][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.009905][T21835] EXT4-fs (loop0): 1 truncate cleaned up [ 1560.026192][T21835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1560.093905][T21835] overlayfs: missing 'workdir' [ 1560.110382][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4282'. [ 1560.175097][T20062] EXT4-fs (loop0): unmounting filesystem. [ 1560.242901][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.589395][T21849] loop0: detected capacity change from 0 to 1024 [ 1560.630941][T21849] autofs4:pid:21849:autofs_fill_super: called with bogus options [ 1561.825356][ T4330] bond0 (unregistering): Released all slaves [ 1562.024297][T21696] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4250'. [ 1563.289613][T21873] netlink: 'syz.3.4295': attribute type 6 has an invalid length. [ 1564.466233][T21895] hub 8-0:1.0: USB hub found [ 1564.471925][T21895] hub 8-0:1.0: 1 port detected [ 1564.484966][T21895] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4301'. [ 1564.858442][T21892] loop0: detected capacity change from 0 to 1024 [ 1565.268770][T21900] loop9: detected capacity change from 0 to 256 [ 1565.309455][T21892] autofs4:pid:21892:autofs_fill_super: called with bogus options [ 1565.551255][T21892] loop0: detected capacity change from 0 to 512 [ 1565.792160][T21910] overlayfs: missing 'lowerdir' [ 1566.312096][T21892] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1566.501387][T21892] EXT4-fs (loop0): group descriptors corrupted! [ 1568.426060][T21944] loop7: detected capacity change from 0 to 128 [ 1568.729519][T21944] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1568.739335][T21944] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1571.009427][T19846] EXT4-fs (loop7): unmounting filesystem. [ 1571.650710][T21973] loop7: detected capacity change from 0 to 1024 [ 1571.837231][T21973] autofs4:pid:21973:autofs_fill_super: called with bogus options [ 1571.845844][T21975] loop9: detected capacity change from 0 to 256 [ 1572.013853][T21981] loop7: detected capacity change from 0 to 512 [ 1572.122053][T21981] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1572.179237][T21981] EXT4-fs (loop7): group descriptors corrupted! [ 1572.407048][T21985] overlayfs: missing 'lowerdir' [ 1573.587624][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 1574.628787][T22009] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1574.641681][T22009] loop6: detected capacity change from 0 to 128 [ 1574.685300][T22009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1574.696663][T22009] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.152656][T22022] Console: switching to colour VGA+ 80x25 [ 1575.309988][T22024] hub 8-0:1.0: USB hub found [ 1575.316146][T22024] hub 8-0:1.0: 1 port detected [ 1575.499765][T22023] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4335'. [ 1576.032424][T20795] EXT4-fs (loop6): unmounting filesystem. [ 1577.060125][T22041] loop3: detected capacity change from 0 to 512 [ 1577.101282][T22041] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1577.211441][T22041] EXT4-fs (loop3): group descriptors corrupted! [ 1577.320774][T22058] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4346'. [ 1577.385370][T22060] loop0: detected capacity change from 0 to 256 [ 1577.836953][T22067] overlayfs: missing 'lowerdir' [ 1579.694025][T22077] hub 8-0:1.0: USB hub found [ 1579.699903][T22077] hub 8-0:1.0: 1 port detected [ 1579.713471][T22077] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4351'. [ 1582.331387][T22102] loop6: detected capacity change from 0 to 8192 [ 1582.377089][T22111] loop3: detected capacity change from 0 to 256 [ 1582.751210][T22116] syz.6.4360: attempt to access beyond end of device [ 1582.751210][T22116] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1582.764818][T22116] Buffer I/O error on dev loop6, logical block 57847, async page read [ 1583.324151][ T27] audit: type=1800 audit(1700000998.963:64): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4360" name="file2" dev="loop6" ino=1049126 res=0 errno=0 [ 1584.228374][T22131] FAULT_INJECTION: forcing a failure. [ 1584.228374][T22131] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.289343][T22131] CPU: 1 PID: 22131 Comm: syz.7.4368 Not tainted syzkaller #0 [ 1584.296892][T22131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1584.306988][T22131] Call Trace: [ 1584.310299][T22131] [ 1584.313262][T22131] dump_stack_lvl+0x188/0x24e [ 1584.317992][T22131] ? show_regs_print_info+0x12/0x12 [ 1584.323242][T22131] ? load_image+0x410/0x410 [ 1584.327889][T22131] ? __lock_acquire+0x7c40/0x7c40 [ 1584.332985][T22131] should_fail_ex+0x390/0x4c0 [ 1584.337815][T22131] should_failslab+0x5/0x20 [ 1584.342365][T22131] slab_pre_alloc_hook+0x59/0x300 [ 1584.347436][T22131] ? blk_stat_alloc_callback+0x5c/0x210 [ 1584.353037][T22131] __kmem_cache_alloc_node+0x4f/0x270 [ 1584.358469][T22131] ? blk_stat_alloc_callback+0x5c/0x210 [ 1584.364076][T22131] kmalloc_trace+0x26/0xe0 [ 1584.368533][T22131] ? blk_mq_init_allocated_queue+0x17f0/0x17f0 [ 1584.374742][T22131] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 1584.380158][T22131] blk_stat_alloc_callback+0x5c/0x210 [ 1584.385589][T22131] blk_mq_init_allocated_queue+0x17b/0x17f0 [ 1584.391555][T22131] ? blk_mq_alloc_disk_for_queue+0x60/0x60 [ 1584.397409][T22131] ? blk_set_default_limits+0x17b/0x4b0 [ 1584.403093][T22131] ? blk_alloc_queue+0x4f6/0x5b0 [ 1584.408110][T22131] __blk_mq_alloc_disk+0xba/0x1e0 [ 1584.413277][T22131] loop_add+0x326/0x9a0 [ 1584.417490][T22131] loop_control_ioctl+0x124/0x590 [ 1584.422567][T22131] ? loop_set_hw_queue_depth+0x60/0x60 [ 1584.428086][T22131] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1584.433089][T22131] ? security_file_ioctl+0x7c/0xa0 [ 1584.438425][T22131] ? loop_set_hw_queue_depth+0x60/0x60 [ 1584.443936][T22131] __se_sys_ioctl+0xfa/0x170 [ 1584.448583][T22131] do_syscall_64+0x4c/0xa0 [ 1584.453052][T22131] ? clear_bhb_loop+0x60/0xb0 [ 1584.457770][T22131] ? clear_bhb_loop+0x60/0xb0 [ 1584.462494][T22131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.468442][T22131] RIP: 0033:0x7f24d659e159 [ 1584.472915][T22131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.492575][T22131] RSP: 002b:00007f24d749d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1584.501037][T22131] RAX: ffffffffffffffda RBX: 00007f24d6825fa0 RCX: 00007f24d659e159 [ 1584.509066][T22131] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1584.517083][T22131] RBP: 00007f24d663506b R08: 0000000000000000 R09: 0000000000000000 [ 1584.525098][T22131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.533296][T22131] R13: 00007f24d6826038 R14: 00007f24d6825fa0 R15: 00007ffd35dd58f8 [ 1584.541362][T22131] [ 1585.877873][T22142] hub 8-0:1.0: USB hub found [ 1585.883584][T22142] hub 8-0:1.0: 1 port detected [ 1585.897242][T22142] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4366'. [ 1586.768139][T22154] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1586.780147][T22154] loop0: detected capacity change from 0 to 128 [ 1586.811438][T22154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1586.935014][T22154] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.973004][T20062] EXT4-fs (loop0): unmounting filesystem. [ 1590.295344][T22198] FAULT_INJECTION: forcing a failure. [ 1590.295344][T22198] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1590.566465][T22198] CPU: 0 PID: 22198 Comm: syz.6.4386 Not tainted syzkaller #0 [ 1590.574017][T22198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1590.584110][T22198] Call Trace: [ 1590.587429][T22198] [ 1590.590406][T22198] dump_stack_lvl+0x188/0x24e [ 1590.595141][T22198] ? show_regs_print_info+0x12/0x12 [ 1590.600435][T22198] ? load_image+0x410/0x410 [ 1590.605007][T22198] ? mark_lock+0x94/0x320 [ 1590.609444][T22198] should_fail_ex+0x390/0x4c0 [ 1590.614189][T22198] get_futex_key+0x1b1/0x1000 [ 1590.618940][T22198] ? futex_setup_timer+0xc0/0xc0 [ 1590.623930][T22198] ? verify_lock_unused+0x140/0x140 [ 1590.629329][T22198] futex_wake+0x123/0x4f0 [ 1590.633727][T22198] ? futex_wake_mark+0x150/0x150 [ 1590.638735][T22198] do_futex+0x2e2/0x320 [ 1590.642947][T22198] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1590.648897][T22198] __se_sys_futex+0x381/0x410 [ 1590.653631][T22198] ? __x64_sys_futex+0xf0/0xf0 [ 1590.658452][T22198] ? __x64_sys_futex+0x1d/0xf0 [ 1590.663271][T22198] do_syscall_64+0x4c/0xa0 [ 1590.667739][T22198] ? clear_bhb_loop+0x60/0xb0 [ 1590.672470][T22198] ? clear_bhb_loop+0x60/0xb0 [ 1590.677229][T22198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1590.683188][T22198] RIP: 0033:0x7ff781b9e159 [ 1590.687647][T22198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.707304][T22198] RSP: 002b:00007ff782b170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1590.715777][T22198] RAX: ffffffffffffffda RBX: 00007ff781e25fa8 RCX: 00007ff781b9e159 [ 1590.723803][T22198] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff781e25fac [ 1590.731821][T22198] RBP: 00007ff781e25fa0 R08: 0012e42a53336d12 R09: 0000000000000000 [ 1590.739845][T22198] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1590.747874][T22198] R13: 00007ff781e26038 R14: 00007ffcfb32ed10 R15: 00007ffcfb32edf8 [ 1590.755912][T22198] [ 1590.787586][T22200] Console: switching to colour frame buffer device 128x48 [ 1591.533255][T22186] loop9: detected capacity change from 0 to 2048 [ 1591.689660][T22216] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1591.827324][T22216] loop0: detected capacity change from 0 to 128 [ 1592.041092][T22216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1592.058143][T22186] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1592.071284][T22216] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.335331][T20062] EXT4-fs (loop0): unmounting filesystem. [ 1593.374888][T18989] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1593.383773][T22235] [ 1593.696596][T18989] usb 10-1: device descriptor read/all, error -71 [ 1594.039257][T22250] FAULT_INJECTION: forcing a failure. [ 1594.039257][T22250] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1594.067716][T22250] CPU: 0 PID: 22250 Comm: syz.7.4399 Not tainted syzkaller #0 [ 1594.075354][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1594.085486][T22250] Call Trace: [ 1594.088805][T22250] [ 1594.091777][T22250] dump_stack_lvl+0x188/0x24e [ 1594.096506][T22250] ? show_regs_print_info+0x12/0x12 [ 1594.101759][T22250] ? load_image+0x410/0x410 [ 1594.106332][T22250] ? mark_lock+0x94/0x320 [ 1594.110815][T22250] should_fail_ex+0x390/0x4c0 [ 1594.115556][T22250] get_futex_key+0x1b1/0x1000 [ 1594.120301][T22250] ? futex_setup_timer+0xc0/0xc0 [ 1594.125294][T22250] ? verify_lock_unused+0x140/0x140 [ 1594.130565][T22250] futex_wake+0x123/0x4f0 [ 1594.134978][T22250] ? futex_wake_mark+0x150/0x150 [ 1594.139987][T22250] do_futex+0x2e2/0x320 [ 1594.144200][T22250] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1594.150156][T22250] __se_sys_futex+0x381/0x410 [ 1594.154888][T22250] ? __x64_sys_futex+0xf0/0xf0 [ 1594.159706][T22250] ? __x64_sys_futex+0x1d/0xf0 [ 1594.164521][T22250] do_syscall_64+0x4c/0xa0 [ 1594.168982][T22250] ? clear_bhb_loop+0x60/0xb0 [ 1594.173721][T22250] ? clear_bhb_loop+0x60/0xb0 [ 1594.178479][T22250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.184434][T22250] RIP: 0033:0x7f24d659e159 [ 1594.188892][T22250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.208547][T22250] RSP: 002b:00007f24d749d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1594.217005][T22250] RAX: ffffffffffffffda RBX: 00007f24d6825fa8 RCX: 00007f24d659e159 [ 1594.225044][T22250] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24d6825fac [ 1594.233050][T22250] RBP: 00007f24d6825fa0 R08: 000368889813b0b2 R09: 0000000000000000 [ 1594.241054][T22250] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1594.249078][T22250] R13: 00007f24d6826038 R14: 00007ffd35dd5810 R15: 00007ffd35dd58f8 [ 1594.257101][T22250] [ 1594.440878][T22247] loop6: detected capacity change from 0 to 512 [ 1594.511796][T22260] Console: switching to colour VGA+ 80x25 [ 1594.534104][T22247] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1594.544000][T22260] Console: switching to colour frame buffer device 128x48 [ 1594.672995][T22247] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1594.837334][T22247] Quota error (device loop6): write_blk: dquota write failed [ 1594.853496][T22247] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1595.629057][T22247] Quota error (device loop6): write_blk: dquota write failed [ 1595.774389][T22247] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1595.896422][T22247] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.4397: Failed to acquire dquot type 1 [ 1596.047226][T22247] EXT4-fs (loop6): 1 truncate cleaned up [ 1596.077459][T22279] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1596.089051][T22279] loop3: detected capacity change from 0 to 128 [ 1596.129327][T21031] EXT4-fs (loop9): unmounting filesystem. [ 1596.152728][T22247] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1596.401038][T22279] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1596.409996][T22279] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.025523][T22299] FAULT_INJECTION: forcing a failure. [ 1598.025523][T22299] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1598.073723][T22299] CPU: 0 PID: 22299 Comm: syz.7.4414 Not tainted syzkaller #0 [ 1598.081274][T22299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1598.091382][T22299] Call Trace: [ 1598.094697][T22299] [ 1598.097670][T22299] dump_stack_lvl+0x188/0x24e [ 1598.102399][T22299] ? show_regs_print_info+0x12/0x12 [ 1598.107650][T22299] ? load_image+0x410/0x410 [ 1598.112212][T22299] ? mark_lock+0x94/0x320 [ 1598.116604][T22299] should_fail_ex+0x390/0x4c0 [ 1598.121351][T22299] get_futex_key+0x1b1/0x1000 [ 1598.126080][T22299] ? futex_setup_timer+0xc0/0xc0 [ 1598.131067][T22299] ? verify_lock_unused+0x140/0x140 [ 1598.136333][T22299] futex_wake+0x123/0x4f0 [ 1598.140723][T22299] ? futex_wake_mark+0x150/0x150 [ 1598.145715][T22299] do_futex+0x2e2/0x320 [ 1598.149905][T22299] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1598.155857][T22299] __se_sys_futex+0x381/0x410 [ 1598.160567][T22299] ? __x64_sys_futex+0xf0/0xf0 [ 1598.165367][T22299] ? __x64_sys_futex+0x1d/0xf0 [ 1598.170164][T22299] do_syscall_64+0x4c/0xa0 [ 1598.174613][T22299] ? clear_bhb_loop+0x60/0xb0 [ 1598.179320][T22299] ? clear_bhb_loop+0x60/0xb0 [ 1598.184027][T22299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.189959][T22299] RIP: 0033:0x7f24d659e159 [ 1598.194407][T22299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.214056][T22299] RSP: 002b:00007f24d749d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1598.222504][T22299] RAX: ffffffffffffffda RBX: 00007f24d6825fa8 RCX: 00007f24d659e159 [ 1598.230506][T22299] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24d6825fac [ 1598.238513][T22299] RBP: 00007f24d6825fa0 R08: 0002d3d7e26cf870 R09: 0000000000000000 [ 1598.246515][T22299] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1598.254536][T22299] R13: 00007f24d6826038 R14: 00007ffd35dd5810 R15: 00007ffd35dd58f8 [ 1598.262548][T22299] [ 1598.295982][T20479] EXT4-fs (loop3): unmounting filesystem. [ 1598.309593][ T4330] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.571997][ T4330] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.645474][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1598.694009][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1598.704466][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1598.725378][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1598.732982][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1598.744912][ T4330] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.763782][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1598.997086][T22311] Console: switching to colour VGA+ 80x25 [ 1599.030368][T22311] Console: switching to colour frame buffer device 128x48 [ 1599.064032][T20795] EXT4-fs (loop6): unmounting filesystem. [ 1599.096538][ T4330] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.283283][T22317] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4417'. [ 1599.791680][T22324] loop3: detected capacity change from 0 to 2048 [ 1601.578916][T22324] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 1601.601933][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1601.615915][T22308] chnl_net:caif_netlink_parms(): no params data found [ 1602.672932][T22341] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1602.684389][T22341] loop0: detected capacity change from 0 to 128 [ 1602.734507][T22341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1602.743564][T22341] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.200561][T22308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.223896][T22353] FAULT_INJECTION: forcing a failure. [ 1603.223896][T22353] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1603.249773][T22308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.277990][T22353] CPU: 1 PID: 22353 Comm: syz.6.4424 Not tainted syzkaller #0 [ 1603.285534][T22353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1603.295730][T22353] Call Trace: [ 1603.299054][T22353] [ 1603.302033][T22353] dump_stack_lvl+0x188/0x24e [ 1603.306807][T22353] ? show_regs_print_info+0x12/0x12 [ 1603.312148][T22353] ? load_image+0x410/0x410 [ 1603.316728][T22353] ? mark_lock+0x94/0x320 [ 1603.321125][T22353] should_fail_ex+0x390/0x4c0 [ 1603.325865][T22353] get_futex_key+0x1b1/0x1000 [ 1603.330610][T22353] ? futex_setup_timer+0xc0/0xc0 [ 1603.335605][T22353] ? verify_lock_unused+0x140/0x140 [ 1603.340762][T22308] device bridge_slave_0 entered promiscuous mode [ 1603.340848][T22353] futex_wake+0x123/0x4f0 [ 1603.351570][T22353] ? futex_wake_mark+0x150/0x150 [ 1603.356581][T22353] do_futex+0x2e2/0x320 [ 1603.360807][T22353] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1603.366763][T22353] __se_sys_futex+0x381/0x410 [ 1603.371499][T22353] ? __x64_sys_futex+0xf0/0xf0 [ 1603.376315][T22353] ? __x64_sys_futex+0x1d/0xf0 [ 1603.381129][T22353] do_syscall_64+0x4c/0xa0 [ 1603.385679][T22353] ? clear_bhb_loop+0x60/0xb0 [ 1603.390392][T22353] ? clear_bhb_loop+0x60/0xb0 [ 1603.395101][T22353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1603.401033][T22353] RIP: 0033:0x7ff781b9e159 [ 1603.405474][T22353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.425122][T22353] RSP: 002b:00007ff782b170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1603.433661][T22353] RAX: ffffffffffffffda RBX: 00007ff781e25fa8 RCX: 00007ff781b9e159 [ 1603.441686][T22353] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff781e25fac [ 1603.449695][T22353] RBP: 00007ff781e25fa0 R08: 000ec4ae419a770b R09: 0000000000000000 [ 1603.457732][T22353] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1603.465763][T22353] R13: 00007ff781e26038 R14: 00007ffcfb32ed10 R15: 00007ffcfb32edf8 [ 1603.473781][T22353] [ 1603.507083][T22308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.538247][T22308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.559430][T22308] device bridge_slave_1 entered promiscuous mode [ 1603.613822][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 1603.727612][T22308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.902869][T22308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.948595][T22361] loop7: detected capacity change from 0 to 512 [ 1603.959607][T22366] Console: switching to colour VGA+ 80x25 [ 1603.992670][T22366] Console: switching to colour frame buffer device 128x48 [ 1604.028256][T20062] EXT4-fs (loop0): unmounting filesystem. [ 1604.150253][T22361] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1604.236639][T22308] team0: Port device team_slave_0 added [ 1604.304018][T22361] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1604.334859][T22308] team0: Port device team_slave_1 added [ 1604.383680][T22361] Quota error (device loop7): write_blk: dquota write failed [ 1604.399017][T22361] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1604.409150][T22361] Quota error (device loop7): write_blk: dquota write failed [ 1604.416814][T22361] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1604.427017][T22361] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.4426: Failed to acquire dquot type 1 [ 1604.441401][T22361] EXT4-fs (loop7): 1 truncate cleaned up [ 1604.467355][T22361] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1604.591792][T22308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.650573][T22308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.084121][T22308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.830869][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 1605.995643][T22308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.002791][T22308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.210708][T22308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.512963][T22308] device hsr_slave_0 entered promiscuous mode [ 1606.606761][T22308] device hsr_slave_1 entered promiscuous mode [ 1606.759361][T22308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1606.773201][T22308] Cannot create hsr debugfs directory [ 1606.982760][T22400] FAULT_INJECTION: forcing a failure. [ 1606.982760][T22400] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1607.083094][T22400] CPU: 1 PID: 22400 Comm: syz.0.4437 Not tainted syzkaller #0 [ 1607.090755][T22400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1607.100857][T22400] Call Trace: [ 1607.104205][T22400] [ 1607.107200][T22400] dump_stack_lvl+0x188/0x24e [ 1607.111928][T22400] ? show_regs_print_info+0x12/0x12 [ 1607.117172][T22400] ? load_image+0x410/0x410 [ 1607.121740][T22400] ? mark_lock+0x94/0x320 [ 1607.126143][T22400] should_fail_ex+0x390/0x4c0 [ 1607.130925][T22400] get_futex_key+0x1b1/0x1000 [ 1607.135665][T22400] ? futex_setup_timer+0xc0/0xc0 [ 1607.140646][T22400] ? verify_lock_unused+0x140/0x140 [ 1607.145922][T22400] futex_wake+0x123/0x4f0 [ 1607.150392][T22400] ? futex_wake_mark+0x150/0x150 [ 1607.155398][T22400] do_futex+0x2e2/0x320 [ 1607.159614][T22400] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1607.165675][T22400] __se_sys_futex+0x381/0x410 [ 1607.170413][T22400] ? __x64_sys_futex+0xf0/0xf0 [ 1607.175253][T22400] ? __x64_sys_futex+0x1d/0xf0 [ 1607.180083][T22400] do_syscall_64+0x4c/0xa0 [ 1607.184577][T22400] ? clear_bhb_loop+0x60/0xb0 [ 1607.189321][T22400] ? clear_bhb_loop+0x60/0xb0 [ 1607.194045][T22400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1607.199996][T22400] RIP: 0033:0x7ff24f99e159 [ 1607.204461][T22400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.224257][T22400] RSP: 002b:00007ff2507b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1607.232733][T22400] RAX: ffffffffffffffda RBX: 00007ff24fc25fa8 RCX: 00007ff24f99e159 [ 1607.240751][T22400] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff24fc25fac [ 1607.243946][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.248767][T22400] RBP: 00007ff24fc25fa0 R08: 003b7c6f87a3c877 R09: 0000000000000000 [ 1607.248788][T22400] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1607.248806][T22400] R13: 00007ff24fc26038 R14: 00007fffbd42a6c0 R15: 00007fffbd42a7a8 [ 1607.279165][T22400] [ 1607.359445][T22386] loop6: detected capacity change from 0 to 2048 [ 1607.548534][T22386] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1607.853642][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 1607.943055][ T4366] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1608.036377][ T4330] device hsr_slave_0 left promiscuous mode [ 1608.064154][ T4330] device hsr_slave_1 left promiscuous mode [ 1608.094340][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.101838][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.155799][ T4366] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1608.173321][ T4366] usb 7-1: config 1 has no interface number 0 [ 1608.174828][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.195674][T19846] EXT4-fs (loop7): unmounting filesystem. [ 1608.203364][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.203734][ T4366] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1608.240419][ T4366] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1608.324419][T22426] hub 8-0:1.0: USB hub found [ 1608.330050][T22426] hub 8-0:1.0: 1 port detected [ 1608.422722][ T4330] device bridge_slave_1 left promiscuous mode [ 1608.569809][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.787461][ T4330] device bridge_slave_0 left promiscuous mode [ 1609.126308][T22427] Console: switching to colour VGA+ 80x25 [ 1609.157038][T22427] Console: switching to colour frame buffer device 128x48 [ 1609.213325][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.242917][ T4366] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1609.315935][ T4366] usb 7-1: string descriptor 0 read error: -71 [ 1609.348473][ T4366] usb 7-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 1609.377361][ T4366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.412364][ T4330] device veth1_macvtap left promiscuous mode [ 1609.419002][ T4366] usb 7-1: can't set config #1, error -71 [ 1609.427463][ T4330] device veth0_macvtap left promiscuous mode [ 1609.443521][ T4366] usb 7-1: USB disconnect, device number 10 [ 1609.450780][ T4330] device veth1_vlan left promiscuous mode [ 1609.457872][ T4330] device veth0_vlan left promiscuous mode [ 1609.585632][T22437] loop0: detected capacity change from 0 to 512 [ 1609.617228][T22437] FAT-fs (loop0): bogus number of FAT sectors [ 1609.633186][T22437] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1609.657221][T22437] FAULT_INJECTION: forcing a failure. [ 1609.657221][T22437] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.690724][T22437] CPU: 0 PID: 22437 Comm: syz.0.4444 Not tainted syzkaller #0 [ 1609.698328][T22437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1609.708432][T22437] Call Trace: [ 1609.711756][T22437] [ 1609.714765][T22437] dump_stack_lvl+0x188/0x24e [ 1609.719502][T22437] ? show_regs_print_info+0x12/0x12 [ 1609.724750][T22437] ? load_image+0x410/0x410 [ 1609.729346][T22437] ? __might_sleep+0xd0/0xd0 [ 1609.733984][T22437] ? __lock_acquire+0x7c40/0x7c40 [ 1609.739074][T22437] should_fail_ex+0x390/0x4c0 [ 1609.743820][T22437] should_failslab+0x5/0x20 [ 1609.748371][T22437] slab_pre_alloc_hook+0x59/0x300 [ 1609.753444][T22437] ? lockdep_softirqs_off+0x430/0x430 [ 1609.758877][T22437] kmem_cache_alloc+0x56/0x2f0 [ 1609.763692][T22437] ? security_inode_alloc+0x30/0x110 [ 1609.769027][T22437] security_inode_alloc+0x30/0x110 [ 1609.774275][T22437] inode_init_always+0x910/0xc90 [ 1609.779270][T22437] new_inode_pseudo+0x91/0x1c0 [ 1609.784090][T22437] new_inode+0x25/0x1d0 [ 1609.788300][T22437] proc_setup_self+0xbf/0x2d0 [ 1609.793014][T22437] ? _raw_spin_unlock+0x24/0x40 [ 1609.797930][T22437] proc_fill_super+0x4ea/0x730 [ 1609.802721][T22437] ? proc_reconfigure+0x370/0x370 [ 1609.807776][T22437] get_tree_nodev+0xb0/0x160 [ 1609.812409][T22437] vfs_get_tree+0x88/0x270 [ 1609.816862][T22437] do_new_mount+0x247/0xa40 [ 1609.821406][T22437] __se_sys_mount+0x2e3/0x3d0 [ 1609.826116][T22437] ? __x64_sys_mount+0xc0/0xc0 [ 1609.830915][T22437] ? lockdep_hardirqs_on+0x94/0x140 [ 1609.836139][T22437] ? __x64_sys_mount+0x1c/0xc0 [ 1609.840934][T22437] do_syscall_64+0x4c/0xa0 [ 1609.845375][T22437] ? clear_bhb_loop+0x60/0xb0 [ 1609.850093][T22437] ? clear_bhb_loop+0x60/0xb0 [ 1609.854805][T22437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.860736][T22437] RIP: 0033:0x7ff24f99e159 [ 1609.865182][T22437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.884867][T22437] RSP: 002b:00007ff2507b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1609.893326][T22437] RAX: ffffffffffffffda RBX: 00007ff24fc25fa0 RCX: 00007ff24f99e159 [ 1609.901338][T22437] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1609.909353][T22437] RBP: 00007ff24fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1609.917353][T22437] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.925349][T22437] R13: 00007ff24fc26038 R14: 00007ff24fc25fa0 R15: 00007fffbd42a7a8 [ 1609.933360][T22437] [ 1609.993353][T22437] proc_fill_super: can't allocate /proc/self [ 1610.420246][T22445] FAULT_INJECTION: forcing a failure. [ 1610.420246][T22445] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.433606][T22445] CPU: 1 PID: 22445 Comm: syz.0.4448 Not tainted syzkaller #0 [ 1610.441129][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1610.451234][T22445] Call Trace: [ 1610.454594][T22445] [ 1610.457574][T22445] dump_stack_lvl+0x188/0x24e [ 1610.462308][T22445] ? show_regs_print_info+0x12/0x12 [ 1610.467557][T22445] ? load_image+0x410/0x410 [ 1610.472123][T22445] ? __lock_acquire+0x7c40/0x7c40 [ 1610.477248][T22445] should_fail_ex+0x390/0x4c0 [ 1610.481986][T22445] should_failslab+0x5/0x20 [ 1610.486539][T22445] slab_pre_alloc_hook+0x59/0x300 [ 1610.491630][T22445] kmem_cache_alloc_lru+0x49/0x2e0 [ 1610.496791][T22445] ? sock_alloc_inode+0x24/0xc0 [ 1610.501708][T22445] sock_alloc_inode+0x24/0xc0 [ 1610.506432][T22445] ? sockfs_init_fs_context+0xa0/0xa0 [ 1610.511856][T22445] new_inode_pseudo+0x5f/0x1c0 [ 1610.516679][T22445] __sock_create+0x129/0x940 [ 1610.521361][T22445] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1610.527407][T22445] __sys_socket+0xc4/0x190 [ 1610.531888][T22445] __x64_sys_socket+0x76/0x80 [ 1610.536621][T22445] do_syscall_64+0x4c/0xa0 [ 1610.541080][T22445] ? clear_bhb_loop+0x60/0xb0 [ 1610.545804][T22445] ? clear_bhb_loop+0x60/0xb0 [ 1610.550530][T22445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1610.556483][T22445] RIP: 0033:0x7ff24f99e159 [ 1610.560948][T22445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.580600][T22445] RSP: 002b:00007ff2507b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1610.589073][T22445] RAX: ffffffffffffffda RBX: 00007ff24fc25fa0 RCX: 00007ff24f99e159 [ 1610.597101][T22445] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1610.605122][T22445] RBP: 00007ff24fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1610.613151][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.621255][T22445] R13: 00007ff24fc26038 R14: 00007ff24fc25fa0 R15: 00007fffbd42a7a8 [ 1610.629290][T22445] [ 1610.655666][T22445] socket: no more sockets [ 1610.791701][T22448] loop7: detected capacity change from 0 to 1024 [ 1610.863183][T22448] autofs4:pid:22448:autofs_fill_super: called with bogus options [ 1610.988953][T22448] loop7: detected capacity change from 0 to 512 [ 1611.007318][T22448] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1611.019003][T22448] EXT4-fs (loop7): group descriptors corrupted! [ 1611.455806][T22459] binder: 22458:22459 ioctl c0306201 200000000080 returned -14 [ 1611.497809][T22460] Console: switching to colour VGA+ 80x25 [ 1611.529528][T22460] Console: switching to colour frame buffer device 128x48 [ 1611.840334][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1611.934649][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1612.001216][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.074658][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.244634][T22470] FAULT_INJECTION: forcing a failure. [ 1612.244634][T22470] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.272013][T22470] CPU: 1 PID: 22470 Comm: syz.0.4459 Not tainted syzkaller #0 [ 1612.279592][T22470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1612.289701][T22470] Call Trace: [ 1612.293030][T22470] [ 1612.296006][T22470] dump_stack_lvl+0x188/0x24e [ 1612.300741][T22470] ? show_regs_print_info+0x12/0x12 [ 1612.306026][T22470] ? load_image+0x410/0x410 [ 1612.310629][T22470] ? __lock_acquire+0x7c40/0x7c40 [ 1612.315719][T22470] should_fail_ex+0x390/0x4c0 [ 1612.320459][T22470] should_failslab+0x5/0x20 [ 1612.325012][T22470] slab_pre_alloc_hook+0x59/0x300 [ 1612.330113][T22470] kmem_cache_alloc_lru+0x49/0x2e0 [ 1612.335241][T22470] ? sock_alloc_inode+0x24/0xc0 [ 1612.340110][T22470] sock_alloc_inode+0x24/0xc0 [ 1612.344841][T22470] ? sockfs_init_fs_context+0xa0/0xa0 [ 1612.350260][T22470] new_inode_pseudo+0x5f/0x1c0 [ 1612.355107][T22470] __sock_create+0x129/0x940 [ 1612.359735][T22470] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1612.365760][T22470] __sys_socket+0xc4/0x190 [ 1612.370215][T22470] __x64_sys_socket+0x76/0x80 [ 1612.374932][T22470] do_syscall_64+0x4c/0xa0 [ 1612.379378][T22470] ? clear_bhb_loop+0x60/0xb0 [ 1612.384082][T22470] ? clear_bhb_loop+0x60/0xb0 [ 1612.388785][T22470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1612.394808][T22470] RIP: 0033:0x7ff24f99e159 [ 1612.399253][T22470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.418907][T22470] RSP: 002b:00007ff2507b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1612.427446][T22470] RAX: ffffffffffffffda RBX: 00007ff24fc25fa0 RCX: 00007ff24f99e159 [ 1612.435471][T22470] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1612.443494][T22470] RBP: 00007ff24fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1612.451534][T22470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.459558][T22470] R13: 00007ff24fc26038 R14: 00007ff24fc25fa0 R15: 00007fffbd42a7a8 [ 1612.467574][T22470] [ 1612.494256][T22470] socket: no more sockets [ 1613.161962][ T4330] bond0 (unregistering): Released all slaves [ 1613.247214][T22426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1613.315739][T22480] netem: change failed [ 1613.505443][T22486] binder: 22482:22486 ioctl c0306201 200000000080 returned -14 [ 1613.959277][T22494] loop0: detected capacity change from 0 to 1024 [ 1614.011384][T22494] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1614.031585][T22496] FAULT_INJECTION: forcing a failure. [ 1614.031585][T22496] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1614.078279][T20795] EXT4-fs (loop6): unmounting filesystem. [ 1614.170704][T22496] CPU: 0 PID: 22496 Comm: syz.7.4469 Not tainted syzkaller #0 [ 1614.178261][T22496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1614.188393][T22496] Call Trace: [ 1614.191712][T22496] [ 1614.194715][T22496] dump_stack_lvl+0x188/0x24e [ 1614.199446][T22496] ? show_regs_print_info+0x12/0x12 [ 1614.204701][T22496] ? load_image+0x410/0x410 [ 1614.209261][T22496] ? mark_lock+0x94/0x320 [ 1614.213654][T22496] should_fail_ex+0x390/0x4c0 [ 1614.218399][T22496] get_futex_key+0x1b1/0x1000 [ 1614.223138][T22496] ? futex_setup_timer+0xc0/0xc0 [ 1614.228123][T22496] ? verify_lock_unused+0x140/0x140 [ 1614.233386][T22496] futex_wake+0x123/0x4f0 [ 1614.237776][T22496] ? futex_wake_mark+0x150/0x150 [ 1614.242782][T22496] do_futex+0x2e2/0x320 [ 1614.246989][T22496] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1614.252946][T22496] __se_sys_futex+0x381/0x410 [ 1614.257682][T22496] ? __x64_sys_futex+0xf0/0xf0 [ 1614.262500][T22496] ? __x64_sys_futex+0x1d/0xf0 [ 1614.267319][T22496] do_syscall_64+0x4c/0xa0 [ 1614.271819][T22496] ? clear_bhb_loop+0x60/0xb0 [ 1614.276542][T22496] ? clear_bhb_loop+0x60/0xb0 [ 1614.281270][T22496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1614.287225][T22496] RIP: 0033:0x7f24d659e159 [ 1614.291693][T22496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.311349][T22496] RSP: 002b:00007f24d749d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1614.319818][T22496] RAX: ffffffffffffffda RBX: 00007f24d6825fa8 RCX: 00007f24d659e159 [ 1614.327841][T22496] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24d6825fac [ 1614.335859][T22496] RBP: 00007f24d6825fa0 R08: 0002e3790a2ecef2 R09: 0000000000000000 [ 1614.343913][T22496] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1614.351935][T22496] R13: 00007f24d6826038 R14: 00007ffd35dd5810 R15: 00007ffd35dd58f8 [ 1614.359972][T22496] [ 1614.610146][T22503] loop0: detected capacity change from 0 to 256 [ 1615.471823][T22308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1615.518562][T22308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1615.649581][T22308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1615.888089][T22515] hub 8-0:1.0: USB hub found [ 1615.893900][T22515] hub 8-0:1.0: 1 port detected [ 1616.215433][ T4522] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.744760][T22308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1616.786411][T22515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4474'. [ 1616.994448][ T4522] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.173905][ T4522] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.270811][T22308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.357052][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1617.368539][ T4522] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.383665][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1617.392934][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1617.402122][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1617.409861][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1617.417283][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1617.460736][T22308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.486115][T22519] loop7: detected capacity change from 0 to 2048 [ 1617.514666][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1617.526317][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1617.545816][T22519] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1617.592850][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1617.601835][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1617.679249][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.686500][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.752820][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1617.768896][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1617.780084][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.787425][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.863845][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1617.879300][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1617.887869][T22124] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1617.897121][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1617.908105][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1617.920408][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1617.976171][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1618.013649][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1618.027884][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1618.073401][ T9391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1618.089441][T22124] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1618.097666][ T9391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1618.111130][T22124] usb 8-1: config 1 has no interface number 0 [ 1618.118881][ T9391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1618.128559][T22124] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1618.146861][T22124] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1618.155887][ T9391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1618.171260][T22124] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1618.207733][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1618.215553][T22124] usb 8-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 1618.230697][T22124] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.239495][T22124] usb 8-1: Product: syz [ 1618.258308][T22124] usb 8-1: Manufacturer: syz [ 1618.268094][T22124] usb 8-1: SerialNumber: syz [ 1618.557513][T22124] usb 8-1: 1:0 : does not exist [ 1618.570858][T22124] usb 8-1: BAAD HEADSET c_chmask mismatch [ 1618.689211][T22124] snd-usb-audio: probe of 8-1:1.1 failed with error -22 [ 1618.719451][T22124] usb 8-1: USB disconnect, device number 2 [ 1618.825464][T22529] chnl_net:caif_netlink_parms(): no params data found [ 1618.934189][ T4772] udevd[4772]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1618.975572][T22559] FAULT_INJECTION: forcing a failure. [ 1618.975572][T22559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1619.008007][T22561] binder: 22557:22561 ioctl c0306201 200000000080 returned -14 [ 1619.020760][T22559] CPU: 0 PID: 22559 Comm: syz.3.4480 Not tainted syzkaller #0 [ 1619.028297][T22559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1619.038410][T22559] Call Trace: [ 1619.041732][T22559] [ 1619.044718][T22559] dump_stack_lvl+0x188/0x24e [ 1619.049452][T22559] ? show_regs_print_info+0x12/0x12 [ 1619.054722][T22559] ? load_image+0x410/0x410 [ 1619.059291][T22559] ? mark_lock+0x94/0x320 [ 1619.063701][T22559] should_fail_ex+0x390/0x4c0 [ 1619.068447][T22559] get_futex_key+0x1b1/0x1000 [ 1619.073189][T22559] ? futex_setup_timer+0xc0/0xc0 [ 1619.078173][T22559] ? verify_lock_unused+0x140/0x140 [ 1619.083436][T22559] futex_wake+0x123/0x4f0 [ 1619.087824][T22559] ? futex_wake_mark+0x150/0x150 [ 1619.092821][T22559] do_futex+0x2e2/0x320 [ 1619.097039][T22559] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1619.102992][T22559] __se_sys_futex+0x381/0x410 [ 1619.107762][T22559] ? __x64_sys_futex+0xf0/0xf0 [ 1619.112581][T22559] ? __x64_sys_futex+0x1d/0xf0 [ 1619.117402][T22559] do_syscall_64+0x4c/0xa0 [ 1619.121868][T22559] ? clear_bhb_loop+0x60/0xb0 [ 1619.126600][T22559] ? clear_bhb_loop+0x60/0xb0 [ 1619.131343][T22559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1619.137296][T22559] RIP: 0033:0x7fe34a79e159 [ 1619.141762][T22559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.161424][T22559] RSP: 002b:00007fe34b6e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1619.169905][T22559] RAX: ffffffffffffffda RBX: 00007fe34aa25fa8 RCX: 00007fe34a79e159 [ 1619.177928][T22559] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe34aa25fac [ 1619.185984][T22559] RBP: 00007fe34aa25fa0 R08: 003b882864b26fed R09: 0000000000000000 [ 1619.194011][T22559] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1619.202036][T22559] R13: 00007fe34aa26038 R14: 00007ffe562e1a20 R15: 00007ffe562e1b08 [ 1619.210106][T22559] [ 1619.331618][T22529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.367685][T22529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.392417][T22529] device bridge_slave_0 entered promiscuous mode [ 1619.448735][T22529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.456418][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 1619.467048][T22529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.476001][T22529] device bridge_slave_1 entered promiscuous mode [ 1619.510457][T22529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.643322][T22529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.679756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1619.699439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1619.798589][T22308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.927462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1619.948157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1620.054847][T20716] EXT4-fs (loop7): unmounting filesystem. [ 1620.079610][T22529] team0: Port device team_slave_0 added [ 1620.194476][T22529] team0: Port device team_slave_1 added [ 1620.207941][T22308] device veth0_vlan entered promiscuous mode [ 1620.336093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1620.374021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1620.501026][T22308] device veth1_vlan entered promiscuous mode [ 1620.550681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1620.566282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1620.583305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1620.708279][T22591] hub 8-0:1.0: USB hub found [ 1620.723268][T22591] hub 8-0:1.0: 1 port detected [ 1621.223701][T22529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.268847][T22529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.515219][T22529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.532310][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 1621.573422][T22591] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1621.584343][T22529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.630921][T22529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.662527][T22529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.708358][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1621.880566][T22308] device veth0_macvtap entered promiscuous mode [ 1621.931747][ T6731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1621.954250][ T6731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1621.973416][ T6731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1622.018069][T22308] device veth1_macvtap entered promiscuous mode [ 1622.444406][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.499313][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.539512][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.565344][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.586637][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.599508][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.611403][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.676987][T22613] hub 8-0:1.0: USB hub found [ 1622.683770][T22613] hub 8-0:1.0: 1 port detected [ 1622.744599][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.851303][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.054988][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.267490][T22308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1623.466176][T22529] device hsr_slave_0 entered promiscuous mode [ 1623.473890][T22529] device hsr_slave_1 entered promiscuous mode [ 1623.491999][T22529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1623.499615][T22529] Cannot create hsr debugfs directory [ 1623.580862][T22613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1623.612074][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1623.641969][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 1623.700306][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1623.720001][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1623.738134][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1623.749699][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1623.759320][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1623.767619][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1623.776927][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1623.785036][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1623.875120][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.964926][T22621] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1624.109226][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.159254][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1624.246679][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.303499][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1624.358118][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.414047][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1624.559613][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.609186][T22308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1624.662530][T22308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.735835][T22308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1624.818319][ T4522] device hsr_slave_0 left promiscuous mode [ 1624.896510][ T4522] device hsr_slave_1 left promiscuous mode [ 1624.910122][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.922165][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.940703][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.961987][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.978569][ T4522] device bridge_slave_1 left promiscuous mode [ 1624.989872][T22631] loop3: detected capacity change from 0 to 1024 [ 1625.002086][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.043619][ T4522] device bridge_slave_0 left promiscuous mode [ 1625.066638][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.074314][ T4772] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1625.104732][T22631] autofs4:pid:22631:autofs_fill_super: called with bogus options [ 1625.202477][ T4522] device veth1_macvtap left promiscuous mode [ 1625.208642][ T4522] device veth0_macvtap left promiscuous mode [ 1625.244115][ T4522] device veth1_vlan left promiscuous mode [ 1625.250019][ T4522] device veth0_vlan left promiscuous mode [ 1625.281711][T22631] loop3: detected capacity change from 0 to 512 [ 1625.312603][T22631] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1625.348508][T22631] EXT4-fs (loop3): group descriptors corrupted! [ 1625.692484][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 1625.838197][T22643] binder: 22641:22643 ioctl c0306201 200000000080 returned -14 [ 1625.872418][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 1626.927331][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 1627.078490][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 1627.193089][T22657] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1627.931787][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 1628.022784][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1628.087542][T22660] loop0: detected capacity change from 0 to 512 [ 1628.120201][T22660] FAT-fs (loop0): bogus number of FAT sectors [ 1628.143926][T22660] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1628.165576][T22660] FAULT_INJECTION: forcing a failure. [ 1628.165576][T22660] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.184736][T22660] CPU: 1 PID: 22660 Comm: syz.0.4509 Not tainted syzkaller #0 [ 1628.192355][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1628.202453][T22660] Call Trace: [ 1628.205765][T22660] [ 1628.208724][T22660] dump_stack_lvl+0x188/0x24e [ 1628.213455][T22660] ? show_regs_print_info+0x12/0x12 [ 1628.218687][T22660] ? load_image+0x410/0x410 [ 1628.223612][T22660] ? __might_sleep+0xd0/0xd0 [ 1628.228231][T22660] ? __lock_acquire+0x7c40/0x7c40 [ 1628.233301][T22660] should_fail_ex+0x390/0x4c0 [ 1628.238014][T22660] should_failslab+0x5/0x20 [ 1628.242546][T22660] slab_pre_alloc_hook+0x59/0x300 [ 1628.247609][T22660] kmem_cache_alloc_lru+0x49/0x2e0 [ 1628.252753][T22660] ? proc_alloc_inode+0x26/0xb0 [ 1628.257764][T22660] proc_alloc_inode+0x26/0xb0 [ 1628.262473][T22660] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1628.268851][T22660] new_inode_pseudo+0x5f/0x1c0 [ 1628.273653][T22660] new_inode+0x25/0x1d0 [ 1628.277842][T22660] proc_setup_thread_self+0xbf/0x2d0 [ 1628.283167][T22660] ? proc_fill_super+0x514/0x730 [ 1628.288130][T22660] ? proc_reconfigure+0x370/0x370 [ 1628.293185][T22660] get_tree_nodev+0xb0/0x160 [ 1628.297811][T22660] vfs_get_tree+0x88/0x270 [ 1628.302261][T22660] do_new_mount+0x247/0xa40 [ 1628.306798][T22660] __se_sys_mount+0x2e3/0x3d0 [ 1628.311608][T22660] ? __x64_sys_mount+0xc0/0xc0 [ 1628.316413][T22660] ? lockdep_hardirqs_on+0x94/0x140 [ 1628.321647][T22660] ? __x64_sys_mount+0x1c/0xc0 [ 1628.326455][T22660] do_syscall_64+0x4c/0xa0 [ 1628.330901][T22660] ? clear_bhb_loop+0x60/0xb0 [ 1628.335630][T22660] ? clear_bhb_loop+0x60/0xb0 [ 1628.340341][T22660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1628.346279][T22660] RIP: 0033:0x7ff24f99e159 [ 1628.350723][T22660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.370357][T22660] RSP: 002b:00007ff2507b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1628.378802][T22660] RAX: ffffffffffffffda RBX: 00007ff24fc25fa0 RCX: 00007ff24f99e159 [ 1628.386799][T22660] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1628.394902][T22660] RBP: 00007ff24fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1628.402911][T22660] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.410917][T22660] R13: 00007ff24fc26038 R14: 00007ff24fc25fa0 R15: 00007fffbd42a7a8 [ 1628.418930][T22660] [ 1628.452238][T22660] proc_fill_super: can't allocate /proc/thread-self [ 1628.489811][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.025877][T22671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1629.622382][T22678] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1629.775078][T22666] syz.3.4511 (22666): drop_caches: 2 [ 1629.871333][ T4522] bond0 (unregistering): Released all slaves [ 1630.231493][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 1630.451629][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1630.471019][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1630.489524][T22308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.498722][T22308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.521227][T22308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.530705][T22308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.643128][T22688] loop0: detected capacity change from 0 to 512 [ 1630.688837][T22688] FAT-fs (loop0): bogus number of FAT sectors [ 1630.702549][T22688] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1630.961016][T21751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.987414][T21751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.025456][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1631.117834][T20959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.151532][T20959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.310970][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4522'. [ 1631.357233][T20959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1631.734585][T22706] syz.3.4524 (22706): drop_caches: 2 [ 1631.762528][T22618] chnl_net:caif_netlink_parms(): no params data found [ 1632.206317][T22719] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1632.271608][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 1632.968274][T22618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.045190][T22726] loop3: detected capacity change from 0 to 512 [ 1633.061462][T22618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.069918][T22618] device bridge_slave_0 entered promiscuous mode [ 1633.083867][T22726] FAT-fs (loop3): bogus number of FAT sectors [ 1633.104964][T22726] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1633.133091][T22618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.140251][T22618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.182607][T22618] device bridge_slave_1 entered promiscuous mode [ 1633.224647][T22728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1633.388170][ T4522] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.468030][T22529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1633.498167][T22736] loop0: detected capacity change from 0 to 256 [ 1633.632479][T22618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.789312][ T4522] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.981427][T22745] overlayfs: missing 'lowerdir' [ 1634.429445][T22529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1634.480488][T22529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1634.532456][T22618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.597098][T22529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1634.797418][T22618] team0: Port device team_slave_0 added [ 1635.165215][T22529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.533034][T22529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.803018][T22763] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1636.245212][ T4522] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.419893][T22618] team0: Port device team_slave_1 added [ 1636.467631][T22768] loop3: detected capacity change from 0 to 512 [ 1636.481983][T22768] FAT-fs (loop3): bogus number of FAT sectors [ 1636.488259][T22768] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1636.551972][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1636.612091][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1636.706223][ T4522] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.737822][T22618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.748719][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.805877][T22618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.832936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1636.863472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1636.898684][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.906001][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.937110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1636.967777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1637.001974][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.009142][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.028577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1637.059632][T22618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.140747][T22785] hub 8-0:1.0: USB hub found [ 1637.146342][T22785] hub 8-0:1.0: 1 port detected [ 1637.224917][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1637.644572][T22788] loop2: detected capacity change from 0 to 256 [ 1637.895165][T22618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.945939][T22785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4546'. [ 1638.046447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1638.065055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1638.137012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1638.187802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1638.382514][T22796] overlayfs: missing 'lowerdir' [ 1638.574915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1638.637914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1638.705028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1638.809121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1638.851834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1638.977944][T22801] loop0: detected capacity change from 0 to 512 [ 1639.073276][T22801] FAT-fs (loop0): bogus number of FAT sectors [ 1639.079435][T22801] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1640.298351][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1640.307214][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1640.330329][T22529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1640.344801][T22818] Console: switching to colour VGA+ 80x25 [ 1640.414958][T22818] Console: switching to colour frame buffer device 128x48 [ 1640.446259][T22618] device hsr_slave_0 entered promiscuous mode [ 1640.461875][T22618] device hsr_slave_1 entered promiscuous mode [ 1640.475963][T22618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.491705][T22618] Cannot create hsr debugfs directory [ 1641.126257][T22838] loop3: detected capacity change from 0 to 1024 [ 1641.691696][T22529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.746147][T22838] loop3: detected capacity change from 0 to 512 [ 1641.820436][T22838] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1641.887257][T22838] EXT4-fs (loop3): group descriptors corrupted! [ 1641.999788][T22618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.125368][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1642.141202][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1642.308815][T22618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.548413][T22618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.745561][T22876] hub 8-0:1.0: USB hub found [ 1642.751124][T22876] hub 8-0:1.0: 1 port detected [ 1643.531752][T22618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.599407][T22876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1643.748677][T22881] binder: 22879:22881 ioctl c0306201 200000000080 returned -14 [ 1644.229885][T22618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1644.547989][T22618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1644.558710][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1644.585957][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1644.642610][T22618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1644.686998][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1644.718343][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1645.103700][T22924] hub 8-0:1.0: USB hub found [ 1645.109490][T22924] hub 8-0:1.0: 1 port detected [ 1645.603439][T22618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1645.881824][T22529] device veth0_vlan entered promiscuous mode [ 1645.889758][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1645.897930][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1645.954115][T22921] netlink: 'syz.3.4580': attribute type 15 has an invalid length. [ 1645.975172][T22921] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 258 - 0 [ 1645.984932][T22921] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 258 - 0 [ 1645.993675][T22921] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 258 - 0 [ 1646.002462][T22921] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 258 - 0 [ 1646.033300][T22924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1646.144869][ T4522] device hsr_slave_0 left promiscuous mode [ 1646.172655][T22932] loop0: detected capacity change from 0 to 1024 [ 1646.181805][T22932] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1646.223478][ T4522] device hsr_slave_1 left promiscuous mode [ 1646.240833][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.262338][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.388282][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.420496][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1646.486112][ T4522] device bridge_slave_1 left promiscuous mode [ 1646.523811][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.579758][T22942] loop0: detected capacity change from 0 to 256 [ 1646.858819][ T4522] device bridge_slave_0 left promiscuous mode [ 1647.109423][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.305211][ T4522] device veth1_macvtap left promiscuous mode [ 1647.311490][ T4522] device veth0_macvtap left promiscuous mode [ 1647.317656][ T4522] device veth1_vlan left promiscuous mode [ 1647.330489][ T4522] device veth0_vlan left promiscuous mode [ 1647.451644][T22950] binder: 22946:22950 ioctl c0306201 200000000080 returned -14 [ 1648.145414][T22966] loop2: detected capacity change from 0 to 512 [ 1648.200262][T22966] FAT-fs (loop2): bogus number of FAT sectors [ 1648.206530][T22966] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1648.605893][T22974] loop3: detected capacity change from 0 to 1024 [ 1648.670970][T22974] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1648.700751][T22976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1648.718738][T22976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1648.759798][T22976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1649.103388][T22982] loop3: detected capacity change from 0 to 256 [ 1649.816231][T22988] loop2: detected capacity change from 0 to 512 [ 1649.902414][T22988] FAT-fs (loop2): bogus number of FAT sectors [ 1649.908624][T22988] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1650.073131][T22993] binder: 22991:22993 ioctl c0306201 200000000080 returned -14 [ 1650.538413][T23001] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1650.547747][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1650.566084][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1651.019194][T23006] loop0: detected capacity change from 0 to 1024 [ 1651.058593][T23006] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1651.911863][T23016] loop2: detected capacity change from 0 to 512 [ 1651.966123][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 1651.987152][T23016] FAT-fs (loop2): bogus number of FAT sectors [ 1652.033211][T23016] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1652.197424][T23020] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4620'. [ 1652.230176][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 1652.269790][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 1652.394277][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 1652.437888][T23026] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1652.610720][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.850676][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.628297][ T4522] bond0 (unregistering): Released all slaves [ 1653.766379][T22529] device veth1_vlan entered promiscuous mode [ 1653.883018][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1653.893570][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1653.917417][T22529] device veth0_macvtap entered promiscuous mode [ 1653.964804][T22529] device veth1_macvtap entered promiscuous mode [ 1654.070799][T22618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.087047][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.144789][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.206521][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.246518][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.267924][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.302792][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.329616][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.360551][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.387609][T22529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.408530][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1654.470904][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1654.486879][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1654.498004][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1654.526974][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.567116][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.609939][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.609963][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.609982][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.609998][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.610018][T22529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.610033][T22529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.611489][T22529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.611587][ T6872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1654.612258][ T6872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1654.619370][T23069] Console: switching to colour VGA+ 80x25 [ 1654.646230][T22618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.660996][T22529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.661038][T22529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.661069][T22529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.661099][T22529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.664124][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1654.664781][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1654.711219][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1654.711932][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1654.712339][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.712399][ T4630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.713083][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1654.767507][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1654.768087][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1654.768655][T21137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.947646][T21137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.005825][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1655.026940][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1655.063119][T23074] Console: switching to colour frame buffer device 128x48 [ 1655.107429][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1655.110799][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1655.111700][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1655.112575][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1655.113486][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1655.145833][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1655.165510][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1655.166292][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1655.167720][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1655.179585][T22618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1655.191649][T21751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.191671][T21751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.191924][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1655.311258][ T4630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.311281][ T4630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.311570][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1655.334781][T23083] hub 8-0:1.0: USB hub found [ 1655.335400][T23083] hub 8-0:1.0: 1 port detected [ 1655.337126][T23083] __nla_validate_parse: 1 callbacks suppressed [ 1655.337141][T23083] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1656.190176][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1656.200244][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1656.248546][T22618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.321080][T23107] FAULT_INJECTION: forcing a failure. [ 1656.321080][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.382519][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1656.392029][T23107] CPU: 1 PID: 23107 Comm: syz.2.4647 Not tainted syzkaller #0 [ 1656.399582][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1656.409709][T23107] Call Trace: [ 1656.413042][T23107] [ 1656.416040][T23107] dump_stack_lvl+0x188/0x24e [ 1656.420866][T23107] ? show_regs_print_info+0x12/0x12 [ 1656.426140][T23107] ? load_image+0x410/0x410 [ 1656.430755][T23107] ? __might_sleep+0xd0/0xd0 [ 1656.435417][T23107] ? __lock_acquire+0x7c40/0x7c40 [ 1656.440520][T23107] should_fail_ex+0x390/0x4c0 [ 1656.445283][T23107] should_failslab+0x5/0x20 [ 1656.449853][T23107] slab_pre_alloc_hook+0x59/0x300 [ 1656.454949][T23107] kmem_cache_alloc_lru+0x49/0x2e0 [ 1656.460134][T23107] ? proc_alloc_inode+0x26/0xb0 [ 1656.465069][T23107] proc_alloc_inode+0x26/0xb0 [ 1656.469831][T23107] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1656.476237][T23107] new_inode_pseudo+0x5f/0x1c0 [ 1656.481087][T23107] new_inode+0x25/0x1d0 [ 1656.485325][T23107] proc_setup_self+0xbf/0x2d0 [ 1656.490094][T23107] ? _raw_spin_unlock+0x24/0x40 [ 1656.492581][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1656.494999][T23107] proc_fill_super+0x4ea/0x730 [ 1656.508009][T23107] ? proc_reconfigure+0x370/0x370 [ 1656.513124][T23107] get_tree_nodev+0xb0/0x160 [ 1656.517914][T23107] vfs_get_tree+0x88/0x270 [ 1656.522394][T23107] do_new_mount+0x247/0xa40 [ 1656.526982][T23107] __se_sys_mount+0x2e3/0x3d0 [ 1656.531738][T23107] ? __x64_sys_mount+0xc0/0xc0 [ 1656.536634][T23107] ? lockdep_hardirqs_on+0x94/0x140 [ 1656.541918][T23107] ? __x64_sys_mount+0x1c/0xc0 [ 1656.546752][T23107] do_syscall_64+0x4c/0xa0 [ 1656.551235][T23107] ? clear_bhb_loop+0x60/0xb0 [ 1656.555979][T23107] ? clear_bhb_loop+0x60/0xb0 [ 1656.560728][T23107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1656.566695][T23107] RIP: 0033:0x7fefa259e159 [ 1656.571169][T23107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.590844][T23107] RSP: 002b:00007fefa34c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1656.599332][T23107] RAX: ffffffffffffffda RBX: 00007fefa2825fa0 RCX: 00007fefa259e159 [ 1656.607453][T23107] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1656.615491][T23107] RBP: 00007fefa263506b R08: 0000000000000000 R09: 0000000000000000 [ 1656.623699][T23107] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.631733][T23107] R13: 00007fefa2826038 R14: 00007fefa2825fa0 R15: 00007ffc338f5538 [ 1656.639792][T23107] [ 1656.672952][T23107] proc_fill_super: can't allocate /proc/self [ 1656.731380][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1656.760657][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1656.781233][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1656.810589][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1656.842688][T22618] device veth0_vlan entered promiscuous mode [ 1656.903405][T22618] device veth1_vlan entered promiscuous mode [ 1657.024885][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1657.043089][T21751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1657.091624][T22618] device veth0_macvtap entered promiscuous mode [ 1657.157376][T22618] device veth1_macvtap entered promiscuous mode [ 1657.247890][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.271018][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.331797][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.371125][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.401299][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.412728][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.429970][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.440748][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.452486][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.463694][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.495778][T22618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.535607][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1657.546551][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1657.565267][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1657.733227][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1657.786081][T23125] Console: switching to colour VGA+ 80x25 [ 1657.788678][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.852172][T23125] Console: switching to colour frame buffer device 128x48 [ 1657.853171][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.853195][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.853214][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.853233][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.853249][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.853268][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.853284][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.853302][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.853317][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.859012][T22618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.896299][T23131] hub 8-0:1.0: USB hub found [ 1657.952952][T23132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4656'. [ 1657.960828][T23131] hub 8-0:1.0: 1 port detected [ 1658.015848][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1658.033035][T21137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1658.061824][T22618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.098348][T22618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.118827][T22618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.149243][T22618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.390345][ T4695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.399047][ T4695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.458988][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1658.491730][ T6872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.509563][ T6872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.543578][T21755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1658.845049][T23152] Bluetooth: MGMT ver 1.22 [ 1659.418559][T23163] loop3: detected capacity change from 0 to 1024 [ 1659.712382][T23169] loop3: detected capacity change from 0 to 512 [ 1659.791085][T23169] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1659.854240][T23169] EXT4-fs (loop3): group descriptors corrupted! [ 1660.096671][T23177] Console: switching to colour VGA+ 80x25 [ 1660.151845][T23177] Console: switching to colour frame buffer device 128x48 [ 1661.219586][T23226] loop1: detected capacity change from 0 to 1024 [ 1661.241740][T23226] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1661.669603][T23238] loop1: detected capacity change from 0 to 256 [ 1662.258461][T23230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1662.300550][T23227] loop3: detected capacity change from 0 to 512 [ 1662.407591][T23227] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1662.734447][T23227] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1662.816376][T23227] Quota error (device loop3): write_blk: dquota write failed [ 1662.844825][T23227] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1662.901157][T23227] Quota error (device loop3): write_blk: dquota write failed [ 1662.908776][T23227] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1662.987084][T23255] netlink: 'syz.2.4695': attribute type 10 has an invalid length. [ 1663.049582][T23227] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.4683: Failed to acquire dquot type 1 [ 1663.087372][T23255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.146803][T23255] team0: Port device bond0 added [ 1663.166724][T23227] EXT4-fs (loop3): 1 truncate cleaned up [ 1663.274450][T23227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1663.732438][T23281] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4703'. [ 1663.817843][T23281] netlink: 316 bytes leftover after parsing attributes in process `syz.0.4703'. [ 1663.999122][T23286] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4707'. [ 1664.527135][T23305] Console: switching to colour VGA+ 80x25 [ 1664.745853][T23311] Console: switching to colour frame buffer device 128x48 [ 1665.521166][T20479] EXT4-fs (loop3): unmounting filesystem. [ 1665.950806][T23351] Console: switching to colour VGA+ 80x25 [ 1666.130073][T23353] Console: switching to colour frame buffer device 128x48 [ 1666.956818][T23386] hub 8-0:1.0: USB hub found [ 1666.961865][T23386] hub 8-0:1.0: 1 port detected [ 1666.968952][T23386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1667.016717][T23385] FAULT_INJECTION: forcing a failure. [ 1667.016717][T23385] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.087039][T23385] CPU: 1 PID: 23385 Comm: syz.4.4744 Not tainted syzkaller #0 [ 1667.094585][T23385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1667.104699][T23385] Call Trace: [ 1667.108021][T23385] [ 1667.111001][T23385] dump_stack_lvl+0x188/0x24e [ 1667.115746][T23385] ? show_regs_print_info+0x12/0x12 [ 1667.120998][T23385] ? load_image+0x410/0x410 [ 1667.125580][T23385] ? __might_sleep+0xd0/0xd0 [ 1667.130232][T23385] ? __lock_acquire+0x7c40/0x7c40 [ 1667.135331][T23385] should_fail_ex+0x390/0x4c0 [ 1667.140076][T23385] should_failslab+0x5/0x20 [ 1667.144668][T23385] slab_pre_alloc_hook+0x59/0x300 [ 1667.149754][T23385] kmem_cache_alloc_lru+0x49/0x2e0 [ 1667.154952][T23385] ? proc_alloc_inode+0x26/0xb0 [ 1667.159873][T23385] proc_alloc_inode+0x26/0xb0 [ 1667.164782][T23385] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1667.171173][T23385] new_inode_pseudo+0x5f/0x1c0 [ 1667.176002][T23385] new_inode+0x25/0x1d0 [ 1667.180220][T23385] proc_setup_self+0xbf/0x2d0 [ 1667.184954][T23385] ? _raw_spin_unlock+0x24/0x40 [ 1667.189870][T23385] proc_fill_super+0x4ea/0x730 [ 1667.194681][T23385] ? proc_reconfigure+0x370/0x370 [ 1667.199755][T23385] get_tree_nodev+0xb0/0x160 [ 1667.204400][T23385] vfs_get_tree+0x88/0x270 [ 1667.208872][T23385] do_new_mount+0x247/0xa40 [ 1667.213444][T23385] __se_sys_mount+0x2e3/0x3d0 [ 1667.218192][T23385] ? __x64_sys_mount+0xc0/0xc0 [ 1667.223018][T23385] ? lockdep_hardirqs_on+0x94/0x140 [ 1667.228266][T23385] ? __x64_sys_mount+0x1c/0xc0 [ 1667.233130][T23385] do_syscall_64+0x4c/0xa0 [ 1667.237617][T23385] ? clear_bhb_loop+0x60/0xb0 [ 1667.242351][T23385] ? clear_bhb_loop+0x60/0xb0 [ 1667.247090][T23385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1667.253048][T23385] RIP: 0033:0x7f541579e159 [ 1667.257513][T23385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.277172][T23385] RSP: 002b:00007f54166a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1667.285657][T23385] RAX: ffffffffffffffda RBX: 00007f5415a25fa0 RCX: 00007f541579e159 [ 1667.293684][T23385] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1667.301708][T23385] RBP: 00007f541583506b R08: 0000000000000000 R09: 0000000000000000 [ 1667.309731][T23385] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1667.318800][T23385] R13: 00007f5415a26038 R14: 00007f5415a25fa0 R15: 00007ffc71aa5db8 [ 1667.326848][T23385] [ 1667.351422][T23382] loop0: detected capacity change from 0 to 512 [ 1667.399341][T23385] proc_fill_super: can't allocate /proc/self [ 1667.420587][T23382] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1667.526842][T23382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1667.542905][T23382] Quota error (device loop0): write_blk: dquota write failed [ 1667.550511][T23382] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1667.560260][T23382] Quota error (device loop0): write_blk: dquota write failed [ 1667.567894][T23382] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1667.578710][T23382] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.4739: Failed to acquire dquot type 1 [ 1667.592453][T23382] EXT4-fs (loop0): 1 truncate cleaned up [ 1667.598274][T23382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1667.939248][T23398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1668.308215][T23409] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1668.611247][T23415] Console: switching to colour VGA+ 80x25 [ 1668.654144][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.751742][T23415] Console: switching to colour frame buffer device 128x48 [ 1669.128038][T23432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1669.154424][T23433] hub 8-0:1.0: USB hub found [ 1669.165913][T23433] hub 8-0:1.0: 1 port detected [ 1669.173233][T23433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4756'. [ 1669.689943][T20062] EXT4-fs (loop0): unmounting filesystem. [ 1669.737442][T23440] loop2: detected capacity change from 0 to 1024 [ 1669.841002][T23440] autofs4:pid:23440:autofs_fill_super: called with bogus options [ 1670.015109][T23444] loop2: detected capacity change from 0 to 512 [ 1670.025851][T23447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4761'. [ 1670.038821][T23444] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1670.097307][T23444] EXT4-fs (loop2): group descriptors corrupted! [ 1670.638763][T23463] Console: switching to colour VGA+ 80x25 [ 1670.739074][T23468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4769'. [ 1670.739139][T23468] netlink: 'syz.1.4769': attribute type 1 has an invalid length. [ 1670.774154][T23463] Console: switching to colour frame buffer device 128x48 [ 1671.086580][T23481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1671.291835][T23488] loop0: detected capacity change from 0 to 1024 [ 1671.388137][ T4772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1671.405739][T23488] autofs4:pid:23488:autofs_fill_super: called with bogus options [ 1671.618267][T23488] loop0: detected capacity change from 0 to 512 [ 1671.625589][ T4772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1671.668261][ T4772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.714052][ T4772] Buffer I/O error on dev loop0, logical block 0, async page read [ 1671.802420][T23488] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1671.860521][T23488] EXT4-fs (loop0): group descriptors corrupted! [ 1672.046253][T23512] FAULT_INJECTION: forcing a failure. [ 1672.046253][T23512] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.112244][T23512] CPU: 1 PID: 23512 Comm: syz.3.4785 Not tainted syzkaller #0 [ 1672.119806][T23512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1672.129908][T23512] Call Trace: [ 1672.133232][T23512] [ 1672.136206][T23512] dump_stack_lvl+0x188/0x24e [ 1672.140976][T23512] ? show_regs_print_info+0x12/0x12 [ 1672.146229][T23512] ? load_image+0x410/0x410 [ 1672.150803][T23512] ? __might_sleep+0xd0/0xd0 [ 1672.155474][T23512] ? __lock_acquire+0x7c40/0x7c40 [ 1672.160559][T23512] should_fail_ex+0x390/0x4c0 [ 1672.165307][T23512] should_failslab+0x5/0x20 [ 1672.169857][T23512] slab_pre_alloc_hook+0x59/0x300 [ 1672.174935][T23512] kmem_cache_alloc_lru+0x49/0x2e0 [ 1672.180097][T23512] ? proc_alloc_inode+0x26/0xb0 [ 1672.185009][T23512] proc_alloc_inode+0x26/0xb0 [ 1672.189738][T23512] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1672.196141][T23512] new_inode_pseudo+0x5f/0x1c0 [ 1672.200955][T23512] new_inode+0x25/0x1d0 [ 1672.205160][T23512] proc_setup_self+0xbf/0x2d0 [ 1672.209890][T23512] ? _raw_spin_unlock+0x24/0x40 [ 1672.214793][T23512] proc_fill_super+0x4ea/0x730 [ 1672.219607][T23512] ? proc_reconfigure+0x370/0x370 [ 1672.224676][T23512] get_tree_nodev+0xb0/0x160 [ 1672.229323][T23512] vfs_get_tree+0x88/0x270 [ 1672.233801][T23512] do_new_mount+0x247/0xa40 [ 1672.238366][T23512] __se_sys_mount+0x2e3/0x3d0 [ 1672.243111][T23512] ? __x64_sys_mount+0xc0/0xc0 [ 1672.247952][T23512] ? lockdep_hardirqs_on+0x94/0x140 [ 1672.253199][T23512] ? __x64_sys_mount+0x1c/0xc0 [ 1672.258174][T23512] do_syscall_64+0x4c/0xa0 [ 1672.262617][T23512] ? clear_bhb_loop+0x60/0xb0 [ 1672.267319][T23512] ? clear_bhb_loop+0x60/0xb0 [ 1672.272026][T23512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.277985][T23512] RIP: 0033:0x7fe34a79e159 [ 1672.282433][T23512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.302067][T23512] RSP: 002b:00007fe34b6e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1672.310544][T23512] RAX: ffffffffffffffda RBX: 00007fe34aa25fa0 RCX: 00007fe34a79e159 [ 1672.318548][T23512] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1672.326550][T23512] RBP: 00007fe34a83506b R08: 0000000000000000 R09: 0000000000000000 [ 1672.334549][T23512] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.342555][T23512] R13: 00007fe34aa26038 R14: 00007fe34aa25fa0 R15: 00007ffe562e1b08 [ 1672.350573][T23512] [ 1672.427775][T23517] Console: switching to colour VGA+ 80x25 [ 1672.528977][T23517] Console: switching to colour frame buffer device 128x48 [ 1672.601492][T23512] proc_fill_super: can't allocate /proc/self [ 1673.596403][T23545] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1674.040343][T23545] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1674.243584][T23547] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1674.335021][T23548] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1674.765841][T23563] Console: switching to colour VGA+ 80x25 [ 1674.863802][T23571] hub 8-0:1.0: USB hub found [ 1674.864021][T23571] hub 8-0:1.0: 1 port detected [ 1674.865931][T23571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4802'. [ 1675.206121][T23569] Console: switching to colour frame buffer device 128x48 [ 1675.305993][T23580] loop1: detected capacity change from 0 to 1024 [ 1675.333345][T23580] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1675.859000][T23589] loop1: detected capacity change from 0 to 256 [ 1677.270693][T23599] loop4: detected capacity change from 0 to 256 [ 1677.359815][T23601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4812'. [ 1677.628010][T23605] overlayfs: missing 'lowerdir' [ 1678.395521][T23622] loop3: detected capacity change from 0 to 1024 [ 1678.662229][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4822'. [ 1679.427350][T23622] loop3: detected capacity change from 0 to 512 [ 1679.549691][T23622] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1679.614524][T23643] hub 8-0:1.0: USB hub found [ 1679.619964][T23643] hub 8-0:1.0: 1 port detected [ 1679.627696][T23643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4826'. [ 1679.698640][T23622] EXT4-fs (loop3): group descriptors corrupted! [ 1679.951939][T23656] loop1: detected capacity change from 0 to 256 [ 1680.142550][T23660] syz.2.4828 (23660): drop_caches: 2 [ 1682.448739][T23696] hub 8-0:1.0: USB hub found [ 1682.453631][T23696] hub 8-0:1.0: 1 port detected [ 1682.461934][T23696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1683.231543][T23719] loop0: detected capacity change from 0 to 256 [ 1683.570822][T23722] overlayfs: missing 'lowerdir' [ 1685.008459][T23730] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1685.421984][T23739] FAULT_INJECTION: forcing a failure. [ 1685.421984][T23739] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.455824][T23739] CPU: 1 PID: 23739 Comm: syz.2.4854 Not tainted syzkaller #0 [ 1685.463378][T23739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1685.473659][T23739] Call Trace: [ 1685.476995][T23739] [ 1685.479964][T23739] dump_stack_lvl+0x188/0x24e [ 1685.484708][T23739] ? show_regs_print_info+0x12/0x12 [ 1685.489954][T23739] ? load_image+0x410/0x410 [ 1685.494603][T23739] ? __might_sleep+0xd0/0xd0 [ 1685.499276][T23739] ? __lock_acquire+0x7c40/0x7c40 [ 1685.504369][T23739] should_fail_ex+0x390/0x4c0 [ 1685.509122][T23739] should_failslab+0x5/0x20 [ 1685.513685][T23739] slab_pre_alloc_hook+0x59/0x300 [ 1685.518865][T23739] kmem_cache_alloc_lru+0x49/0x2e0 [ 1685.524038][T23739] ? proc_alloc_inode+0x26/0xb0 [ 1685.528964][T23739] proc_alloc_inode+0x26/0xb0 [ 1685.533714][T23739] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1685.540103][T23739] new_inode_pseudo+0x5f/0x1c0 [ 1685.544935][T23739] new_inode+0x25/0x1d0 [ 1685.549151][T23739] proc_setup_self+0xbf/0x2d0 [ 1685.553883][T23739] ? _raw_spin_unlock+0x24/0x40 [ 1685.558791][T23739] proc_fill_super+0x4ea/0x730 [ 1685.563604][T23739] ? proc_reconfigure+0x370/0x370 [ 1685.568692][T23739] get_tree_nodev+0xb0/0x160 [ 1685.573383][T23739] vfs_get_tree+0x88/0x270 [ 1685.577854][T23739] do_new_mount+0x247/0xa40 [ 1685.582410][T23739] __se_sys_mount+0x2e3/0x3d0 [ 1685.587154][T23739] ? __x64_sys_mount+0xc0/0xc0 [ 1685.592030][T23739] ? lockdep_hardirqs_on+0x94/0x140 [ 1685.597292][T23739] ? __x64_sys_mount+0x1c/0xc0 [ 1685.602146][T23739] do_syscall_64+0x4c/0xa0 [ 1685.606612][T23739] ? clear_bhb_loop+0x60/0xb0 [ 1685.611342][T23739] ? clear_bhb_loop+0x60/0xb0 [ 1685.616104][T23739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1685.622093][T23739] RIP: 0033:0x7fefa259e159 [ 1685.626557][T23739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.646221][T23739] RSP: 002b:00007fefa34c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1685.654716][T23739] RAX: ffffffffffffffda RBX: 00007fefa2825fa0 RCX: 00007fefa259e159 [ 1685.662744][T23739] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1685.670771][T23739] RBP: 00007fefa263506b R08: 0000000000000000 R09: 0000000000000000 [ 1685.678807][T23739] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.686846][T23739] R13: 00007fefa2826038 R14: 00007fefa2825fa0 R15: 00007ffc338f5538 [ 1685.694895][T23739] [ 1685.900518][T23739] proc_fill_super: can't allocate /proc/self [ 1686.302587][T23759] loop4: detected capacity change from 0 to 16 [ 1686.335977][T23759] erofs: (device loop4): mounted with root inode @ nid 36. [ 1686.502795][T23759] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1687.247676][T23759] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1687.265288][T23759] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1687.278978][T23759] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1687.291463][T23759] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 1687.493159][T23774] syz.0.4864 (23774): drop_caches: 2 [ 1687.689492][T23780] loop2: detected capacity change from 0 to 256 [ 1687.957547][T23785] loop1: detected capacity change from 0 to 1024 [ 1687.967095][T23783] loop3: detected capacity change from 0 to 1024 [ 1687.974009][T23785] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1687.982801][T23783] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1688.012387][T23783] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1688.058660][T23788] overlayfs: missing 'lowerdir' [ 1688.341228][T23783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1688.392581][T23783] System zones: 0-1, 3-36 [ 1688.444365][T23783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1689.517179][ T27] audit: type=1800 audit(1700001105.490:65): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4869" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1689.639187][ T5069] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1691.338464][T23798] loop1: detected capacity change from 0 to 256 [ 1691.364534][T20479] EXT4-fs (loop3): unmounting filesystem. [ 1691.920751][T23820] binder: 23813:23820 ioctl c0306201 200000000080 returned -14 [ 1692.544525][T23835] loop0: detected capacity change from 0 to 128 [ 1692.580272][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'. [ 1692.708524][T23835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1692.819890][T23835] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.995392][T23842] loop3: detected capacity change from 0 to 1024 [ 1693.607809][ T4288] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1693.616989][ T4288] Bluetooth: hci4: Injecting HCI hardware error event [ 1693.629949][ T4290] Bluetooth: hci4: hardware error 0x00 [ 1693.725217][T20062] EXT4-fs (loop0): unmounting filesystem. [ 1694.199379][T23862] usb0: HOST MAC 96:1b:04:6d:4a:f4 [ 1694.206882][T23862] usb0: MAC c2:f1:1a:be:8c:87 [ 1694.507454][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1694.698447][ T7] usb 1-1: Dual-Role OTG device on HNP port [ 1694.707784][ T7] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1694.745685][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.837143][ T7] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 96:1b:04:6d:4a:f4 [ 1695.560130][T23900] loop2: detected capacity change from 0 to 1024 [ 1695.687798][ T4290] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1696.013649][T23900] loop2: detected capacity change from 0 to 512 [ 1696.039468][T23911] syz.1.4903 (23911): drop_caches: 2 [ 1696.347279][T23917] loop0: detected capacity change from 0 to 164 [ 1696.413791][T23917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.433333][T23917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.203564][T23954] hub 8-0:1.0: USB hub found [ 1698.226153][T23954] hub 8-0:1.0: 1 port detected [ 1698.238605][T23954] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1698.556124][T23960] loop1: detected capacity change from 0 to 8 [ 1698.661359][T23960] SQUASHFS error: Failed to read block 0x4de: -5 [ 1698.716704][T23960] SQUASHFS error: Failed to read block 0x4de: -5 [ 1698.757382][ T27] audit: type=1800 audit(1700001114.731:66): pid=23960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4917" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1698.946244][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4918'. [ 1700.534438][T24008] binder: 24003:24008 ioctl c0306201 200000000080 returned -14 [ 1700.861253][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1701.167209][ T126] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1701.676181][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4935'. [ 1702.000280][T24055] syz.1.4939 (24055): drop_caches: 2 [ 1702.064315][T24056] hub 8-0:1.0: USB hub found [ 1702.097604][T24056] hub 8-0:1.0: 1 port detected [ 1702.208759][T24059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4938'. [ 1702.781975][T24044] loop4: detected capacity change from 0 to 2048 [ 1702.991611][T24044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1703.564145][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1703.802616][ T7] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1703.918567][ T7] usb 5-1: config 1 has no interface number 0 [ 1704.073294][ T7] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1704.313589][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1704.386501][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1704.477545][ T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 1704.538337][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.546499][ T7] usb 5-1: Product: syz [ 1704.571563][ T7] usb 5-1: Manufacturer: syz [ 1704.584218][ T7] usb 5-1: SerialNumber: syz [ 1704.671303][T24094] loop1: detected capacity change from 0 to 256 [ 1704.711159][T24094] exfat: Bad value for 'uid' [ 1704.897144][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1705.644697][T24117] binder: 24116:24117 ioctl c0306201 200000000080 returned -14 [ 1706.492356][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1707.704493][ T7] usb 5-1: 1:0 : does not exist [ 1707.726553][ T7] usb 5-1: BAAD HEADSET c_chmask mismatch [ 1707.778513][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.828484][ T7] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1707.898124][ T7] usb 5-1: USB disconnect, device number 13 [ 1707.977144][T24138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4961'. [ 1708.244215][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1708.476235][T22529] EXT4-fs (loop4): unmounting filesystem. [ 1708.525852][T24148] binder: 24147:24148 ioctl c0306201 200000000080 returned -14 [ 1708.836091][T19128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.108656][T19128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.488250][T19128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.780008][T24163] loop1: detected capacity change from 0 to 1024 [ 1709.841463][T24163] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1709.954784][T19128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.975130][T24185] syz.2.4975 (24185): drop_caches: 2 [ 1713.285564][T19128] device hsr_slave_0 left promiscuous mode [ 1713.322741][T19128] device hsr_slave_1 left promiscuous mode [ 1713.353193][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.369770][T19128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.414174][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.429788][T19128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.454925][T19128] device bridge_slave_1 left promiscuous mode [ 1713.483876][T19128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.532240][T19128] device bridge_slave_0 left promiscuous mode [ 1713.549179][T19128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.676823][T19128] device veth1_macvtap left promiscuous mode [ 1713.706408][T19128] device veth0_macvtap left promiscuous mode [ 1713.736440][T19128] device veth1_vlan left promiscuous mode [ 1713.762741][T19128] device veth0_vlan left promiscuous mode SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=4968 state=1 status=67 (errno 9: Bad file descriptor) [ 1717.669665][T19128] team0 (unregistering): Port device team_slave_1 removed [ 1717.728733][T19128] team0 (unregistering): Port device team_slave_0 removed [ 1717.790001][T19128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.849539][T19128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.281196][T19128] bond0 (unregistering): Released all slaves [ 1719.208500][T19128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.274628][T19128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.361775][T19128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.438059][T19128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.638748][T19128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.733506][T19128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.816121][T19128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.877055][T19128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.687066][T19128] device hsr_slave_0 left promiscuous mode [ 1721.693635][T19128] device hsr_slave_1 left promiscuous mode [ 1721.701075][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.709153][T19128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.718180][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.725959][T19128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.733833][T19128] device bridge_slave_1 left promiscuous mode [ 1721.740667][T19128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.750019][T19128] device bridge_slave_0 left promiscuous mode [ 1721.758123][T19128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.773469][T19128] device hsr_slave_0 left promiscuous mode [ 1721.780731][T19128] device hsr_slave_1 left promiscuous mode [ 1721.789210][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.797683][T19128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.805447][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.813236][T19128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.821136][T19128] device bridge_slave_1 left promiscuous mode [ 1721.827771][T19128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.836773][T19128] device bridge_slave_0 left promiscuous mode [ 1721.842974][T19128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.894302][T19128] device veth1_macvtap left promiscuous mode [ 1721.900641][T19128] device veth0_macvtap left promiscuous mode [ 1721.907466][T19128] device veth1_vlan left promiscuous mode [ 1721.913362][T19128] device veth0_vlan left promiscuous mode [ 1721.921343][T19128] device veth1_macvtap left promiscuous mode [ 1721.927823][T19128] device veth0_macvtap left promiscuous mode [ 1721.933943][T19128] device veth1_vlan left promiscuous mode [ 1721.940425][T19128] device veth0_vlan left promiscuous mode [ 1722.708320][T19128] team0 (unregistering): Port device team_slave_1 removed [ 1722.765571][T19128] team0 (unregistering): Port device team_slave_0 removed [ 1722.822993][T19128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.878335][T19128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.297509][T19128] bond0 (unregistering): Released all slaves [ 1723.962072][T19128] team0 (unregistering): Port device team_slave_1 removed [ 1724.021284][T19128] team0 (unregistering): Port device team_slave_0 removed [ 1724.075554][T19128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.130378][T19128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.504060][T19128] team0 (unregistering): Port device bond0 removed [ 1724.548092][T19128] bond0 (unregistering): Released all slaves