last executing test programs: 8m31.763133495s ago: executing program 32 (id=60): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 7m58.043446354s ago: executing program 33 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0x10001}]}, 0x10) 7m29.74199215s ago: executing program 34 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000240)={0x34, 0x17, 0x2, {0x2b, './config/usb_gadget/g1/configs/c.1/ncm.usb0'}}, 0x34) 7m18.467534519s ago: executing program 35 (id=187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa06ac0100000008060001080006040002"], 0x0) 6m51.75196511s ago: executing program 36 (id=259): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113400000000008510000002000000850000000a00000095000810000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 5m14.791753492s ago: executing program 37 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5m8.741370096s ago: executing program 38 (id=578): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) 4m28.795801837s ago: executing program 6 (id=719): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 4m28.409166405s ago: executing program 39 (id=719): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 4m22.851744435s ago: executing program 40 (id=750): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) write(r0, &(0x7f0000001e00)="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", 0x306) 4m16.282363263s ago: executing program 41 (id=773): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xe0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 4m11.379223763s ago: executing program 42 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r5, 0x0, 0x0) 4m6.835264306s ago: executing program 43 (id=790): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000480, 0x0, 0x0) syz_ublk_setup_io_uring(0x540e, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket(0x28, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 3m53.912185651s ago: executing program 2 (id=807): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f05000100060000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000001880)=""/4101, 0x1005}, {&(0x7f0000001780)=""/69, 0x45}], 0x4}, 0x20) 3m53.672443202s ago: executing program 2 (id=809): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 3m53.188385585s ago: executing program 44 (id=808): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000200009ad67200040000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x50) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c4) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m53.141288538s ago: executing program 2 (id=811): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4008040) close(r3) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x40081) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) 3m52.984082445s ago: executing program 2 (id=812): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$eJzs3c1rXFUbAPDnTpKmTfu+iSBo3RgQNFA6MTW2CgoVFyJYKOjadphMQ80kUzKT0oSALSK4EVRcCLrpyoUfdefWj63+Fy7EUjUtVlxI5E5m0kkzk07SZCaa3w9u5px77+ScZ879ODPncm8Ae9Zw+icTcTgi3ksiBmvzk4joq6Z6I06urHd7aTGfTkksL7/6W1Jd59bSYj4a3pM6WMs8HBHfvR1xJLO+3PL8wlSuWCzM1vKjlekLo+X5haPnp3OThcnCzPGx8fFjJ54+cXz7Yv3jx4VD199/6YkvT/711kPX3v0+iZNxqLasMY4te35tdjiGa59JX/oRrvHifRe2uyTdrgBbku6aPSt7eRyOweippgCA/7I3I2IZANhjEud/ANhj6r8D3FpazNen7v4i0Vk3XoiI/Svx18c3V5b01sbs9lfHQQduJWtGRpKIGNqG8ocj4pOvX/88nWK7xiEB2nD5SkScHRpef/xP1l2zsFlPbrBsX+11+K75aflGoKEzvkn7P8806/9lVvs/0aT/099k392KZvt/EnF5dcaBbShkAzc+jXiu4dq22w3x1wz11HL/q/b5+pJz54uF9Nj2/4gYib7+ND+2QRkjN/++2WpZY//v9w/e+CwtP329s0bml97+te+ZyFVy9xNzoxtXIh7pbRZ/str+SYv+7+k2y3j52Xc+brUsjT+Ntz6ti7/a/jt3Rli+GvF40/a/c0VbsuH1iaPVzWG0vlE08dVPHw20Kr+x/dMpLb/+XaAT0vYf2Dj+oaTxes3y5sv44ergt62W3Tv+5tv/vuS1arrej7iUq1RmxyL2Ja+sn3/sznsv5R6tpVbWT+Mfeaz5/r/R9p9+JzzbZvy913/9Yuvx76w0/olNtf/mE9duT/W0Kr+99h+vpkZqc9o5/rVbwfv57AAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOBRJJruazmSy2ZVneD8YA5liqVw5cq40NzMR1WdlD0Vfpn6ry8GG+6GO1e6HX88fuyv/VEQ8EBEf9h9I6vdRnOhy7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQd7DF8/9TP/d3u3YAwI7Z3+0KAAAd5/wPAHuP8z8A7D3tnf97drweAEDn+P4PAHuP8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA77PSpU+m0/OfSYj7NT1ycn5sqXTw6UShPZafn8tl8afZCdrJUmiwWsvnS9L3+X7FUujAeM3OXRiuFcmW0PL9wZro0N1M5c346N1k4U+jrSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDnl+YWpXLFYmJXYQmJ5d1Sj+4me2ua0W+rT0USyO6qxzYkuH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA//8vWSHt") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 3m50.235309984s ago: executing program 2 (id=814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m49.569390815s ago: executing program 2 (id=815): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x3b2}]) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3m49.164830454s ago: executing program 45 (id=815): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x3b2}]) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3m48.872133978s ago: executing program 5 (id=818): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m48.550059472s ago: executing program 5 (id=819): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113400000000008510000002000000850000000a00000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x24941a, 0x0, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket(0x10, 0x80002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) io_uring_enter(0xffffffffffffffff, 0xcd, 0x5b72, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m46.69050484s ago: executing program 5 (id=820): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14}}], 0x18}, 0x40045) 3m46.436825262s ago: executing program 5 (id=821): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 3m43.527937638s ago: executing program 5 (id=827): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x1800807, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r5 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000002c0)={0xfc, "95466109683d67e2d47944f957b75eac4326dc008fe0f81af3cdb712a658d5d1ab3dbbbf3d44a941c22332999ba651c17e4edbe0e7e98677de153af5cd982d9e"}) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") 3m43.390932224s ago: executing program 8 (id=829): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m43.173477045s ago: executing program 8 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0200040900010073797a310000000008000540000000020900020073797a310000000008000a40000000023c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a3f0200000000000000000a0002000900010073797a3100000000090002"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) 3m42.917162226s ago: executing program 5 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) 3m42.893237168s ago: executing program 8 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2e, 0x4, {0x0, 0x0, 0x12, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 3m42.427425799s ago: executing program 46 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) 3m42.41148924s ago: executing program 8 (id=836): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 3m34.573049357s ago: executing program 8 (id=839): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m33.86903813s ago: executing program 8 (id=840): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x1800807, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r6 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000002c0)={0xfc, "95466109683d67e2d47944f957b75eac4326dc008fe0f81af3cdb712a658d5d1ab3dbbbf3d44a941c22332999ba651c17e4edbe0e7e98677de153af5cd982d9e"}) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") 3m33.336314415s ago: executing program 47 (id=840): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x1800807, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r6 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000002c0)={0xfc, "95466109683d67e2d47944f957b75eac4326dc008fe0f81af3cdb712a658d5d1ab3dbbbf3d44a941c22332999ba651c17e4edbe0e7e98677de153af5cd982d9e"}) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") 3m28.205127836s ago: executing program 6 (id=810): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m28.019525654s ago: executing program 6 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000030601020000000000000000c80000070500010007"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 3m27.729255118s ago: executing program 6 (id=849): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0xff, 0x789, &(0x7f0000000fc0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, &(0x7f00000001c0)='%,@&#+\\\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xfffffffe, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x80800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x1, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x18}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x1, 0x0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 3m21.368415726s ago: executing program 6 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000030601020000000000000000c80000070500010007"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 3m20.801737952s ago: executing program 6 (id=860): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x74, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 3m20.092340296s ago: executing program 48 (id=860): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x74, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2m41.988490891s ago: executing program 0 (id=944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}], 0x1, 0x119e75c40673edef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 2m39.992725494s ago: executing program 0 (id=947): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x4a, 0x0, 0x4}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0xee01) keyctl$chown(0x4, r3, 0xee00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) read$msr(r1, &(0x7f0000000100)=""/60, 0x3c) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m37.702674841s ago: executing program 0 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.083743521s ago: executing program 0 (id=956): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 2m36.765433675s ago: executing program 0 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m35.250415986s ago: executing program 0 (id=968): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113400000000008510000002000000850000000a00000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x24941a, 0x0, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket(0x10, 0x80002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) io_uring_enter(0xffffffffffffffff, 0xcd, 0x5b72, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m20.075833118s ago: executing program 49 (id=968): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113400000000008510000002000000850000000a00000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x24941a, 0x0, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket(0x10, 0x80002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) io_uring_enter(0xffffffffffffffff, 0xcd, 0x5b72, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 44.213013708s ago: executing program 1 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 43.126399109s ago: executing program 1 (id=1336): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 42.827457253s ago: executing program 1 (id=1339): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r3, 0x0, 0x0, 0x3b2}]) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) setpriority(0x1, r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, 0xffffffffffffffff, 0xb18c000) fsmount(0xffffffffffffffff, 0x0, 0x8e) socket$netlink(0x10, 0x3, 0x4) 40.13471459s ago: executing program 1 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 28.632704188s ago: executing program 1 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000240)="04000000000000000000000038010000") 27.001486175s ago: executing program 1 (id=1366): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000340)={{0x0, @broadcast, 0x4e22, 0x0, 'none\x00', 0x1c, 0x4, 0x35}, {@loopback, 0x4e22, 0x4, 0x6, 0x380, 0x9ba}}, 0x44) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000580)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000c40)="$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") syz_clone(0x200080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) rt_sigqueueinfo(r0, 0x34, &(0x7f00000000c0)={0x21, 0xfff, 0xe}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000bc0)={{r6, &(0x7f0000000180)='%@:\\*\x00', 0x400000, &(0x7f0000000280)={@_ha_fsid={[0x80000001, 0x886c]}, {0x5, 0x4, 0x9, 0x6}}, 0x1, 0x0, &(0x7f0000000400)}, {[0x67, 0x56c, 0x3, 0x3]}, 0x4, 0xe5, &(0x7f0000000ac0)=""/229}) syz_usb_disconnect(0xffffffffffffffff) 14.06450807s ago: executing program 4 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 11.594508507s ago: executing program 50 (id=1366): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000340)={{0x0, @broadcast, 0x4e22, 0x0, 'none\x00', 0x1c, 0x4, 0x35}, {@loopback, 0x4e22, 0x4, 0x6, 0x380, 0x9ba}}, 0x44) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000580)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000c40)="$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") syz_clone(0x200080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) rt_sigqueueinfo(r0, 0x34, &(0x7f00000000c0)={0x21, 0xfff, 0xe}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000bc0)={{r6, &(0x7f0000000180)='%@:\\*\x00', 0x400000, &(0x7f0000000280)={@_ha_fsid={[0x80000001, 0x886c]}, {0x5, 0x4, 0x9, 0x6}}, 0x1, 0x0, &(0x7f0000000400)}, {[0x67, 0x56c, 0x3, 0x3]}, 0x4, 0xe5, &(0x7f0000000ac0)=""/229}) syz_usb_disconnect(0xffffffffffffffff) 9.530919793s ago: executing program 4 (id=1408): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x4a, 0x0, 0x4}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0xee01) keyctl$chown(0x4, r2, 0xee00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5413, 0x0) read$msr(r1, &(0x7f0000000100)=""/60, 0x3c) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 7.112223776s ago: executing program 3 (id=1416): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000180), 0x1000) 6.768199703s ago: executing program 3 (id=1417): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.923891422s ago: executing program 3 (id=1418): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) 4.703753519s ago: executing program 9 (id=1420): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000050000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) 4.161583705s ago: executing program 9 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a010400000000000000000a0000010900010073797a310000000008000a40000000020900020073797a320000000020000000000a010300000000000000000a0000060900"], 0x7400}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.161417045s ago: executing program 7 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f74610000df100002800c0001400000000000000080"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4.059231999s ago: executing program 4 (id=1424): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x249, &(0x7f0000001040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x5bf}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) 3.920141136s ago: executing program 9 (id=1425): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730140000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.792696702s ago: executing program 7 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "00030000"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 3.315871485s ago: executing program 3 (id=1427): syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 2.55493996s ago: executing program 9 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002680), 0x0, 0x119e75c40673edef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 2.54411813s ago: executing program 7 (id=1429): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xaf316000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x1, 0x2000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 2.441908555s ago: executing program 4 (id=1430): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1b4, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 2.033499644s ago: executing program 7 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.27704664s ago: executing program 3 (id=1432): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}}) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.27585446s ago: executing program 4 (id=1433): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.204927813s ago: executing program 9 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a010400000000000000000a0000010900010073797a310000000008000a40000000020900020073797a320000000020000000000a010300000000000000000a0000060900"], 0x7400}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 988.785114ms ago: executing program 7 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f74610000df100002800c00014000000000000000800800"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 807.223662ms ago: executing program 9 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) 539.047884ms ago: executing program 7 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x3a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 428.47632ms ago: executing program 4 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000440)=@file={0x1}, 0x6e) 0s ago: executing program 3 (id=1439): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xc5f, &(0x7f0000002580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) kernel console output (not intermixed with test programs): 95.904195][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.911298][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.940066][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.985847][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.998044][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 396.078760][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 396.125578][ T7685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.134456][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.162078][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.170991][ T5260] udevd[5260]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.251600][ T7723] device hsr_slave_0 entered promiscuous mode [ 396.276815][ T7723] device hsr_slave_1 entered promiscuous mode [ 396.304180][ T7723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.324469][ T7723] Cannot create hsr debugfs directory [ 396.348585][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.359604][ T7685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 396.568998][ T7685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 396.586891][ T7685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 396.723813][ T7770] netlink: 32 bytes leftover after parsing attributes in process `syz.7.828'. [ 397.145234][ T7414] EXT4-fs (loop5): unmounting filesystem. [ 397.637314][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.817638][ T7723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.009938][ T7723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.078382][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 398.104681][ T7798] FAULT_INJECTION: forcing a failure. [ 398.104681][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 398.119229][ T7798] CPU: 1 PID: 7798 Comm: syz.7.837 Not tainted syzkaller #0 [ 398.126579][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 398.136704][ T7798] Call Trace: [ 398.140103][ T7798] [ 398.143147][ T7798] dump_stack_lvl+0x188/0x24e [ 398.147985][ T7798] ? show_regs_print_info+0x12/0x12 [ 398.153291][ T7798] ? load_image+0x410/0x410 [ 398.157864][ T7798] ? __might_sleep+0xd0/0xd0 [ 398.162555][ T7798] ? __lock_acquire+0x7c40/0x7c40 [ 398.167698][ T7798] should_fail_ex+0x390/0x4c0 [ 398.172510][ T7798] should_failslab+0x5/0x20 [ 398.177093][ T7798] slab_pre_alloc_hook+0x59/0x300 [ 398.182231][ T7798] kmem_cache_alloc_lru+0x49/0x2e0 [ 398.187388][ T7798] ? proc_alloc_inode+0x26/0xb0 [ 398.192321][ T7798] proc_alloc_inode+0x26/0xb0 [ 398.197036][ T7798] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 398.203407][ T7798] new_inode_pseudo+0x5f/0x1c0 [ 398.208239][ T7798] new_inode+0x25/0x1d0 [ 398.212438][ T7798] proc_setup_self+0xbf/0x2d0 [ 398.217153][ T7798] ? _raw_spin_unlock+0x24/0x40 [ 398.222123][ T7798] proc_fill_super+0x4ea/0x730 [ 398.226917][ T7798] ? proc_reconfigure+0x370/0x370 [ 398.231963][ T7798] get_tree_nodev+0xb0/0x160 [ 398.236634][ T7798] vfs_get_tree+0x88/0x270 [ 398.241086][ T7798] do_new_mount+0x247/0xa40 [ 398.245639][ T7798] __se_sys_mount+0x2e3/0x3d0 [ 398.250355][ T7798] ? __x64_sys_mount+0xc0/0xc0 [ 398.255153][ T7798] ? lockdep_hardirqs_on+0x94/0x140 [ 398.260389][ T7798] ? __x64_sys_mount+0x1c/0xc0 [ 398.265183][ T7798] do_syscall_64+0x4c/0xa0 [ 398.269629][ T7798] ? clear_bhb_loop+0x60/0xb0 [ 398.274338][ T7798] ? clear_bhb_loop+0x60/0xb0 [ 398.279043][ T7798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.284984][ T7798] RIP: 0033:0x7f69a8b9e159 [ 398.289478][ T7798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.309168][ T7798] RSP: 002b:00007f69a9ac4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.317616][ T7798] RAX: ffffffffffffffda RBX: 00007f69a8e25fa0 RCX: 00007f69a8b9e159 [ 398.325635][ T7798] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 398.333637][ T7798] RBP: 00007f69a8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 398.341634][ T7798] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 398.349631][ T7798] R13: 00007f69a8e26038 R14: 00007f69a8e25fa0 R15: 00007fffa58a7fe8 [ 398.357643][ T7798] [ 398.432496][ T7685] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.451001][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.462257][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.548459][ T7723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.557698][ T7798] proc_fill_super: can't allocate /proc/self [ 398.631638][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.642432][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.668364][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.676390][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.684589][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.692262][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.755812][ T7723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.851856][ T7804] loop8: detected capacity change from 0 to 2048 [ 398.964014][ T7804] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 399.126671][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.137258][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.175885][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.183143][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.202628][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.283123][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.297339][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.316523][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.323819][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.428005][ T22] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 399.635073][ T22] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 399.658345][ T22] usb 9-1: config 1 has no interface number 0 [ 399.674885][ T22] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 399.696299][ T22] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 399.722344][ T22] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 399.752333][ T22] usb 9-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 399.782226][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.798365][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.811925][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.830315][ T22] usb 9-1: Product: syz [ 399.834549][ T22] usb 9-1: Manufacturer: syz [ 399.859845][ T22] usb 9-1: SerialNumber: syz [ 399.868959][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.900442][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.929667][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.955338][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.102182][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 400.158223][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 400.248361][ T6469] device hsr_slave_0 left promiscuous mode [ 400.278212][ T6469] device hsr_slave_1 left promiscuous mode [ 400.287654][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.318801][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.338956][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.346466][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.411388][ T6469] device bridge_slave_1 left promiscuous mode [ 400.417699][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.477829][ T6469] device bridge_slave_0 left promiscuous mode [ 400.495412][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.588668][ T6469] device veth1_macvtap left promiscuous mode [ 400.594798][ T6469] device veth0_macvtap left promiscuous mode [ 400.635122][ T6469] device veth1_vlan left promiscuous mode [ 400.648432][ T6469] device veth0_vlan left promiscuous mode [ 400.718508][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 402.433482][ T6469] team0 (unregistering): Port device team_slave_1 removed [ 402.559439][ T6469] team0 (unregistering): Port device team_slave_0 removed [ 402.669192][ T6469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.789651][ T6469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.798759][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 403.411440][ T6469] bond0 (unregistering): Released all slaves [ 403.599098][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.607696][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.659850][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.670510][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.710698][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.865318][ T7723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.930843][ T7723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.943032][ T7723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.971383][ T7723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.158623][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 404.286391][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.363256][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.411220][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.455656][ T7723] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.535572][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.560327][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.581401][ T7801] device bridge_slave_0 entered promiscuous mode [ 404.620318][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.659233][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.688677][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.695874][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.768171][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.775375][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.820044][ T7801] device bridge_slave_1 entered promiscuous mode [ 404.860202][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.878070][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 404.884840][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.919074][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.927868][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.935088][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.943343][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.954329][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.972023][ T22] usb 9-1: 1:0 : does not exist [ 404.976991][ T22] usb 9-1: BAAD HEADSET c_chmask mismatch [ 405.016183][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.053863][ T22] snd-usb-audio: probe of 9-1:1.1 failed with error -22 [ 405.068136][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.077564][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.116792][ T5260] udevd[5260]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.159494][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.190128][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.220077][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.232986][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.259421][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.278953][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.306066][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.332489][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.355816][ T4654] usb 9-1: USB disconnect, device number 3 [ 405.362158][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.385724][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.418868][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.460837][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.496996][ T7801] team0: Port device team_slave_0 added [ 405.693519][ T6469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.755815][ T7801] team0: Port device team_slave_1 added [ 406.011644][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.045654][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.123586][ T7469] EXT4-fs (loop8): unmounting filesystem. [ 406.148417][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.331793][ T6469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.394217][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.418198][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.528157][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.690654][ T6469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.958003][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 406.998968][ T6469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.099973][ T7801] device hsr_slave_0 entered promiscuous mode [ 407.154837][ T7801] device hsr_slave_1 entered promiscuous mode [ 407.194600][ T7801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.228864][ T7801] Cannot create hsr debugfs directory [ 407.328665][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.346609][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.427807][ T7685] device veth0_vlan entered promiscuous mode [ 407.477885][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.486549][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.552549][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.575224][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.589717][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.597424][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.606698][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.610196][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.624968][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.633107][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.640546][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.650593][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.669182][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.708349][ T7685] device veth1_vlan entered promiscuous mode [ 407.753295][ T7723] device veth0_vlan entered promiscuous mode [ 407.788449][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 407.809532][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 407.849032][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.889014][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.908759][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.941696][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.963407][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.996551][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.093098][ T7723] device veth1_vlan entered promiscuous mode [ 408.106790][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.118831][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.138945][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.173466][ T7685] device veth0_macvtap entered promiscuous mode [ 408.358788][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.378671][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.523744][ T7801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.603065][ T7685] device veth1_macvtap entered promiscuous mode [ 408.632027][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.660633][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.771316][ T7801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.800079][ T7723] device veth0_macvtap entered promiscuous mode [ 408.873936][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.886171][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.916895][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.938044][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.978047][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.989139][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.017961][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.038315][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.058052][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.078972][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.115214][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.150671][ T7723] device veth1_macvtap entered promiscuous mode [ 409.230127][ T7801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.264453][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.281205][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.298876][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.318471][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.388412][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.417981][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.427896][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.457970][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.488059][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.508038][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.528111][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.549432][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.568222][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.598042][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.629074][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.678212][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 409.806584][ T7801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.857485][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.880661][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.987699][ T7685] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.008171][ T7685] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.016981][ T7685] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.038085][ T7685] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.197649][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.230708][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.253513][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.270726][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.286627][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.300479][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.319284][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.341556][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.361491][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.376670][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.400296][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.418349][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.450731][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.559462][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.570187][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.580877][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.592463][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.602409][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.613559][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.623668][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.634166][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.644552][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.655147][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.665329][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.676660][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.689091][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.701691][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.713810][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.763233][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.777787][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.855779][ T7723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.875167][ T7723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.900291][ T7723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.917352][ T7723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.068856][ T5397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.091311][ T5397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.207176][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.408657][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 411.422929][ T7801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.528943][ T7801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.552932][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.584286][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.706881][ T7801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.740271][ T7801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.758284][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 411.792439][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.833418][ T4727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.858111][ T4727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.915156][ T6469] device hsr_slave_0 left promiscuous mode [ 411.945886][ T6469] device hsr_slave_1 left promiscuous mode [ 411.970887][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.978593][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.986522][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.994478][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.003373][ T6469] device bridge_slave_1 left promiscuous mode [ 412.009872][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.028474][ T6469] device bridge_slave_0 left promiscuous mode [ 412.034834][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.216262][ T6469] device veth1_macvtap left promiscuous mode [ 412.223553][ T6469] device veth0_macvtap left promiscuous mode [ 412.239931][ T6469] device veth1_vlan left promiscuous mode [ 412.256053][ T6469] device veth0_vlan left promiscuous mode [ 412.990663][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.852'. [ 413.097181][ T7967] loop6: detected capacity change from 0 to 2048 [ 413.244639][ T7967] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 413.629779][ T4318] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 413.838231][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 413.843735][ T4318] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 413.865867][ T4318] usb 7-1: config 1 has no interface number 0 [ 413.875857][ T4318] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 413.891932][ T4318] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 413.915603][ T4318] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 413.955749][ T4318] usb 7-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 413.976018][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.987790][ T4318] usb 7-1: Product: syz [ 414.004404][ T4318] usb 7-1: Manufacturer: syz [ 414.009847][ T4318] usb 7-1: SerialNumber: syz [ 414.192905][ T6469] team0 (unregistering): Port device team_slave_1 removed [ 414.329996][ T6469] team0 (unregistering): Port device team_slave_0 removed [ 414.459503][ T6469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.652744][ T6469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.287990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 415.297991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 415.307967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 415.317963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 415.327958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 415.337962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 415.347953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 415.357952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 415.367954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 415.377953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 415.550323][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.855'. [ 415.631664][ T8003] loop7: detected capacity change from 0 to 512 [ 415.640418][ T8003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.994129][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 416.986768][ T8003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2826c018, mo2=0002] [ 416.994878][ T8003] System zones: 1-12 [ 417.003050][ T8003] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.855: corrupted inode contents [ 417.019283][ T8003] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 417.038516][ T8003] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.855: corrupted inode contents [ 417.058858][ T8003] EXT4-fs error (device loop7): ext4_evict_inode:329: inode #15: comm syz.7.855: mark_inode_dirty error [ 417.078701][ T8003] EXT4-fs (loop7): 1 orphan inode deleted [ 417.084491][ T8003] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 417.360249][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 417.800824][ T6469] bond0 (unregistering): Released all slaves [ 418.160131][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.341365][ T4727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.359389][ T4727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.361427][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.404455][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.416623][ T4318] usb 7-1: 1:0 : does not exist [ 418.436689][ T4318] usb 7-1: BAAD HEADSET c_chmask mismatch [ 418.444221][ T7885] device bridge_slave_0 entered promiscuous mode [ 418.479836][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.500397][ T4318] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 418.518729][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.525868][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.557660][ T4318] usb 7-1: USB disconnect, device number 3 [ 418.577709][ T7885] device bridge_slave_1 entered promiscuous mode [ 418.715521][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.811081][ T5260] udevd[5260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.828803][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.948937][ T7885] team0: Port device team_slave_0 added [ 419.010024][ T7885] team0: Port device team_slave_1 added [ 419.221031][ T7685] EXT4-fs (loop6): unmounting filesystem. [ 419.253958][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.281283][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.363252][ T8032] hub 8-0:1.0: USB hub found [ 419.404523][ T8032] hub 8-0:1.0: 1 port detected [ 419.408058][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.482911][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.511455][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.528029][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.587127][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.635818][ T8034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.858'. [ 419.692331][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.731164][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.786872][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.826618][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.844044][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.897222][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.904438][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.951963][ T7885] device hsr_slave_0 entered promiscuous mode [ 420.007143][ T7885] device hsr_slave_1 entered promiscuous mode [ 420.019618][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.027246][ T7885] Cannot create hsr debugfs directory [ 420.073328][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 420.120039][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.162053][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.198980][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.206160][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.228255][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.862'. [ 420.263762][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.321863][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 420.361856][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.401157][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.429168][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 420.523372][ T6469] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.586614][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.610500][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.629981][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.668799][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.779346][ T8051] Bluetooth: MGMT ver 1.22 [ 420.788960][ T6469] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.832097][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 420.849010][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.916523][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 420.980410][ T6469] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.054468][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.069159][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.078433][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.086389][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.094165][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 421.102027][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.198714][ T6469] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.833261][ T6469] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.054457][ T6469] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.198283][ T8072] loop3: detected capacity change from 0 to 1024 [ 422.224655][ T8072] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 422.250729][ T6469] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.278919][ T8072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 422.279389][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.300658][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.328087][ T8072] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 422.336340][ T8072] System zones: 0-1, 3-36 [ 422.390734][ T8072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 422.441258][ T6469] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.472781][ T8054] chnl_net:caif_netlink_parms(): no params data found [ 422.497620][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.515483][ T26] audit: type=1800 audit(1789512918.568:10): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.864" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 422.703193][ T7885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.926619][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.947740][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.031785][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.062067][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.094802][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.118365][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 423.129830][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.168546][ T7801] device veth0_vlan entered promiscuous mode [ 423.233534][ T7801] device veth1_vlan entered promiscuous mode [ 423.263343][ T7885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.277025][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 423.337667][ T7885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.466994][ T7801] device veth0_macvtap entered promiscuous mode [ 423.504001][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.513473][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.528919][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.537875][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.547502][ T7885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.585187][ T7801] device veth1_macvtap entered promiscuous mode [ 423.609532][ T8090] loop3: detected capacity change from 0 to 1024 [ 423.622265][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.655657][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.663641][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.671587][ T8090] EXT4-fs: test_dummy_encryption requires encrypt feature [ 423.681195][ T8054] device bridge_slave_0 entered promiscuous mode [ 423.889855][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.897048][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.907500][ T8054] device bridge_slave_1 entered promiscuous mode [ 424.008753][ T8093] loop3: detected capacity change from 0 to 256 [ 424.501445][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.529577][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.589439][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.650705][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.748102][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.806908][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.839218][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.849900][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.862147][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.872827][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.883680][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.894727][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.909786][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.960880][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.012132][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.090763][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.199772][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 425.216623][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.532666][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.556794][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.579623][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.590846][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.868'. [ 425.607633][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.630390][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.651702][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.678433][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.698017][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.736101][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.757526][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.778137][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.807649][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.824362][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.844522][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.869761][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.000789][ T7801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.017656][ T7801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.035617][ T7801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.047876][ T7801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.080800][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 426.241953][ T8054] team0: Port device team_slave_0 added [ 426.289066][ T8054] team0: Port device team_slave_1 added [ 426.349796][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.501713][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.514538][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.553102][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.570356][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.581368][ T8130] loop7: detected capacity change from 0 to 8 [ 426.625501][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.643621][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.688898][ T8130] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.695762][ T8130] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.711176][ T26] audit: type=1800 audit(1789512922.768:11): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.872" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 426.911441][ T8137] loop3: detected capacity change from 0 to 128 [ 426.927558][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.953476][ T8137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 426.968804][ T8137] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.001976][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.038783][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.234602][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.268931][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.278514][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 427.288817][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.295972][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.317699][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 427.379656][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.650114][ T4757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.761892][ T4757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.812853][ T8054] device hsr_slave_0 entered promiscuous mode [ 428.043304][ T8054] device hsr_slave_1 entered promiscuous mode [ 428.149082][ T8054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.218691][ T8054] Cannot create hsr debugfs directory [ 428.261323][ T8143] using random self ethernet address [ 428.267136][ T8143] using random host ethernet address [ 428.333028][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 428.349557][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.373315][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.384481][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 428.404237][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.411484][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.609773][ T8143] usb0: HOST MAC f6:45:73:12:b0:cd [ 428.626050][ T8143] usb0: MAC 92:16:5d:84:5e:25 [ 428.632296][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.660409][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.822983][ T6471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.846053][ T6471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.849186][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.897319][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.927822][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 428.969105][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.238198][ T8175] netlink: 184 bytes leftover after parsing attributes in process `syz.0.834'. [ 429.334559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.354357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.363051][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 429.385229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.408770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.459145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.508111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.537565][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.887586][ T8193] loop3: detected capacity change from 0 to 256 [ 429.905500][ T8189] loop7: detected capacity change from 0 to 1024 [ 429.915426][ T8193] exfat: Bad value for 'uid' [ 429.979585][ T8189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 430.047649][ T8189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 430.133806][ T8189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 430.176148][ T8189] System zones: 0-1, 3-36 [ 430.229672][ T8189] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 430.343891][ T26] audit: type=1800 audit(1789512926.398:12): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.887" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 431.515736][ T8203] hub 8-0:1.0: USB hub found [ 431.570003][ T8203] hub 8-0:1.0: 1 port detected [ 431.638926][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 431.858116][ T8206] netlink: 44 bytes leftover after parsing attributes in process `syz.3.889'. [ 431.893279][ T8218] loop7: detected capacity change from 0 to 2048 [ 431.936137][ T6469] device hsr_slave_0 left promiscuous mode [ 431.977084][ T6469] device hsr_slave_1 left promiscuous mode [ 431.993313][ T8220] hub 8-0:1.0: USB hub found [ 432.000916][ T8218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.028970][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.036510][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.036639][ T8220] hub 8-0:1.0: 1 port detected [ 432.073906][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.102438][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.127273][ T6469] device bridge_slave_1 left promiscuous mode [ 432.168249][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.177274][ T6469] device bridge_slave_0 left promiscuous mode [ 432.194004][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.261344][ T6469] device hsr_slave_0 left promiscuous mode [ 432.369506][ T6469] device hsr_slave_1 left promiscuous mode [ 432.434636][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.496389][ T8225] No such timeout policy "syz1" [ 432.944709][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.996160][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.029159][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.098904][ T6469] device bridge_slave_1 left promiscuous mode [ 433.105189][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.149501][ T6469] device bridge_slave_0 left promiscuous mode [ 433.155789][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.298546][ T6469] device veth1_macvtap left promiscuous mode [ 433.321707][ T6469] device veth0_macvtap left promiscuous mode [ 433.348145][ T6469] device veth1_vlan left promiscuous mode [ 433.354237][ T6469] device veth0_vlan left promiscuous mode [ 433.391738][ T6469] device veth1_macvtap left promiscuous mode [ 433.419794][ T6469] device veth0_macvtap left promiscuous mode [ 433.427549][ T6469] device veth1_vlan left promiscuous mode [ 433.438642][ T6469] device veth0_vlan left promiscuous mode [ 433.822535][ T8237] loop7: detected capacity change from 0 to 1024 [ 433.918985][ T8237] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 434.052756][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 434.334464][ T8249] loop3: detected capacity change from 0 to 128 [ 434.497242][ T8249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 434.506722][ T8249] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 434.562954][ T8257] loop7: detected capacity change from 0 to 256 [ 434.663859][ T8257] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 436.188395][ T4324] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 436.390478][ T4324] usb 1-1: Dual-Role OTG device on HNP port [ 436.400729][ T4324] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 436.419997][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.435930][ T4324] usb 1-1: SerialNumber: 1234567890 [ 436.623463][ T6469] team0 (unregistering): Port device team_slave_1 removed [ 436.772497][ T6469] team0 (unregistering): Port device team_slave_0 removed [ 436.963980][ T6469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.984644][ T8281] loop7: detected capacity change from 0 to 256 [ 437.126448][ T8282] overlayfs: missing 'lowerdir' [ 437.137786][ T6469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.035712][ T6469] bond0 (unregistering): Released all slaves [ 439.529976][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 439.557654][ T6469] team0 (unregistering): Port device team_slave_1 removed [ 439.756054][ T6469] team0 (unregistering): Port device team_slave_0 removed [ 439.939771][ T6469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.011014][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.017817][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.098825][ T6469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.646692][ T6469] bond0 (unregistering): Released all slaves [ 440.758488][ T8223] netlink: 44 bytes leftover after parsing attributes in process `syz.0.892'. [ 440.783604][ T4324] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, f6:45:73:12:b0:cd [ 440.861521][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.941653][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.997311][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.069256][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.084068][ T8333] loop0: detected capacity change from 0 to 164 [ 441.104441][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.193346][ T8336] hub 8-0:1.0: USB hub found [ 441.242260][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.259193][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.303482][ T8333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 441.340704][ T7885] device veth0_vlan entered promiscuous mode [ 441.367352][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.398400][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.407469][ T8336] hub 8-0:1.0: 1 port detected [ 441.448802][ T7885] device veth1_vlan entered promiscuous mode [ 441.539805][ T8343] loop3: detected capacity change from 0 to 16 [ 441.593554][ T8343] erofs: (device loop3): mounted with root inode @ nid 36. [ 441.622476][ T8343] syz.3.907: attempt to access beyond end of device [ 441.622476][ T8343] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 441.674231][ T8343] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 441.686961][ T26] audit: type=1800 audit(1789512937.738:13): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.907" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 441.744447][ T8339] netlink: 44 bytes leftover after parsing attributes in process `syz.7.905'. [ 442.248125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.276477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.320038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.341220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.365416][ T7885] device veth0_macvtap entered promiscuous mode [ 442.415150][ T7885] device veth1_macvtap entered promiscuous mode [ 442.490301][ T8054] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 442.539197][ T8054] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 442.562107][ T8054] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 442.671476][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.729640][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.761498][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.784647][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.795151][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.818116][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.865882][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.917641][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.955734][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.001556][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.069557][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.087639][ T8054] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 443.108950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.127411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.154336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.183523][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.876771][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.905281][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.937995][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.968001][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.987961][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.011223][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.035182][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.056504][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.078304][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.103689][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.146161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.161612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.246864][ T7885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.255923][ T7885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.300217][ T7885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.334189][ T7885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.361745][ T8369] loop3: detected capacity change from 0 to 256 [ 445.498686][ T8369] overlayfs: missing 'lowerdir' [ 445.776446][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.800941][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.838196][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.909744][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.937130][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.985437][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.000782][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.080967][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.081853][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.096222][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.141002][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.163525][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.170812][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.198943][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.218508][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.228699][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.235875][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.245318][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.255157][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.273796][ T8380] hub 8-0:1.0: USB hub found [ 446.316035][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.343144][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.354250][ T8380] hub 8-0:1.0: 1 port detected [ 446.370138][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.411851][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.475564][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.535393][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.599479][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.664197][ T8382] netlink: 44 bytes leftover after parsing attributes in process `syz.7.915'. [ 446.697655][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.711352][ T8386] loop3: detected capacity change from 0 to 2048 [ 446.720049][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.216561][ T8386] UDF-fs: bad mount option "gid=0xffffffffffffffff0xffffffffffffffff18446744073709551615" or missing value [ 448.245915][ T8054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.291005][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.308445][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.380575][ T8386] loop3: detected capacity change from 0 to 1024 [ 448.413301][ T8386] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 449.758573][ T49] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 449.767443][ T49] Bluetooth: hci1: Injecting HCI hardware error event [ 449.778380][ T4292] Bluetooth: hci1: hardware error 0x00 [ 449.867379][ T8386] loop3: detected capacity change from 0 to 8 [ 449.898084][ T8386] SQUASHFS error: Unable to read inode 0x2000 [ 451.582716][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.598621][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.626248][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.918037][ T4292] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 452.000126][ T8424] hub 8-0:1.0: USB hub found [ 452.006127][ T8424] hub 8-0:1.0: 1 port detected [ 452.013319][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.924'. [ 453.464314][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'. [ 453.863178][ T8468] Console: switching to colour VGA+ 80x25 [ 453.955516][ T8468] Console: switching to colour frame buffer device 128x48 [ 454.021720][ T8471] loop0: detected capacity change from 0 to 256 [ 454.307757][ T8483] loop1: detected capacity change from 0 to 16 [ 454.738515][ T8483] erofs: (device loop1): mounted with root inode @ nid 36. [ 455.517591][ T8484] overlayfs: missing 'lowerdir' [ 455.706507][ T8497] loop3: detected capacity change from 0 to 1024 [ 455.838626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.863092][ T8497] EXT4-fs: test_dummy_encryption requires encrypt feature [ 455.985832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.177607][ T8499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.934'. [ 456.599802][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.609424][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.652510][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.676392][ T8502] hub 8-0:1.0: USB hub found [ 456.681453][ T8502] hub 8-0:1.0: 1 port detected [ 456.689781][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.740055][ T8054] device veth0_vlan entered promiscuous mode [ 456.818754][ T8054] device veth1_vlan entered promiscuous mode [ 456.914259][ T8502] netlink: 44 bytes leftover after parsing attributes in process `syz.7.936'. [ 456.939135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 456.970243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 457.060102][ T8509] loop3: detected capacity change from 0 to 256 [ 457.418498][ T8054] device veth0_macvtap entered promiscuous mode [ 457.580973][ T8054] device veth1_macvtap entered promiscuous mode [ 457.813185][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.840873][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.899781][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.930420][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.951392][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.969413][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 457.985930][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.088447][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.163866][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.197440][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.224831][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.251761][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.269282][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.305586][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.334718][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.354130][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.006924][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.048570][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.061115][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.138848][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.170012][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.205351][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.248601][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.343321][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.392790][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.465594][ T8539] loop0: detected capacity change from 0 to 1024 [ 460.477475][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.494165][ T8541] hub 8-0:1.0: USB hub found [ 460.500170][ T8541] hub 8-0:1.0: 1 port detected [ 460.515798][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.566881][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.597594][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.644419][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.690710][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.740024][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.881777][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.977280][ T8054] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.988829][ T8054] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.999587][ T8054] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.009833][ T8054] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.235673][ T8539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 461.267605][ T8539] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 461.293114][ T8541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.946'. [ 461.328563][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.352129][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.381129][ T8539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 461.458925][ T8539] System zones: 0-1, 3-36 [ 461.513089][ T8539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 461.665290][ T8553] loop3: detected capacity change from 0 to 256 [ 461.700504][ T26] audit: type=1800 audit(1789512957.758:14): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.947" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 461.755239][ T6469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.831136][ T6469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.106208][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 462.304986][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.341474][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.456995][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 462.533100][ T7801] EXT4-fs (loop0): unmounting filesystem. [ 462.554105][ T8558] overlayfs: missing 'lowerdir' [ 463.393705][ T8578] Console: switching to colour VGA+ 80x25 [ 463.464074][ T8578] Console: switching to colour frame buffer device 128x48 [ 463.639945][ T8589] hub 8-0:1.0: USB hub found [ 463.644923][ T8589] hub 8-0:1.0: 1 port detected [ 463.652344][ T8589] netlink: 44 bytes leftover after parsing attributes in process `syz.0.959'. [ 464.326796][ T8598] loop7: detected capacity change from 0 to 1024 [ 464.373434][ T8598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.402467][ T8598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 464.467778][ T8598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 464.512423][ T8598] System zones: 0-1, 3-36 [ 464.566819][ T8610] FAULT_INJECTION: forcing a failure. [ 464.566819][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 464.589772][ T8598] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 464.598970][ T8610] CPU: 0 PID: 8610 Comm: syz.1.965 Not tainted syzkaller #0 [ 464.606304][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 464.616406][ T8610] Call Trace: [ 464.619722][ T8610] [ 464.622692][ T8610] dump_stack_lvl+0x188/0x24e [ 464.627413][ T8610] ? show_regs_print_info+0x12/0x12 [ 464.632648][ T8610] ? load_image+0x410/0x410 [ 464.637189][ T8610] ? __might_sleep+0xd0/0xd0 [ 464.641812][ T8610] ? __lock_acquire+0x7c40/0x7c40 [ 464.646900][ T8610] should_fail_ex+0x390/0x4c0 [ 464.651647][ T8610] should_failslab+0x5/0x20 [ 464.656203][ T8610] slab_pre_alloc_hook+0x59/0x300 [ 464.661289][ T8610] kmem_cache_alloc_lru+0x49/0x2e0 [ 464.666453][ T8610] ? proc_alloc_inode+0x26/0xb0 [ 464.671381][ T8610] proc_alloc_inode+0x26/0xb0 [ 464.676115][ T8610] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 464.682499][ T8610] new_inode_pseudo+0x5f/0x1c0 [ 464.687458][ T8610] new_inode+0x25/0x1d0 [ 464.691689][ T8610] proc_setup_self+0xbf/0x2d0 [ 464.696425][ T8610] ? _raw_spin_unlock+0x24/0x40 [ 464.701417][ T8610] proc_fill_super+0x4ea/0x730 [ 464.706228][ T8610] ? proc_reconfigure+0x370/0x370 [ 464.711282][ T8610] get_tree_nodev+0xb0/0x160 [ 464.715908][ T8610] vfs_get_tree+0x88/0x270 [ 464.720356][ T8610] do_new_mount+0x247/0xa40 [ 464.724900][ T8610] __se_sys_mount+0x2e3/0x3d0 [ 464.729625][ T8610] ? __x64_sys_mount+0xc0/0xc0 [ 464.734431][ T8610] ? lockdep_hardirqs_on+0x94/0x140 [ 464.739666][ T8610] ? __x64_sys_mount+0x1c/0xc0 [ 464.744461][ T8610] do_syscall_64+0x4c/0xa0 [ 464.748912][ T8610] ? clear_bhb_loop+0x60/0xb0 [ 464.753619][ T8610] ? clear_bhb_loop+0x60/0xb0 [ 464.758331][ T8610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.764279][ T8610] RIP: 0033:0x7fbd8179e159 [ 464.768726][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.788397][ T8610] RSP: 002b:00007fbd8266c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.796843][ T8610] RAX: ffffffffffffffda RBX: 00007fbd81a25fa0 RCX: 00007fbd8179e159 [ 464.804867][ T8610] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 464.812870][ T8610] RBP: 00007fbd8183506b R08: 0000000000000000 R09: 0000000000000000 [ 464.820874][ T8610] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 464.828877][ T8610] R13: 00007fbd81a26038 R14: 00007fbd81a25fa0 R15: 00007ffcbcef1868 [ 464.836893][ T8610] [ 464.839963][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.908407][ T8610] proc_fill_super: can't allocate /proc/self [ 464.922029][ T26] audit: type=1800 audit(1789512960.978:15): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.963" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 465.173615][ T8619] loop0: detected capacity change from 0 to 256 [ 465.981352][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 466.323246][ T8626] overlayfs: missing 'lowerdir' [ 466.727476][ T8643] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 466.738915][ T8643] loop3: detected capacity change from 0 to 128 [ 467.013166][ T8650] Console: switching to colour VGA+ 80x25 [ 467.080862][ T8650] Console: switching to colour frame buffer device 128x48 [ 467.149413][ T8643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 467.158534][ T8643] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 467.190070][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.861959][ T8659] hub 8-0:1.0: USB hub found [ 467.868038][ T8659] hub 8-0:1.0: 1 port detected [ 467.899376][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.978'. [ 468.812449][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 470.011152][ T8672] loop1: detected capacity change from 0 to 1024 [ 470.085767][ T8672] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 470.121812][ T8672] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 470.198097][ T8672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 470.219331][ T8672] System zones: 0-1, 3-36 [ 470.239999][ T8672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.379585][ T26] audit: type=1800 audit(1789512966.438:16): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.982" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 471.498907][ T8700] trusted_key: encrypted_key: key user:syz not found [ 471.614169][ T8700] loop3: detected capacity change from 0 to 128 [ 472.907355][ T7885] EXT4-fs (loop1): unmounting filesystem. [ 473.030549][ T8716] hub 8-0:1.0: USB hub found [ 473.036979][ T8716] hub 8-0:1.0: 1 port detected [ 473.045411][ T8716] netlink: 44 bytes leftover after parsing attributes in process `syz.9.992'. [ 473.416272][ T8720] loop7: detected capacity change from 0 to 512 [ 474.081586][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.995'. [ 476.307641][ T8762] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1001'. [ 477.198816][ T8770] Console: switching to colour VGA+ 80x25 [ 477.268956][ T8770] Console: switching to colour frame buffer device 128x48 [ 478.206968][ T8791] hub 8-0:1.0: USB hub found [ 478.312396][ T8791] hub 8-0:1.0: 1 port detected [ 478.350122][ T8797] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1006'. [ 478.448759][ T8800] FAULT_INJECTION: forcing a failure. [ 478.448759][ T8800] name fail_futex, interval 1, probability 0, space 0, times 1 [ 478.493315][ T8800] CPU: 0 PID: 8800 Comm: syz.3.1011 Not tainted syzkaller #0 [ 478.500786][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 478.510975][ T8800] Call Trace: [ 478.514291][ T8800] [ 478.517258][ T8800] dump_stack_lvl+0x188/0x24e [ 478.521993][ T8800] ? show_regs_print_info+0x12/0x12 [ 478.527241][ T8800] ? load_image+0x410/0x410 [ 478.531820][ T8800] should_fail_ex+0x390/0x4c0 [ 478.536557][ T8800] get_futex_key+0x1b1/0x1000 [ 478.541361][ T8800] ? futex_unqueue+0xc7/0xf0 [ 478.546005][ T8800] ? futex_setup_timer+0xc0/0xc0 [ 478.550995][ T8800] futex_wake+0x123/0x4f0 [ 478.555373][ T8800] ? __fdget+0x18e/0x200 [ 478.559674][ T8800] ? do_recvmmsg+0x19e/0x810 [ 478.564465][ T8800] ? futex_wake_mark+0x150/0x150 [ 478.569455][ T8800] ? do_recvmmsg+0x21f/0x810 [ 478.574278][ T8800] ? file_end_write+0x156/0x250 [ 478.579259][ T8800] ? __sys_recvmmsg+0x290/0x290 [ 478.584152][ T8800] ? vfs_write+0x777/0x9a0 [ 478.588640][ T8800] do_futex+0x2e2/0x320 [ 478.592845][ T8800] ? __ia32_sys_get_robust_list+0x100/0x100 [ 478.598832][ T8800] __se_sys_futex+0x381/0x410 [ 478.603560][ T8800] ? __x64_sys_futex+0xf0/0xf0 [ 478.608376][ T8800] ? __x64_sys_futex+0x1d/0xf0 [ 478.613203][ T8800] do_syscall_64+0x4c/0xa0 [ 478.617687][ T8800] ? clear_bhb_loop+0x60/0xb0 [ 478.622416][ T8800] ? clear_bhb_loop+0x60/0xb0 [ 478.627141][ T8800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.633103][ T8800] RIP: 0033:0x7f7226b9e159 [ 478.637562][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.657227][ T8800] RSP: 002b:00007f7227a750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 478.665709][ T8800] RAX: ffffffffffffffda RBX: 00007f7226e25fa8 RCX: 00007f7226b9e159 [ 478.673731][ T8800] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7226e25fac [ 478.681772][ T8800] RBP: 00007f7226e25fa0 R08: 0017ca0089a74d16 R09: 0000000000000000 [ 478.689801][ T8800] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 478.697826][ T8800] R13: 00007f7226e26038 R14: 00007ffdc10080b0 R15: 00007ffdc1008198 [ 478.705880][ T8800] [ 482.344809][ T8837] Console: switching to colour VGA+ 80x25 [ 482.356147][ T8839] FAULT_INJECTION: forcing a failure. [ 482.356147][ T8839] name fail_futex, interval 1, probability 0, space 0, times 0 [ 482.356180][ T8839] CPU: 0 PID: 8839 Comm: syz.3.1023 Not tainted syzkaller #0 [ 482.356202][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 482.356217][ T8839] Call Trace: [ 482.356225][ T8839] [ 482.356234][ T8839] dump_stack_lvl+0x188/0x24e [ 482.356266][ T8839] ? show_regs_print_info+0x12/0x12 [ 482.356291][ T8839] ? load_image+0x410/0x410 [ 482.356336][ T8839] should_fail_ex+0x390/0x4c0 [ 482.356375][ T8839] get_futex_key+0x1b1/0x1000 [ 482.356397][ T8839] ? futex_unqueue+0xc7/0xf0 [ 482.356424][ T8839] ? futex_setup_timer+0xc0/0xc0 [ 482.356455][ T8839] futex_wake+0x123/0x4f0 [ 482.356479][ T8839] ? __fdget+0x18e/0x200 [ 482.356510][ T8839] ? do_recvmmsg+0x19e/0x810 [ 482.356536][ T8839] ? futex_wake_mark+0x150/0x150 [ 482.356558][ T8839] ? do_recvmmsg+0x21f/0x810 [ 482.356586][ T8839] ? file_end_write+0x156/0x250 [ 482.356619][ T8839] ? __sys_recvmmsg+0x290/0x290 [ 482.356640][ T8839] ? vfs_write+0x777/0x9a0 [ 482.356675][ T8839] do_futex+0x2e2/0x320 [ 482.356703][ T8839] ? __ia32_sys_get_robust_list+0x100/0x100 [ 482.356735][ T8839] __se_sys_futex+0x381/0x410 [ 482.356764][ T8839] ? __x64_sys_futex+0xf0/0xf0 [ 482.356792][ T8839] ? __x64_sys_futex+0x1d/0xf0 [ 482.356817][ T8839] do_syscall_64+0x4c/0xa0 [ 482.356839][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 482.356860][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 482.356884][ T8839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.356919][ T8839] RIP: 0033:0x7f7226b9e159 [ 482.356946][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.356966][ T8839] RSP: 002b:00007f7227a750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.356990][ T8839] RAX: ffffffffffffffda RBX: 00007f7226e25fa8 RCX: 00007f7226b9e159 [ 482.357007][ T8839] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7226e25fac [ 482.357021][ T8839] RBP: 00007f7226e25fa0 R08: 0011d41fd1d94cba R09: 0000000000000000 [ 482.357037][ T8839] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 482.357052][ T8839] R13: 00007f7226e26038 R14: 00007ffdc10080b0 R15: 00007ffdc1008198 [ 482.357082][ T8839] [ 482.415162][ T8837] Console: switching to colour frame buffer device 128x48 [ 482.888787][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.904644][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.913645][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.922284][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.930270][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 482.937645][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.067095][ T8852] vhci_hcd vhci_hcd.0: failed to lookup sock [ 485.039473][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 485.882381][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 486.054640][ T6461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.149256][ T8890] hub 8-0:1.0: USB hub found [ 486.219793][ T8890] hub 8-0:1.0: 1 port detected [ 486.331113][ T6461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.402735][ T8900] hub 8-0:1.0: USB hub found [ 486.407633][ T8900] hub 8-0:1.0: 1 port detected [ 486.519540][ T8893] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1033'. [ 486.530598][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1038'. [ 486.724974][ T8900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1037'. [ 486.836583][ T6461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.101518][ T6461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.118135][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 487.135588][ T8908] Console: switching to colour VGA+ 80x25 [ 487.182228][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.182296][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.184439][ T8844] device bridge_slave_0 entered promiscuous mode [ 487.186569][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.186632][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.187725][ T8844] device bridge_slave_1 entered promiscuous mode [ 487.199317][ T8908] Console: switching to colour frame buffer device 128x48 [ 487.343116][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.406153][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.692176][ T8844] team0: Port device team_slave_0 added [ 487.711262][ T8919] loop3: detected capacity change from 0 to 1024 [ 488.025726][ T8919] EXT4-fs: test_dummy_encryption requires encrypt feature [ 488.183172][ T8844] team0: Port device team_slave_1 added [ 488.510353][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.552227][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.578175][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.546473][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 489.685746][ T8929] loop3: detected capacity change from 0 to 256 [ 489.769544][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.782430][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.920940][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.146198][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.556924][ T8844] device hsr_slave_0 entered promiscuous mode [ 490.628731][ T8844] device hsr_slave_1 entered promiscuous mode [ 491.329716][ T8960] hub 8-0:1.0: USB hub found [ 491.334640][ T8960] hub 8-0:1.0: 1 port detected [ 491.603848][ T8960] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1050'. [ 492.242916][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 493.274311][ T8985] Console: switching to colour VGA+ 80x25 [ 493.419479][ T8994] hub 8-0:1.0: USB hub found [ 493.419930][ T8994] hub 8-0:1.0: 1 port detected [ 493.480038][ T8989] Console: switching to colour frame buffer device 128x48 [ 493.489908][ T8994] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1059'. [ 493.564944][ T6461] device hsr_slave_0 left promiscuous mode [ 493.565532][ T6461] device hsr_slave_1 left promiscuous mode [ 493.570709][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.570758][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.571562][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.571596][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.572222][ T6461] device bridge_slave_1 left promiscuous mode [ 493.572373][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.574138][ T6461] device bridge_slave_0 left promiscuous mode [ 493.574286][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.585039][ T4349] usb 1-1: USB disconnect, device number 5 [ 493.585986][ T4349] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 493.683524][ T6461] device veth1_macvtap left promiscuous mode [ 493.683632][ T6461] device veth0_macvtap left promiscuous mode [ 493.683760][ T6461] device veth1_vlan left promiscuous mode [ 493.683860][ T6461] device veth0_vlan left promiscuous mode [ 495.857691][ T9027] hub 8-0:1.0: USB hub found [ 495.862872][ T9027] hub 8-0:1.0: 1 port detected [ 497.008279][ T9047] loop9: detected capacity change from 0 to 1024 [ 497.053534][ T6461] team0 (unregistering): Port device team_slave_1 removed [ 497.158703][ T6461] team0 (unregistering): Port device team_slave_0 removed [ 497.169366][ T9047] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 497.176240][ T9047] hfsplus: xattr search failed [ 497.219080][ T9047] hfsplus: b-tree write err: -5, ino 2 [ 497.274554][ T6461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.345811][ T11] hfsplus: b-tree write err: -5, ino 25 [ 497.373457][ T6461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.543462][ T11] hfsplus: b-tree write err: -5, ino 4 [ 497.549426][ T11] hfsplus: b-tree write err: -5, ino 2 [ 498.402331][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 498.635872][ T9065] hub 8-0:1.0: USB hub found [ 498.641739][ T9065] hub 8-0:1.0: 1 port detected [ 499.590172][ T6461] bond0 (unregistering): Released all slaves [ 499.770756][ T9027] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1064'. [ 499.826563][ T9065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1077'. [ 499.920412][ T8844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.990713][ T8844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.058408][ T8844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.128429][ T8844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.412386][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.491469][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.548715][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.557281][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.607288][ T9095] loop1: detected capacity change from 0 to 1024 [ 500.612848][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.642975][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.689633][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.696852][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.768982][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.838171][ T9095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 500.873831][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.070436][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.077680][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.440862][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.447277][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.518187][ T26] audit: type=1804 audit(1789512997.518:17): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1087" name="/newroot/38/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 501.552685][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.594493][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.681044][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 501.699677][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 501.732077][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 501.763616][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 501.818904][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 501.856310][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 501.880825][ T7885] EXT4-fs (loop1): unmounting filesystem. [ 501.907187][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 501.951796][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.999061][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.052247][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.096962][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.463392][ T4292] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 503.008481][ T9129] hub 8-0:1.0: USB hub found [ 503.059744][ T9125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1092'. [ 503.096201][ T9129] hub 8-0:1.0: 1 port detected [ 504.307356][ T9145] loop7: detected capacity change from 0 to 512 [ 504.442670][ T9145] EXT4-fs (loop7): 1 truncate cleaned up [ 504.488139][ T9145] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 504.579186][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.617292][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.644324][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.668666][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 506.148790][ T9183] syz.9.1107 (9183): drop_caches: 2 [ 506.996976][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 507.568904][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 507.632279][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 507.647079][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 507.698459][ T8844] device veth0_vlan entered promiscuous mode [ 507.714876][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.786279][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 507.806976][ T8844] device veth1_vlan entered promiscuous mode [ 507.924369][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 507.987592][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 508.012945][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 508.041765][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 508.072383][ T8844] device veth0_macvtap entered promiscuous mode [ 508.109940][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 508.123527][ T8844] device veth1_macvtap entered promiscuous mode [ 508.173639][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.223104][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.275219][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.307637][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.335761][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.365579][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.395316][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.425876][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.454087][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.477337][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.505098][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.528038][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.572313][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.599853][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.616454][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.650396][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.680030][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.712769][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.749129][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.770979][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.786690][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.813122][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.843529][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.875391][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.927608][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.979189][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.056577][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.068481][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.084317][ T9224] loop3: detected capacity change from 0 to 128 [ 509.094277][ T9224] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 509.107136][ T9224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.139577][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.163007][ T26] audit: type=1800 audit(1789513005.218:18): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1119" name="file1" dev="loop3" ino=89 res=0 errno=0 [ 509.310168][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 509.328771][ T8844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.388052][ T8844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.396837][ T8844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.451211][ T8844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.698291][ T6471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.709044][ T6471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.190089][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 511.231889][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.257907][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.288170][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.443160][ T9245] hub 8-0:1.0: USB hub found [ 511.449139][ T9245] hub 8-0:1.0: 1 port detected [ 513.100449][ T9266] loop7: detected capacity change from 0 to 1024 [ 513.158602][ T9266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 513.200264][ T9266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 513.258944][ T9266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 513.284920][ T9266] System zones: 0-1, 3-36 [ 513.378541][ T9266] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 513.490952][ T26] audit: type=1800 audit(1789513009.548:19): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1130" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 513.999822][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 514.332803][ T9300] hub 8-0:1.0: USB hub found [ 514.338298][ T9300] hub 8-0:1.0: 1 port detected [ 515.372603][ T9306] Console: switching to colour VGA+ 80x25 [ 515.444186][ T9306] Console: switching to colour frame buffer device 128x48 [ 516.017355][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 516.026386][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1141'. [ 517.131214][ T9327] binder: BINDER_SET_CONTEXT_MGR already set [ 517.137850][ T9327] binder: 9325:9327 ioctl 4018620d 200000004a80 returned -16 [ 517.804371][ T9351] syz.1.1150 (9351): drop_caches: 2 [ 518.284528][ T9345] input: syz1 as /devices/virtual/input/input5 [ 518.774629][ T9359] Console: switching to colour VGA+ 80x25 [ 518.842583][ T9359] Console: switching to colour frame buffer device 128x48 [ 520.582788][ T9390] binder: 9387:9390 ioctl c0306201 0 returned -14 [ 520.804050][ T9402] syz.7.1162 (9402): drop_caches: 2 [ 521.493603][ T9416] Console: switching to colour VGA+ 80x25 [ 521.558795][ T9416] Console: switching to colour frame buffer device 128x48 [ 526.614017][ T9478] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 526.692796][ T9478] loop7: detected capacity change from 0 to 128 [ 526.918780][ T9478] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 527.016155][ T9478] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 529.146991][ T9517] syz.9.1193 (9517): drop_caches: 2 [ 529.468079][ T4292] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 530.048490][ T9534] loop4: detected capacity change from 0 to 1024 [ 530.137990][ T9534] EXT4-fs: test_dummy_encryption requires encrypt feature [ 530.432112][ T9538] loop4: detected capacity change from 0 to 256 [ 532.263442][ T9557] loop4: detected capacity change from 0 to 1024 [ 534.019396][ T9575] loop4: detected capacity change from 0 to 256 [ 534.026623][ T9575] exfat: Deprecated parameter 'utf8' [ 534.032137][ T9575] exfat: Deprecated parameter 'namecase' [ 534.239063][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 534.289470][ T9575] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 534.350838][ T9575] process 'syz.4.1210' launched './file0' with NULL argv: empty string added [ 535.909558][ T9589] loop3: detected capacity change from 0 to 1024 [ 535.976596][ T9589] EXT4-fs: test_dummy_encryption requires encrypt feature [ 536.273496][ T9597] loop3: detected capacity change from 0 to 256 [ 536.394693][ T9596] syz.9.1215 (9596): drop_caches: 2 [ 538.118785][ T9618] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 538.157797][ T49] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15 [ 538.885691][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 539.086873][ T7536] EXT4-fs (loop7): unmounting filesystem. [ 540.252907][ T9655] hub 8-0:1.0: USB hub found [ 540.258838][ T9655] hub 8-0:1.0: 1 port detected [ 541.269767][ T9677] syz.4.1237 (9677): drop_caches: 2 [ 543.290865][ T9694] loop1: detected capacity change from 0 to 128 [ 543.466110][ T9694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 543.631562][ T9694] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 543.736275][ T9716] loop7: detected capacity change from 0 to 1024 [ 543.756527][ T9716] EXT4-fs: test_dummy_encryption requires encrypt feature [ 544.092820][ T9719] loop7: detected capacity change from 0 to 256 [ 544.478082][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 545.022036][ T9739] loop4: detected capacity change from 0 to 1024 [ 547.311389][ T9758] loop7: detected capacity change from 0 to 256 [ 547.338395][ T9761] loop9: detected capacity change from 0 to 8 [ 547.376749][ T9758] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 547.387705][ T9761] SQUASHFS error: Unable to read directory block [1d0:26] [ 547.529126][ T9767] hub 8-0:1.0: USB hub found [ 547.534280][ T9767] hub 8-0:1.0: 1 port detected [ 547.544442][ T9767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1256'. [ 548.743297][ T9773] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1259'. [ 550.871974][ T9819] loop3: detected capacity change from 0 to 4096 [ 550.936420][ T9819] EXT4-fs (loop3): Test dummy encryption mode enabled [ 550.958496][ T9822] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1271'. [ 550.996286][ T9819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 551.240727][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 551.333292][ T9834] hub 8-0:1.0: USB hub found [ 551.339138][ T9834] hub 8-0:1.0: 1 port detected [ 551.346136][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1272'. [ 551.880832][ T9843] loop9: detected capacity change from 0 to 512 [ 554.754155][ T4292] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 554.931380][ T9867] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1283'. [ 556.555691][ T9894] hub 8-0:1.0: USB hub found [ 556.560747][ T9894] hub 8-0:1.0: 1 port detected [ 556.569217][ T9894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1289'. [ 556.589664][ T7885] EXT4-fs (loop1): unmounting filesystem. [ 556.670202][ T9888] loop3: detected capacity change from 0 to 1024 [ 558.849735][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 559.021387][ T9909] loop1: detected capacity change from 0 to 16 [ 559.071507][ T9909] erofs: (device loop1): mounted with root inode @ nid 36. [ 559.088907][ T9909] syz.1.1291: attempt to access beyond end of device [ 559.088907][ T9909] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 559.105150][ T9909] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 559.121625][ T26] audit: type=1800 audit(1789513055.168:20): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1291" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 562.672298][ T9936] loop3: detected capacity change from 0 to 128 [ 562.688503][ T9942] loop4: detected capacity change from 0 to 256 [ 562.776407][ T9942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 562.834086][ T9936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 562.864279][ T9936] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 562.900947][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.928447][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.699317][ T9962] loop4: detected capacity change from 0 to 1024 [ 565.749727][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1308'. [ 565.765215][ T9962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 565.828125][ T9962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 565.878798][ T9962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 565.887145][ T9962] System zones: 0-1, 3-36 [ 566.036185][ T9962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 566.156962][ T26] audit: type=1800 audit(1789513062.208:21): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1306" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 566.545888][ T8844] EXT4-fs (loop4): unmounting filesystem. [ 570.216381][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1319'. [ 570.716013][T10019] dns_resolver: Unsupported content type (6) [ 571.218665][T10024] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1320'. [ 572.250511][T10039] loop4: detected capacity change from 0 to 512 [ 572.370793][ T9108] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 575.742367][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 576.268306][T10068] hub 8-0:1.0: USB hub found [ 576.275394][T10068] hub 8-0:1.0: 1 port detected [ 576.291892][T10065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1333'. [ 577.172481][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 577.232472][ T4292] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 579.147507][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1343'. [ 579.379980][T10099] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 579.448936][T10101] loop4: detected capacity change from 0 to 512 [ 580.041017][T10108] Console: switching to colour VGA+ 80x25 [ 580.110757][T10108] Console: switching to colour frame buffer device 128x48 [ 580.545178][T10111] loop7: detected capacity change from 0 to 512 [ 580.840855][T10118] hub 8-0:1.0: USB hub found [ 580.891226][T10118] hub 8-0:1.0: 1 port detected [ 581.100311][T10121] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 581.111914][T10121] loop3: detected capacity change from 0 to 128 [ 582.366964][T10121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 582.375959][T10121] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 582.589894][T10130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1347'. [ 584.132595][T10136] trusted_key: encrypted_key: insufficient parameters specified [ 585.492988][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 586.072690][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 586.570659][T10158] loop7: detected capacity change from 0 to 256 [ 586.668225][T10158] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 590.181864][T10166] Console: switching to colour VGA+ 80x25 [ 590.252932][T10166] Console: switching to colour frame buffer device 128x48 [ 593.330777][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 595.499344][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'. [ 595.586307][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 596.346446][T10231] loop9: detected capacity change from 0 to 16 [ 596.398927][T10230] hub 8-0:1.0: USB hub found [ 596.421717][T10231] erofs: (device loop9): mounted with root inode @ nid 36. [ 596.559814][T10230] hub 8-0:1.0: 1 port detected [ 596.599390][T10234] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1375'. [ 596.660877][T10237] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 596.672189][T10237] loop1: detected capacity change from 0 to 128 [ 596.892619][T10237] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 596.901938][T10237] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 597.668970][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 600.658431][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'. [ 603.111073][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1390'. [ 603.551384][T10310] loop7: detected capacity change from 0 to 16 [ 603.637968][T10310] erofs: (device loop7): mounted with root inode @ nid 36. [ 603.718027][ T27] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 603.986729][ T27] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 604.098947][ T27] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 604.447942][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.600378][T10314] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 604.825186][T10320] loop3: detected capacity change from 0 to 512 [ 604.864112][T10320] EXT4-fs (loop3): Test dummy encryption mode enabled [ 604.888088][T10320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 604.927479][T10320] EXT4-fs (loop3): 1 truncate cleaned up [ 604.944521][T10320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 604.989011][ T27] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.9-1/input0 [ 605.153941][T10327] EXT4-fs error (device loop3): __ext4_iget:5102: inode #16: block 8: comm syz.3.1395: invalid block [ 605.288149][T10320] loop3: detected capacity change from 512 to 1 [ 605.507691][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.747653][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.008825][ T7723] EXT4-fs (loop3): unmounting filesystem. [ 606.049683][ T4292] Bluetooth: hci5: command 0x0406 tx timeout [ 606.060333][ T27] lg-g15 0003:046D:C222.0001: Error getting LED brightness: -71 [ 606.071924][ T7723] syz-executor: attempt to access beyond end of device [ 606.071924][ T7723] loop3: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 606.088087][ T27] lg-g15: probe of 0003:046D:C222.0001 failed with error -71 [ 606.098952][ T7723] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 606.107287][ T7723] EXT4-fs (loop3): I/O error while writing superblock [ 606.117014][ T27] usb 10-1: USB disconnect, device number 3 [ 606.410304][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 606.470337][T10334] fido_id[10334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 606.545396][T10345] hub 8-0:1.0: USB hub found [ 606.568892][T10345] hub 8-0:1.0: 1 port detected [ 606.656704][T10345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1399'. [ 607.200854][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1401'. [ 610.109629][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.151877][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.161170][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.170714][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.178609][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 610.188278][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.260610][T10233] EXT4-fs (loop1): unmounting filesystem. [ 610.541836][T10384] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 610.606047][ T4292] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 610.943080][T10390] loop4: detected capacity change from 0 to 1024 [ 611.014355][T10372] chnl_net:caif_netlink_parms(): no params data found [ 611.029499][T10390] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 611.092179][T10390] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 611.353404][T10390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 611.437489][T10390] System zones: 0-1, 3-36 [ 611.710763][T10390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 611.860659][ T26] audit: type=1800 audit(1789513107.868:22): pid=10390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1408" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 612.119736][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1410'. [ 612.180370][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.187638][T10372] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.227171][T10372] device bridge_slave_0 entered promiscuous mode [ 612.248556][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 612.260170][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.272005][T10372] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.280407][T10372] device bridge_slave_1 entered promiscuous mode [ 612.319079][T10372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.340926][T10372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.427552][T10372] team0: Port device team_slave_0 added [ 612.457910][T10372] team0: Port device team_slave_1 added [ 612.523851][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1412'. [ 612.551354][T10372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.582994][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.680370][T10372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.719156][T10372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.748485][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.838913][T10372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.989081][T10372] device hsr_slave_0 entered promiscuous mode [ 613.031644][T10372] device hsr_slave_1 entered promiscuous mode [ 613.062874][T10372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.090320][T10372] Cannot create hsr debugfs directory [ 614.318303][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 615.147451][T10443] loop9: detected capacity change from 0 to 16 [ 615.167079][T10443] erofs: (device loop9): mounted with root inode @ nid 36. [ 615.178363][T10443] syz.9.1419: attempt to access beyond end of device [ 615.178363][T10443] loop9: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 615.228198][T10443] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 615.239643][ T26] audit: type=1800 audit(1789513111.298:23): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1419" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 615.851647][T10372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 615.908592][T10372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 615.999921][T10372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.039696][T10372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 616.075076][ T8844] EXT4-fs (loop4): unmounting filesystem. [ 616.119387][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1423'. [ 616.384338][T10458] loop4: detected capacity change from 0 to 128 [ 616.401573][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 616.411396][T10458] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 616.440078][T10372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.455583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 616.533179][ T9108] udevd[9108]: incorrect ext4 checksum on /dev/loop4 [ 616.650313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 616.662083][T10372] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.680727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 616.698153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.706972][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.714179][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.726881][T10469] loop3: detected capacity change from 0 to 2048 [ 617.796696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.827710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.840948][T10469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.992325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.055193][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.062468][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.137714][T10479] loop4: detected capacity change from 0 to 16 [ 618.332894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.443309][T10479] erofs: (device loop4): mounted with root inode @ nid 36. [ 618.452788][T10479] syz.4.1430: attempt to access beyond end of device [ 618.452788][T10479] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 618.482848][T10479] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 618.548437][ T26] audit: type=1800 audit(1789513114.548:24): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1430" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 618.828156][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 618.839690][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.863894][T10482] syz.7.1431 (10482): drop_caches: 2 [ 618.893295][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.961831][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.989401][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.006273][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.017147][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.033365][T10488] loop4: detected capacity change from 0 to 512 [ 619.041187][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.092163][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.103905][T10488] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.1433: missing EA_INODE flag [ 619.123453][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.133487][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.143981][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.219686][T10488] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1433: error while reading EA inode 2 err=-117 [ 619.318448][T10488] EXT4-fs (loop4): 1 orphan inode deleted [ 619.335496][T10488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 619.685873][ T8844] EXT4-fs (loop4): unmounting filesystem. [ 725.657835][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 725.664957][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10506/1:b..l [ 725.673613][ C1] (detected by 1, t=10502 jiffies, g=59297, q=490 ncpus=2) [ 725.680950][ C1] task:syz.7.1437 state:R running task stack:26224 pid:10506 ppid:7536 flags:0x00004002 [ 725.693181][ C1] Call Trace: [ 725.696514][ C1] [ 725.699489][ C1] __schedule+0x107f/0x4030 [ 725.704091][ C1] ? release_firmware_map_entry+0x187/0x187 [ 725.710035][ C1] ? lock_chain_count+0x20/0x20 [ 725.714945][ C1] ? mark_lock+0x94/0x320 [ 725.719336][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 725.724682][ C1] preempt_schedule_irq+0xbb/0x160 [ 725.729850][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 725.735631][ C1] ? rcu_is_watching+0x11/0xa0 [ 725.740567][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 725.746441][ C1] irqentry_exit+0x63/0x70 [ 725.750911][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 725.756938][ C1] RIP: 0010:stack_trace_consume_entry+0x7/0x270 [ 725.763330][ C1] Code: 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 51 ae c1 08 90 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c [ 725.783088][ C1] RSP: 0018:ffffc90003436f00 EFLAGS: 00000286 [ 725.789205][ C1] RAX: ffffffff81b13971 RBX: ffffc90003436fe0 RCX: 0000000080000000 [ 725.797229][ C1] RDX: ffffc90003436f01 RSI: ffffffff81b13971 RDI: ffffc90003436fe0 [ 725.805250][ C1] RBP: ffffc90003436fb0 R08: ffffc900034372d0 R09: ffffc90003436f78 [ 725.813271][ C1] R10: dffffc0000000000 R11: fffff52000686df1 R12: ffff888066ea3c00 [ 725.821292][ C1] R13: 1ffff1100cdd482e R14: ffffffff8170da00 R15: ffffc90003436f28 [ 725.829309][ C1] ? stack_trace_save+0xf0/0xf0 [ 725.834268][ C1] ? release_pages+0x20d1/0x2340 [ 725.839373][ C1] ? release_pages+0x20d1/0x2340 [ 725.844386][ C1] ? stack_trace_save+0xf0/0xf0 [ 725.849313][ C1] arch_stack_walk+0x100/0x140 [ 725.854200][ C1] ? release_pages+0x20d1/0x2340 [ 725.859204][ C1] stack_trace_save+0xa6/0xf0 [ 725.863931][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 725.869103][ C1] ? mark_lock+0x94/0x320 [ 725.873511][ C1] save_stack+0x121/0x230 [ 725.878000][ C1] ? __reset_page_owner+0x190/0x190 [ 725.883260][ C1] ? free_unref_page_prepare+0x8e5/0x9e0 [ 725.889038][ C1] ? free_unref_page_list+0xbb/0x8e0 [ 725.894399][ C1] ? page_ext_get+0x1de/0x2a0 [ 725.899130][ C1] __reset_page_owner+0x51/0x190 [ 725.904124][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 725.909656][ C1] free_unref_page_list+0xbb/0x8e0 [ 725.914829][ C1] release_pages+0x20d1/0x2340 [ 725.919668][ C1] ? lru_cache_disable+0x30/0x30 [ 725.924658][ C1] ? mlock_page_drain_local+0x75/0x490 [ 725.930232][ C1] ? free_swap_cache+0x15d/0x5c0 [ 725.935234][ C1] tlb_flush_mmu+0x105/0x220 [ 725.939887][ C1] unmap_page_range+0x2037/0x25b0 [ 725.944997][ C1] unmap_vmas+0x260/0x390 [ 725.949394][ C1] ? unmap_vmas+0x1bd/0x390 [ 725.953957][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 725.959214][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 725.964308][ C1] exit_mmap+0x20d/0x970 [ 725.968620][ C1] ? vm_brk+0x20/0x20 [ 725.972651][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 725.978342][ C1] ? exit_mm+0x23d/0x350 [ 725.982688][ C1] ? uprobe_clear_state+0x274/0x290 [ 725.987975][ C1] __mmput+0x118/0x3a0 [ 725.992090][ C1] exit_mm+0x24d/0x350 [ 725.996213][ C1] ? sysctl_delayacct+0x220/0x220 [ 726.001295][ C1] ? do_exit+0x2570/0x2570 [ 726.005781][ C1] ? tty_audit_exit+0x149/0x1f0 [ 726.010770][ C1] do_exit+0x958/0x2570 [ 726.015002][ C1] ? put_task_struct+0x80/0x80 [ 726.019825][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 726.025863][ C1] ? lock_chain_count+0x20/0x20 [ 726.030769][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 726.035883][ C1] do_group_exit+0x229/0x2e0 [ 726.040536][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 726.045792][ C1] get_signal+0x1259/0x1340 [ 726.050481][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 726.056191][ C1] ? __sys_sendmmsg+0x463/0x510 [ 726.061189][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 726.066270][ C1] ? get_sigframe_size+0x10/0x10 [ 726.071257][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 726.077216][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 726.083264][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 726.088781][ C1] exit_to_user_mode_loop+0x70/0x110 [ 726.094133][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 726.099757][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 726.105267][ C1] do_syscall_64+0x58/0xa0 [ 726.109733][ C1] ? clear_bhb_loop+0x60/0xb0 [ 726.114457][ C1] ? clear_bhb_loop+0x60/0xb0 [ 726.119183][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.125136][ C1] RIP: 0033:0x7f69a8b9e159 [ 726.129593][ C1] RSP: 002b:00007f69a9ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.138139][ C1] RAX: 000000000000000b RBX: 00007f69a8e25fa0 RCX: 00007f69a8b9e159 [ 726.146157][ C1] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 726.154175][ C1] RBP: 00007f69a8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 726.162186][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.170198][ C1] R13: 00007f69a8e26038 R14: 00007f69a8e25fa0 R15: 00007fffa58a7fe8 [ 726.178227][ C1] [ 726.181283][ C1] rcu: rcu_preempt kthread starved for 9525 jiffies! g59297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 726.192433][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 726.202441][ C1] rcu: RCU grace-period kthread stack dump: [ 726.208361][ C1] task:rcu_preempt state:R running task stack:26960 pid:16 ppid:2 flags:0x00004000 [ 726.219200][ C1] Call Trace: [ 726.222521][ C1] [ 726.225510][ C1] __schedule+0x107f/0x4030 [ 726.230079][ C1] ? release_firmware_map_entry+0x187/0x187 [ 726.236032][ C1] schedule+0xb9/0x180 [ 726.240156][ C1] schedule_timeout+0x184/0x2d0 [ 726.245064][ C1] ? console_conditional_schedule+0x40/0x40 [ 726.251105][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 726.257067][ C1] ? update_process_times+0x1b0/0x1b0 [ 726.262496][ C1] ? prepare_to_swait_event+0x340/0x360 [ 726.268109][ C1] rcu_gp_fqs_loop+0x303/0x1350 [ 726.273010][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 726.277906][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 726.284104][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 726.290141][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 726.295217][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 726.300057][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 726.304978][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 726.310229][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 726.315488][ C1] rcu_gp_kthread+0x99/0x3b0 [ 726.320134][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 726.325294][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 726.331260][ C1] ? __kthread_parkme+0x71/0x1c0 [ 726.336362][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 726.341452][ C1] kthread+0x29d/0x330 [ 726.345566][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 726.350728][ C1] ? kthread_blkcg+0xd0/0xd0 [ 726.355359][ C1] ret_from_fork+0x1f/0x30 [ 726.359929][ C1] [ 726.362981][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 726.369337][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 726.376407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 726.386504][ C1] RIP: 0010:default_idle+0xb/0x10 [ 726.391588][ C1] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 726.411238][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 726.417369][ C1] RAX: 86de6e85a7425c00 RBX: ffffffff8a3c8957 RCX: 86de6e85a7425c00 [ 726.425406][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 726.433448][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f357cb R09: 1ffff110171e6af9 [ 726.441473][ C1] R10: dffffc0000000000 R11: ffffed10171e6afa R12: 0000000000000000 [ 726.449485][ C1] R13: dffffc0000000000 R14: ffff888017741e00 R15: 1ffff9200002efc8 [ 726.457508][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 726.466482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.473120][ C1] CR2: 000056200ba41a38 CR3: 000000002fc88000 CR4: 00000000003506e0 [ 726.481140][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 726.489151][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 726.497166][ C1] Call Trace: [ 726.500480][ C1] [ 726.503449][ C1] default_idle_call+0x84/0xc0 [ 726.508278][ C1] do_idle+0x250/0x680 [ 726.512426][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 726.517674][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 726.523900][ C1] ? schedule_idle+0x57/0x90 [ 726.528538][ C1] cpu_startup_entry+0x3f/0x60 [ 726.533356][ C1] start_secondary+0xe4/0xf0 [ 726.538084][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 726.544045][ C1]