Warning: Permanently added '[localhost]:12349' (ECDSA) to the list of known hosts. 2025/07/02 12:47:36 fuzzer started 2025/07/02 12:47:36 dialing manager at localhost:45015 syzkaller login: [ 51.032110] cgroup: Unknown subsys name 'net' [ 51.107372] cgroup: Unknown subsys name 'cpuset' [ 51.133926] cgroup: Unknown subsys name 'rlimit' 2025/07/02 12:47:46 syscalls: 2214 2025/07/02 12:47:46 code coverage: enabled 2025/07/02 12:47:46 comparison tracing: enabled 2025/07/02 12:47:46 extra coverage: enabled 2025/07/02 12:47:46 setuid sandbox: enabled 2025/07/02 12:47:46 namespace sandbox: enabled 2025/07/02 12:47:46 Android sandbox: enabled 2025/07/02 12:47:46 fault injection: enabled 2025/07/02 12:47:46 leak checking: enabled 2025/07/02 12:47:46 net packet injection: enabled 2025/07/02 12:47:46 net device setup: enabled 2025/07/02 12:47:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 12:47:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 12:47:46 USB emulation: enabled 2025/07/02 12:47:46 hci packet injection: enabled 2025/07/02 12:47:46 wifi device emulation: enabled 2025/07/02 12:47:46 802.15.4 emulation: enabled 2025/07/02 12:47:46 fetching corpus: 50, signal 19860/21647 (executing program) 2025/07/02 12:47:47 fetching corpus: 100, signal 26128/29530 (executing program) 2025/07/02 12:47:47 fetching corpus: 150, signal 35383/40151 (executing program) 2025/07/02 12:47:47 fetching corpus: 200, signal 41566/47653 (executing program) 2025/07/02 12:47:47 fetching corpus: 250, signal 47701/54944 (executing program) 2025/07/02 12:47:47 fetching corpus: 300, signal 50091/58636 (executing program) 2025/07/02 12:47:47 fetching corpus: 350, signal 52422/62206 (executing program) 2025/07/02 12:47:47 fetching corpus: 400, signal 55847/66665 (executing program) 2025/07/02 12:47:47 fetching corpus: 450, signal 57872/69782 (executing program) 2025/07/02 12:47:47 fetching corpus: 500, signal 59828/72827 (executing program) 2025/07/02 12:47:47 fetching corpus: 550, signal 61814/75869 (executing program) 2025/07/02 12:47:47 fetching corpus: 600, signal 68497/82847 (executing program) 2025/07/02 12:47:48 fetching corpus: 650, signal 70812/85970 (executing program) 2025/07/02 12:47:48 fetching corpus: 700, signal 73348/89300 (executing program) 2025/07/02 12:47:48 fetching corpus: 750, signal 74482/91350 (executing program) 2025/07/02 12:47:48 fetching corpus: 800, signal 76136/93759 (executing program) 2025/07/02 12:47:48 fetching corpus: 850, signal 76977/95507 (executing program) 2025/07/02 12:47:48 fetching corpus: 900, signal 78048/97447 (executing program) 2025/07/02 12:47:48 fetching corpus: 950, signal 80626/100491 (executing program) 2025/07/02 12:47:48 fetching corpus: 1000, signal 83438/103696 (executing program) 2025/07/02 12:47:48 fetching corpus: 1050, signal 85830/106499 (executing program) 2025/07/02 12:47:48 fetching corpus: 1100, signal 87600/108763 (executing program) 2025/07/02 12:47:48 fetching corpus: 1150, signal 88725/110511 (executing program) 2025/07/02 12:47:48 fetching corpus: 1200, signal 89513/112014 (executing program) 2025/07/02 12:47:49 fetching corpus: 1250, signal 90530/113683 (executing program) 2025/07/02 12:47:49 fetching corpus: 1300, signal 92266/115814 (executing program) 2025/07/02 12:47:49 fetching corpus: 1350, signal 93085/117316 (executing program) 2025/07/02 12:47:49 fetching corpus: 1400, signal 94456/119111 (executing program) 2025/07/02 12:47:49 fetching corpus: 1450, signal 95677/120784 (executing program) 2025/07/02 12:47:49 fetching corpus: 1500, signal 97209/122636 (executing program) 2025/07/02 12:47:49 fetching corpus: 1550, signal 98575/124349 (executing program) 2025/07/02 12:47:49 fetching corpus: 1600, signal 99577/125763 (executing program) 2025/07/02 12:47:49 fetching corpus: 1650, signal 100278/127052 (executing program) 2025/07/02 12:47:49 fetching corpus: 1700, signal 101394/128553 (executing program) 2025/07/02 12:47:49 fetching corpus: 1750, signal 102133/129785 (executing program) 2025/07/02 12:47:49 fetching corpus: 1800, signal 102625/130841 (executing program) 2025/07/02 12:47:50 fetching corpus: 1850, signal 104122/132512 (executing program) 2025/07/02 12:47:50 fetching corpus: 1900, signal 105723/134143 (executing program) 2025/07/02 12:47:50 fetching corpus: 1950, signal 106765/135450 (executing program) 2025/07/02 12:47:50 fetching corpus: 2000, signal 107615/136656 (executing program) 2025/07/02 12:47:50 fetching corpus: 2050, signal 108351/137762 (executing program) 2025/07/02 12:47:50 fetching corpus: 2100, signal 109054/138813 (executing program) 2025/07/02 12:47:50 fetching corpus: 2150, signal 109918/139966 (executing program) 2025/07/02 12:47:50 fetching corpus: 2200, signal 110514/140878 (executing program) 2025/07/02 12:47:50 fetching corpus: 2250, signal 111071/141861 (executing program) 2025/07/02 12:47:50 fetching corpus: 2300, signal 112012/142938 (executing program) 2025/07/02 12:47:50 fetching corpus: 2350, signal 112423/143816 (executing program) 2025/07/02 12:47:50 fetching corpus: 2400, signal 113062/144790 (executing program) 2025/07/02 12:47:51 fetching corpus: 2450, signal 113706/145716 (executing program) 2025/07/02 12:47:51 fetching corpus: 2500, signal 114317/146600 (executing program) 2025/07/02 12:47:51 fetching corpus: 2550, signal 114873/147454 (executing program) 2025/07/02 12:47:51 fetching corpus: 2600, signal 115420/148323 (executing program) 2025/07/02 12:47:51 fetching corpus: 2650, signal 116175/149226 (executing program) 2025/07/02 12:47:51 fetching corpus: 2700, signal 116764/150058 (executing program) 2025/07/02 12:47:51 fetching corpus: 2750, signal 117260/150825 (executing program) 2025/07/02 12:47:51 fetching corpus: 2800, signal 117860/151659 (executing program) 2025/07/02 12:47:51 fetching corpus: 2850, signal 118336/152423 (executing program) 2025/07/02 12:47:51 fetching corpus: 2900, signal 119266/153287 (executing program) 2025/07/02 12:47:51 fetching corpus: 2950, signal 120015/154102 (executing program) 2025/07/02 12:47:51 fetching corpus: 3000, signal 120693/154871 (executing program) 2025/07/02 12:47:51 fetching corpus: 3050, signal 121288/155635 (executing program) 2025/07/02 12:47:51 fetching corpus: 3100, signal 121647/156302 (executing program) 2025/07/02 12:47:52 fetching corpus: 3150, signal 122712/157113 (executing program) 2025/07/02 12:47:52 fetching corpus: 3200, signal 123253/157765 (executing program) 2025/07/02 12:47:52 fetching corpus: 3250, signal 123996/158438 (executing program) 2025/07/02 12:47:52 fetching corpus: 3300, signal 124434/159060 (executing program) 2025/07/02 12:47:52 fetching corpus: 3350, signal 124936/159685 (executing program) 2025/07/02 12:47:52 fetching corpus: 3400, signal 125610/160331 (executing program) 2025/07/02 12:47:52 fetching corpus: 3450, signal 125986/160943 (executing program) 2025/07/02 12:47:52 fetching corpus: 3500, signal 126379/161540 (executing program) 2025/07/02 12:47:52 fetching corpus: 3550, signal 126918/162158 (executing program) 2025/07/02 12:47:52 fetching corpus: 3600, signal 127431/162728 (executing program) 2025/07/02 12:47:52 fetching corpus: 3650, signal 127836/163245 (executing program) 2025/07/02 12:47:52 fetching corpus: 3700, signal 128161/163780 (executing program) 2025/07/02 12:47:52 fetching corpus: 3750, signal 128744/164378 (executing program) 2025/07/02 12:47:53 fetching corpus: 3800, signal 129276/164905 (executing program) 2025/07/02 12:47:53 fetching corpus: 3850, signal 129535/165359 (executing program) 2025/07/02 12:47:53 fetching corpus: 3900, signal 129990/165849 (executing program) 2025/07/02 12:47:53 fetching corpus: 3950, signal 130361/166345 (executing program) 2025/07/02 12:47:53 fetching corpus: 4000, signal 130774/166846 (executing program) 2025/07/02 12:47:53 fetching corpus: 4050, signal 131260/167316 (executing program) 2025/07/02 12:47:53 fetching corpus: 4100, signal 131788/167778 (executing program) 2025/07/02 12:47:53 fetching corpus: 4150, signal 132208/168260 (executing program) 2025/07/02 12:47:53 fetching corpus: 4200, signal 132484/168682 (executing program) 2025/07/02 12:47:53 fetching corpus: 4250, signal 132695/168878 (executing program) 2025/07/02 12:47:53 fetching corpus: 4300, signal 133118/168880 (executing program) 2025/07/02 12:47:53 fetching corpus: 4350, signal 133636/168880 (executing program) 2025/07/02 12:47:53 fetching corpus: 4400, signal 133984/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4450, signal 134263/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4500, signal 134597/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4550, signal 134818/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4600, signal 135159/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4650, signal 135354/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4700, signal 135704/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4750, signal 136218/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4800, signal 136577/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4850, signal 137081/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4900, signal 137444/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 4950, signal 138182/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 5000, signal 138638/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 5050, signal 138991/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 5100, signal 139461/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 5150, signal 139771/168880 (executing program) 2025/07/02 12:47:54 fetching corpus: 5200, signal 140048/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5250, signal 140421/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5300, signal 140785/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5350, signal 141066/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5400, signal 141429/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5450, signal 141778/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5500, signal 142209/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5550, signal 142457/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5600, signal 142707/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5650, signal 143027/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5700, signal 143386/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5750, signal 143566/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5800, signal 143816/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5850, signal 144106/168880 (executing program) 2025/07/02 12:47:55 fetching corpus: 5900, signal 144486/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 5950, signal 144776/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6000, signal 145229/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6050, signal 145484/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6100, signal 145720/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6150, signal 146037/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6200, signal 146242/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6250, signal 146423/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6300, signal 146827/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6350, signal 147155/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6400, signal 147364/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6450, signal 148324/168880 (executing program) 2025/07/02 12:47:56 fetching corpus: 6500, signal 148544/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6550, signal 148780/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6600, signal 149016/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6650, signal 149196/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6700, signal 149452/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6750, signal 149615/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6800, signal 149893/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6850, signal 150223/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6900, signal 150499/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 6950, signal 150717/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 7000, signal 150985/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 7050, signal 151288/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 7100, signal 151549/168880 (executing program) 2025/07/02 12:47:57 fetching corpus: 7150, signal 151858/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7200, signal 152107/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7250, signal 152482/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7300, signal 152705/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7350, signal 152872/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7400, signal 153172/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7450, signal 153384/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7500, signal 153834/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7550, signal 154025/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7600, signal 154214/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7650, signal 154399/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7700, signal 154607/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7750, signal 154878/168880 (executing program) 2025/07/02 12:47:58 fetching corpus: 7800, signal 155215/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 7850, signal 155368/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 7900, signal 155614/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 7950, signal 155836/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8000, signal 156030/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8050, signal 156246/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8100, signal 156463/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8150, signal 156640/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8200, signal 156830/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8250, signal 157150/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8300, signal 157518/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8350, signal 157674/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8400, signal 157887/168880 (executing program) 2025/07/02 12:47:59 fetching corpus: 8450, signal 158301/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8500, signal 158460/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8550, signal 158631/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8600, signal 158818/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8650, signal 159026/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8700, signal 159302/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8750, signal 159433/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8800, signal 159589/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8850, signal 159767/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8900, signal 159999/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 8950, signal 160188/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 9000, signal 160362/168880 (executing program) 2025/07/02 12:48:00 fetching corpus: 9050, signal 160588/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9100, signal 160835/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9150, signal 161189/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9200, signal 161388/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9250, signal 161598/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9300, signal 161789/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9350, signal 162007/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9400, signal 162227/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9450, signal 162415/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9500, signal 162570/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9550, signal 162790/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9600, signal 162925/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9650, signal 163150/168880 (executing program) 2025/07/02 12:48:01 fetching corpus: 9700, signal 163371/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 9750, signal 163533/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 9800, signal 163654/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 9850, signal 163871/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 9900, signal 164021/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 9950, signal 164200/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 10000, signal 164306/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 10050, signal 164454/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 10078, signal 164569/168880 (executing program) 2025/07/02 12:48:02 fetching corpus: 10078, signal 164569/168880 (executing program) 2025/07/02 12:48:04 starting 8 fuzzer processes 12:48:04 executing program 0: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88801) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1c7df9bc74bcf055, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x400, 0xffff8001, 0x10001, 0x101, 0x0]}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480c0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x222080, 0x1aa, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x950}}, './file0/file0\x00'}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x17}, 0x40) r3 = openat(r2, &(0x7f0000000580)='./file0\x00', 0x0, 0x16) recvfrom(r2, &(0x7f0000000500)=""/77, 0x4d, 0x10, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @empty}, 0x2, 0x0, 0x1, 0x3}}, 0x80) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0), 0x480, &(0x7f0000000700)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@debug={'debug', 0x3d, 0x101}}, {@nodevmap}], [{@dont_appraise}, {@fowner_gt}, {@euid_lt={'euid<', 0xee01}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_measure}]}}) mkdir(&(0x7f00000007c0)='./file0/file0\x00', 0x108) chmod(&(0x7f0000000800)='./file0/file0\x00', 0x39) r4 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x0}}, './file0\x00'}) mount$9p_xen(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x1008000, &(0x7f0000000940)={'trans=xen,', {[{@aname={'aname', 0x3d, 'debug'}}, {@fscache}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@version_u}, {@version_u}, {@access_user}, {@version_L}, {@cache_loose}], [{@fowner_lt={'fowner<', r4}}, {@audit}, {@appraise_type}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_role={'obj_role', 0x3d, '127.0.0.1\x00'}}, {@euid_lt={'euid<', r5}}, {@uid_eq}]}}) bind$unix(r2, &(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r0, &(0x7f0000000b00)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) openat(r6, &(0x7f0000000cc0)='./file0\x00', 0x624982, 0x10) 12:48:04 executing program 1: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "4025af6fe9bb58c7", "720f90f5cce45f9b693c0f3528436f34b7e893cd0075e8db33d50f5851ffec7c", "2285c1c6", "a46188125a997c08"}, 0x38) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"5f0d11993841cd68421067f4557a4956", 0x0, 0x0, {0x3, 0x7ff}, {0x2d2bff1a, 0x4}, 0x4c4, [0x7fffffff, 0x1, 0x7, 0x2, 0x1, 0x3, 0xfffffffffffff000, 0x0, 0xfff, 0x9db, 0x100000000, 0xfa6, 0x6, 0x6, 0x7, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={0x0, 0x2, 0x1, [0x8, 0x8, 0x2, 0x3, 0x1], [0x6, 0x7, 0x407, 0x20, 0x3, 0xd330, 0x2, 0x3, 0x8, 0x100, 0x3, 0xff, 0x9, 0x9, 0x5, 0x1, 0x2, 0x2, 0x7, 0x2, 0x10000, 0x10001, 0x7fff, 0xfffffffffffffffd, 0x10001, 0x20, 0x5, 0x7fff, 0x7, 0x6, 0xfffffffffffffffb, 0xffffffff, 0x9e, 0x5, 0xffffffff, 0x1ff, 0x80, 0x2, 0xffffffffffffff7f, 0x3ff, 0xff, 0x1f, 0x8001, 0x5, 0x8001, 0xf3, 0x5, 0x2, 0x0, 0x3, 0x0, 0x6, 0x7, 0x3b6b, 0x6, 0x9, 0x3, 0x4, 0x7fff, 0x40, 0x1f, 0x7, 0x30, 0x1, 0x80, 0x7, 0x8, 0x1, 0x6, 0xdae0, 0xd1, 0x3, 0x8, 0x5, 0x6, 0x1f, 0x9, 0x3, 0x9, 0x9, 0x3b, 0x0, 0xdab4, 0x100000000, 0x9e6, 0x1dda7e99, 0xfff, 0x0, 0x7, 0xffffffffffffffc0, 0xfff, 0xc54a, 0x5, 0x8, 0x9, 0x3, 0x5, 0x8, 0xfff, 0x2, 0x8, 0x4, 0x4, 0x0, 0x40, 0x4, 0x6be, 0x8, 0x0, 0x100000001, 0x53, 0x20, 0x7, 0x4, 0x4, 0x8000, 0x8, 0x4, 0x1, 0x9, 0x2]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r0, 0x10, @inherit={0x70, &(0x7f0000000140)={0x0, 0x5, 0x2, 0x4, {0x0, 0x9, 0x4, 0xffffffffffff7fff, 0x8}, [0x3ff, 0x9, 0x7fff, 0x3b94, 0x6]}}, @devid=r1}) r2 = epoll_create(0xb835) r3 = socket$inet6(0xa, 0x3, 0xe9) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0}, &(0x7f0000001640)=0xc) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001680)={0x55, 0x7d, 0x1, {{0x0, 0x3c, 0x3, 0x0, {0x4, 0x0, 0x7}, 0x30000000, 0xfb94, 0xffffffff, 0x0, 0x2, '^[', 0x4, '\xdc-[-', 0x2, '&\x96', 0x1, '%'}, 0x4, '#%.!', 0xee01, 0x0, r4}}, 0x55) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000001700)={0x40000000}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001740)='syz0\x00', 0x200002, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000001780)=0x6) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f00000017c0)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001800)={r3, 0xffffffff, 0x0, 0x3}) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000001840)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001900)={0x7, &(0x7f00000018c0)=[{0x8001, 0x7, 0x4, 0x1}, {0x3bc2, 0x1, 0x1, 0x71}, {0x4, 0x0, 0x5}, {0x3, 0x0, 0x1, 0x5}, {0x2, 0x1, 0x7, 0x4}, {0x1000, 0x81, 0x1, 0x3}, {0x7, 0x1, 0x4, 0x1}]}) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001880)='$&()*,!,[*(*(+}*@\x00', 0x0, r7) r8 = openat$cgroup_ro(r5, &(0x7f0000001940)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000001980)={0xa74, 0x80, 0x3}) syz_genetlink_get_family_id$l2tp(&(0x7f00000019c0), r8) 12:48:04 executing program 2: truncate(&(0x7f0000000000)='./file0\x00', 0x5) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x10001, 0x6, 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x63}}, './file0/file0\x00'}) r2 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file1\x00', 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80, 0x20, 0x12}, 0x18) r4 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x400080, 0x0) write(r4, &(0x7f00000001c0)="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", 0x1000) syz_mount_image$nfs(&(0x7f00000011c0), &(0x7f0000001200)='./file0/file1\x00', 0x9, 0x6, &(0x7f0000001500)=[{&(0x7f0000001240)="a19decc1475bad3247e5da5a25edd27bacb766581e227dd3ac75fcf5f507325668e51a63bb665f3338ca925e77c0d0d2234b5d819103c5acff2a0770867cddb0c0187e9dadff896e97c46de6b73ebb15a10b96c6ac0d87359f7562482eddf6", 0x5f, 0x6}, {&(0x7f00000012c0)="6f5306ce15393478280bc6312b", 0xd, 0xd28}, {&(0x7f0000001300)="7ca87642d932e8ffb8a6d984df7e1611f45c3bbd006ff73a6137f0a3771d96899a5668c41a146c4090d334b63c829b6552c118eb1533fa3b69981d487a86297a4bddcd34edaf2ab9c3f95e71ed2abb5cd4f5bb55982c6dd9f47c7221523826859bccb10adc4aaf5f3dd04a8451e11f770ffbf6a10bb92d0fdac3351c150ae022e54eebcfb7b50212464bc955ea293cb80307fdb0601173dc7ddf8956243990abfeb4285c1b1b7b", 0xa7, 0x1}, {&(0x7f00000013c0)="abf63d5cc4599f8e093085f1ae1a", 0xe, 0x4}, {&(0x7f0000001400)="8c5ca684e49c658a3cbb55f40f9727", 0xf, 0x401}, {&(0x7f0000001440)="cd091428aa2e585efa95ab2052fdf007c1e87993773388bfa28f5df734773ce483147ace6b4a54df8e5324d8f7decdc8d9b02d14a10a655ca5b72e7c2ac09fe6bf7fc73a607a3c69a97cdac2722bb0cd694eaa035476ade9b13ac6d86dda75f0e5eb16c47c52be20525727a3b4bdb4cb0b5c1e6e1598263e7f45ab316dc3c2bed0282341f6a84c84b0394b36", 0x8c, 0xbd}], 0x20002, &(0x7f00000015c0)={[{'%}\\\''}], [{@subj_user={'subj_user', 0x3d, '}-}&% '}}, {@dont_appraise}, {@hash}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '.log\x00'}}]}) bind$unix(r1, &(0x7f0000001640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendfile(r3, r1, &(0x7f00000016c0)=0x7, 0x80000000) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000001700), &(0x7f0000001740), 0x2, 0x3) lsetxattr$security_selinux(&(0x7f0000001780)='./file0/file1\x00', &(0x7f00000017c0), &(0x7f0000001800)='system_u:object_r:removable_device_t:s0\x00', 0x28, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000001840)=""/147) getsockname$unix(r4, &(0x7f0000001900)=@abs, &(0x7f0000001980)=0x6e) openat2$dir(0xffffffffffffff9c, &(0x7f00000019c0)='./file0/file1\x00', &(0x7f0000001a00)={0xa001, 0x20, 0x6}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001a40), 0x88002) tee(r5, 0xffffffffffffffff, 0x4, 0x8) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000001a80)=0xfffffffd, 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001ac0), 0x7a280, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x11}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x22}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) [ 79.106034] audit: type=1400 audit(1751460484.776:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:48:04 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1800, &(0x7f0000000080)={0x7, 0x100084}, 0x20) ioctl$FIOCLEX(r0, 0x5451) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='ns/pid\x00', 0x7, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0xff, 0x98001) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) setns(r0, 0x20000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2007, @fd=r0, 0x1, &(0x7f0000000180)="cf01fa6e4e509a06e8750302e033ca", 0xf, 0x4, 0x0, {0x0, r2}}, 0x5) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x10010, r1, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, r1, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r2}}, 0xffff) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000840) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000000900)={0x3, 0x0, 0x19, 0x4, 0xb, &(0x7f0000000500)}) 12:48:04 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) getxattr(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)=@random={'trusted.', 'tunl0\x00'}, &(0x7f00000006c0)=""/48, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x101000, 0x49) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x20000) ppoll(&(0x7f0000000780)=[{r2, 0x4}, {r3, 0x2000}, {0xffffffffffffffff, 0x42c0}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x8}], 0x5, &(0x7f00000007c0), &(0x7f0000000800)={[0x617]}, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000840)='syzkaller0\x00', 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @private}, &(0x7f00000008c0)=0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000900)={'ah\x00'}, &(0x7f0000000940)=0x1e) getsockname(0xffffffffffffffff, &(0x7f0000000980)=@l2, &(0x7f0000000a00)=0x80) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000a40)={0x10001, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e23, @local}}}, 0x108) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0/file0\x00', 0x200, 0x4, &(0x7f0000000e00)=[{&(0x7f0000000c00)="873b8343a7f90c380dcdce4872893e783cabcbcb7ecc5dae2e820d1a980f43", 0x1f, 0x2}, {&(0x7f0000000c40)="beace71f45cf4eb1346284b76b37b33441003bdde8333a7fb1474e436d5aae16f7708212680103276c96796b2775288056933b1ed227fdb909b17bf69553912d055d4d05e38a25b00409063f8dff1e99f6d5b0316c6e673a7230fcdbd57fe499c18974f16bad7881df078e8d110f211e09e0e982a7b3767ccd2f60af", 0x7c, 0x2}, {&(0x7f0000000cc0)="4ae0f40158930e0b1c0a125d028fb203acd9ef61a978fd485e820dac7f0c106c0dbec90203edff2931305e1bc6fb83ff743660cd8c5e0eab5f5e3a53890a6e39a1adeeaeba850888aa17fbea7d2239b1f91e49e7568fa39bdc89cc01d3f75b3dfef3aa75a02ff8a3b6ace3b44307e6ddcff1b268e8ca69d5ebbe771a41c97104cd1fcbbbc5731b2233bf680aac", 0x8d, 0x1}, {&(0x7f0000000d80)="5eabb61f724d7abe434e5317ed3efe9e5f8807f1b7c18dbd47feb9a3fc585c64efe96316ab943bfe2c02ee2ba1e4a4cd9d8992e2dc06010f4e285d853367c673af2e76425f9fad1c23336089dc0a3ba9bd082c083c6e006591b49d0b2882ac86b72d56a3969a223594c61d14164e0b", 0x6f, 0x200}], 0x1020000, &(0x7f0000000f00)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x30, 0x35, 0x33, 0x32]}}], [{@audit}, {@euid_eq={'euid', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, '/dev/snd/seq\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x32, 0x62, 0x0, 0x38, 0x33, 0x34], 0x2d, [0x39, 0x64, 0x64, 0x30], 0x2d, [0x38, 0x35, 0x33, 0x31], 0x2d, [0x5b, 0x35, 0x66, 0x46a751d412f403a4], 0x2d, [0x65, 0x62, 0x66, 0x63, 0x33, 0x36, 0x37, 0x36]}}}]}) pwritev(r2, &(0x7f0000001200)=[{&(0x7f0000000f80)="7cb411f6e924b21aa87ecdfa0f7dcb03b577a711b32dae9652e15d246e3d721044ba5b05577075961d165d0237af742a85d4f34da7c1cb0cc2a38c28023be73d4bc575533d180cc5ad7e2a1033037bf2c590481534f68d0873db298f1fcee61effe687ac6d4cc0de725a1416bad702db03f1abd9e2610d1c84844bc6262bc9ee037acc798882addebe577416ff0042a738b74fc4a8ede678c62c2be02749d711f51a03a874d85f3892fdcb8f0b3a5dde75b36b5777e2292d94ea2079", 0xbc}, {&(0x7f0000001040)="fad6a7bf35124a75e88b89f988d7439d2d3aa705c9cd247821dc8218c8d9cd7c6a59c7d0e154687a67", 0x29}, {&(0x7f0000001080)="32ad2cb0b4a7ccbca123c6ef58b0ac8eb05edb7824acb3b00d3c11cd599154d1cedffe91047841282c191de41a25544de10d8febea7214235e30267b29559530b13b5b7c71afa44363f60f310254651517a53308d08f75bd56635256060befa57a53a31f8c0ae84e07361a1e0dd5fba68895666a426675bfbe5893953a24960e8918fcd821c7bcefb4b4aabbc044030fb222e35aae62ba1f017d78fb2f52194b69db3c79d55aa53ceeeffb9ffe04713d71ae68a122eb44e505c4b14227ab809bc85ad7e18227718b7494d365208c2043", 0xd0}, {&(0x7f0000001180)="c5cda947073e5385458e6f7a26c99cffb628f81fcf92e094f40729cafbafeb8a7afce9f044d6a4328ca2bd0aa6b4c6fc62ecf504f34abe804f", 0x39}, {&(0x7f00000011c0)}], 0x5, 0x4, 0x10001) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001280)={'filter\x00', 0x1a, "9b24ea49cd48abf373be1d8b7e843886a28d3e0fe911b47c213f"}, &(0x7f00000012c0)=0x3e) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x200403, 0x0) linkat(r5, &(0x7f0000001340)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0x1000) 12:48:04 executing program 5: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x8, 0x1f}) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) fchmod(r1, 0x108) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x969f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5c33}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r2 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) r5 = clone3(&(0x7f0000000540)={0x240200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x25}, &(0x7f0000000340)=""/154, 0x9a, &(0x7f0000000400)=""/42, &(0x7f0000000500)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x6}, 0x58) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000005c0)={'filter\x00', 0x1d, "daa902f422f9de3c4e6350e04dab56d9684227dbbaa614bf6a54b11f42"}, &(0x7f0000000640)=0x41) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0xc0, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000006c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, 0xfffffe00, 0xff, 0x3, 0x600, 0x0, 0x100}) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000740)={0x2, 0x2}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000018c0)={0x0}, &(0x7f0000001900)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001940)={0x0}, &(0x7f0000001980)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000019c0)=0x0) r11 = syz_open_dev$mouse(&(0x7f0000001a40), 0x0, 0x0) clone3(&(0x7f0000001a80)={0x80000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x25}, &(0x7f0000000840)=""/4096, 0x1000, &(0x7f0000001840)=""/124, &(0x7f0000001a00)=[r8, r5, r9, r2, r4, r6, r10], 0x7, {r11}}, 0x58) 12:48:04 executing program 6: ioctl$sock_proto_private(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)="b0246c0130fb6a954db792cdcdfcec791a3b3b8ee02f1f35bb3b9824d9bc10d642ecce0e1bc18ac9abbcb643b78496c47f50391d50363f227543955827c3a5f714a6724809bf037f52add2b04cc922b1c4bb36e3a6c092235f4d4014c86fdba002d10479b57388274a90737073ddc0e80815dac10f6b9fe1f1e5ca307bf494f422615b64418a77787d3493a0e497e3eabd5ae6b222d19875c523bded28eeb4e4a88239d91481c402bafb315466635635e5eb276063357bf38cf99ff7f204804b06db89ce5caafa1b0077861c8d98721b415c1e79672ead") r0 = socket(0x10, 0x800, 0x7ff) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x20048854) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x724b}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0xcc}}, 0xc014) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r2, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffc0, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000015) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) r7 = openat(r1, &(0x7f0000000800)='./file0\x00', 0x240400, 0x41) r8 = dup3(r0, r1, 0x80000) r9 = open_tree(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x8001) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000015c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x9c, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r0}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000004}, 0x8804) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40010) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000001700)=@v1={0x0, @adiantum, 0x10, @auto="daab60e2b8ae74da"}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000019c0)={&(0x7f0000001740), 0xc, &(0x7f0000001980)={&(0x7f0000001780)={0x1d0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x3f}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0xb3b1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffff7}, {0xc, 0x90, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffffc}, {0xc, 0x90, 0x100000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xbd65}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x404c040}, 0x4) 12:48:04 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_pts(r1, 0x2400) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/84) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0xff, 0x10480) ioctl$VT_RELDISP(r3, 0x5605) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$inet6(r4, 0x0, &(0x7f0000000100), 0x800) ioctl$TCXONC(r1, 0x540a, 0x2) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x101, 0x4200) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000180)=0x3) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDADDIO(r2, 0x4b34, 0x7ff) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000200)={0x4, 0x1, 0x401}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_open_pts(r6, 0x80c0) [ 80.353735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.355866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.363491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.378471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.385262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.412707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.416240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.419902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.425185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.426566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.429418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.430901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.436997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.445880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.447917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.448272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.451625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.454194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.469802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.476296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.485701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.491419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.493082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.501067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.502776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.506125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.506941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.513231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.516941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.526886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.528094] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.537212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.539352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.541404] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.547489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.558945] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.560474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.561888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.564521] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.568526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.647026] [ 80.647691] ============================= [ 80.648550] WARNING: suspicious RCU usage [ 80.649293] 6.16.0-rc4-next-20250702 #1 Not tainted [ 80.650779] ----------------------------- [ 80.652927] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 80.656801] [ 80.656801] other info that might help us debug this: [ 80.656801] [ 80.659227] [ 80.659227] rcu_scheduler_active = 2, debug_locks = 1 [ 80.660246] 3 locks held by syz-executor.7/288: [ 80.660960] #0: ffff88800f7ac400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 80.662345] #1: ffff88800f0aa618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 80.663844] #2: ffff888013e4e828 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 80.665350] [ 80.665350] stack backtrace: [ 80.666101] CPU: 0 UID: 0 PID: 288 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 80.666130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 80.666143] Call Trace: [ 80.666152] [ 80.666161] dump_stack_lvl+0xfa/0x120 [ 80.666187] lockdep_rcu_suspicious+0x152/0x1c0 [ 80.666217] proc_sys_compare+0x28a/0x340 [ 80.666240] ? __pfx_proc_sys_compare+0x10/0x10 [ 80.666266] d_same_name+0x229/0x2e0 [ 80.666290] d_alloc_parallel+0x7c1/0x1330 [ 80.666330] ? __pfx_d_alloc_parallel+0x10/0x10 [ 80.666360] ? __pfx_default_wake_function+0x10/0x10 [ 80.666394] ? __d_lookup+0x25f/0x490 [ 80.666430] lookup_open.isra.0+0x64f/0x1530 [ 80.666467] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 80.666515] ? mnt_get_write_access+0x81/0x2d0 [ 80.666537] ? mnt_get_write_access+0x1ea/0x2d0 [ 80.666569] path_openat+0xc26/0x2880 [ 80.666612] ? __lock_acquire+0x694/0x1b70 [ 80.666636] ? __pfx_path_openat+0x10/0x10 [ 80.666679] do_filp_open+0x1e8/0x450 [ 80.666712] ? __pfx_do_filp_open+0x10/0x10 [ 80.666759] ? find_held_lock+0x2b/0x80 [ 80.666790] ? alloc_fd+0x2c1/0x560 [ 80.666819] ? lock_release+0xc8/0x290 [ 80.666849] ? alloc_fd+0x2c1/0x560 [ 80.666889] do_sys_openat2+0x104/0x1b0 [ 80.666916] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.666946] ? __fput+0x67b/0xb50 [ 80.666984] __x64_sys_openat+0x142/0x200 [ 80.667011] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.667037] ? __pfx_fput_close_sync+0x10/0x10 [ 80.667076] do_syscall_64+0xbf/0x360 [ 80.667102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.667126] RIP: 0033:0x7f2099c9ea04 [ 80.667144] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 80.667165] RSP: 002b:00007ffc23677190 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 80.667186] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2099c9ea04 [ 80.667201] RDX: 0000000000080001 RSI: 00007f2099d552bb RDI: 00000000ffffff9c [ 80.667215] RBP: 00007f2099d552bb R08: 0000000000000000 R09: 00007ffc23677180 [ 80.667229] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 80.667243] R13: 00007ffc23677230 R14: 0000000000000000 R15: 00000000000000f8 [ 80.667274] [ 82.448550] Bluetooth: hci0: command tx timeout [ 82.512398] Bluetooth: hci2: command tx timeout [ 82.512464] Bluetooth: hci1: command tx timeout [ 82.578099] Bluetooth: hci4: command tx timeout [ 82.579697] Bluetooth: hci3: command tx timeout [ 82.640127] Bluetooth: hci5: command tx timeout [ 82.640157] Bluetooth: hci7: command tx timeout [ 82.640647] Bluetooth: hci6: command tx timeout [ 84.496068] Bluetooth: hci0: command tx timeout [ 84.560059] Bluetooth: hci2: command tx timeout [ 84.560166] Bluetooth: hci1: command tx timeout [ 84.624079] Bluetooth: hci4: command tx timeout [ 84.624547] Bluetooth: hci3: command tx timeout [ 84.688027] Bluetooth: hci6: command tx timeout [ 84.688079] Bluetooth: hci7: command tx timeout [ 84.688476] Bluetooth: hci5: command tx timeout [ 86.544638] Bluetooth: hci0: command tx timeout [ 86.608290] Bluetooth: hci2: command tx timeout [ 86.609203] Bluetooth: hci1: command tx timeout [ 86.673053] Bluetooth: hci3: command tx timeout [ 86.673786] Bluetooth: hci4: command tx timeout [ 86.736241] Bluetooth: hci5: command tx timeout [ 86.737050] Bluetooth: hci7: command tx timeout [ 86.737079] Bluetooth: hci6: command tx timeout [ 88.592292] Bluetooth: hci0: command tx timeout [ 88.656444] Bluetooth: hci1: command tx timeout [ 88.656478] Bluetooth: hci2: command tx timeout [ 88.720081] Bluetooth: hci4: command tx timeout [ 88.721192] Bluetooth: hci3: command tx timeout [ 88.785036] Bluetooth: hci5: command tx timeout [ 88.785463] Bluetooth: hci7: command tx timeout [ 88.785844] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:48:06 Registers: info registers vcpu 0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828ba3e5 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff888015ad72b8 R8 =0000000000000000 R9 =ffffed10016c7046 R10=000000000000006c R11=0000000000000001 R12=000000000000006c R13=0000000000000010 R14=ffffffff88722020 R15=ffffffff828ba3d0 RIP=ffffffff828ba43d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555602ca400 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b0c84b8040 CR3=000000003d32f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffff0000000000 XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000002800 RCX=1ffff11001d8f311 RDX=0000000000001207 RSI=0000000000000004 RDI=ffffffff84c75950 RBP=ffff88800ec79800 RSP=ffff888009627940 R8 =000000000000000a R9 =0000000000000f6b R10=ffffffff86439057 R11=0000000000000001 R12=0000000000000004 R13=ffff88800ec7989c R14=000000000000029c R15=000000000000000a RIP=ffffffff814d09de RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005630ef05b4c8 CR3=000000001ca39000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000