last executing test programs: 27m55.860560248s ago: executing program 32 (id=71): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ftruncate(r1, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 27m48.144250671s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x6}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x3, 0x8, 0x1, 0x2, 0x9}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x0) 27m45.204975719s ago: executing program 0 (id=105): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) ftruncate(0xffffffffffffffff, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 27m42.96763604s ago: executing program 0 (id=110): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 27m39.287858751s ago: executing program 0 (id=116): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000000)={{}, 0xc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, 0x0, 0x0) tkill(r0, 0x1c) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) socket$unix(0x1, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, 0x0) socket$igmp(0x2, 0x3, 0x2) 27m32.425463989s ago: executing program 0 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x6}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x3, 0x8, 0x1, 0x2, 0x9}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x0) 27m30.916030431s ago: executing program 0 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4004084) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x7, 0xcb}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8922, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x0, 0x1, 0x0, {0x0, @hdata="ad65c8435d8a74855146175c4823057931ddd8de52215a0cba4b92c305c136df3a767ec61275c88bbeee48cc3ad39e98881843ed", {0x0, @empty, 0x0, 0x3, [0xfffffffc]}, @esp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local, 0x0, 0x0, [0x0, 0x32]}, 0x0, 0xfffffffe}}}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @local}, {0x306, @broadcast}, 0x1c, {0x2, 0x4e23, @private=0xa010100}, 'ip6erspan0\x00'}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000)) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x7eba, 0x14d302) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x100300) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xd4d0a434dfc04f3e}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@setlink={0x48, 0x13, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, [@IFLA_MAP={0x20, 0xe, {0x3, 0x3, 0x1dc, 0x7, 0x7, 0xa}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x495cea99}]}, 0x48}, 0x1, 0x0, 0x0, 0x2008051}, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x9b8}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x6, 0xfffffffe) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) listen(0xffffffffffffffff, 0x8) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e1f, @loopback=0x7f000002}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00007ab000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b7a000/0x4000)=nil, &(0x7f000050e000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f00007cd000/0x2000)=nil, &(0x7f0000000380)="66098143a496e385866f054e0cfb5bd8befca4111d00000000fcc290cdb4640289a7465eccad2f05e71c51fc4b9dfbbaffaf62679b33c7add378a1", 0x3b, r5}, 0x64) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040804000000024e04b6811d2e18b6738058f243d927c6d5f7cd4db9b32808b33875994fae09f248deddb3cd345e9bb9a51a6f32e9ff99611e634fb865424c277921228cbe759845abbc90de554f51a983894fc267fb8c7c1a"], 0x7) creat(&(0x7f0000000280)='./file0\x00', 0xd4) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) 27m15.774136271s ago: executing program 33 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4004084) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x7, 0xcb}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8922, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x0, 0x1, 0x0, {0x0, @hdata="ad65c8435d8a74855146175c4823057931ddd8de52215a0cba4b92c305c136df3a767ec61275c88bbeee48cc3ad39e98881843ed", {0x0, @empty, 0x0, 0x3, [0xfffffffc]}, @esp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local, 0x0, 0x0, [0x0, 0x32]}, 0x0, 0xfffffffe}}}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @local}, {0x306, @broadcast}, 0x1c, {0x2, 0x4e23, @private=0xa010100}, 'ip6erspan0\x00'}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000)) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x7eba, 0x14d302) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x100300) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xd4d0a434dfc04f3e}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@setlink={0x48, 0x13, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, [@IFLA_MAP={0x20, 0xe, {0x3, 0x3, 0x1dc, 0x7, 0x7, 0xa}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x495cea99}]}, 0x48}, 0x1, 0x0, 0x0, 0x2008051}, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x9b8}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x6, 0xfffffffe) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) listen(0xffffffffffffffff, 0x8) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e1f, @loopback=0x7f000002}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00007ab000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b7a000/0x4000)=nil, &(0x7f000050e000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f00007cd000/0x2000)=nil, &(0x7f0000000380)="66098143a496e385866f054e0cfb5bd8befca4111d00000000fcc290cdb4640289a7465eccad2f05e71c51fc4b9dfbbaffaf62679b33c7add378a1", 0x3b, r5}, 0x64) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040804000000024e04b6811d2e18b6738058f243d927c6d5f7cd4db9b32808b33875994fae09f248deddb3cd345e9bb9a51a6f32e9ff99611e634fb865424c277921228cbe759845abbc90de554f51a983894fc267fb8c7c1a"], 0x7) creat(&(0x7f0000000280)='./file0\x00', 0xd4) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) 21m49.534512847s ago: executing program 3 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 21m44.615833084s ago: executing program 3 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{0x0}], 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}], {0x14, 0x10}}, 0x64}}, 0x0) 21m38.284715717s ago: executing program 3 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{0x0}], 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}], {0x14, 0x10}}, 0x64}}, 0x0) 21m35.362006808s ago: executing program 3 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) 21m26.470082831s ago: executing program 3 (id=561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 21m22.534463264s ago: executing program 3 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 21m3.114382005s ago: executing program 34 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 18m56.130858388s ago: executing program 5 (id=681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 18m44.840798083s ago: executing program 5 (id=689): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700000017"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) r7 = syz_open_procfs(0x0, 0x0) lseek(r7, 0x7fffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x89}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 18m40.620532325s ago: executing program 5 (id=692): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$session_to_parent(0x12) 18m39.531335148s ago: executing program 5 (id=694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 18m37.720239242s ago: executing program 5 (id=696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 18m32.469903312s ago: executing program 5 (id=702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) 18m16.35556277s ago: executing program 35 (id=702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) 7m15.921602159s ago: executing program 4 (id=1379): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ftruncate(r1, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 7m13.413368396s ago: executing program 4 (id=1382): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f0000000240)={[{@init_itable}, {@norecovery}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x51d, &(0x7f0000000a40)="$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") ioperm(0x0, 0x7, 0x9) timer_create(0x7, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080), 0x0) io_setup(0x3, &(0x7f0000000180)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) r1 = syz_socket_connect_nvme_tcp() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000400)={{0x3}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)) dup2(0xffffffffffffffff, r3) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000880)=""/53, 0x35}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000008c0)=""/110, 0x6e}, {&(0x7f0000000f80)=""/4083, 0xff3}], 0x9, &(0x7f00000003c0)=""/6, 0x6}, 0xaf5364d0eaa69390) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r4, 0x2ff8) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r5}) r6 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c757466383d312c757466383d302c756e695f786c6174653d302c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c756d61736b3d30303030303030303030303030303030303030303030352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c756e695f786c6174653d312873686f72746e616d653d6d80697865642c726f6469722c646f733178666c6f7070792c756e695f786c6174653d312c696f636861727365743d69736f383835392d392c"], 0x4, 0x2cd, &(0x7f0000000500)="$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") ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000002c0)) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000080)) 7m6.992072668s ago: executing program 4 (id=1391): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) ftruncate(0xffffffffffffffff, 0x10000000000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 7m2.522416747s ago: executing program 4 (id=1398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m59.174104934s ago: executing program 4 (id=1402): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700000017"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) syz_open_procfs(0x0, 0x0) getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) sendmsg$nl_netfilter(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1068, 0xf, 0x1, 0x401, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@nested={0x47, 0x39, 0x0, 0x1, [@generic, @typed={0x6, 0x8b, 0x0, 0x0, @str='[\x00'}, @generic="007e86464945f8aa8789177d8fa21209fd8bc76330f072e47070dbac68faf2df8bf6c9147cbb25ebd6be82c656931e41565514fa28e7bb470b8f66"]}, @generic="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", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}]}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) 6m56.596228457s ago: executing program 4 (id=1407): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r4, 0x3, {0x0, 0x1, 0x3}}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 6m40.596265862s ago: executing program 36 (id=1407): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r4, 0x3, {0x0, 0x1, 0x3}}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 42.246458331s ago: executing program 8 (id=1908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 40.240797357s ago: executing program 8 (id=1913): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700000017"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) r7 = syz_open_procfs(0x0, 0x0) lseek(r7, 0x7fffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) sendmsg$nl_netfilter(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1068, 0xf, 0x1, 0x401, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@nested={0x47, 0x39, 0x0, 0x1, [@generic, @typed={0x6, 0x8b, 0x0, 0x0, @str='[\x00'}, @generic="007e86464945f8aa8789177d8fa21209fd8bc76330f072e47070dbac68faf2df8bf6c9147cbb25ebd6be82c656931e41565514fa28e7bb470b8f66"]}, @generic="9a3d8cf5cfe6a3c3e3d1d18f3409b546a62b2276a09ef8e5c4506bbf705dd44b595b9cddfb94d8898c0517ac2f91777c5f5d662d76cbae8f3f2fada9b22cbcc6b91b3b91a3da3b86ecc90432b51bdcb052ed092a55012862648bf4bcf3d902113b192644a32c1d4cee8e6aed56d8c83d585a4a86d9b72e62998c1fce6a66c956963ac643b21f8dc7bd13516c104ecf699fe4e3be1854d89f6bba7ad1754e45f0386126e830c12f0ee9371ab61b7a587426256fe701560148aca37c787d5aebe745d6a50f7a0253b75605e46caf9f08a4a0bc4bccb886d87fba39680f2fb03063bc1da161ef9a7ff34b75ea3fa7353c487d58c32355983479b252f9cc49e7b35310931953677b5b20a2fc3f3e0b1a5ca4e6fc9cd268116599b8aed19e4f74a0b22f02c92d20bf3049d980db58c926dc69b2042ad94983ad5a02240719c0a7a22a22fdd9c6e5ef176f1f2a18ff66cf8afc818c7af0b1f0305fe12a1a1f82f8772804926cae6a2f80bda851c30c180c3ebdc68d687f60345a88ab79fc279edc76fb6c488534e59202c41adea0662865fd07c506c3dd3ae3a5ffde64885a7f6aaaa3724f08fd76d02ff142e4fa0b76c835dcde8ec7b98092d8b45b0c9dd58a1cba850b865f4a991524ad69b9f0f7dde438245d028a9e5e4312c988475e5474775756bdbac7b7585182cec4853882362ffb0bfa2b7a3c7d2fb13ef819b3e6ec2f20292bf5879210e2bea306b34279dea8673b016f244bfdb7437111093af557461ada2b2c45e2ca1299efb1363e73b059722c7a9232baa0052fa02485e9d64ba9b1d232c680e5fe35596bddc97b9b3802fef73e1d25c1812dfaa7d6863affe0c14625390e814ad754b41430b2b94f29383e1e5327080d4c6314450d13103469ec579819626a631339bde78dc3252bb91558d658d375fb00932242f4c8875293e52cb622019766b7756a91c9e2963d765c1bfc907c795dff9e33937c36a0eee578d970f504d36be59edec642c5faf3ae525a13df560c3802c777be3989885a5da63ace5f23463cbdeb0acfdcd9b36fa244e0f63aa078e00c31f0ee883e56add17c1f336d2114abfeac3d9a7513cfce6145a3464f9add88e9122b6b46822cbfd3ca8fad12a67e9e4d516f9a77f576e9945feaba9676f8fe68a392542819456d24e0bd2e491bf322541ff97b150fc4900c87f22f2bf6ead67e33ae0cbdd696c482eb560e8b58718d3ddd4d9da415c446193d652d21d6e0e95b3ded6cc2015009c4caeb6e201d5529cc7daceec5e96cda5a45560a9c433bb4e7c193c00c95dce6d35b3f7bd331995aeb1702416d0cc7ee221de1ad429df24957e8d44bbbe4021836ed851f8ffd2be48d7f5bdbe44043b9fa2435a0fe5e84349f40268a403eed99d0254dc75b658af1cb048b929cdaf0b1bf5aad00d42201812063ebe934653433da4ce85345429eefb13b2332d2834acc760658fec234da953dd66099a713e85aeb1bcbafccafe5769d0ebf952536790aa30befecaf9d44dce25f1af8e1d549eb60ebb5a8755e2e514fea7257d9609c7c9c1fecb85ac4577151065ef195c9f5b1bf2cb11d24b388fab93dd6b5c00050746dea27577dafa36f44804f5ea7de0b1c8c3417905967b9abfcf52c9ea20075006236f6650053d7f52ffc1ed173aebfb7830b1888d11d293ae9412d718a873014e8d1537e99f9f21b88e5bfd9c8a70ba8af69431bbbc3e7c99d0bfc05fd75332b51750bd947970a7847a1c469eff475aca552bc4f0268c2986d5d27b44d656aa6ae29fba59ad1608a85ed467f5a242d8396ec11d0026c89b8f68af4b5cbcaa3aa90f54978d0bea09d8de5cf9f697372304550774d02969fc0331c9da35ea10796ad452eaa05d9e8e73e15ccf91ead91d7b0deda4e10f6d902c8ed2ff7d19545ec2f41e2f049ed3f3b823fd8fa96300e6df8bc5359d96e6f551d8fa0d304659757f7637300b7023c710de4a81c37ecbf233efc973afdfc4ef1c0b41ac6541dc89f7b77eeae075166214e8f4954b8e86d99e11f653f80f4762c14287734e1383fcb3f753a447fbbf4a76d974eea47204cb2003ee0ded60b862ff8d68363ef8dee25e5149664f29cad43078b78be064e7ef8f53ce32cf69cc0d7f6f48f89525bcfcff2fc5c59923e1ca959011e3349294c3d02eea5ced7332c4ba2882fb38c22124fa1789a536df4b5e0a0cbd6b099cee3d9981515d976fca22d1de9c0b3e0ac2c6d547bf075ac86cb3f005aa6dde24c3ad7bbfa0c8a1090cbb3ebcaa869d30e5f51325edfaf701177fa65b3d6635c06c91f3918952733e7dcf177a572ab7ee0fd857450ba168eb303ad2c7d2947e7edbf8272c21340af9c78da80cd7acd53b1f6632f2ee947d742d83151dbacfc9c9d09298b311f640c35a2b50cc0e622b554650ab9ced7bf03d765c73273190cfdd7e9fff8f0935ff807b6ade4434d0eeb9795ba9c27965d8e797acbb048352a42faa97a59fca5efccab47a93933291bbe7c4fe02eeba1e47fcd91f0d314c60338111252db0b852d77bc7805eb8672a8bb793e340e556c3ec8ca4eb4316161f75b98cbc1b8e494561655be53eb9cd0d425cdf9344fa4ef5c708074eacfe153afa85559d2bf11caf3dd6e1e399d280ef4434cf3e900b7a0a75b701a50a1324a038d0192f53d432ee11cfaca6e845a69a22e00b15914839066e6d3856ad64645db1ef11042d5ec9ebdad2e7337c9ca2188e9ee836cc8a16d19199784b7ef4cc6987be589a742097cf93db044a01e80d37e92e189396b6d2268514c7025f5e4bb7c53c4c25dc60d28b02e732d8357d3471e71942ee1636bf14a613479c3928d6084fbabbbd4b633619459dd6b3b7fcb0e89480a9924f148aaac4032cd95388288e2032c163100932b21d9f5f9a6184a48a73b77dd51c8165004e96c63e69d3971bac8082b3e73ee34434a4ef9478bb5c5508449bdb0d64f4987f2c399c5de645bd722a3c5ef7133d0e5f931576adf5f6ba50b77254bce1c6b5d31fa18783abb5c571e8f8af5d8a58677da87bcbdd8d0e6d725a050336ed7969cd6d2da6a395b0b027011da4a6f295c06628901a25497fa26874b5e65bdc5614a44786d749170a803d424c53f67d52c7da9e44b6f8198b69aa7da36bb0621b9ed0bb5aaaa54f4e430845b00c251019455502e3de8cb67903a5d504936ae8124b66432205a01801b2e0b3117a0a376aba0e7da0ef9900c5ab336f10eea029f7a38d6320ebc172bc8aa265134255611acb7e1e3e8d9561ea53d366836cfffd8532ff93fbd2c193157457e2577d5425b75480b9f194829ea475c525dc2c7660a4cc2bdc41aaa8fc0df074a2dc417ad7b3e1533396dd2f8087f19547284f4db121750b38a212b7ea562a3b71eca0057544ae319aa0003fead6317d05cc4994b45e44e41293cee1f39c74270f0610918032dadf19425c6070a2f31d06a4629ee5e86cc87d673d083a747a37ce01e1e7788b83fb863b10a9c9f64eb4fc70ec6f6087c87eec434eca2cc9b439c3acf74ff3503d5e7d5232f05bd97123036b51546e1677b28d598132e1143ae2b6e921e224d3ed1e4d869ea252208041c8f9ee042118fc5386b91fe4657a5d599c09950f47e99b8e91bd22c3deaaa5a8bb08a9f92787afe035208ddbe119bf902f9c6fddd278981a227c315ff6050c9daac07da4133a6d77d8562acd5896f42070e3279fbc79ea69f280099769e492812e452b65f58277f4700cfa55580ea82456aa385880733f146ac313975c74c9e1b95709316a858334f7d909d3c6f682c20fc9b38887f882e9d3b70c7a3e48a4c8c2ea13758618a1f718b5a032a62e252d5965ab75cbf447ffedf41532fef4c521ba12ced3be2e6ea39d1dbecc6f8f7827bdabce66c7c80570faa820dbc88a3c0e4ed6d3e4b95d1d9a7c1405d8b11c008240a80243ea2e8c9042978ecaa2937cafa8ad350e48497834a524dfa5acd25dd29e1ce05b66e8e39a984db1396fcf24dafcf7b9f72ad6ba56d94c62621211a2eb58c73dba127ceca2c413ad4454e4cf8494b30757e01deedb3c281c4961a8e5bfaf24dab50edd48eb28b7ef3b9303da63416f83419750075d8ade517c53e4870794609a9c70c1009622fda26c4fbbe21eb7c3aa35ddb362d3103d84b6bcd0ccbc4936bb2ee8cf063d369c6b98884ccba8ae3c30142d54245f3b7e6008783ebd57950454fb39777be59de5d530ba97b36c4598b35ca740ff70a200abff892930470e6a2834186c6ff9439d4d9992a10c8df3f73072c51cbc2804b99a14784cb13b145f686427943c36ecc874767ba4290726a346f83c56e70a078fafb94f1cdb4ab18a94bd99dc350e6fb5de99abfb975a437a8c50d33f57cfede707ee031408e877f437ad57583527a91c4cce4b8334a656aa1b9bd08a2f6a0c55469e588fd7766db6a53c2bdd3c2c61daca6e69e1eabeb99d38fbce0b20df9448ac54b5e05d766ce67edb2b22ee990abda22016f98d42104e69c21410a145b6b0d983860f4c01ab27917cbe65dd854f419d8abbb96e777cb6dace595646de936159c43f8c7d4c8bc5cbec8e17be26ef3515c9ed1abfeb9cc06a5a7da16bebf2983b2d3f62cc1a068de133cfe6655a33b5980864531ae99e179b82b99b9157d24d71149015631c47a78fb87b48068fdf1123d85d1d05741527d4fe7cd99b44ec8d0b2aa4a0c1727cc22902ec7446d4fe1cb2aeae044e856d705e42ebf87fd21c1e723e29242344f611d14428d8b052780eb2d0683f2247bf5be8f10a64f2a13bbee4fdda4c05755e58fe05ba6d2a62018b2ff931d53f7023a2c4fd75a401d14131807740c7b488cba9e89fd4a1a5b91d55720c13dabb5a6e26ed99b1d589c7d57d1fb431b9e4d6195df87c3f00c3755964053e784583d0c4b27f719a9d4109bd5b8aff23a1791d9c577be9aba2316f96829cecc819efceac1f07534c956548f530b179ae6422545c375ceb1b8e379ee994f48ad9217183dda0b3cef722b97597c87c54d9311f642049368451cfd8c7e43de609616bce114887cbad0c9fa731fe4f19ac071a64aa787a131e75e8bf392ac1bdc5c2680d171b202ec053ebe4f8d5aa1c4bc7ee5b5cef85b466bf4bf1c37f69b814df25a2174c36949660d500b50c12132b2d297a36a727b0008546abdf79b0256091f3532c2895413a5ca16721f1a1446f160d1fe10ab8605ec9bab271871fdb2c62d81207f357facbdf3c718390253375202cc3335ea5d434e1e70d32d4223b6b3776604b8024e9d9066e7acfcaa0025dce4fcbf19779ee9b5ec6b9a2d487c9f4d11e5022aac54339f4cc71d5a832d752dd25805ca51afa32863b2e7ff6a760c8632bb632a2b5f9610bbcc3fe4fc3288a8a15332cab6f2d6224c4b7f8b72553380e47a88c2afb179fda98ae6c294df22585dea859e7147459b4cab686771408f6b6c6f6016ae2c490bfd1d4a1c165eefd288e7213a50c63eea6b93628be7da280aee2c7e9648b187e0240a3c400f07e583a3241e9cecbff0fee6754dfc63fea6038329d9f6e8c263cda108b986c84eada116375cffe51a83daea386654ea44ff27364927d61590b4c57499cde80095df440862d1819d4ac13a48f8ee99242f5abb44274828f37a6eea9d49848e1c91005a74cfbbe948e3aa43620d07c5afa9944330dcfefa45c67544f60980ae4550f1abc95972bcc936517db9a758f3b2a4efb3d987ffe7392a4ac181ff303ed165ba2825801cf809b322871cf221d62450190c01df607df2ae0b80f75de7554321476d9876544d396d4b3321c084", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}]}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x89}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 39.506324543s ago: executing program 1 (id=1915): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) ftruncate(0xffffffffffffffff, 0x10000000000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 38.08596307s ago: executing program 1 (id=1917): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700000017"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) syz_open_procfs(0x0, 0x0) getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) sendmsg$nl_netfilter(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1068, 0xf, 0x1, 0x401, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@nested={0x47, 0x39, 0x0, 0x1, [@generic, @typed={0x6, 0x8b, 0x0, 0x0, @str='[\x00'}, @generic="007e86464945f8aa8789177d8fa21209fd8bc76330f072e47070dbac68faf2df8bf6c9147cbb25ebd6be82c656931e41565514fa28e7bb470b8f66"]}, @generic="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", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}]}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x89}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 37.734925441s ago: executing program 6 (id=1918): keyctl$session_to_parent(0x12) (fail_nth: 1) 18.365439538s ago: executing program 6 (id=1920): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xff, 0x5dcf, &(0x7f0000006940)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c40), 0x101000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000c80)={0x4000000, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000c80)={0x4000000, 0x4, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xc}, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33}}) syz_emit_vhci(&(0x7f0000000880)=@HCI_ACLDATA_PKT={0x2, {0xc9}, @l2cap_cid_signaling={{}, [@l2cap_create_chan_req={{0xc, 0x6}, {0x1, 0x3, 0x2}}]}}, 0xb3) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x5040, &(0x7f0000000700)={[{@rodir}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@nocase}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@shortname_lower}, {@uni_xlate}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, 'nonumtail=0'}}, {@obj_type}]}, 0x1, 0x363, &(0x7f0000000280)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) (async) mkdirat(r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r4, &(0x7f0000000240)='./bus/file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0) 18.311678278s ago: executing program 7 (id=1922): keyctl$session_to_parent(0x12) (fail_nth: 1) 18.308823131s ago: executing program 2 (id=1923): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ftruncate(r1, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 18.30835511s ago: executing program 7 (id=1924): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000880)=ANY=[@ANYBLOB='nls=maccroatian,barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="005cad3f160fb4903adee268d9b2489eaa01d48882276d57afe5e72a5c0dadd2888b0f1fc4646d137681adde4e3fba2d572989dde6fb78444fb9e40e9882d5fc49d5548a47c90d98969cdc745d6f60b3d5ebc2a2fa192b718754d6450153cf75843ccc7b285dbfeb42cdefec8beab3adba1cba157165384c27b0b7fa917c58a677dc91860d75ad0d2170a301450905c6f2548c0607"], 0x1, 0x5ec, &(0x7f0000000c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000058c271db4f6464e254d3ff045ef46be7529d666cc78b9e6ed776d926dceb10befc0db469da8861706dcd65f6555cabf2fdf37ba489d30ea3a7f6e945e9fe2890946906396b6315f93b6035bf81cd6021e0b75f54b1885de1b35360ccc21b190e95c2d6a3dc8f77ce2df9002f8890b3f7d893326f079e40"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) keyctl$session_to_parent(0x12) 18.30603422s ago: executing program 2 (id=1925): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="fdaf00000000000000000e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) memfd_secret(0x80000) syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') epoll_create1(0x0) r2 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x3d3b, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x36e10853185f3b19, 0x0, {0x0, 0x0, r2}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xa8, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8c}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x32, 0xd, 0x1, 0x0, "7591e8a6c0aac7422b451a2107458d066c0a3d2581cde3b3fc873686c6072bfaa0a7b64c5ff20e8fcf297ff0ef5b"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4800}, 0x2400c841) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 7.553173694s ago: executing program 9 (id=1926): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) memfd_secret(0x80000) syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') epoll_create1(0x0) r0 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0xb4e, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x36e10853185f3b19, 0x0, {0x0, 0x0, r0}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 7.551894669s ago: executing program 7 (id=1927): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ftruncate(r1, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 7.551720729s ago: executing program 9 (id=1928): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x20010, &(0x7f0000000000), 0x1, 0x4e8, &(0x7f00000005c0)="$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") 7.551027062s ago: executing program 2 (id=1929): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) ftruncate(0xffffffffffffffff, 0x10000000000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 7.547832755s ago: executing program 7 (id=1930): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040b11837000000000000010902240001000000000904000001030000000921fdf7000122a000090581032000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$video(0x0, 0x75, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="71756f74612c759f201b1cbcdc8b5408eb467f737271756f7461e21cf112dfa25f5084547d5f696e6f64655f6875d5ceeec496b0a2cd77a027bd31a39e57dd3f3e9f2f9acf97f58b0074a42055d026981912de5c3b5254da106d2c5d00"/106]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002340)={0x2020}, 0x2020) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 7.54752987s ago: executing program 1 (id=1931): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000140)='0', 0x1) socket$inet(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000200)={0x0, 0x0, {0x3, 0x0, 0x0, 0x1, 0x6}, 0x10}) write$sndseq(r4, 0x0, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x3000000) 7.5473035s ago: executing program 6 (id=1932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 7.546865167s ago: executing program 8 (id=1933): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x7) r1 = accept(r0, 0x0, 0x0) iopl(0x3) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xc, 0x4000) timerfd_gettime(r2, &(0x7f0000000380)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mq_open(0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xae}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x86}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) mq_unlink(&(0x7f0000000340)='eth0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000800)=0xe8) r5 = semget(0x1, 0x0, 0x0) r6 = geteuid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000300)={{0x1, r6, 0xee01, 0x0, 0x0, 0xb8, 0x235}, 0xdc3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) read$FUSE(r2, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, r9, 0x0) setresgid(0x0, r9, 0x0) lstat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000002940)='./file0\x00', 0xa2d121d823a0a6f0, 0x100, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() r14 = getgid() fstat(r3, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() r17 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x4, r4}, {0x2, 0x4}, {0x2, 0x3}, {}, {0x2, 0x4}, {0x2, 0x5, r6}, {0x2, 0x1, r11}, {0x2, 0x6, r11}], {0x4, 0x1}, [{0x8, 0x3, r7}, {0x8, 0xc, r9}, {0x8, 0x0, r10}, {0x8, 0x1, r12}, {0x8, 0x0, r13}, {0x8, 0x4, r14}, {0x8, 0x6, r15}, {0x8, 0x0, r16}, {0x8, 0x4, r17}], {0x10, 0x5}, {0x20, 0x4}}, 0xc4, 0x3) 7.546180211s ago: executing program 2 (id=1934): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) ftruncate(0xffffffffffffffff, 0x10000000000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 7.545737763s ago: executing program 9 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003"], 0xc0}}, 0x0) r6 = socket(0x1e, 0x5, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r8 = syz_open_dev$vim2m(&(0x7f0000000440), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x0, "8baadc68379dd10000419d09000000000000000000161c00"}) listen(r6, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, r6}, 0x18) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000714359699cae0e92772d03d99b000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180ffffffff08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) 7.544420204s ago: executing program 6 (id=1936): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x6585, 0x10100}, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) (fail_nth: 1) r3 = openat(0xffffffffffffffff, 0x0, 0xa100, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x201c080, &(0x7f0000002f00)=ANY=[@ANYRES8, @ANYBLOB="7c845c", @ANYRES8], 0x2, 0xc43, &(0x7f0000002240)="$eJzs3U9sHNd9B/DfGy7FpdxWTOwoThoXm7ZIZcVy9S+mYhXuqqaZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIoCLRGgRQNgqYIemRaF0guPhQ59cS2sBEUPbBFgJwCFjP7VlxRpE2LpERZn49Nfndm35t5b2Y9QxN88wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPi9Vy6cPJUedisAgAfp0thXTp52/weAx8oV//8PAAAAAAAAAAAAAAAHXYoinowUc5fW0kS13FG/2O6/dXt8ZHTraoOpqtlXlS+/6qdOnzn7hReGz3XzYnvmfervtU/Ha2NXLjRenr05Nz+1sDA12RifaV+bnZza8RZ2W3+z49UBaNx8/dbk9esLjdPPn7nr7dtD7w08cXTo/PCzJ57plh0fGR0d2yhS7y1fu++GdGw3wuNQFHEiUjz33Z+mVkQUsftjUX+w536zwaoTx6tOjI+MVh2ZbrdmFss3L3cPRBHR6KnU7B6jrc9F1PofaB+214xYKptfNvh42b2xudZ86+r0VONya36xvdienbmcOq0t+9OIIs6liOWIWB24d3P9UUQtUnz7yFq6GhF93ePw+Wpg8PbtKPaxjztQtrPRH7FcPALn7AAbiCJejRQ/e/tYXMvXmepa87mIV8v8QcRbZb4UkcoPxtmId7f4HPFoqkURf1ae//NrabK6HnSvKxe/2vjyzPXZnrLd68qHvD/cc6V4SPeHwU35YBzwa1M9imhVV/y1dP8/7AAAAAAAAAAAAAAAAACw1wajiE9Filf+7Q+rccVRjUs/cn74S0O/3Dtm/OkP2E5Z9vmIWCp2Nib3UB4YeDldTukhjyV+nNWjiD/K4/+++bAbAwAAAAAAAAAAAAAAAAAA8Fgr4ieR4sV3jqXl6J1TvD1zo3GldXW6Mytsd+7f7pzp6+vr643UyWbOiZxLOZdzruRczRlFrp+zmXMi51LO5ZwrOVdzRl+un7OZcyLnUs7lnCs5V3NGLdfP2SyzL9Yn8vJSmfWNjq7k9as544DM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FFSRBG/iBTf+vpaihQRzYiJ6OTKwMNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGkhFfD9SNH6/eWddLSJS9W/HsfLb2WgeKvPj0Rwu86VoXsjZqrLW/OZDaD+705+K+HGkGOjbWJfPf39n6c7HIN76xsbSp2udvFNt6L2BJ44eOT88+mtPb/c6bdWA4xfbM7duN8ZHRkfHelbX8t4/3rNuKO+32IN+07Hwxpuvt6anp+bv/0X5EdhF9UfoRao9Lj19WC+W9uIDuXcvonYgmvFw+s5joLz/vxspfvudf+/e8Dv3/3r8Umdp4weDn//xxv3/xc0b2uH9v9azvUq+/5f39K3u/0/2rHsx/zTSX4uoL96c6z8aUV94480T7ZutG1M3pmbOnjz5xeHhL5452X8oon69PT3V82qPDhgAAAAAAAAAAAAAAADAg5KK+N1I0frxWmpExO1qvNbQ+eFnTzzTF33VeKu7xm2/NnblQuPl2Ztz81MLC1OTjfGZ9rXZyamd7q5eDfcaHxndl858oMF9bv9g/fDs3Bvz7Rt/sLjl+4frF64uLM63rm39dgxGEdHsXXO8avD4yGjV6Ol2a6aqennLwfQfXn8q4j8jxbWzjfTZvC6P/988wv+u8f9Lmze0T+P/P9azrtxnSkX8PFL81p8/HZ+t2nk47jlmudzfRIrj5z6Ty8Whsly3DZ3nCnRGBpZl/zdS/MMv7i7bHQ/55EbZUzs+sI+I8vwfiRTf/9PvxK/ndXc//2Hr839484b26fw/1bPu8F3PK9h118nn/0SkeOnJ78Vv5HXv9/yP7rM3juXCd57PsU/n/xM964byfn9zb7oOAAAAAAAAAADwSOtPRfxtpPjhaC29kNft5O//JjdvaJ/+/uuTPesm92a+og98seuDCgAAAAAHRH8q4ieR4sbi9+6Mob57/HfP+M/f2Rj/OZI2vVv9nu9XqucG7OXv/3oN5f1O7L7bAAAAAAAAAAAAAAAAAAAAcKCkVMQLeT71iWo8/+S286mvRIpX/vu5XC4dLct154Efqr7XL83OnLgwPT17rbXYujo91Riba12bKus+FSnW/vozuW5Rza/enW++M8f7xlzs85Fi9O+6ZTtzsXfnJn9qo+ypsuzHIsV//f3dZbvzWH9io+zpsuxfRoqv/dPWZY9ulD1Tlv1OpPjR1xrdsofLst3no35yo+zz12aLfTgrAAAAAAAAAAAAAAAAAAAAPG76UxF/Ein+5+bynbH8ef7//p7Fylvf6Jnvf5Pb1Tz/Q9X8/9u9vp/5/6vnCixtt1cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhoSlHEm5Fi7tJaWhkolzvqF9szt26Pj4xuXW0wVTX7qvLlV/3U6TNnv/DC8Lluvn/9vfapeG3syoXGy7M35+anFhamJhvjM+1rs5NTO97Cbutvdrw6AI2br9+avH59oXH6+TN3vX176L2BJ44OnR9+9sQz3bLjI6OjYz1lav33vfd7pG3WH4oi/iJSPPfdn6YfDkQUsftj8QGfnT33H3/1pRM9i4NVJ45XnRgfGa06Mt1uzSyWb17uHogiotFTqdk9Rg/gXOxKM2KpbH7Z4ONl98bmWvOtq9NTjcut+cX2Ynt25nLqtLbsTyOKOJciliNideDezfVHEa9Him8fWUv/PBDR1z0On7809pWTp7dvR7GPfdyBsp2N/ojl4hE4ZwfYQBTxj5HiZ28fi38ZiKhF5ys+F/FqmT+IeCs65zuVH4yzEe9u8Tni0VSLIv6vPP/n19LbA+X1oHtdufjVxpdnrs/2lO1eVx61+8Mmgw90bwf82lSPIn5UXfHX0r/67xoAAAAAAAAAAAAAAADgACniVyPFi+8cS9X44DtjitszNxpXWlenO8P6umP/umOm19fX1xupk82cEzmXci7nXMm5mjOKXD9ns8z6+vpEXl7KuZxzJedqzujL9XM2c07kXMq5nHMl52rOqOX6OZs5J3Iu5VzOuZJzNWcckLF7AAAAAAAAAAAAAAAAAADAR0tR/ZPiW19fS+sDnfmlJ6KTK+YD/cj7/wAAAP//7gryyA==") sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 7.54336289s ago: executing program 2 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) 7.538712143s ago: executing program 7 (id=1938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 7.537736366s ago: executing program 1 (id=1939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000002c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000105f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 7.537454869s ago: executing program 6 (id=1940): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ftruncate(r1, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 7.52208952s ago: executing program 8 (id=1941): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000008000000950000000000000076d5030174950f1a688c67406e5ee79d2dcb75cc370c483357716247f417"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 7.521881534s ago: executing program 2 (id=1942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r6, 0x1, 0x70bd26, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000002000/0x1000)=nil) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="008ca76d1e"], 0x1, 0x2de, &(0x7f00000003c0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x131) 7.521662733s ago: executing program 9 (id=1943): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f0000000240)={[{@init_itable}, {@norecovery}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x51d, &(0x7f0000000a40)="$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") ioperm(0x0, 0x7, 0x9) timer_create(0x7, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080), 0x0) io_setup(0x3, &(0x7f0000000180)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) r1 = syz_socket_connect_nvme_tcp() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000400)={{0x3}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)) r4 = timerfd_create(0x0, 0x0) dup2(r4, r3) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000880)=""/53, 0x35}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000008c0)=""/110, 0x6e}, {&(0x7f0000000f80)=""/4083, 0xff3}], 0x8, &(0x7f00000003c0)=""/6, 0x6}, 0xaf5364d0eaa69390) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r5, 0x2ff8) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0xfea0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r6}) r7 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c757466383d312c757466383d302c756e695f786c6174653d302c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c756d61736b3d30303030303030303030303030303030303030303030352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c756e695f786c6174653d312873686f72746e616d653d6d80697865642c726f6469722c646f733178666c6f7070792c756e695f786c6174653d312c696f636861727365743d69736f383835392d392c"], 0x4, 0x2cd, &(0x7f0000000500)="$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") ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000002c0)) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000080)) 4.017353556s ago: executing program 6 (id=1944): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x20000080) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ftruncate(r1, 0x10000000000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfe3c) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 2.963186844s ago: executing program 8 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) connect$pptp(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1e) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x1) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000440)={0xc, 0x40, 0x7}, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x9) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "84dfeec3c6"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0156a70302"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e52ac1ddbab33d8ff41bb061eff104"}]}, 0x98}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80000}, 0x1010) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4002a008}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "7840c5d7357b77f5a0480a"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2e2f1740f89365ea3a5d021293"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ce4be4d6910e9d21363dfcf7ae"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48040}, 0x20044000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8001) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000b40)=0x81, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b80), 0x2000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x7, 0xf, 0xbcd, 0x50400, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x6, @void, @value, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', r8, r9, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbmon(&(0x7f0000000dc0), 0xff, 0x48200) close(r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0xd}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r11, 0x4018f50b, &(0x7f0000000f80)={0x0, 0x2, 0x3}) 2.94718086s ago: executing program 1 (id=1946): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700000017"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) syz_open_procfs(0x0, 0x0) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) sendmsg$nl_netfilter(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1068, 0xf, 0x1, 0x401, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@nested={0x47, 0x39, 0x0, 0x1, [@generic, @typed={0x6, 0x8b, 0x0, 0x0, @str='[\x00'}, @generic="007e86464945f8aa8789177d8fa21209fd8bc76330f072e47070dbac68faf2df8bf6c9147cbb25ebd6be82c656931e41565514fa28e7bb470b8f66"]}, @generic="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", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}]}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) 1.586374758s ago: executing program 9 (id=1947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{0x0}], 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) 1.25174241s ago: executing program 7 (id=1948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (fail_nth: 1) 440.52116ms ago: executing program 9 (id=1949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 377.767973ms ago: executing program 1 (id=1950): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@journal_checksum}, {@user_xattr}]}, 0x0, 0x46e, &(0x7f0000000e80)="$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") (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100a9080}}, 0x50) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 0s ago: executing program 8 (id=1951): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f0000000240)={[{@init_itable}, {@norecovery}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x51d, &(0x7f0000000a40)="$eJzs3cFvI1cZAPBvvOvEm02btPQACNrQFha0WifxtlHVAxQuCKFKiN4AaRsSbxTFjqPYKU2o1PTMFYlKnODIH8C5J+5cENy4lANSgQi0QeIwaMaT1JvaTbqbxFb8+0mjmTdvMt/3Ys1765e1XwBjay4i9iNiIiLejIiZ4nxSbPFad8uue3CQdCv30/SNfyZ5/YODd1ai52cyN4t7ViLih9+N+Gnyybjt3b2N5Uajvl2U5zvNrfn27t6d9ebyWn2tvlmrLS0uLbxy9+XaubX1ueZEcfTlD/+4/42fZ2lNF2d623Geuk0vH8fJXI+I719EsCG4VrRnYtiJ8EhKEfF0RDyfP/8zcS1/NQGAqyxNZyKd6S0DAFddKZ8DS0rVYi5gOkqlarU7h/dMTJUarXbn9v3WzuZqd65sNsql++uN+kIxVzgb5SQrL+bHH5drJ8p3I+KpiPjl5I28XF1pNVaH+Q8fABhjN0+M//+Z7I7/AMAVVxl2AgDApTP+A8D4Mf4DwPgx/gPA+OmO/zeGnQYAcIm8/weA8WP8B4Cx8oPXX8+29LD4/uvVt3Z3Nlpv3Vmttzfmmjsr1ZXW9lZ1rdVay7+zp3na/Rqt1tbiS7Hz9uw3t9qd+fbu3r1ma2ezcy//Xu979XJ+1f4ltAwAGOSp5z74S5KNyK/eyLfoWcuhPNTMgItWGnYCwNBcG3YCwNBY7QvG12d8j588+o8Co6rPEr0PqfT7gFCapunFpQRcsFtfMP8P46pn/t//AoYxY/4fxpf5fxhfaZqcdc3/OOuFAMBoM8cPDPj7/9PF/nfFHwd+snryivcvMisAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYbUfr/1aLtcCno1SqViOeiIjZKCf31xv1hYh4MiL+PFmezMqLQ84ZAHhcpb8nxfpft2ZenH6o6tmbx4cTEfGzX7/xq7eXO53tP0VMJP+aPDrfeb84X7v87AGA0x2N0/m+5438g4N3Vo62y8zno29HRKUb//BgIg6P41+P6/m+EuWImPp3UpS7kp65i8ex/15EfL5f+5OYzudAuiufnoyfxX7iUuOXHopfyuu6++x38blzyAXGzQdZ//Nav+evFHP5vv/zX8l7qMdX9H/ZrVYO8z7w4/hH/d+1Af3f3HHpxqfHeOkP3xt03UfvRXzxesRR7MOe/ucofjIg/otnbONfv/Ts84Pq0t9E3Ir+8XtjzXeaW/Pt3b07683ltfpafbNWW1pcWnjl7su1+XyOen7waPCPV28/GfFu37qs/VMD4ldOaf9Xz9j+3/7vzR9/ZUBdFv/rL/SLX4pnPiV+NiZ+7Yzxl6d+XxlUl8VfHdD+017/22eM/+Hf9j6xbDgAMDzt3b2N5Uajvj3kg+9MR4xAGp/x4EfFb3FU8smnA0Yon/NvYESMQBp9D751fjdM0/TdwddMDHhSfvFC99U/UZWmj5TGoB7jPGbdgFFw/NBHxH+HnQwAAAAAAAAAAAAAANDXZXw6athtBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//TdrGQA==") syz_socket_connect_nvme_tcp() openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000000010001", 0x7) ftruncate(r0, 0x2ff8) connect$vsock_stream(r0, 0x0, 0x0) r4 = dup3(r1, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r5}) kernel console output (not intermixed with test programs): interface 0 before use [ 1446.797679][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.820273][T14726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1447.316652][T14726] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.875031][T14751] loop9: detected capacity change from 0 to 512 [ 1450.920132][ T7268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.945796][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.633356][T14770] usb usb8: usbfs: process 14770 (syz.1.1450) did not claim interface 0 before use [ 1451.653974][T14770] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1452.209602][T14647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.308508][T14647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.364603][T14751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.456461][T14751] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.638517][T14777] usb usb8: usbfs: process 14777 (syz.7.1451) did not claim interface 0 before use [ 1452.660896][T14777] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1453.828678][ T7268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.145671][T14791] usb usb8: usbfs: process 14791 (syz.1.1453) did not claim interface 0 before use [ 1458.610965][T14647] team0: Port device team_slave_0 added [ 1459.765677][T14647] team0: Port device team_slave_1 added [ 1459.798774][T14810] usb usb8: usbfs: process 14810 (syz.1.1456) did not claim interface 0 before use [ 1459.823454][T14810] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1461.400896][ T7268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.268489][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.409725][T14835] usb usb8: usbfs: process 14835 (syz.6.1463) did not claim interface 0 before use [ 1465.879762][T14840] loop8: detected capacity change from 0 to 512 [ 1465.992564][T14647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.000453][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.083896][T14840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1466.155119][T14840] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1466.186332][T14647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.201023][T14647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.208075][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.234187][T14647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.152682][T14647] hsr_slave_0: entered promiscuous mode [ 1467.215376][T14647] hsr_slave_1: entered promiscuous mode [ 1467.296846][T14860] usb usb8: usbfs: process 14860 (syz.1.1467) did not claim interface 0 before use [ 1467.313177][T14647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1467.335916][T14647] Cannot create hsr debugfs directory [ 1467.716184][T14865] usb usb8: usbfs: process 14865 (syz.7.1464) did not claim interface 0 before use [ 1467.728068][T14865] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1468.242720][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.191758][ T7268] bridge_slave_1: left allmulticast mode [ 1471.202175][ T7268] bridge_slave_1: left promiscuous mode [ 1471.209410][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.601838][T14895] usb usb8: usbfs: process 14895 (syz.1.1471) did not claim interface 0 before use [ 1471.614846][T14895] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1473.162725][ T7268] bridge_slave_0: left allmulticast mode [ 1473.168450][ T7268] bridge_slave_0: left promiscuous mode [ 1473.420601][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.728236][T14902] usb usb8: usbfs: process 14902 (syz.7.1475) did not claim interface 0 before use [ 1473.759478][T14902] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1475.870967][T14910] loop7: detected capacity change from 0 to 512 [ 1475.939025][T14914] loop1: detected capacity change from 0 to 512 [ 1476.275808][T14920] usb usb8: usbfs: process 14920 (syz.6.1480) did not claim interface 0 before use [ 1476.303857][T14920] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1476.957499][T14914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.971589][T14910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1477.031634][T14914] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.042407][T14910] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.580876][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.591805][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.834972][T14941] usb usb8: usbfs: process 14941 (syz.6.1481) did not claim interface 0 before use [ 1480.973269][T14941] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1481.986643][T14946] usb usb8: usbfs: process 14946 (syz.9.1483) did not claim interface 0 before use [ 1483.941780][T14958] loop1: detected capacity change from 0 to 512 [ 1484.038108][T14963] loop8: detected capacity change from 0 to 512 [ 1484.764876][T14980] usb usb8: usbfs: process 14980 (syz.9.1488) did not claim interface 0 before use [ 1484.791165][T14980] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1485.442729][T14963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.236853][T14963] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1487.078896][T14958] EXT4-fs: error -4 creating inode table initialization thread [ 1487.125972][T14958] EXT4-fs (loop1): mount failed [ 1489.145144][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.151586][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.190081][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.952845][T15016] overlayfs: failed to resolve './file1': -2 [ 1495.327427][T15034] loop7: detected capacity change from 0 to 512 [ 1495.779042][ T7268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.879570][T15034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.898344][T15034] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1497.052250][ T7268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.563706][ T7268] bond0 (unregistering): Released all slaves [ 1498.694115][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1499.297708][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1499.306453][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1499.315568][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1499.338448][ T5873] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1499.347269][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.362010][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1501.368754][T15070] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1501.461939][ T5873] Bluetooth: hci3: command tx timeout [ 1501.496257][T15073] usb usb8: usbfs: process 15073 (syz.6.1502) did not claim interface 0 before use [ 1501.547517][T15073] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1502.141539][T15076] loop1: detected capacity change from 0 to 512 [ 1503.047497][T15076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1503.095673][T15076] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1503.542576][ T5873] Bluetooth: hci3: command tx timeout [ 1503.840111][T15104] loop9: detected capacity change from 0 to 512 [ 1503.917196][T15105] loop8: detected capacity change from 0 to 512 [ 1504.094130][T15060] chnl_net:caif_netlink_parms(): no params data found [ 1504.155976][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.196693][T15104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1504.234286][T15105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1504.312069][T15105] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.355388][T15104] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.789790][T15127] loop7: detected capacity change from 0 to 512 [ 1504.822433][T15127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1504.835240][T15127] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1505.323349][ T7268] hsr_slave_0: left promiscuous mode [ 1505.404665][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.417796][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.460269][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.498039][ T7268] hsr_slave_1: left promiscuous mode [ 1505.689928][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.697589][ T5873] Bluetooth: hci3: command tx timeout [ 1505.707941][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.836425][T15147] loop7: detected capacity change from 0 to 512 [ 1505.992669][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1506.026045][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1506.382771][T15147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.402415][T15147] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.071417][ T5873] Bluetooth: hci3: command tx timeout [ 1508.126261][ T7268] veth1_macvtap: left promiscuous mode [ 1508.132255][ T7268] veth0_macvtap: left promiscuous mode [ 1508.138184][ T7268] veth1_vlan: left promiscuous mode [ 1508.144345][ T7268] veth0_vlan: left promiscuous mode [ 1511.249550][T15186] loop8: detected capacity change from 0 to 512 [ 1511.366969][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.506272][T15186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.519116][T15186] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.937586][T15212] loop1: detected capacity change from 0 to 512 [ 1513.039002][T15212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.071327][T15212] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.216301][T15220] usb usb8: usbfs: process 15220 (syz.6.1526) did not claim interface 0 before use [ 1513.838707][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.403580][T15236] loop8: detected capacity change from 0 to 512 [ 1515.649154][T15236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.762921][T15236] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.392031][T15258] overlayfs: failed to resolve './file1': -2 [ 1520.357370][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.599682][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.729063][T15268] loop6: detected capacity change from 0 to 512 [ 1522.677542][T15270] overlayfs: failed to resolve './file0': -2 [ 1523.477973][T15268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.611877][T15268] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.715490][T15281] loop9: detected capacity change from 0 to 512 [ 1524.463112][T15281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.497214][T15286] loop8: detected capacity change from 0 to 512 [ 1524.517974][ T7268] team0 (unregistering): Port device team_slave_1 removed [ 1524.601634][T15281] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.687227][T15286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.741906][T15286] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1526.634615][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.086432][ T7268] team0 (unregistering): Port device team_slave_0 removed [ 1527.148543][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.165747][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.298626][T15310] loop1: detected capacity change from 0 to 512 [ 1527.457277][T15310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.502188][T15310] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.929751][T15323] loop9: detected capacity change from 0 to 512 [ 1528.089972][T15327] usb usb8: usbfs: process 15327 (syz.8.1541) did not claim interface 0 before use [ 1528.103655][T15327] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1528.164716][T15323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.214365][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.232804][T15323] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.901282][T15334] overlayfs: failed to resolve './file1': -2 [ 1529.971786][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.075874][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.091048][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.236949][T15060] bridge_slave_0: entered allmulticast mode [ 1531.285718][T15060] bridge_slave_0: entered promiscuous mode [ 1531.363963][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.413777][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.420995][T15060] bridge_slave_1: entered allmulticast mode [ 1531.543745][T15060] bridge_slave_1: entered promiscuous mode [ 1531.894974][T15060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.034517][T15060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.849267][T15060] team0: Port device team_slave_0 added [ 1533.875334][T15060] team0: Port device team_slave_1 added [ 1534.006424][T15365] loop9: detected capacity change from 0 to 512 [ 1534.138538][T15060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.193868][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.272550][T15365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.321621][T15060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.344889][T15365] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.387367][T15060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.414970][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.509360][T15374] loop6: detected capacity change from 0 to 512 [ 1534.541574][T15060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.612827][T15374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.700695][T15374] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.908237][T15060] hsr_slave_0: entered promiscuous mode [ 1534.958873][T15060] hsr_slave_1: entered promiscuous mode [ 1535.035808][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.060611][T15395] usb usb8: usbfs: process 15395 (syz.7.1555) did not claim interface 0 before use [ 1536.257448][ T7268] bridge_slave_1: left allmulticast mode [ 1536.528436][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.580401][ T7268] bridge_slave_1: left promiscuous mode [ 1536.624056][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.740266][ T7268] bridge_slave_0: left allmulticast mode [ 1537.111606][ T7268] bridge_slave_0: left promiscuous mode [ 1537.117413][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.176482][T15407] overlayfs: failed to resolve './file1': -2 [ 1539.108902][T15417] usb usb8: usbfs: process 15417 (syz.7.1559) did not claim interface 0 before use [ 1540.414051][ T7268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.089756][T15431] usb usb8: usbfs: process 15431 (syz.9.1561) did not claim interface 0 before use [ 1541.198044][ T7268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.380526][ T7268] bond0 (unregistering): Released all slaves [ 1543.668460][ T7268] hsr_slave_0: left promiscuous mode [ 1543.940904][ T7268] hsr_slave_1: left promiscuous mode [ 1544.164803][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.276769][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.307384][T15450] loop1: detected capacity change from 0 to 512 [ 1544.392281][T15450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1544.457564][T15450] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.092201][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.433044][T15500] usb usb8: usbfs: process 15500 (syz.8.1569) did not claim interface 0 before use [ 1548.658986][ T7268] team0 (unregistering): Port device team_slave_1 removed [ 1550.629051][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.635533][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.955302][ T7268] team0 (unregistering): Port device team_slave_0 removed [ 1553.909159][T15526] overlayfs: failed to resolve './file0': -2 [ 1555.801040][T15542] loop1: detected capacity change from 0 to 512 [ 1556.951210][T15542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1557.001597][T15542] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1558.636743][T15558] loop8: detected capacity change from 0 to 512 [ 1558.846797][T15558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1558.965640][T15558] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.413791][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.459036][T15574] loop9: detected capacity change from 0 to 2048 [ 1560.466157][T14256] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1560.482446][T14256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1560.482453][T15574] udf: Unknown parameter 'ÿ|„\ÿ' [ 1560.495040][T14256] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1560.505992][T14256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1560.696699][T14256] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1560.705794][T14256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1561.379180][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.868517][T15587] loop1: detected capacity change from 0 to 512 [ 1562.864307][T14256] Bluetooth: hci6: command tx timeout [ 1563.027506][T15587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.040472][T15587] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1565.217797][T14256] Bluetooth: hci6: command tx timeout [ 1565.454059][T15612] usb usb8: usbfs: process 15612 (syz.7.1590) did not claim interface 0 before use [ 1565.833653][T15618] usb usb8: usbfs: process 15618 (syz.8.1591) did not claim interface 0 before use [ 1568.431686][T14256] Bluetooth: hci6: command tx timeout [ 1570.179070][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.063941][ T5873] Bluetooth: hci6: command tx timeout [ 1574.979713][T15573] chnl_net:caif_netlink_parms(): no params data found [ 1575.085655][T15668] loop7: detected capacity change from 0 to 512 [ 1575.229379][T15669] loop1: detected capacity change from 0 to 2048 [ 1575.262529][T15669] udf: Unknown parameter 'ÿ|„\ÿ' [ 1575.748627][T15668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.863303][T15668] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1578.705341][T15693] usb usb8: usbfs: process 15693 (syz.9.1606) did not claim interface 0 before use [ 1578.732692][T15693] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1579.807797][T15695] loop1: detected capacity change from 0 to 512 [ 1579.988352][T15695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.003998][T15702] usb usb8: usbfs: process 15702 (syz.8.1607) did not claim interface 0 before use [ 1580.020347][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.067384][T15573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.079077][T15695] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.098772][T15573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.114812][T15573] bridge_slave_0: entered allmulticast mode [ 1580.132804][T15573] bridge_slave_0: entered promiscuous mode [ 1580.201151][T15573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.252808][T15573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.260152][T15573] bridge_slave_1: entered allmulticast mode [ 1580.343519][T15573] bridge_slave_1: entered promiscuous mode [ 1580.534684][T15573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.565367][ T3458] bridge_slave_1: left allmulticast mode [ 1580.579857][ T3458] bridge_slave_1: left promiscuous mode [ 1580.596141][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.641235][ T3458] bridge_slave_0: left allmulticast mode [ 1580.709106][ T3458] bridge_slave_0: left promiscuous mode [ 1580.739623][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.896816][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.902520][T15726] usb usb8: usbfs: process 15726 (syz.7.1615) did not claim interface 0 before use [ 1583.914031][T15727] usb usb8: usbfs: process 15727 (syz.1.1612) did not claim interface 0 before use [ 1584.002720][T15726] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1584.013259][T15727] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1585.066940][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.154015][T15732] usb usb8: usbfs: process 15732 (syz.6.1614) did not claim interface 0 before use [ 1586.214518][T15736] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1586.601467][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.010477][ T3458] bond0 (unregistering): Released all slaves [ 1588.833509][T15573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.090584][T15750] loop1: detected capacity change from 0 to 512 [ 1589.147093][T15750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1589.167229][ T3458] hsr_slave_0: left promiscuous mode [ 1589.195471][ T3458] hsr_slave_1: left promiscuous mode [ 1589.217477][T15750] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1589.384783][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.401713][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.678734][T15761] loop7: detected capacity change from 0 to 512 [ 1590.843313][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.954028][T15761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1590.982744][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 1591.031712][T15761] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.186610][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 1591.189084][T15770] loop6: detected capacity change from 0 to 512 [ 1592.627103][T15770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.724349][T15770] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.166843][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.355364][T15787] usb usb8: usbfs: process 15787 (syz.1.1627) did not claim interface 0 before use [ 1593.763440][T15573] team0: Port device team_slave_0 added [ 1594.172334][T15573] team0: Port device team_slave_1 added [ 1594.383670][T15789] loop7: detected capacity change from 0 to 512 [ 1594.492860][T15794] usb usb8: usbfs: process 15794 (syz.9.1629) did not claim interface 0 before use [ 1594.691956][T15789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.907374][T15573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.916915][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.040649][T15789] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.146028][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.384361][T15573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.434745][T15573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.442172][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.577588][T15573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.219909][T15810] usb usb8: usbfs: process 15810 (syz.6.1631) did not claim interface 0 before use [ 1598.232751][T15810] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1598.603278][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.839336][T15573] hsr_slave_0: entered promiscuous mode [ 1598.977861][T15573] hsr_slave_1: entered promiscuous mode [ 1599.091661][T15816] loop8: detected capacity change from 0 to 512 [ 1599.279817][T15816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1599.388870][T15816] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.861490][T15825] usb usb8: usbfs: process 15825 (syz.9.1635) did not claim interface 0 before use [ 1601.586760][T15573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1601.616709][T15573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1601.650906][T15832] loop9: detected capacity change from 0 to 512 [ 1601.689728][T15573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1601.744617][T15832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.775717][T15573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1601.783812][T15832] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.198471][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.484806][T15573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.553249][T15851] usb usb8: usbfs: process 15851 (syz.7.1641) did not claim interface 0 before use [ 1603.570982][T15851] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1604.268694][T15573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.586470][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.593669][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.605575][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.612796][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.709411][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.788953][T15857] usb usb8: usbfs: process 15857 (syz.8.1642) did not claim interface 0 before use [ 1610.337936][T15881] usb usb8: usbfs: process 15881 (syz.7.1648) did not claim interface 0 before use [ 1610.364838][T15881] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1611.615777][T15573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.653966][T15573] veth0_vlan: entered promiscuous mode [ 1611.665469][T15573] veth1_vlan: entered promiscuous mode [ 1611.722082][T15573] veth0_macvtap: entered promiscuous mode [ 1611.767621][T15573] veth1_macvtap: entered promiscuous mode [ 1611.818061][T15886] loop7: detected capacity change from 0 to 512 [ 1611.930604][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1612.042434][T15891] usb usb8: usbfs: process 15891 (syz.9.1649) did not claim interface 0 before use [ 1612.055580][T15891] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1612.662832][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1612.692343][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1612.938945][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1612.962078][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.968473][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.734884][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.748261][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.758194][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.768862][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.779152][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.781960][T15886] EXT4-fs: error -4 creating inode table initialization thread [ 1614.790314][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.797486][T15886] EXT4-fs (loop7): mount failed [ 1614.808764][T15573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.824737][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.835501][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.845416][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.855934][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.865820][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.876500][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.886823][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.897858][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.907982][T15573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.918509][T15573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.929804][T15573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1615.094414][T15573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.103991][T15573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.153360][T15573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.377964][T15573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.084129][T15915] loop8: detected capacity change from 0 to 512 [ 1618.222509][T15915] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.251562][T15915] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.660278][T15928] usb usb8: usbfs: process 15928 (syz.7.1658) did not claim interface 0 before use [ 1623.562652][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.779421][T15944] usb usb8: usbfs: process 15944 (syz.6.1662) did not claim interface 0 before use [ 1624.820798][T15945] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1625.147023][T15948] loop1: detected capacity change from 0 to 512 [ 1625.656663][T15956] overlayfs: failed to resolve './file0': -2 [ 1626.864836][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1626.873943][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1626.881673][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1626.890789][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1626.898704][ T5873] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1626.906233][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1627.401148][T15948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.848143][T15948] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1627.968979][T15976] loop6: detected capacity change from 0 to 512 [ 1628.465196][ T3533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.132557][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.269602][T15976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.367173][T15976] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.407249][ T5873] Bluetooth: hci3: command tx timeout [ 1633.051841][T15994] usb usb8: usbfs: process 15994 (syz.9.1673) did not claim interface 0 before use [ 1633.065112][T15994] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1633.099325][ T5873] Bluetooth: hci3: command tx timeout [ 1633.524685][T16014] usb usb8: usbfs: process 16014 (syz.1.1675) did not claim interface 0 before use [ 1633.824173][ T3533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.988958][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.153564][T16019] overlayfs: failed to resolve './file0': -2 [ 1635.162116][T16022] usb usb8: usbfs: process 16022 (syz.8.1677) did not claim interface 0 before use [ 1635.941571][ T5873] Bluetooth: hci3: command tx timeout [ 1638.067821][ T5873] Bluetooth: hci3: command tx timeout [ 1639.104456][T16052] loop8: detected capacity change from 0 to 512 [ 1639.795729][T15960] chnl_net:caif_netlink_parms(): no params data found [ 1639.898215][T16052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.026898][T16052] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.350500][ T3533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.578268][ T3533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.761865][T16088] usb usb8: usbfs: process 16088 (syz.9.1686) did not claim interface 0 before use [ 1643.778204][T16088] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1646.071657][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.271437][T16114] usb usb8: usbfs: process 16114 (syz.1.1691) did not claim interface 0 before use [ 1646.298109][T16114] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1647.253114][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.310451][T15960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.367973][T15960] bridge_slave_0: entered allmulticast mode [ 1647.692997][T15960] bridge_slave_0: entered promiscuous mode [ 1648.681686][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.691077][T15960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.882225][T15960] bridge_slave_1: entered allmulticast mode [ 1648.889469][T15960] bridge_slave_1: entered promiscuous mode [ 1649.635296][T15960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.704454][T15960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.896278][T16156] usb usb8: usbfs: process 16156 (syz.8.1697) did not claim interface 0 before use [ 1651.921830][T16156] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1652.532134][ T3533] bridge_slave_1: left allmulticast mode [ 1652.801408][ T3533] bridge_slave_1: left promiscuous mode [ 1652.817430][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.923937][ T3533] bridge_slave_0: left allmulticast mode [ 1653.001487][ T3533] bridge_slave_0: left promiscuous mode [ 1653.007281][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.550086][T16168] usb usb8: usbfs: process 16168 (syz.8.1700) did not claim interface 0 before use [ 1655.922126][T16176] loop8: detected capacity change from 0 to 2048 [ 1655.955976][T16176] udf: Unknown parameter 'ÿ|„\ÿ' [ 1656.574501][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.674281][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.748495][ T3533] bond0 (unregistering): Released all slaves [ 1656.878439][T15960] team0: Port device team_slave_0 added [ 1657.194591][T15960] team0: Port device team_slave_1 added [ 1658.556982][T16197] loop1: detected capacity change from 0 to 512 [ 1658.671039][T16199] usb usb8: usbfs: process 16199 (syz.9.1704) did not claim interface 0 before use [ 1659.935753][T16197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.053979][T16197] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.316822][T16213] loop6: detected capacity change from 0 to 512 [ 1660.480586][T16213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.579484][T16213] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1662.386908][T15960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.516238][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.625245][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.997557][T15960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.003620][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.301710][ T3533] hsr_slave_0: left promiscuous mode [ 1663.392358][T16243] usb usb8: usbfs: process 16243 (syz.8.1713) did not claim interface 0 before use [ 1663.403710][T16243] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1663.517663][ T3533] hsr_slave_1: left promiscuous mode [ 1663.684345][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1663.939719][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.657497][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.766022][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.891661][ T3533] veth1_macvtap: left promiscuous mode [ 1665.906923][T16252] usb usb8: usbfs: process 16252 (syz.6.1712) did not claim interface 0 before use [ 1665.990289][ T3533] veth0_macvtap: left promiscuous mode [ 1666.292252][ T3533] veth1_vlan: left promiscuous mode [ 1666.298013][ T3533] veth0_vlan: left promiscuous mode [ 1666.588504][T16259] usb usb8: usbfs: process 16259 (syz.1.1715) did not claim interface 0 before use [ 1666.603733][T16259] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1668.632995][T16271] usb usb8: usbfs: process 16271 (syz.6.1717) did not claim interface 0 before use [ 1669.798864][T16274] loop6: detected capacity change from 0 to 512 [ 1670.027898][T16274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1670.162701][T16274] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1670.326908][T16281] usb usb8: usbfs: process 16281 (syz.8.1719) did not claim interface 0 before use [ 1671.536146][T16286] usb usb8: usbfs: process 16286 (syz.8.1720) did not claim interface 0 before use [ 1672.767548][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.734851][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.741209][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.267797][T16307] usb usb8: usbfs: process 16307 (syz.7.1725) did not claim interface 0 before use [ 1676.376628][T16307] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1679.409309][T16326] usb usb8: usbfs: process 16326 (syz.7.1730) did not claim interface 0 before use [ 1679.461160][T16326] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1680.266326][T16328] loop1: detected capacity change from 0 to 512 [ 1681.747673][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 1681.753945][T16328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.787121][T16328] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1682.597856][T16347] usb usb8: usbfs: process 16347 (syz.9.1736) did not claim interface 0 before use [ 1683.425694][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 1685.316772][T16361] usb usb8: usbfs: process 16361 (syz.8.1737) did not claim interface 0 before use [ 1685.344522][T16361] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1687.135151][T16362] usb usb8: usbfs: process 16362 (syz.9.1738) did not claim interface 0 before use [ 1687.147643][T16362] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1687.604268][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.840672][T16372] usb usb8: usbfs: process 16372 (syz.9.1741) did not claim interface 0 before use [ 1689.852097][T16372] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1691.550944][T16381] usb usb8: usbfs: process 16381 (syz.7.1740) did not claim interface 0 before use [ 1692.371928][T16386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1692.400334][T16386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1693.453177][T16386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1693.463060][T16386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1693.471950][T16386] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1693.479690][T16386] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1695.964390][T16406] loop6: detected capacity change from 0 to 512 [ 1696.057786][T16406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.125596][T16415] loop7: detected capacity change from 0 to 512 [ 1696.144367][T16406] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.766621][T16386] Bluetooth: hci6: command tx timeout [ 1698.838153][T16415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1698.865630][T16415] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.932367][T16386] Bluetooth: hci6: command tx timeout [ 1700.994080][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.426468][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1703.914147][T16386] Bluetooth: hci6: command tx timeout [ 1703.965925][T16450] loop1: detected capacity change from 0 to 2048 [ 1704.925441][T16450] udf: Unknown parameter 'ÿ|„\ÿ' [ 1706.632110][T16386] Bluetooth: hci6: command tx timeout [ 1710.467895][T16481] loop8: detected capacity change from 0 to 2048 [ 1710.536245][T16481] udf: Unknown parameter 'ÿ|„\ÿ' [ 1710.552624][T16479] loop9: detected capacity change from 0 to 2048 [ 1710.582474][T16479] udf: Unknown parameter 'ÿ|„\ÿ' [ 1711.911538][T16493] usb usb8: usbfs: process 16493 (syz.7.1765) did not claim interface 0 before use [ 1712.601926][T15960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.608936][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.671478][T15960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.091050][T16512] usb usb8: usbfs: process 16512 (syz.6.1768) did not claim interface 0 before use [ 1716.868028][T16519] loop9: detected capacity change from 0 to 512 [ 1717.486925][T16519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1717.531533][T16519] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1717.689171][T16533] loop1: detected capacity change from 0 to 512 [ 1718.068684][T16533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.241613][T16533] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.205560][T16384] chnl_net:caif_netlink_parms(): no params data found [ 1719.393455][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.135409][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.409593][T16572] loop9: detected capacity change from 0 to 512 [ 1723.333107][T16574] loop7: detected capacity change from 0 to 32768 [ 1723.362472][T16574] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1781 (16574) [ 1723.437944][T16572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1723.534785][T16572] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1723.636220][T16587] usb usb8: usbfs: process 16587 (syz.8.1782) did not claim interface 0 before use [ 1723.663358][T16587] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1723.761233][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.815727][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.094936][T16384] bridge_slave_0: entered allmulticast mode [ 1724.558532][T16384] bridge_slave_0: entered promiscuous mode [ 1724.566741][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.574526][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.591633][T16384] bridge_slave_1: entered allmulticast mode [ 1724.598828][T16384] bridge_slave_1: entered promiscuous mode [ 1724.716405][T16574] BTRFS info (device loop7): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 1724.919854][T16595] usb usb8: usbfs: process 16595 (syz.1.1779) did not claim interface 0 before use [ 1725.258033][T16595] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1725.436802][T16574] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1725.508435][T16574] BTRFS info (device loop7): using free-space-tree [ 1726.583971][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.672265][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1726.691735][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1726.751551][T16600] loop8: detected capacity change from 0 to 512 [ 1726.787656][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1726.787990][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1726.937209][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.973212][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1726.973536][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1728.760305][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1728.944111][T16600] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1728.981534][T16600] EXT4-fs: failed to create workqueue [ 1729.006045][T16384] team0: Port device team_slave_0 added [ 1729.017296][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1729.017685][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1729.111765][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1729.137842][T16384] team0: Port device team_slave_1 added [ 1729.181467][T16600] EXT4-fs (loop8): mount failed [ 1729.222244][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1729.222599][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1729.298262][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.351822][T16574] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1729.390707][T16574] BTRFS error (device loop7): open_ctree failed [ 1729.928485][T16633] usb usb8: usbfs: process 16633 (syz.1.1786) did not claim interface 0 before use [ 1729.976551][T16633] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1730.481018][T16636] usb usb8: usbfs: process 16636 (syz.6.1787) did not claim interface 0 before use [ 1730.732638][T16641] FAULT_INJECTION: forcing a failure. [ 1730.732638][T16641] name failslab, interval 1, probability 0, space 0, times 1 [ 1730.749931][T16641] CPU: 0 UID: 0 PID: 16641 Comm: syz.8.1789 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1730.760410][T16641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1730.770487][T16641] Call Trace: [ 1730.773782][T16641] [ 1730.776733][T16641] dump_stack_lvl+0x16c/0x1f0 [ 1730.781479][T16641] should_fail_ex+0x497/0x5b0 [ 1730.786194][T16641] ? fs_reclaim_acquire+0xae/0x150 [ 1730.791362][T16641] should_failslab+0xc2/0x120 [ 1730.796079][T16641] __kmalloc_noprof+0xcb/0x510 [ 1730.800881][T16641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.806570][T16641] ? ksys_write+0x1ba/0x250 [ 1730.811155][T16641] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.816849][T16641] ? strnlen_user+0x161/0x1b0 [ 1730.821602][T16641] __do_sys_memfd_create+0x19e/0x8f0 [ 1730.826942][T16641] do_syscall_64+0xcd/0x250 [ 1730.831501][T16641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.837456][T16641] RIP: 0033:0x7f865cd80849 [ 1730.841898][T16641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1730.861541][T16641] RSP: 002b:00007f865dbebe38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1730.869992][T16641] RAX: ffffffffffffffda RBX: 0000000000000490 RCX: 00007f865cd80849 [ 1730.877990][T16641] RDX: 00007f865dbebf10 RSI: 0000000000000000 RDI: 00007f865cdf4209 [ 1730.885987][T16641] RBP: 0000000020000580 R08: 00007f865dbebbd7 R09: 00007f865dbebe60 [ 1730.893986][T16641] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000500 [ 1730.901983][T16641] R13: 00007f865dbebf10 R14: 00007f865dbebed0 R15: 0000000020000540 [ 1730.909998][T16641] [ 1730.923471][T16636] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1731.186030][ T3533] bridge_slave_1: left allmulticast mode [ 1731.196596][ T3533] bridge_slave_1: left promiscuous mode [ 1731.210026][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.321084][ T3533] bridge_slave_0: left allmulticast mode [ 1731.371433][ T3533] bridge_slave_0: left promiscuous mode [ 1731.377290][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.775281][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.902091][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.001574][ T3533] bond0 (unregistering): Released all slaves [ 1732.107012][ T5921] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1732.119725][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.126940][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.154225][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.166788][T16642] netlink: 'syz.9.1788': attribute type 4 has an invalid length. [ 1732.293983][T16642] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1788'. [ 1732.391530][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 1732.589612][ T5921] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1732.801917][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1732.865267][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.907330][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1732.957444][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1732.986318][ T5921] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1733.074015][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.162453][ T5921] usb 8-1: config 0 descriptor?? [ 1733.203870][T16654] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1733.229315][ T5921] hub 8-1:0.0: USB hub found [ 1733.315304][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 1733.386299][T16674] loop9: detected capacity change from 0 to 512 [ 1733.453633][T16654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.531811][T16654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.562425][ T5921] hub 8-1:0.0: 2 ports detected [ 1734.584387][T16674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1734.758792][T16674] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.792557][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 1734.919715][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.926343][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.994375][T16682] loop1: detected capacity change from 0 to 512 [ 1735.116437][T16682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1735.150764][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.159435][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1735.217800][T16682] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.267969][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.511231][ T5921] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1735.527704][ T5921] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1735.549963][T13336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.582056][ T5921] usbhid 8-1:0.0: can't add hid device: -71 [ 1735.588776][ T5921] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1735.643420][ T5921] usb 8-1: USB disconnect, device number 2 [ 1735.663894][T16687] loop8: detected capacity change from 0 to 32768 [ 1735.779788][T16384] hsr_slave_0: entered promiscuous mode [ 1735.783358][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.893747][T16384] hsr_slave_1: entered promiscuous mode [ 1736.142028][T16697] loop1: detected capacity change from 0 to 1024 [ 1736.520521][T16697] EXT4-fs: Invalid want_extra_isize 0 [ 1737.023690][T16697] loop1: detected capacity change from 0 to 16 [ 1737.061517][T16703] loop6: detected capacity change from 0 to 512 [ 1737.071877][T16697] erofs: Unknown parameter 'R­²' [ 1737.170383][T16697] loop1: detected capacity change from 0 to 512 [ 1737.178402][T16703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.261448][T16703] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.293692][T16711] loop9: detected capacity change from 0 to 22 [ 1737.318841][T16711] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1737.343255][T16707] loop7: detected capacity change from 0 to 4096 [ 1737.393433][T16697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.421752][T16697] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.430763][T16711] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1737.457223][T16717] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1737.664341][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.692794][T16717] hsr0: entered promiscuous mode [ 1737.770959][T16724] loop9: detected capacity change from 0 to 256 [ 1737.784329][T16717] 9p: Unknown uid 00000000004294967295 [ 1737.873006][T16724] FAT-fs (loop9): Directory bread(block 64) failed [ 1737.890643][T16724] FAT-fs (loop9): Directory bread(block 65) failed [ 1737.944443][T16724] FAT-fs (loop9): Directory bread(block 66) failed [ 1738.012762][T16724] FAT-fs (loop9): Directory bread(block 67) failed [ 1738.053237][T16724] FAT-fs (loop9): Directory bread(block 68) failed [ 1738.059828][T16724] FAT-fs (loop9): Directory bread(block 69) failed [ 1738.077796][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.131842][T16724] FAT-fs (loop9): Directory bread(block 70) failed [ 1738.138435][T16724] FAT-fs (loop9): Directory bread(block 71) failed [ 1738.701907][T16724] FAT-fs (loop9): Directory bread(block 72) failed [ 1738.708504][T16724] FAT-fs (loop9): Directory bread(block 73) failed [ 1739.902149][T16729] veth3: entered allmulticast mode [ 1741.453714][T16749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1806'. [ 1742.320659][T16762] FAULT_INJECTION: forcing a failure. [ 1742.320659][T16762] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1742.348231][ T29] audit: type=1326 audit(1732930099.265:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.1.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad4780849 code=0x7fc00000 [ 1742.376542][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.8.1809 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1742.387014][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1742.397108][T16762] Call Trace: [ 1742.400411][T16762] [ 1742.403366][T16762] dump_stack_lvl+0x16c/0x1f0 [ 1742.408104][T16762] should_fail_ex+0x497/0x5b0 [ 1742.412818][T16762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1742.418498][T16762] _copy_from_user+0x2e/0xd0 [ 1742.423128][T16762] do_sock_getsockopt+0x5f6/0x800 [ 1742.428203][T16762] ? trace_lock_acquire+0x140/0x1f0 [ 1742.433459][T16762] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1742.439054][T16762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1742.444727][T16762] ? lock_acquire+0x2f/0xb0 [ 1742.449267][T16762] ? __fget_files+0x40/0x3a0 [ 1742.453918][T16762] ? __fget_files+0x206/0x3a0 [ 1742.458656][T16762] __sys_getsockopt+0x12f/0x260 [ 1742.463557][T16762] __x64_sys_getsockopt+0xbd/0x160 [ 1742.468709][T16762] ? do_syscall_64+0x91/0x250 [ 1742.473419][T16762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1742.479092][T16762] ? lockdep_hardirqs_on+0x7c/0x110 [ 1742.484347][T16762] do_syscall_64+0xcd/0x250 [ 1742.488891][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.494843][T16762] RIP: 0033:0x7f865cd80849 [ 1742.499291][T16762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.518936][T16762] RSP: 002b:00007f865dbec058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1742.527387][T16762] RAX: ffffffffffffffda RBX: 00007f865cf45fa0 RCX: 00007f865cd80849 [ 1742.535385][T16762] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 0000000000000003 [ 1742.543382][T16762] RBP: 00007f865dbec0a0 R08: 00000000200002c0 R09: 0000000000000000 [ 1742.551379][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.559372][T16762] R13: 0000000000000000 R14: 00007f865cf45fa0 R15: 00007ffdaf442ef8 [ 1742.567388][T16762] [ 1742.962754][T16768] netlink: 'syz.7.1812': attribute type 1 has an invalid length. [ 1742.989205][T16768] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1812'. [ 1743.112649][T16772] usb usb8: usbfs: process 16772 (syz.8.1813) did not claim interface 0 before use [ 1743.139883][T16772] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1744.194355][T16776] usb usb8: usbfs: process 16776 (syz.9.1811) did not claim interface 0 before use [ 1744.302164][T16778] loop7: detected capacity change from 0 to 512 [ 1744.531641][T16778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1744.561661][T16778] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.756245][T16791] loop6: detected capacity change from 0 to 512 [ 1744.999438][T16791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1745.084539][T16791] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.904061][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.005155][ T5920] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1746.150166][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1746.162036][ T5920] usb 9-1: Using ep0 maxpacket: 32 [ 1746.169705][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1746.179074][ T5920] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1746.187479][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1746.201694][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1746.209452][ T5873] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1746.233541][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1746.261905][ T5920] usb 9-1: config 0 has no interface number 0 [ 1746.268103][ T5920] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1746.284513][ T5920] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 1746.293958][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.302688][ T5920] usb 9-1: Product: syz [ 1746.306903][ T5920] usb 9-1: Manufacturer: syz [ 1746.311874][ T5920] usb 9-1: SerialNumber: syz [ 1746.348422][T16806] loop7: detected capacity change from 0 to 512 [ 1746.678178][ T5920] usb 9-1: config 0 descriptor?? [ 1746.685925][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.757038][T16806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.791646][T16806] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.020765][ T5920] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1748.156198][ T7226] bridge_slave_1: left allmulticast mode [ 1748.175508][ T7226] bridge_slave_1: left promiscuous mode [ 1748.181376][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.273038][ T7226] bridge_slave_0: left allmulticast mode [ 1749.261517][ T7226] bridge_slave_0: left promiscuous mode [ 1749.267343][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.274763][T16386] Bluetooth: hci3: command tx timeout [ 1749.403561][ T5920] snd-usb-audio 9-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 1749.938595][ T5920] usb 9-1: USB disconnect, device number 2 [ 1750.243501][T16838] loop9: detected capacity change from 0 to 8 [ 1750.411243][T16404] udevd[16404]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1750.423266][T12972] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.507266][T16838] SQUASHFS error: xz decompression failed, data probably corrupt [ 1750.572360][T16838] SQUASHFS error: Failed to read block 0x108: -5 [ 1751.373817][T16838] SQUASHFS error: Unable to read metadata cache entry [106] [ 1751.396738][ T5873] Bluetooth: hci3: command tx timeout [ 1751.405259][T16838] SQUASHFS error: Unable to read inode 0x11f [ 1752.131991][ T7226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.288177][ T7226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.353082][T16853] usb usb8: usbfs: process 16853 (syz.1.1829) did not claim interface 0 before use [ 1752.364852][T16853] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1752.403428][ T7226] bond0 (unregistering): Released all slaves [ 1752.770271][T16856] loop8: detected capacity change from 0 to 128 [ 1752.780079][ T7226] hsr_slave_0: left promiscuous mode [ 1752.921375][ T7226] hsr_slave_1: left promiscuous mode [ 1752.961205][T16856] FAT-fs (loop8): Directory bread(block 11554) failed [ 1752.987001][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.010872][T16856] FAT-fs (loop8): Directory bread(block 11555) failed [ 1753.028953][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.051597][T16856] FAT-fs (loop8): Directory bread(block 11556) failed [ 1753.098245][T16856] FAT-fs (loop8): Directory bread(block 11557) failed [ 1753.161717][T16856] FAT-fs (loop8): Directory bread(block 11558) failed [ 1753.168628][T16856] FAT-fs (loop8): Directory bread(block 11559) failed [ 1753.244929][T16856] FAT-fs (loop8): Directory bread(block 11560) failed [ 1753.251931][T16856] FAT-fs (loop8): Directory bread(block 11561) failed [ 1753.259338][T16856] FAT-fs (loop8): Directory bread(block 11562) failed [ 1753.271717][T16856] FAT-fs (loop8): Directory bread(block 11563) failed [ 1754.039368][T16865] loop9: detected capacity change from 0 to 4096 [ 1754.051880][T16865] ntfs3: Unknown parameter '' [ 1754.168295][ T5873] Bluetooth: hci3: command tx timeout [ 1754.512511][T16870] loop1: detected capacity change from 0 to 128 [ 1754.600272][T16870] FAT-fs (loop1): Directory bread(block 11554) failed [ 1754.640697][T16870] FAT-fs (loop1): Directory bread(block 11555) failed [ 1754.669685][T16870] FAT-fs (loop1): Directory bread(block 11556) failed [ 1754.692317][T16870] FAT-fs (loop1): Directory bread(block 11557) failed [ 1754.699203][T16870] FAT-fs (loop1): Directory bread(block 11558) failed [ 1754.738941][T16870] FAT-fs (loop1): Directory bread(block 11559) failed [ 1754.761378][T16870] FAT-fs (loop1): Directory bread(block 11560) failed [ 1754.768257][T16870] FAT-fs (loop1): Directory bread(block 11561) failed [ 1754.799693][T16870] FAT-fs (loop1): Directory bread(block 11562) failed [ 1754.807819][ T5919] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1754.831752][T16870] FAT-fs (loop1): Directory bread(block 11563) failed [ 1754.910627][T16870] FAULT_INJECTION: forcing a failure. [ 1754.910627][T16870] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.992654][T16870] CPU: 0 UID: 0 PID: 16870 Comm: syz.1.1833 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1755.003178][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1755.013288][T16870] Call Trace: [ 1755.016598][T16870] [ 1755.019562][T16870] dump_stack_lvl+0x16c/0x1f0 [ 1755.024323][T16870] should_fail_ex+0x497/0x5b0 [ 1755.029054][T16870] ? fs_reclaim_acquire+0xae/0x150 [ 1755.034249][T16870] should_failslab+0xc2/0x120 [ 1755.038993][T16870] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1755.044426][T16870] ? getname_flags.part.0+0x4c/0x550 [ 1755.049781][T16870] ? vfs_write+0x306/0x1150 [ 1755.054366][T16870] getname_flags.part.0+0x4c/0x550 [ 1755.059551][T16870] getname+0x8d/0xe0 [ 1755.063518][T16870] do_sys_openat2+0x104/0x1e0 [ 1755.068262][T16870] ? __pfx_do_sys_openat2+0x10/0x10 [ 1755.073570][T16870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.079263][T16870] ? __fget_files+0x206/0x3a0 [ 1755.084026][T16870] __x64_sys_openat+0x175/0x210 [ 1755.088947][T16870] ? __pfx___x64_sys_openat+0x10/0x10 [ 1755.094402][T16870] ? ksys_write+0x1ba/0x250 [ 1755.098996][T16870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.104719][T16870] do_syscall_64+0xcd/0x250 [ 1755.109287][T16870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.115271][T16870] RIP: 0033:0x7fcad4780849 [ 1755.119738][T16870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.139418][T16870] RSP: 002b:00007fcad55d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1755.147912][T16870] RAX: ffffffffffffffda RBX: 00007fcad4945fa0 RCX: 00007fcad4780849 [ 1755.155941][T16870] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1755.163965][T16870] RBP: 00007fcad55d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.171994][T16870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.180011][T16870] R13: 0000000000000000 R14: 00007fcad4945fa0 R15: 00007ffd886529a8 [ 1755.188055][T16870] [ 1755.265052][ T7226] team0 (unregistering): Port device team_slave_1 removed [ 1756.011893][ T7226] team0 (unregistering): Port device team_slave_0 removed [ 1756.181394][ T5873] Bluetooth: hci3: command tx timeout [ 1756.284540][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1756.294778][ T5919] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1756.322083][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1756.475269][ T5919] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1756.491345][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1757.460284][ T5919] usb 10-1: Product: syz [ 1757.465888][ T5919] usb 10-1: Manufacturer: syz [ 1757.470439][T16900] usb usb8: usbfs: process 16900 (syz.8.1837) did not claim interface 0 before use [ 1757.470623][ T5919] usb 10-1: SerialNumber: syz [ 1757.494199][ T5919] usb 10-1: config 0 descriptor?? [ 1758.533031][ T5919] usb 10-1: can't set config #0, error -71 [ 1758.541923][ T5919] usb 10-1: USB disconnect, device number 2 [ 1758.745213][T16910] FAULT_INJECTION: forcing a failure. [ 1758.745213][T16910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.760643][T16910] CPU: 1 UID: 0 PID: 16910 Comm: syz.9.1840 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1758.771205][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1758.781418][T16910] Call Trace: [ 1758.784724][T16910] [ 1758.787686][T16910] dump_stack_lvl+0x16c/0x1f0 [ 1758.792446][T16910] should_fail_ex+0x497/0x5b0 [ 1758.797178][T16910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.802872][T16910] _copy_from_user+0x2e/0xd0 [ 1758.807523][T16910] move_addr_to_kernel+0x68/0x160 [ 1758.812602][T16910] __sys_bind+0x11c/0x260 [ 1758.816980][T16910] ? __pfx___sys_bind+0x10/0x10 [ 1758.821964][T16910] ? __fget_files+0x206/0x3a0 [ 1758.826726][T16910] ? __pfx_ksys_write+0x10/0x10 [ 1758.831644][T16910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.837343][T16910] __x64_sys_bind+0x72/0xb0 [ 1758.838039][T16913] usb usb8: usbfs: process 16913 (syz.8.1839) did not claim interface 0 before use [ 1758.841868][T16910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1758.856427][T16910] do_syscall_64+0xcd/0x250 [ 1758.860988][T16910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.866963][T16910] RIP: 0033:0x7f6585380849 [ 1758.871469][T16910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1758.891325][T16910] RSP: 002b:00007f65831f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1758.899813][T16910] RAX: ffffffffffffffda RBX: 00007f6585545fa0 RCX: 00007f6585380849 [ 1758.907844][T16910] RDX: 0000000000000080 RSI: 0000000020000100 RDI: 0000000000000004 [ 1758.915877][T16910] RBP: 00007f65831f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.923908][T16910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.931934][T16910] R13: 0000000000000000 R14: 00007f6585545fa0 R15: 00007fff760bd2f8 [ 1758.939983][T16910] [ 1759.402611][T16923] loop1: detected capacity change from 0 to 1024 [ 1759.447001][T16923] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1759.562547][T16923] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1759.570528][T16923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0000] [ 1759.599536][T16927] loop6: detected capacity change from 0 to 512 [ 1759.633303][T16802] chnl_net:caif_netlink_parms(): no params data found [ 1759.658427][T16927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1759.676469][T16923] System zones: 0-1, 3-12 [ 1759.688811][T16923] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1759.707893][T16923] EXT4-fs error (device loop1): ext4_free_blocks:6588: comm syz.1.1843: Freeing blocks not in datazone - block = 0, count = 4096 [ 1759.727741][T16927] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1759.814114][T16923] EXT4-fs (loop1): 1 orphan inode deleted [ 1759.820986][T16923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1760.184786][T16927] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1760.216226][T16927] EXT4-fs (loop6): 1 truncate cleaned up [ 1760.448646][T16927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1761.142635][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.160666][T16952] FAULT_INJECTION: forcing a failure. [ 1761.160666][T16952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.207531][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.9.1847 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1761.218045][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1761.228146][T16952] Call Trace: [ 1761.231457][T16952] [ 1761.234418][T16952] dump_stack_lvl+0x16c/0x1f0 [ 1761.239175][T16952] should_fail_ex+0x497/0x5b0 [ 1761.243904][T16952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.249598][T16952] _copy_from_user+0x2e/0xd0 [ 1761.254243][T16952] __sys_bpf+0x21c/0x49c0 [ 1761.258629][T16952] ? __pfx_lock_release+0x10/0x10 [ 1761.263699][T16952] ? __pfx___sys_bpf+0x10/0x10 [ 1761.268507][T16952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.274182][T16952] ? vfs_write+0x306/0x1150 [ 1761.278747][T16952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.284422][T16952] ? __mutex_unlock_slowpath+0x164/0x690 [ 1761.290138][T16952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.295815][T16952] ? fput+0x67/0x440 [ 1761.299751][T16952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.305426][T16952] ? ksys_write+0x1ba/0x250 [ 1761.309981][T16952] ? __pfx_ksys_write+0x10/0x10 [ 1761.314895][T16952] __x64_sys_bpf+0x78/0xc0 [ 1761.319358][T16952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.325033][T16952] ? lockdep_hardirqs_on+0x7c/0x110 [ 1761.330287][T16952] do_syscall_64+0xcd/0x250 [ 1761.334826][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.340820][T16952] RIP: 0033:0x7f6585380849 [ 1761.345263][T16952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1761.364908][T16952] RSP: 002b:00007f65831d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1761.373362][T16952] RAX: ffffffffffffffda RBX: 00007f6585546080 RCX: 00007f6585380849 [ 1761.381366][T16952] RDX: 0000000000000020 RSI: 0000000020000580 RDI: 0000000000000003 [ 1761.389364][T16952] RBP: 00007f65831d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 1761.397361][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.405357][T16952] R13: 0000000000000000 R14: 00007f6585546080 R15: 00007fff760bd2f8 [ 1761.413377][T16952] [ 1761.552726][T16927] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 4: comm syz.6.1844: lblock 0 mapped to illegal pblock 4 (length 1) [ 1761.569778][T16933] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1761.685420][T16966] FAULT_INJECTION: forcing a failure. [ 1761.685420][T16966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.701526][T16966] CPU: 0 UID: 0 PID: 16966 Comm: syz.1.1848 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1761.712007][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1761.722102][T16966] Call Trace: [ 1761.725587][T16966] [ 1761.728551][T16966] dump_stack_lvl+0x16c/0x1f0 [ 1761.733313][T16966] should_fail_ex+0x497/0x5b0 [ 1761.738046][T16966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.743750][T16966] _copy_from_user+0x2e/0xd0 [ 1761.748398][T16966] __sys_bpf+0x21c/0x49c0 [ 1761.750285][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.752764][T16966] ? __pfx_lock_release+0x10/0x10 [ 1761.752823][T16966] ? __pfx___sys_bpf+0x10/0x10 [ 1761.752876][T16966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.774831][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.775285][T16966] ? vfs_write+0x306/0x1150 [ 1761.786893][T16966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.792587][T16966] ? __mutex_unlock_slowpath+0x164/0x690 [ 1761.794427][T16971] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1844'. [ 1761.798295][T16966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.813290][T16966] ? fput+0x67/0x440 [ 1761.817251][T16966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.822947][T16966] ? ksys_write+0x1ba/0x250 [ 1761.827523][T16966] ? __pfx_ksys_write+0x10/0x10 [ 1761.832452][T16966] __x64_sys_bpf+0x78/0xc0 [ 1761.836930][T16966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1761.842621][T16966] ? lockdep_hardirqs_on+0x7c/0x110 [ 1761.847891][T16966] do_syscall_64+0xcd/0x250 [ 1761.850678][T16802] bridge_slave_0: entered allmulticast mode [ 1761.852417][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.852491][T16966] RIP: 0033:0x7fcad4780849 [ 1761.852525][T16966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1761.888356][T16966] RSP: 002b:00007fcad55d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1761.896826][T16966] RAX: ffffffffffffffda RBX: 00007fcad4945fa0 RCX: 00007fcad4780849 [ 1761.902866][T16802] bridge_slave_0: entered promiscuous mode [ 1761.904811][T16966] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 1761.918631][T16966] RBP: 00007fcad55d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1761.926648][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.934659][T16966] R13: 0000000000000000 R14: 00007fcad4945fa0 R15: 00007ffd886529a8 [ 1761.942692][T16966] [ 1761.955193][T16933] EXT4-fs (loop6): Remounting filesystem read-only [ 1762.004414][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.013061][T16927] EXT4-fs (loop6): Remounting filesystem read-only [ 1762.069618][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.131527][T16802] bridge_slave_1: entered allmulticast mode [ 1762.162554][T16802] bridge_slave_1: entered promiscuous mode [ 1762.239090][T16956] loop8: detected capacity change from 0 to 4096 [ 1762.362066][T16956] ntfs3: Unknown parameter ' [ 1762.362066][T16956] ' [ 1762.473236][T16802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.485082][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.550053][T16802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.667475][T16990] FAULT_INJECTION: forcing a failure. [ 1763.667475][T16990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.684757][T16990] CPU: 0 UID: 0 PID: 16990 Comm: syz.7.1854 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1763.695238][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1763.705342][T16990] Call Trace: [ 1763.708660][T16990] [ 1763.711625][T16990] dump_stack_lvl+0x16c/0x1f0 [ 1763.716385][T16990] should_fail_ex+0x497/0x5b0 [ 1763.721118][T16990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1763.726811][T16990] _copy_to_user+0x32/0xd0 [ 1763.731276][T16990] simple_read_from_buffer+0xd0/0x160 [ 1763.736753][T16990] proc_fail_nth_read+0x198/0x270 [ 1763.741831][T16990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1763.747429][T16990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1763.753109][T16990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1763.758699][T16990] vfs_read+0x1e2/0xbe0 [ 1763.762917][T16990] ? __fget_files+0x1fc/0x3a0 [ 1763.767654][T16990] ? __pfx___mutex_lock+0x10/0x10 [ 1763.772715][T16990] ? __pfx_vfs_read+0x10/0x10 [ 1763.777457][T16990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1763.783131][T16990] ? __fget_files+0x206/0x3a0 [ 1763.787876][T16990] ksys_read+0x12b/0x250 [ 1763.792175][T16990] ? __pfx_ksys_read+0x10/0x10 [ 1763.796996][T16990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1763.802681][T16990] do_syscall_64+0xcd/0x250 [ 1763.807225][T16990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.813176][T16990] RIP: 0033:0x7fe84877f25c [ 1763.817617][T16990] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1763.837264][T16990] RSP: 002b:00007fe8465d5050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1763.845717][T16990] RAX: ffffffffffffffda RBX: 00007fe848946080 RCX: 00007fe84877f25c [ 1763.853715][T16990] RDX: 000000000000000f RSI: 00007fe8465d50b0 RDI: 0000000000000005 [ 1763.861711][T16990] RBP: 00007fe8465d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.869707][T16990] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1763.877704][T16990] R13: 0000000000000000 R14: 00007fe848946080 R15: 00007ffd319a3e58 [ 1763.885723][T16990] [ 1763.944156][T16999] loop1: detected capacity change from 0 to 128 [ 1764.041386][ T934] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1764.061048][T16999] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1764.093365][T16802] team0: Port device team_slave_0 added [ 1764.154354][T16999] ext4 filesystem being mounted at /554/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1764.176423][T16802] team0: Port device team_slave_1 added [ 1764.223542][ T934] usb 7-1: Using ep0 maxpacket: 32 [ 1764.251742][ T934] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1764.271437][ T934] usb 7-1: can't read configurations, error -61 [ 1764.437938][T16802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.446660][ T934] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1764.477397][T17012] FAULT_INJECTION: forcing a failure. [ 1764.477397][T17012] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.511518][T17012] CPU: 1 UID: 0 PID: 17012 Comm: syz.7.1858 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1764.522047][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1764.532140][T17012] Call Trace: [ 1764.535439][T17012] [ 1764.538394][T17012] dump_stack_lvl+0x16c/0x1f0 [ 1764.543137][T17012] should_fail_ex+0x497/0x5b0 [ 1764.547850][T17012] ? fs_reclaim_acquire+0xae/0x150 [ 1764.553023][T17012] should_failslab+0xc2/0x120 [ 1764.557739][T17012] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1764.563153][T17012] ? getname_flags.part.0+0x4c/0x550 [ 1764.568486][T17012] ? vfs_write+0x306/0x1150 [ 1764.573047][T17012] getname_flags.part.0+0x4c/0x550 [ 1764.578209][T17012] getname+0x8d/0xe0 [ 1764.582157][T17012] do_sys_openat2+0x104/0x1e0 [ 1764.586875][T17012] ? __pfx_do_sys_openat2+0x10/0x10 [ 1764.592124][T17012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1764.597802][T17012] ? __fget_files+0x206/0x3a0 [ 1764.602549][T17012] __x64_sys_openat+0x175/0x210 [ 1764.607452][T17012] ? __pfx___x64_sys_openat+0x10/0x10 [ 1764.612871][T17012] ? ksys_write+0x1ba/0x250 [ 1764.617440][T17012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1764.623128][T17012] do_syscall_64+0xcd/0x250 [ 1764.627677][T17012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.633632][T17012] RIP: 0033:0x7fe848780849 [ 1764.638075][T17012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1764.657725][T17012] RSP: 002b:00007fe8465d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1764.666190][T17012] RAX: ffffffffffffffda RBX: 00007fe848946080 RCX: 00007fe848780849 [ 1764.674194][T17012] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1764.682194][T17012] RBP: 00007fe8465d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.690189][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.698188][T17012] R13: 0000000000000000 R14: 00007fe848946080 R15: 00007ffd319a3e58 [ 1764.706210][T17012] [ 1764.786335][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.843166][T16802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.863499][T16802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.870493][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.897860][T16802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.929601][ T934] usb 7-1: Using ep0 maxpacket: 32 [ 1764.965190][ T934] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1764.973242][ T934] usb 7-1: can't read configurations, error -61 [ 1764.985332][ T934] usb usb7-port1: attempt power cycle [ 1765.135217][T16802] hsr_slave_0: entered promiscuous mode [ 1765.172025][T16802] hsr_slave_1: entered promiscuous mode [ 1765.203296][ T5860] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1765.351573][ T934] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1765.374973][ T934] usb 7-1: Using ep0 maxpacket: 32 [ 1765.385923][ T934] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1765.451481][ T934] usb 7-1: can't read configurations, error -61 [ 1765.452036][T17028] fuse: Bad value for 'fd' [ 1765.591474][ T934] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1765.612421][ T934] usb 7-1: Using ep0 maxpacket: 32 [ 1765.635570][ T934] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1765.649808][ T934] usb 7-1: can't read configurations, error -61 [ 1765.667711][T16802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1765.689786][ T934] usb usb7-port1: unable to enumerate USB device [ 1765.759970][T16802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1765.882997][T16802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1765.934508][T16802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1767.365927][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.389979][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.425319][T16802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1767.436103][T16802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1767.465638][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.472826][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.633612][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.640768][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.644053][T17057] loop6: detected capacity change from 0 to 512 [ 1770.905062][T17057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1770.947526][T17057] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1771.001118][T17078] loop8: detected capacity change from 0 to 256 [ 1771.318114][T16802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.483562][T16802] veth0_vlan: entered promiscuous mode [ 1772.060693][T16802] veth1_vlan: entered promiscuous mode [ 1772.081248][T13179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1772.300476][T17092] FAULT_INJECTION: forcing a failure. [ 1772.300476][T17092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.314721][T17092] CPU: 0 UID: 0 PID: 17092 Comm: syz.8.1872 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1772.325196][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1772.335804][T17092] Call Trace: [ 1772.339101][T17092] [ 1772.342081][T17092] dump_stack_lvl+0x16c/0x1f0 [ 1772.346835][T17092] should_fail_ex+0x497/0x5b0 [ 1772.351547][T17092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.357225][T17092] _copy_from_user+0x2e/0xd0 [ 1772.361859][T17092] oom_score_adj_write+0xc9/0x200 [ 1772.366949][T17092] ? __pfx_oom_score_adj_write+0x10/0x10 [ 1772.372634][T17092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.378333][T17092] ? trace_lock_acquire+0x14e/0x1f0 [ 1772.383595][T17092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.389274][T17092] ? __pfx_oom_score_adj_write+0x10/0x10 [ 1772.394957][T17092] vfs_write+0x24f/0x1150 [ 1772.399342][T17092] ? __fget_files+0x1fc/0x3a0 [ 1772.404075][T17092] ? __pfx___mutex_lock+0x10/0x10 [ 1772.409137][T17092] ? __pfx_vfs_write+0x10/0x10 [ 1772.414055][T17092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.419727][T17092] ? __fget_files+0x206/0x3a0 [ 1772.424473][T17092] ksys_write+0x12b/0x250 [ 1772.428859][T17092] ? __pfx_ksys_write+0x10/0x10 [ 1772.433767][T17092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.439456][T17092] do_syscall_64+0xcd/0x250 [ 1772.444023][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.450062][T17092] RIP: 0033:0x7f865cd80849 [ 1772.454504][T17092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.474179][T17092] RSP: 002b:00007f865dbaa058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1772.482642][T17092] RAX: ffffffffffffffda RBX: 00007f865cf46160 RCX: 00007f865cd80849 [ 1772.490643][T17092] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 000000000000000a [ 1772.498641][T17092] RBP: 00007f865dbaa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.506638][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.514634][T17092] R13: 0000000000000000 R14: 00007f865cf46160 R15: 00007ffdaf442ef8 [ 1772.522741][T17092] [ 1772.837687][T16802] veth0_macvtap: entered promiscuous mode [ 1772.898697][T16802] veth1_macvtap: entered promiscuous mode [ 1773.176594][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.528343][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.246685][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.257563][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.268546][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.279380][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.248881][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1775.260112][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.270037][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1775.280661][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.309632][T16802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1776.540450][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.576442][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.601580][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.633370][T17105] loop8: detected capacity change from 0 to 256 [ 1776.641347][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.651215][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.693612][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.705810][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.721049][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.737643][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.748266][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.759438][T16802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.818853][T17105] block device autoloading is deprecated and will be removed. [ 1776.840386][T17115] ipt_REJECT: ECHOREPLY no longer supported. [ 1776.901695][T17105] syz.8.1877: attempt to access beyond end of device [ 1776.901695][T17105] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1777.021621][ T5919] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1777.300255][T17123] FAULT_INJECTION: forcing a failure. [ 1777.300255][T17123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.314092][T17123] CPU: 1 UID: 0 PID: 17123 Comm: syz.9.1880 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1777.324555][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1777.334630][T17123] Call Trace: [ 1777.337924][T17123] [ 1777.340871][T17123] dump_stack_lvl+0x16c/0x1f0 [ 1777.345615][T17123] should_fail_ex+0x497/0x5b0 [ 1777.350330][T17123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1777.356004][T17123] _copy_from_user+0x2e/0xd0 [ 1777.360634][T17123] copy_msghdr_from_user+0x99/0x160 [ 1777.365878][T17123] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1777.371729][T17123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1777.377418][T17123] ___sys_sendmsg+0xff/0x1e0 [ 1777.382055][T17123] ? __pfx____sys_sendmsg+0x10/0x10 [ 1777.387310][T17123] ? __pfx_lock_release+0x10/0x10 [ 1777.392376][T17123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1777.398050][T17123] ? trace_lock_acquire+0x14e/0x1f0 [ 1777.403405][T17123] ? __fget_files+0x206/0x3a0 [ 1777.408152][T17123] __sys_sendmsg+0x16e/0x220 [ 1777.412789][T17123] ? __pfx___sys_sendmsg+0x10/0x10 [ 1777.417961][T17123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1777.423651][T17123] do_syscall_64+0xcd/0x250 [ 1777.428191][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.434143][T17123] RIP: 0033:0x7f6585380849 [ 1777.438583][T17123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1777.458223][T17123] RSP: 002b:00007f65831b4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1777.466675][T17123] RAX: ffffffffffffffda RBX: 00007f6585546160 RCX: 00007f6585380849 [ 1777.474674][T17123] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000008 [ 1777.482670][T17123] RBP: 00007f65831b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 1777.490668][T17123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.498670][T17123] R13: 0000000000000000 R14: 00007f6585546160 R15: 00007fff760bd2f8 [ 1777.506692][T17123] [ 1777.543997][T17115] loop6: detected capacity change from 0 to 4096 [ 1777.595925][T16802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.617478][T16802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.027118][T17115] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1778.045770][T16802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.083423][T16802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.350717][T17115] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1778.477135][ T5919] usb 8-1: Using ep0 maxpacket: 16 [ 1778.552566][ T5919] usb 8-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1778.571469][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.622769][ T5919] usb 8-1: Product: syz [ 1778.646793][ T5919] usb 8-1: Manufacturer: syz [ 1778.662964][ T5919] usb 8-1: SerialNumber: syz [ 1778.708866][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.763594][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.607356][ T29] audit: type=1107 audit(1732930135.705:104): pid=17134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1779.645070][ T5919] usb 8-1: config 0 descriptor?? [ 1779.665716][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.681338][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.800409][T17145] loop8: detected capacity change from 0 to 128 [ 1779.830544][T17142] syz.1.1882 uses obsolete (PF_INET,SOCK_PACKET) [ 1779.939972][ T5919] usb_8dev 8-1:0.0 can0: sending command message failed [ 1779.948290][ T5919] usb_8dev 8-1:0.0 can0: can't get firmware version [ 1780.010717][T17145] VFS: Found a Xenix FS (block size = 1024) on device loop8 [ 1780.081377][T17151] FAULT_INJECTION: forcing a failure. [ 1780.081377][T17151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.094674][T17151] CPU: 1 UID: 0 PID: 17151 Comm: syz.7.1885 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1780.105229][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1780.115418][T17151] Call Trace: [ 1780.118799][T17151] [ 1780.121753][T17151] dump_stack_lvl+0x16c/0x1f0 [ 1780.126495][T17151] should_fail_ex+0x497/0x5b0 [ 1780.131217][T17151] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1780.136903][T17151] _copy_to_user+0x32/0xd0 [ 1780.141366][T17151] simple_read_from_buffer+0xd0/0x160 [ 1780.146791][T17151] proc_fail_nth_read+0x198/0x270 [ 1780.151864][T17151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.157464][T17151] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1780.163143][T17151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.168739][T17151] vfs_read+0x1e2/0xbe0 [ 1780.172952][T17151] ? __fget_files+0x1fc/0x3a0 [ 1780.177688][T17151] ? __pfx___mutex_lock+0x10/0x10 [ 1780.182834][T17151] ? __pfx_vfs_read+0x10/0x10 [ 1780.187575][T17151] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1780.193249][T17151] ? __fget_files+0x206/0x3a0 [ 1780.197996][T17151] ksys_read+0x12b/0x250 [ 1780.202294][T17151] ? __pfx_ksys_read+0x10/0x10 [ 1780.207114][T17151] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1780.212824][T17151] do_syscall_64+0xcd/0x250 [ 1780.217375][T17151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.223337][T17151] RIP: 0033:0x7fe84877f25c [ 1780.227867][T17151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1780.247682][T17151] RSP: 002b:00007fe8465b4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1780.256228][T17151] RAX: ffffffffffffffda RBX: 00007fe848946160 RCX: 00007fe84877f25c [ 1780.264231][T17151] RDX: 000000000000000f RSI: 00007fe8465b40b0 RDI: 000000000000000b [ 1780.272468][T17151] RBP: 00007fe8465b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 1780.280477][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.288499][T17151] R13: 0000000000000000 R14: 00007fe848946160 R15: 00007ffd319a3e58 [ 1780.296530][T17151] [ 1780.318451][ T29] audit: type=1107 audit(1732930136.975:105): pid=17148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1780.361464][ T5866] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1780.433808][T17145] sysv_free_block: flc_count > flc_size [ 1780.439714][T17145] sysv_free_block: flc_count > flc_size [ 1781.135708][ T29] audit: type=1107 audit(1732930137.785:106): pid=17153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1781.174051][T17145] sysv_free_block: flc_count > flc_size [ 1781.291501][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 1781.307927][T17145] sysv_free_block: flc_count > flc_size [ 1781.313750][T17145] sysv_free_block: flc_count > flc_size [ 1781.319406][T17145] sysv_free_block: flc_count > flc_size [ 1781.325387][T17145] sysv_free_block: flc_count > flc_size [ 1781.331067][T17145] sysv_free_block: flc_count > flc_size [ 1781.336881][T17145] sysv_free_block: flc_count > flc_size [ 1781.342706][T17145] sysv_free_block: flc_count > flc_size [ 1781.353473][T17145] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1782.403809][ T5866] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1783.362194][ T5866] usb 2-1: config 0 has no interface number 0 [ 1783.369504][ T5866] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1783.379672][ T5866] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1783.390208][ T5866] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1784.971733][T17169] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1785.574063][ T5919] usb_8dev 8-1:0.0: probe with driver usb_8dev failed with error -22 [ 1785.699856][ T5866] usb 2-1: string descriptor 0 read error: -71 [ 1785.729221][ T5919] usb 8-1: USB disconnect, device number 3 [ 1785.746433][ T5866] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1785.808614][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.865972][ T5866] usb 2-1: config 0 descriptor?? [ 1785.941676][ T5866] usb 2-1: can't set config #0, error -71 [ 1785.970683][ T5866] usb 2-1: USB disconnect, device number 2 [ 1785.981463][T12178] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1786.153365][T12178] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.384828][T12178] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.392839][T17188] netlink: 'syz.2.1889': attribute type 6 has an invalid length. [ 1788.394789][T12178] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1788.411692][T12178] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.423134][T12178] usb 9-1: config 0 descriptor?? [ 1788.438249][T17180] FAULT_INJECTION: forcing a failure. [ 1788.438249][T17180] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.478564][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.7.1891 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1788.489230][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1788.499326][T17180] Call Trace: [ 1788.502637][T17180] [ 1788.506039][T17180] dump_stack_lvl+0x16c/0x1f0 [ 1788.510800][T17180] should_fail_ex+0x497/0x5b0 [ 1788.515533][T17180] ? fs_reclaim_acquire+0xae/0x150 [ 1788.520718][T17180] should_failslab+0xc2/0x120 [ 1788.525448][T17180] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 1788.531222][T17180] ? ksys_write+0x12b/0x250 [ 1788.535801][T17180] ? sock_alloc_inode+0x25/0x1c0 [ 1788.540837][T17180] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1788.546374][T17180] sock_alloc_inode+0x25/0x1c0 [ 1788.550345][T17179] loop9: detected capacity change from 0 to 2048 [ 1788.551272][T17180] alloc_inode+0x60/0x230 [ 1788.551324][T17180] sock_alloc+0x40/0x280 [ 1788.551383][T17180] do_accept+0xf8/0x530 [ 1788.551427][T17180] ? do_raw_spin_lock+0x12d/0x2c0 [ 1788.551487][T17180] ? __pfx_do_accept+0x10/0x10 [ 1788.551559][T17180] __sys_accept4+0xfe/0x1b0 [ 1788.551604][T17180] ? __pfx___sys_accept4+0x10/0x10 [ 1788.551649][T17180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.551704][T17180] ? __pfx_ksys_write+0x10/0x10 [ 1788.551768][T17180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.551825][T17180] __x64_sys_accept4+0x96/0x100 [ 1788.551869][T17180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.551918][T17180] ? lockdep_hardirqs_on+0x7c/0x110 [ 1788.551991][T17180] do_syscall_64+0xcd/0x250 [ 1788.552037][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.552108][T17180] RIP: 0033:0x7fe848780849 [ 1788.552142][T17180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.552186][T17180] RSP: 002b:00007fe8465d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1788.552230][T17180] RAX: ffffffffffffffda RBX: 00007fe848946080 RCX: 00007fe848780849 [ 1788.552262][T17180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1788.552291][T17180] RBP: 00007fe8465d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 1788.552321][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.552350][T17180] R13: 0000000000000000 R14: 00007fe848946080 R15: 00007ffd319a3e58 [ 1788.552399][T17180] [ 1788.737539][T17188] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 1788.748237][T17179] udf: Unknown parameter 'ÿ|„\ÿ' [ 1788.944913][T12178] usbhid 9-1:0.0: can't add hid device: -71 [ 1788.951153][T12178] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1789.131674][T12178] usb 9-1: USB disconnect, device number 3 [ 1789.720999][T17215] FAULT_INJECTION: forcing a failure. [ 1789.720999][T17215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.813369][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.2.1896 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1789.823892][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1789.834008][T17215] Call Trace: [ 1789.837326][T17215] [ 1789.840296][T17215] dump_stack_lvl+0x16c/0x1f0 [ 1789.845148][T17215] should_fail_ex+0x497/0x5b0 [ 1789.849883][T17215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.855591][T17215] _copy_to_user+0x32/0xd0 [ 1789.860070][T17215] simple_read_from_buffer+0xd0/0x160 [ 1789.865504][T17215] proc_fail_nth_read+0x198/0x270 [ 1789.870580][T17215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1789.876183][T17215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.881869][T17215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1789.887475][T17215] vfs_read+0x1e2/0xbe0 [ 1789.891742][T17215] ? __fget_files+0x1fc/0x3a0 [ 1789.896481][T17215] ? __pfx___mutex_lock+0x10/0x10 [ 1789.901548][T17215] ? __pfx_vfs_read+0x10/0x10 [ 1789.906465][T17215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.912147][T17215] ? __fget_files+0x206/0x3a0 [ 1789.916896][T17215] ksys_read+0x12b/0x250 [ 1789.921202][T17215] ? __pfx_ksys_read+0x10/0x10 [ 1789.926026][T17215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.931717][T17215] do_syscall_64+0xcd/0x250 [ 1789.936264][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.942223][T17215] RIP: 0033:0x7fc3e9f7f25c [ 1789.946671][T17215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1789.966325][T17215] RSP: 002b:00007fc3eacd7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1789.974957][T17215] RAX: ffffffffffffffda RBX: 00007fc3ea146160 RCX: 00007fc3e9f7f25c [ 1789.982959][T17215] RDX: 000000000000000f RSI: 00007fc3eacd70b0 RDI: 000000000000000e [ 1789.990965][T17215] RBP: 00007fc3eacd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1789.998970][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.006976][T17215] R13: 0000000000000000 R14: 00007fc3ea146160 R15: 00007ffd42d77c58 [ 1790.015002][T17215] [ 1790.568533][T17232] loop6: detected capacity change from 0 to 128 [ 1790.600888][T17232] VFS: Found a Xenix FS (block size = 1024) on device loop6 [ 1790.694076][T17232] sysv_free_block: flc_count > flc_size [ 1790.699697][T17232] sysv_free_block: flc_count > flc_size [ 1791.754340][T17232] sysv_free_block: flc_count > flc_size [ 1791.759962][T17232] sysv_free_block: flc_count > flc_size [ 1791.766668][T17232] sysv_free_block: flc_count > flc_size [ 1792.727450][T17232] sysv_free_block: flc_count > flc_size [ 1793.346398][T17245] capability: warning: `syz.1.1899' uses deprecated v2 capabilities in a way that may be insecure [ 1793.841759][T17232] sysv_free_block: flc_count > flc_size [ 1793.861154][T17232] sysv_free_block: flc_count > flc_size [ 1793.907439][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1794.541110][T17232] sysv_free_block: flc_count > flc_size [ 1794.570053][T17232] sysv_free_block: flc_count > flc_size [ 1794.583846][T17232] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1794.621407][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 1794.629433][ T5919] usb 3-1: device descriptor read/all, error -71 [ 1795.029133][T17261] FAULT_INJECTION: forcing a failure. [ 1795.029133][T17261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.891473][T17261] CPU: 1 UID: 0 PID: 17261 Comm: syz.1.1907 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1795.901975][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1795.912068][T17261] Call Trace: [ 1795.915373][T17261] [ 1795.918336][T17261] dump_stack_lvl+0x16c/0x1f0 [ 1795.923109][T17261] should_fail_ex+0x497/0x5b0 [ 1795.927836][T17261] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.933532][T17261] _copy_to_user+0x32/0xd0 [ 1795.938008][T17261] simple_read_from_buffer+0xd0/0x160 [ 1795.943452][T17261] proc_fail_nth_read+0x198/0x270 [ 1795.948538][T17261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1795.954148][T17261] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.959841][T17261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1795.965452][T17261] vfs_read+0x1e2/0xbe0 [ 1795.969678][T17261] ? __fget_files+0x1fc/0x3a0 [ 1795.974431][T17261] ? __pfx___mutex_lock+0x10/0x10 [ 1795.979499][T17261] ? __pfx_vfs_read+0x10/0x10 [ 1795.984259][T17261] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.989946][T17261] ? __fget_files+0x206/0x3a0 [ 1795.994709][T17261] ksys_read+0x12b/0x250 [ 1795.999021][T17261] ? __pfx_ksys_read+0x10/0x10 [ 1796.003853][T17261] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1796.009553][T17261] do_syscall_64+0xcd/0x250 [ 1796.014109][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.020082][T17261] RIP: 0033:0x7fcad477f25c [ 1796.024536][T17261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1796.044218][T17261] RSP: 002b:00007fcad55d7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1796.052661][T17261] RAX: ffffffffffffffda RBX: 00007fcad4945fa0 RCX: 00007fcad477f25c [ 1796.060672][T17261] RDX: 000000000000000f RSI: 00007fcad55d70b0 RDI: 0000000000000004 [ 1796.068682][T17261] RBP: 00007fcad55d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.076692][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.084702][T17261] R13: 0000000000000000 R14: 00007fcad4945fa0 R15: 00007ffd886529a8 [ 1796.092737][T17261] [ 1796.345855][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.352475][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.748061][T17271] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1909'. [ 1799.160057][T17301] usb usb8: usbfs: process 17301 (syz.8.1913) did not claim interface 0 before use [ 1799.329237][T17301] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1799.477356][T17311] usb usb8: usbfs: process 17311 (syz.1.1917) did not claim interface 0 before use [ 1799.512301][T17302] loop2: detected capacity change from 0 to 256 [ 1799.518686][T17313] FAULT_INJECTION: forcing a failure. [ 1799.518686][T17313] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.531643][T17313] CPU: 1 UID: 0 PID: 17313 Comm: syz.6.1918 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1799.536319][T17311] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 1799.542083][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1799.542111][T17313] Call Trace: [ 1799.542126][T17313] [ 1799.542143][T17313] dump_stack_lvl+0x16c/0x1f0 [ 1799.542219][T17313] should_fail_ex+0x497/0x5b0 [ 1799.542264][T17313] ? fs_reclaim_acquire+0xae/0x150 [ 1799.542330][T17313] should_failslab+0xc2/0x120 [ 1799.542380][T17313] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1799.542427][T17313] ? cred_alloc_blank+0x1c/0xa0 [ 1799.542479][T17313] cred_alloc_blank+0x1c/0xa0 [ 1799.600457][T17313] keyctl_session_to_parent+0x55/0xaf0 [ 1799.605966][T17313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1799.611676][T17313] __do_sys_keyctl+0x25c/0x590 [ 1799.616502][T17313] do_syscall_64+0xcd/0x250 [ 1799.621050][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.627004][T17313] RIP: 0033:0x7f4c36d80849 [ 1799.631450][T17313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.651100][T17313] RSP: 002b:00007f4c37b2f058 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1799.659729][T17313] RAX: ffffffffffffffda RBX: 00007f4c36f45fa0 RCX: 00007f4c36d80849 [ 1799.667732][T17313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 1799.675741][T17313] RBP: 00007f4c37b2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1799.683745][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.691744][T17313] R13: 0000000000000001 R14: 00007f4c36f45fa0 R15: 00007ffdf8165038 [ 1799.699850][T17313] [ 1800.392366][T17325] FAULT_INJECTION: forcing a failure. [ 1800.392366][T17325] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.468094][T17325] CPU: 1 UID: 0 PID: 17325 Comm: syz.7.1922 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1800.478599][T17325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1800.488685][T17325] Call Trace: [ 1800.491986][T17325] [ 1800.494941][T17325] dump_stack_lvl+0x16c/0x1f0 [ 1800.499687][T17325] should_fail_ex+0x497/0x5b0 [ 1800.504492][T17325] ? fs_reclaim_acquire+0xae/0x150 [ 1800.509669][T17325] should_failslab+0xc2/0x120 [ 1800.514401][T17325] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1800.519823][T17325] ? cred_alloc_blank+0x1c/0xa0 [ 1800.524731][T17325] cred_alloc_blank+0x1c/0xa0 [ 1800.529458][T17325] keyctl_session_to_parent+0x55/0xaf0 [ 1800.534985][T17325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1800.540684][T17325] __do_sys_keyctl+0x25c/0x590 [ 1800.545603][T17325] do_syscall_64+0xcd/0x250 [ 1800.550155][T17325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.556126][T17325] RIP: 0033:0x7fe848780849 [ 1800.560576][T17325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1800.580237][T17325] RSP: 002b:00007fe8465f6058 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1800.588714][T17325] RAX: ffffffffffffffda RBX: 00007fe848945fa0 RCX: 00007fe848780849 [ 1800.596724][T17325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 1800.604730][T17325] RBP: 00007fe8465f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.612734][T17325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.620911][T17325] R13: 0000000000000001 R14: 00007fe848945fa0 R15: 00007ffd319a3e58 [ 1800.628950][T17325] [ 1800.696831][T17329] loop9: detected capacity change from 0 to 128 [ 1800.929931][T17329] VFS: Found a Xenix FS (block size = 1024) on device loop9 [ 1800.960862][T17329] sysv_free_block: flc_count > flc_size [ 1801.014047][T17329] sysv_free_block: flc_count > flc_size [ 1801.019668][T17329] sysv_free_block: flc_count > flc_size [ 1801.025328][T17329] sysv_free_block: flc_count > flc_size [ 1801.031075][T17329] sysv_free_block: flc_count > flc_size [ 1801.049280][T17329] sysv_free_block: flc_count > flc_size [ 1801.069239][T17329] sysv_free_block: flc_count > flc_size [ 1801.081487][T17329] sysv_free_block: flc_count > flc_size [ 1801.419313][T17329] sysv_free_block: flc_count > flc_size [ 1801.851981][T17329] sysv_free_block: flc_count > flc_size [ 1801.907597][T17329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1802.233649][T17338] loop7: detected capacity change from 0 to 1024 [ 1802.390759][ T5920] kernel write not supported for file /31/attr/keycreate (pid: 5920 comm: kworker/1:5) [ 1802.927178][T17352] loop9: detected capacity change from 0 to 256 [ 1819.281112][ T29] audit: type=1107 audit(1732930176.205:107): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1819.321452][T12178] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1820.242680][T17858] FAULT_INJECTION: forcing a failure. [ 1820.242680][T17858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.291666][T17858] CPU: 0 UID: 0 PID: 17858 Comm: syz.6.1936 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1820.302257][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1820.312351][T17858] Call Trace: [ 1820.315638][T17858] [ 1820.318577][T17858] dump_stack_lvl+0x16c/0x1f0 [ 1820.323321][T17858] should_fail_ex+0x497/0x5b0 [ 1820.328020][T17858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.333710][T17858] _copy_from_user+0x2e/0xd0 [ 1820.338333][T17858] core_sys_select+0x2cf/0xb80 [ 1820.343145][T17858] ? __pfx_core_sys_select+0x10/0x10 [ 1820.348488][T17858] ? get_pid_task+0xfc/0x250 [ 1820.353115][T17858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.358809][T17858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.364518][T17858] ? set_user_sigmask+0x217/0x2a0 [ 1820.369679][T17858] ? __pfx_set_user_sigmask+0x10/0x10 [ 1820.375084][T17858] do_pselect.constprop.0+0x1a0/0x1f0 [ 1820.380496][T17858] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1820.386428][T17858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.392182][T17858] __x64_sys_pselect6+0x183/0x240 [ 1820.397262][T17858] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1820.402890][T17858] do_syscall_64+0xcd/0x250 [ 1820.407417][T17858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.413349][T17858] RIP: 0033:0x7f4c36d80849 [ 1820.417779][T17858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.437418][T17858] RSP: 002b:00007f4c37b2f058 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1820.445857][T17858] RAX: ffffffffffffffda RBX: 00007f4c36f45fa0 RCX: 00007f4c36d80849 [ 1820.453843][T17858] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 1820.461831][T17858] RBP: 00007f4c37b2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1820.469817][T17858] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 1820.477808][T17858] R13: 0000000000000000 R14: 00007f4c36f45fa0 R15: 00007ffdf8165038 [ 1820.485818][T17858] [ 1820.529441][T12178] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.540583][T12178] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1820.615883][T12178] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.639291][T17858] loop6: detected capacity change from 0 to 2048 [ 1820.667381][T12178] usb 8-1: config 0 descriptor?? [ 1821.091096][T17858] udf: Unknown parameter 'ÿ|„\ÿ' [ 1821.908131][T17835] tmpfs: Unknown parameter 'uŸ ¼Ü‹TëFsrquotaâñߢ_P„T}_inode_huÕÎîÄ–°¢Íw '½1£žWÝ?>Ÿ/šÏ—õ‹' [ 1823.872024][T12178] usbhid 8-1:0.0: can't add hid device: -71 [ 1823.878095][T12178] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1823.891346][T12178] usb 8-1: USB disconnect, device number 4 [ 1830.790817][T18089] loop9: detected capacity change from 0 to 512 [ 1832.669957][T18103] loop2: detected capacity change from 0 to 512 [ 1833.189040][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 1835.156349][T18089] EXT4-fs warning (device loop9): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop9. [ 1835.192468][ T5873] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1836.616843][T18112] usb usb8: usbfs: process 18112 (syz.1.1946) did not claim interface 0 before use [ 1837.041195][T18125] loop1: detected capacity change from 0 to 512 [ 1837.117632][T18125] EXT4-fs: Mount option(s) incompatible with ext2 [ 1837.192844][T18130] loop8: detected capacity change from 0 to 512 [ 1837.533866][T18134] FAULT_INJECTION: forcing a failure. [ 1837.533866][T18134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.535376][T18134] [ 1837.535387][T18134] ====================================================== [ 1837.535402][T18134] WARNING: possible circular locking dependency detected [ 1837.535418][T18134] 6.12.0-syzkaller-10740-g509f806f7f70 #0 Not tainted [ 1837.535441][T18134] ------------------------------------------------------ [ 1837.535455][T18134] syz.7.1948/18134 is trying to acquire lock: [ 1837.535476][T18134] ffffffff8e0c8d80 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1837.535587][T18134] [ 1837.535587][T18134] but task is already holding lock: [ 1837.535599][T18134] ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1837.535691][T18134] [ 1837.535691][T18134] which lock already depends on the new lock. [ 1837.535691][T18134] [ 1837.535704][T18134] [ 1837.535704][T18134] the existing dependency chain (in reverse order) is: [ 1837.535718][T18134] [ 1837.535718][T18134] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1837.535769][T18134] _raw_spin_lock_nested+0x31/0x40 [ 1837.535825][T18134] raw_spin_rq_lock_nested+0x29/0x130 [ 1837.535871][T18134] task_rq_lock+0xcf/0x3b0 [ 1837.535916][T18134] cgroup_move_task+0x82/0x250 [ 1837.535953][T18134] css_set_move_task+0x288/0x5f0 [ 1837.535996][T18134] cgroup_post_fork+0x1c6/0x910 [ 1837.536050][T18134] copy_process+0x50d9/0x8df0 [ 1837.536106][T18134] kernel_clone+0xfd/0x960 [ 1837.536160][T18134] user_mode_thread+0xb4/0xf0 [ 1837.536215][T18134] rest_init+0x23/0x2b0 [ 1837.536263][T18134] start_kernel+0x3e4/0x4d0 [ 1837.536302][T18134] x86_64_start_reservations+0x18/0x30 [ 1837.536342][T18134] x86_64_start_kernel+0xb2/0xc0 [ 1837.536380][T18134] common_startup_64+0x13e/0x148 [ 1837.536431][T18134] [ 1837.536431][T18134] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1837.536483][T18134] _raw_spin_lock_irqsave+0x3a/0x60 [ 1837.536538][T18134] try_to_wake_up+0xb6/0x1490 [ 1837.536582][T18134] __wake_up_common+0x134/0x1e0 [ 1837.536636][T18134] __wake_up+0x31/0x60 [ 1837.536673][T18134] tty_port_default_wakeup+0x2a/0x40 [ 1837.536725][T18134] serial8250_tx_chars+0x68e/0x860 [ 1837.536780][T18134] serial8250_handle_irq+0x74d/0xc80 [ 1837.536836][T18134] serial8250_default_handle_irq+0x9a/0x210 [ 1837.536893][T18134] serial8250_interrupt+0x106/0x210 [ 1837.536951][T18134] __handle_irq_event_percpu+0x22c/0x7d0 [ 1837.537010][T18134] handle_irq_event+0xab/0x1e0 [ 1837.537067][T18134] handle_edge_irq+0x263/0xd10 [ 1837.537120][T18134] __common_interrupt+0xe2/0x250 [ 1837.537182][T18134] common_interrupt+0xba/0xe0 [ 1837.537229][T18134] asm_common_interrupt+0x26/0x40 [ 1837.537271][T18134] preempt_count_add+0x4e/0x150 [ 1837.537310][T18134] unwind_next_frame+0xb1/0x20c0 [ 1837.537357][T18134] arch_stack_walk+0x95/0x100 [ 1837.537406][T18134] stack_trace_save+0x95/0xd0 [ 1837.537468][T18134] kasan_save_stack+0x33/0x60 [ 1837.537506][T18134] kasan_save_track+0x14/0x30 [ 1837.537541][T18134] __kasan_kmalloc+0xaa/0xb0 [ 1837.537576][T18134] __kmalloc_noprof+0x21c/0x510 [ 1837.537615][T18134] tomoyo_encode2+0x100/0x3e0 [ 1837.537666][T18134] tomoyo_encode+0x29/0x50 [ 1837.537715][T18134] tomoyo_realpath_from_path+0x19d/0x720 [ 1837.537769][T18134] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1837.537814][T18134] tomoyo_file_open+0x6b/0x90 [ 1837.537873][T18134] security_file_open+0x84/0x1e0 [ 1837.537924][T18134] do_dentry_open+0x57e/0x1ea0 [ 1837.537985][T18134] vfs_open+0x82/0x3f0 [ 1837.538027][T18134] path_openat+0x1e6a/0x2d60 [ 1837.538088][T18134] do_filp_open+0x20c/0x470 [ 1837.538149][T18134] do_sys_openat2+0x17a/0x1e0 [ 1837.538195][T18134] __x64_sys_openat+0x175/0x210 [ 1837.538246][T18134] do_syscall_64+0xcd/0x250 [ 1837.538283][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.538350][T18134] [ 1837.538350][T18134] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1837.538402][T18134] _raw_spin_lock_irqsave+0x3a/0x60 [ 1837.538458][T18134] __wake_up+0x1c/0x60 [ 1837.538495][T18134] tty_port_default_wakeup+0x2a/0x40 [ 1837.538546][T18134] serial8250_tx_chars+0x68e/0x860 [ 1837.538596][T18134] serial8250_handle_irq+0x74d/0xc80 [ 1837.538651][T18134] serial8250_default_handle_irq+0x9a/0x210 [ 1837.538708][T18134] serial8250_interrupt+0x106/0x210 [ 1837.538767][T18134] __handle_irq_event_percpu+0x22c/0x7d0 [ 1837.538826][T18134] handle_irq_event+0xab/0x1e0 [ 1837.538882][T18134] handle_edge_irq+0x263/0xd10 [ 1837.538933][T18134] __common_interrupt+0xe2/0x250 [ 1837.538995][T18134] common_interrupt+0xba/0xe0 [ 1837.539041][T18134] asm_common_interrupt+0x26/0x40 [ 1837.539079][T18134] acpi_safe_halt+0x1a/0x20 [ 1837.539122][T18134] acpi_idle_enter+0xc5/0x160 [ 1837.539166][T18134] cpuidle_enter_state+0xad/0x4f0 [ 1837.539206][T18134] cpuidle_enter+0x4e/0xa0 [ 1837.539266][T18134] do_idle+0x310/0x3f0 [ 1837.539305][T18134] cpu_startup_entry+0x4f/0x60 [ 1837.539346][T18134] start_secondary+0x222/0x2b0 [ 1837.539382][T18134] common_startup_64+0x13e/0x148 [ 1837.539432][T18134] [ 1837.539432][T18134] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1837.539483][T18134] _raw_spin_lock_irqsave+0x3a/0x60 [ 1837.539538][T18134] serial8250_console_write+0xb56/0x17c0 [ 1837.539597][T18134] console_flush_all+0x803/0xc60 [ 1837.539652][T18134] console_unlock+0xd9/0x210 [ 1837.539707][T18134] vprintk_emit+0x424/0x6f0 [ 1837.539762][T18134] vprintk+0x7f/0xa0 [ 1837.539821][T18134] _printk+0xc8/0x100 [ 1837.539863][T18134] register_console+0xbfd/0x1170 [ 1837.539921][T18134] univ8250_console_init+0x5f/0x90 [ 1837.539975][T18134] console_init+0x154/0x690 [ 1837.540012][T18134] start_kernel+0x29a/0x4d0 [ 1837.540049][T18134] x86_64_start_reservations+0x18/0x30 [ 1837.540090][T18134] x86_64_start_kernel+0xb2/0xc0 [ 1837.540128][T18134] common_startup_64+0x13e/0x148 [ 1837.540178][T18134] [ 1837.540178][T18134] -> #0 (console_owner){....}-{0:0}: [ 1837.540230][T18134] __lock_acquire+0x249e/0x3c40 [ 1837.540277][T18134] lock_acquire.part.0+0x11b/0x380 [ 1837.540322][T18134] console_lock_spinning_enable+0xb0/0xd0 [ 1837.540379][T18134] console_flush_all+0x7ac/0xc60 [ 1837.540435][T18134] console_unlock+0xd9/0x210 [ 1837.540489][T18134] vprintk_emit+0x424/0x6f0 [ 1837.540545][T18134] vprintk+0x7f/0xa0 [ 1837.540602][T18134] _printk+0xc8/0x100 [ 1837.540644][T18134] should_fail_ex+0x46c/0x5b0 [ 1837.540684][T18134] strncpy_from_user+0x3b/0x2d0 [ 1837.540745][T18134] strncpy_from_user_nofault+0x7f/0x180 [ 1837.540785][T18134] bpf_probe_read_compat_str+0xf1/0x170 [ 1837.540825][T18134] bpf_prog_e42f6260c1b72fb3+0x3e/0x44 [ 1837.540857][T18134] bpf_trace_run4+0x248/0x5a0 [ 1837.540917][T18134] __bpf_trace_sched_switch+0x13e/0x190 [ 1837.540966][T18134] __traceiter_sched_switch+0x6f/0xc0 [ 1837.541009][T18134] __schedule+0x1b71/0x5ad0 [ 1837.541064][T18134] schedule+0xe7/0x350 [ 1837.541117][T18134] syscall_exit_to_user_mode+0xf5/0x2a0 [ 1837.541182][T18134] do_syscall_64+0xda/0x250 [ 1837.541219][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.541297][T18134] [ 1837.541297][T18134] other info that might help us debug this: [ 1837.541297][T18134] [ 1837.541310][T18134] Chain exists of: [ 1837.541310][T18134] console_owner --> &p->pi_lock --> &rq->__lock [ 1837.541310][T18134] [ 1837.541367][T18134] Possible unsafe locking scenario: [ 1837.541367][T18134] [ 1837.541379][T18134] CPU0 CPU1 [ 1837.541390][T18134] ---- ---- [ 1837.541401][T18134] lock(&rq->__lock); [ 1837.541425][T18134] lock(&p->pi_lock); [ 1837.541452][T18134] lock(&rq->__lock); [ 1837.541479][T18134] lock(console_owner); [ 1837.541503][T18134] [ 1837.541503][T18134] *** DEADLOCK *** [ 1837.541503][T18134] [ 1837.541513][T18134] 4 locks held by syz.7.1948/18134: [ 1837.541538][T18134] #0: ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1837.541639][T18134] #1: ffffffff8e1bbb40 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d6/0x5a0 [ 1837.541734][T18134] #2: ffffffff8e1a91c0 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 [ 1837.541847][T18134] #3: ffffffff8e1a9230 (console_srcu){....}-{0:0}, at: console_flush_all+0x159/0xc60 [ 1837.541957][T18134] [ 1837.541957][T18134] stack backtrace: [ 1837.541969][T18134] CPU: 1 UID: 0 PID: 18134 Comm: syz.7.1948 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1837.542018][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1837.542042][T18134] Call Trace: [ 1837.542055][T18134] [ 1837.542070][T18134] dump_stack_lvl+0x116/0x1f0 [ 1837.542137][T18134] print_circular_bug+0x419/0x5d0 [ 1837.542186][T18134] check_noncircular+0x31a/0x400 [ 1837.542232][T18134] ? __pfx_check_noncircular+0x10/0x10 [ 1837.542287][T18134] ? lockdep_lock+0xc6/0x200 [ 1837.542349][T18134] ? __pfx_lockdep_lock+0x10/0x10 [ 1837.542415][T18134] __lock_acquire+0x249e/0x3c40 [ 1837.542472][T18134] ? __pfx___lock_acquire+0x10/0x10 [ 1837.542525][T18134] lock_acquire.part.0+0x11b/0x380 [ 1837.542573][T18134] ? console_lock_spinning_enable+0x9f/0xd0 [ 1837.542635][T18134] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1837.542685][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.542734][T18134] ? rcu_is_watching+0x12/0xc0 [ 1837.542794][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.542843][T18134] ? trace_lock_acquire+0x14e/0x1f0 [ 1837.542908][T18134] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1837.542964][T18134] ? console_lock_spinning_enable+0x9f/0xd0 [ 1837.543023][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.543073][T18134] ? lock_acquire+0x2f/0xb0 [ 1837.543117][T18134] ? console_lock_spinning_enable+0x9f/0xd0 [ 1837.543179][T18134] console_lock_spinning_enable+0xb0/0xd0 [ 1837.543238][T18134] ? console_lock_spinning_enable+0x9f/0xd0 [ 1837.543300][T18134] console_flush_all+0x7ac/0xc60 [ 1837.543365][T18134] ? __pfx_console_flush_all+0x10/0x10 [ 1837.543426][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.543477][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.543526][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.543575][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.543624][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.543672][T18134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1837.543732][T18134] console_unlock+0xd9/0x210 [ 1837.543790][T18134] ? __pfx_console_unlock+0x10/0x10 [ 1837.543848][T18134] ? __entry_text_end+0x1020c5/0x1020c9 [ 1837.543896][T18134] ? lock_acquire+0x2f/0xb0 [ 1837.543942][T18134] ? vprintk+0x7f/0xa0 [ 1837.544004][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.544053][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.544104][T18134] vprintk_emit+0x424/0x6f0 [ 1837.544164][T18134] ? __pfx_vprintk_emit+0x10/0x10 [ 1837.544224][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.544276][T18134] ? hlock_class+0x4e/0x130 [ 1837.544335][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.544384][T18134] ? __lock_acquire+0xcc5/0x3c40 [ 1837.544434][T18134] vprintk+0x7f/0xa0 [ 1837.544496][T18134] _printk+0xc8/0x100 [ 1837.544542][T18134] ? __pfx__printk+0x10/0x10 [ 1837.544587][T18134] ? __pfx___schedule+0x10/0x10 [ 1837.544647][T18134] ? ___ratelimit+0x24c/0x570 [ 1837.544719][T18134] ? __pfx____ratelimit+0x10/0x10 [ 1837.544792][T18134] should_fail_ex+0x46c/0x5b0 [ 1837.544835][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.544883][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.544935][T18134] strncpy_from_user+0x3b/0x2d0 [ 1837.544997][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.545050][T18134] strncpy_from_user_nofault+0x7f/0x180 [ 1837.545094][T18134] bpf_probe_read_compat_str+0xf1/0x170 [ 1837.545139][T18134] bpf_prog_e42f6260c1b72fb3+0x3e/0x44 [ 1837.545173][T18134] bpf_trace_run4+0x248/0x5a0 [ 1837.545223][T18134] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1837.545274][T18134] ? __pfx___lock_acquire+0x10/0x10 [ 1837.545330][T18134] __bpf_trace_sched_switch+0x13e/0x190 [ 1837.545382][T18134] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1837.545433][T18134] ? plist_check_prev_next+0x12a/0x1a0 [ 1837.545493][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.545544][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.545593][T18134] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1837.545652][T18134] __traceiter_sched_switch+0x6f/0xc0 [ 1837.545701][T18134] __schedule+0x1b71/0x5ad0 [ 1837.545762][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.545816][T18134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1837.545887][T18134] ? __pfx___schedule+0x10/0x10 [ 1837.545945][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.545994][T18134] ? __fget_files+0x206/0x3a0 [ 1837.546060][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.546111][T18134] ? fput+0x67/0x440 [ 1837.546156][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1837.546205][T18134] ? ksys_write+0x1ba/0x250 [ 1837.546274][T18134] schedule+0xe7/0x350 [ 1837.546332][T18134] syscall_exit_to_user_mode+0xf5/0x2a0 [ 1837.546401][T18134] do_syscall_64+0xda/0x250 [ 1837.546443][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.546512][T18134] RIP: 0033:0x7fe84877f2ff [ 1837.546542][T18134] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 1837.546584][T18134] RSP: 002b:00007fe8465b4050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1837.546623][T18134] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 00007fe84877f2ff [ 1837.546651][T18134] RDX: 0000000000000001 RSI: 00007fe8465b40a0 RDI: 0000000000000007 [ 1837.546679][T18134] RBP: 00007fe8465b40a0 R08: 0000000000000000 R09: 00007fe8465b3e17 [ 1837.546707][T18134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1837.546734][T18134] R13: 0000000000000000 R14: 00007fe848946160 R15: 00007ffd319a3e58 [ 1837.546776][T18134] [ 1838.898804][T18134] CPU: 1 UID: 0 PID: 18134 Comm: syz.7.1948 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1838.909237][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1838.919294][T18134] Call Trace: [ 1838.922576][T18134] [ 1838.925506][T18134] dump_stack_lvl+0x116/0x1f0 [ 1838.930217][T18134] should_fail_ex+0x497/0x5b0 [ 1838.934907][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1838.940552][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1838.946201][T18134] strncpy_from_user+0x3b/0x2d0 [ 1838.951078][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1838.956729][T18134] strncpy_from_user_nofault+0x7f/0x180 [ 1838.962290][T18134] bpf_probe_read_compat_str+0xf1/0x170 [ 1838.967945][T18134] bpf_prog_e42f6260c1b72fb3+0x3e/0x44 [ 1838.973407][T18134] bpf_trace_run4+0x248/0x5a0 [ 1838.978098][T18134] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1838.983310][T18134] ? __pfx___lock_acquire+0x10/0x10 [ 1838.988528][T18134] __bpf_trace_sched_switch+0x13e/0x190 [ 1838.994092][T18134] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1839.000178][T18134] ? plist_check_prev_next+0x12a/0x1a0 [ 1839.005758][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.011411][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.017059][T18134] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1839.023757][T18134] __traceiter_sched_switch+0x6f/0xc0 [ 1839.029342][T18134] __schedule+0x1b71/0x5ad0 [ 1839.033892][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.039546][T18134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1839.045563][T18134] ? __pfx___schedule+0x10/0x10 [ 1839.050468][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.056140][T18134] ? __fget_files+0x206/0x3a0 [ 1839.060846][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.066509][T18134] ? fput+0x67/0x440 [ 1839.070417][T18134] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.076062][T18134] ? ksys_write+0x1ba/0x250 [ 1839.080594][T18134] schedule+0xe7/0x350 [ 1839.084688][T18134] syscall_exit_to_user_mode+0xf5/0x2a0 [ 1839.090525][T18134] do_syscall_64+0xda/0x250 [ 1839.095037][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.100961][T18134] RIP: 0033:0x7fe84877f2ff [ 1839.105380][T18134] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 1839.125000][T18134] RSP: 002b:00007fe8465b4050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1839.133425][T18134] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 00007fe84877f2ff [ 1839.141398][T18134] RDX: 0000000000000001 RSI: 00007fe8465b40a0 RDI: 0000000000000007 [ 1839.149375][T18134] RBP: 00007fe8465b40a0 R08: 0000000000000000 R09: 00007fe8465b3e17 [ 1839.157351][T18134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1839.165326][T18134] R13: 0000000000000000 R14: 00007fe848946160 R15: 00007ffd319a3e58 [ 1839.173334][T18134] [ 1839.176547][ T5839] ------------[ cut here ]------------ [ 1839.182020][ T5839] WARNING: CPU: 0 PID: 5839 at kernel/sched/deadline.c:1995 enqueue_dl_entity+0x1390/0x2a60 [ 1839.192111][ T5839] Modules linked in: [ 1839.196008][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1839.206517][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1839.216571][ T5839] RIP: 0010:enqueue_dl_entity+0x1390/0x2a60 [ 1839.222482][ T5839] Code: f1 ff ff 44 8b 1c 24 45 85 db 0f 84 07 fa ff ff 48 83 c4 28 44 89 e6 48 89 cf 5b 5d 41 5c 41 5d 41 5e 41 5f e9 91 61 ff ff 90 <0f> 0b 90 e9 a0 ec ff ff 90 0f 0b 90 e9 44 f3 ff ff 45 84 f6 0f 85 [ 1839.242108][ T5839] RSP: 0018:ffffc9000478f550 EFLAGS: 00010082 [ 1839.248185][ T5839] RAX: dffffc0000000000 RBX: ffff8880b863f5a8 RCX: ffff8880b863f5a8 [ 1839.256160][ T5839] RDX: 1ffff110170c7eb5 RSI: 0000000000000001 RDI: ffff8880b863f5a8 [ 1839.264135][ T5839] RBP: ffff8880b863f5fc R08: 0000000000000001 R09: 0000000000000000 [ 1839.272128][ T5839] R10: ffff888071010147 R11: 0000000000000000 R12: 0000000000000001 [ 1839.280099][ T5839] R13: ffff8880b863ebc0 R14: 000000000016e360 R15: dffffc0000000000 [ 1839.288080][ T5839] FS: 0000555577b88500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1839.297019][ T5839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1839.303606][ T5839] CR2: 0000000000000000 CR3: 0000000071274000 CR4: 0000000000350ef0 [ 1839.311582][ T5839] Call Trace: [ 1839.314945][ T5839] [ 1839.317876][ T5839] ? __warn+0xea/0x3c0 [ 1839.322041][ T5839] ? enqueue_dl_entity+0x1390/0x2a60 [ 1839.327346][ T5839] ? report_bug+0x3c0/0x580 [ 1839.331878][ T5839] ? handle_bug+0x54/0xa0 [ 1839.336219][ T5839] ? exc_invalid_op+0x17/0x50 [ 1839.340930][ T5839] ? asm_exc_invalid_op+0x1a/0x20 [ 1839.345971][ T5839] ? enqueue_dl_entity+0x1390/0x2a60 [ 1839.351275][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.356922][ T5839] ? place_entity+0x310/0x400 [ 1839.361624][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.367277][ T5839] dl_server_start+0xb9/0x700 [ 1839.371986][ T5839] enqueue_task_fair+0x550/0xfb0 [ 1839.376939][ T5839] enqueue_task+0x76/0x3e0 [ 1839.381378][ T5839] activate_task+0x54/0xd0 [ 1839.385806][ T5839] attach_task+0x116/0x1b0 [ 1839.390241][ T5839] sched_balance_rq+0x1456/0x2ec0 [ 1839.395290][ T5839] ? __pfx_sched_balance_rq+0x10/0x10 [ 1839.400675][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.406328][ T5839] ? sched_balance_newidle+0x47c/0x1190 [ 1839.411888][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.417532][ T5839] ? lock_acquire+0x2f/0xb0 [ 1839.422046][ T5839] ? sched_balance_newidle+0x47c/0x1190 [ 1839.427608][ T5839] sched_balance_newidle+0x6bb/0x1190 [ 1839.433006][ T5839] ? __pfx_sched_balance_newidle+0x10/0x10 [ 1839.438926][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.444579][ T5839] ? pick_task_fair+0x1b6/0x290 [ 1839.449443][ T5839] pick_next_task_fair+0x50/0x1280 [ 1839.454571][ T5839] __pick_next_task+0xf1/0x6c0 [ 1839.459346][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.465005][ T5839] __schedule+0x430/0x5ad0 [ 1839.469449][ T5839] ? rcu_is_watching+0x12/0xc0 [ 1839.474237][ T5839] ? hrtimer_start_range_ns+0x4a7/0xc60 [ 1839.479833][ T5839] ? __pfx___schedule+0x10/0x10 [ 1839.484713][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.490377][ T5839] ? lock_release+0x4e2/0x6f0 [ 1839.495075][ T5839] ? schedule+0x298/0x350 [ 1839.499436][ T5839] ? __pfx_lock_release+0x10/0x10 [ 1839.504485][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.510145][ T5839] ? trace_lock_acquire+0x14e/0x1f0 [ 1839.515401][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.521051][ T5839] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1839.526882][ T5839] ? schedule+0x1fd/0x350 [ 1839.531319][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.536964][ T5839] ? lock_acquire+0x2f/0xb0 [ 1839.541481][ T5839] ? schedule+0x1fd/0x350 [ 1839.545836][ T5839] ? do_nanosleep+0x18a/0x510 [ 1839.550530][ T5839] schedule+0xe7/0x350 [ 1839.554622][ T5839] do_nanosleep+0x216/0x510 [ 1839.559180][ T5839] ? __pfx_do_nanosleep+0x10/0x10 [ 1839.564221][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.569867][ T5839] ? __asan_memset+0x23/0x50 [ 1839.574481][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.580128][ T5839] ? __hrtimer_init+0x106/0x2c0 [ 1839.585005][ T5839] hrtimer_nanosleep+0x158/0x380 [ 1839.589967][ T5839] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1839.595557][ T5839] ? __might_fault+0xe3/0x190 [ 1839.600252][ T5839] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1839.605469][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.611124][ T5839] ? get_timespec64+0x148/0x240 [ 1839.616008][ T5839] ? __pfx_get_timespec64+0x10/0x10 [ 1839.621233][ T5839] common_nsleep+0xa1/0xd0 [ 1839.625678][ T5839] __x64_sys_clock_nanosleep+0x347/0x4a0 [ 1839.631516][ T5839] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1839.637698][ T5839] ? rcu_is_watching+0x12/0xc0 [ 1839.642507][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.648157][ T5839] ? rcu_is_watching+0x12/0xc0 [ 1839.652963][ T5839] do_syscall_64+0xcd/0x250 [ 1839.657499][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.663419][ T5839] RIP: 0033:0x7f6e231b28e3 [ 1839.667835][ T5839] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e ec 15 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1839.687479][ T5839] RSP: 002b:00007fff3ec73308 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1839.695928][ T5839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e231b28e3 [ 1839.703904][ T5839] RDX: 00007fff3ec73320 RSI: 0000000000000000 RDI: 0000000000000000 [ 1839.711881][ T5839] RBP: 0000000000000000 R08: 00000000000593fc R09: 00007f6e2405f000 [ 1839.719857][ T5839] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff3ec73760 [ 1839.727833][ T5839] R13: 0000000000000004 R14: 00007fff3ec7335c R15: 00007fff3ec733e0 [ 1839.735844][ T5839] [ 1839.738861][ T5839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1839.746161][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1839.757107][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1839.767186][ T5839] Call Trace: [ 1839.770470][ T5839] [ 1839.773403][ T5839] dump_stack_lvl+0x3d/0x1f0 [ 1839.778044][ T5839] panic+0x71d/0x800 [ 1839.781969][ T5839] ? __pfx_panic+0x10/0x10 [ 1839.786506][ T5839] ? show_trace_log_lvl+0x29d/0x3d0 [ 1839.791720][ T5839] ? check_panic_on_warn+0x1f/0xb0 [ 1839.796841][ T5839] ? enqueue_dl_entity+0x1390/0x2a60 [ 1839.802268][ T5839] check_panic_on_warn+0xab/0xb0 [ 1839.807231][ T5839] __warn+0xf6/0x3c0 [ 1839.811140][ T5839] ? enqueue_dl_entity+0x1390/0x2a60 [ 1839.816443][ T5839] report_bug+0x3c0/0x580 [ 1839.820800][ T5839] handle_bug+0x54/0xa0 [ 1839.824970][ T5839] exc_invalid_op+0x17/0x50 [ 1839.829489][ T5839] asm_exc_invalid_op+0x1a/0x20 [ 1839.834456][ T5839] RIP: 0010:enqueue_dl_entity+0x1390/0x2a60 [ 1839.840370][ T5839] Code: f1 ff ff 44 8b 1c 24 45 85 db 0f 84 07 fa ff ff 48 83 c4 28 44 89 e6 48 89 cf 5b 5d 41 5c 41 5d 41 5e 41 5f e9 91 61 ff ff 90 <0f> 0b 90 e9 a0 ec ff ff 90 0f 0b 90 e9 44 f3 ff ff 45 84 f6 0f 85 [ 1839.859992][ T5839] RSP: 0018:ffffc9000478f550 EFLAGS: 00010082 [ 1839.866111][ T5839] RAX: dffffc0000000000 RBX: ffff8880b863f5a8 RCX: ffff8880b863f5a8 [ 1839.874109][ T5839] RDX: 1ffff110170c7eb5 RSI: 0000000000000001 RDI: ffff8880b863f5a8 [ 1839.882103][ T5839] RBP: ffff8880b863f5fc R08: 0000000000000001 R09: 0000000000000000 [ 1839.890081][ T5839] R10: ffff888071010147 R11: 0000000000000000 R12: 0000000000000001 [ 1839.898165][ T5839] R13: ffff8880b863ebc0 R14: 000000000016e360 R15: dffffc0000000000 [ 1839.906248][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.911920][ T5839] ? place_entity+0x310/0x400 [ 1839.916621][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.922292][ T5839] dl_server_start+0xb9/0x700 [ 1839.927001][ T5839] enqueue_task_fair+0x550/0xfb0 [ 1839.931977][ T5839] enqueue_task+0x76/0x3e0 [ 1839.936417][ T5839] activate_task+0x54/0xd0 [ 1839.940846][ T5839] attach_task+0x116/0x1b0 [ 1839.945306][ T5839] sched_balance_rq+0x1456/0x2ec0 [ 1839.950467][ T5839] ? __pfx_sched_balance_rq+0x10/0x10 [ 1839.955944][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.961600][ T5839] ? sched_balance_newidle+0x47c/0x1190 [ 1839.967164][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.972924][ T5839] ? lock_acquire+0x2f/0xb0 [ 1839.977444][ T5839] ? sched_balance_newidle+0x47c/0x1190 [ 1839.983030][ T5839] sched_balance_newidle+0x6bb/0x1190 [ 1839.988426][ T5839] ? __pfx_sched_balance_newidle+0x10/0x10 [ 1839.994254][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1839.999935][ T5839] ? pick_task_fair+0x1b6/0x290 [ 1840.004800][ T5839] pick_next_task_fair+0x50/0x1280 [ 1840.009931][ T5839] __pick_next_task+0xf1/0x6c0 [ 1840.014706][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.020360][ T5839] __schedule+0x430/0x5ad0 [ 1840.024802][ T5839] ? rcu_is_watching+0x12/0xc0 [ 1840.029588][ T5839] ? hrtimer_start_range_ns+0x4a7/0xc60 [ 1840.035271][ T5839] ? __pfx___schedule+0x10/0x10 [ 1840.040147][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.045811][ T5839] ? lock_release+0x4e2/0x6f0 [ 1840.050592][ T5839] ? schedule+0x298/0x350 [ 1840.054946][ T5839] ? __pfx_lock_release+0x10/0x10 [ 1840.060009][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.065665][ T5839] ? trace_lock_acquire+0x14e/0x1f0 [ 1840.070891][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.076543][ T5839] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1840.082379][ T5839] ? schedule+0x1fd/0x350 [ 1840.086995][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.092642][ T5839] ? lock_acquire+0x2f/0xb0 [ 1840.097163][ T5839] ? schedule+0x1fd/0x350 [ 1840.101515][ T5839] ? do_nanosleep+0x18a/0x510 [ 1840.106306][ T5839] schedule+0xe7/0x350 [ 1840.110402][ T5839] do_nanosleep+0x216/0x510 [ 1840.114925][ T5839] ? __pfx_do_nanosleep+0x10/0x10 [ 1840.119969][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.125615][ T5839] ? __asan_memset+0x23/0x50 [ 1840.130319][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.135964][ T5839] ? __hrtimer_init+0x106/0x2c0 [ 1840.140833][ T5839] hrtimer_nanosleep+0x158/0x380 [ 1840.145805][ T5839] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1840.151287][ T5839] ? __might_fault+0xe3/0x190 [ 1840.155981][ T5839] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1840.161201][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.166851][ T5839] ? get_timespec64+0x148/0x240 [ 1840.171713][ T5839] ? __pfx_get_timespec64+0x10/0x10 [ 1840.176925][ T5839] common_nsleep+0xa1/0xd0 [ 1840.181358][ T5839] __x64_sys_clock_nanosleep+0x347/0x4a0 [ 1840.187014][ T5839] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1840.193216][ T5839] ? rcu_is_watching+0x12/0xc0 [ 1840.198010][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1840.203657][ T5839] ? rcu_is_watching+0x12/0xc0 [ 1840.208445][ T5839] do_syscall_64+0xcd/0x250 [ 1840.212958][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.218880][ T5839] RIP: 0033:0x7f6e231b28e3 [ 1840.223299][ T5839] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e ec 15 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1840.242920][ T5839] RSP: 002b:00007fff3ec73308 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1840.251346][ T5839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e231b28e3 [ 1840.259322][ T5839] RDX: 00007fff3ec73320 RSI: 0000000000000000 RDI: 0000000000000000 [ 1840.267298][ T5839] RBP: 0000000000000000 R08: 00000000000593fc R09: 00007f6e2405f000 [ 1840.275298][ T5839] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff3ec73760 [ 1840.283281][ T5839] R13: 0000000000000004 R14: 00007fff3ec7335c R15: 00007fff3ec733e0 [ 1840.291288][ T5839] [ 1841.425677][ T5839] Shutting down cpus with NMI [ 1841.430702][ T5839] Kernel Offset: disabled [ 1841.435044][ T5839] Rebooting in 86400 seconds..