last executing test programs: 2m53.764344418s ago: executing program 0 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bf02000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffd3020000088dfe000000b703000000000000854000009b000000950e241c10f778d45722971f8ca0ce43328621cfe77ce576c99af65cb5c88379eacf6a45574aae540c59382cbe0443779f03b63abb031a29ae3196aa8049fe38898f680c5fa42ed548ad89b0095fe163a8b47ca93031141706f4de10a89dce8e481656d2827eb9f99c8f3d359f79d3efef57fcd9581b322c405d6c76f8536d93e6b596c99dfad538e61ff5308c969cd9e172491d496dc977620b207cfa34e69ef966136229e32f7cfb04df4afd00"/315], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x5) 2m40.351048955s ago: executing program 0 (id=79): symlink(0x0, &(0x7f000001fb00)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200800, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x23}], 0x2) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f0000000540)=[{&(0x7f0000000240)="1f18", 0x2}], 0x1, 0x0, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) write$UHID_INPUT(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) r4 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r4, &(0x7f0000000080)="16", 0xff8d, 0x8000c5d) 2m34.432818522s ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) syz_open_procfs(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069ed", 0x57}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}], 0x6, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) 2m32.762450157s ago: executing program 0 (id=88): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) 2m21.059537592s ago: executing program 0 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x0, &(0x7f0000000380)) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008800}, 0x48004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 2m16.96945025s ago: executing program 0 (id=107): socket$kcm(0x10, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x10c80, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000002140), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) fchmodat(r5, &(0x7f0000000000)='.\x00', 0xfffffffb) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x40, {0x2, 0x0, @local}}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x600) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000080)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x4ae67) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r10, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @empty}}}, 0xa0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 2m11.186942666s ago: executing program 4 (id=115): syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMO'], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000fe000075fcce5b576247ac"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) 2m7.462602491s ago: executing program 4 (id=119): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m5.442171635s ago: executing program 4 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4004c010) 2m1.607046655s ago: executing program 32 (id=107): socket$kcm(0x10, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x10c80, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000002140), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) fchmodat(r5, &(0x7f0000000000)='.\x00', 0xfffffffb) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x40, {0x2, 0x0, @local}}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x600) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000080)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x4ae67) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r10, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @empty}}}, 0xa0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 2m1.56022322s ago: executing program 4 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/mnt\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@i}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth0_virt_wifi\x00', 0x2}, 0x18) ioctl$TUNSETIFF(r3, 0xb701, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x66cd, 0x7ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0}) 1m53.37692523s ago: executing program 4 (id=131): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000080)=0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:De', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x4b3a, 0x0) 1m49.748142215s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 1m34.395716567s ago: executing program 33 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 1m6.927133246s ago: executing program 1 (id=171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r5 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000001c0), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r6, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x8, 0xde, &(0x7f0000000580)=""/222, 0x100, 0x41, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x8, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb7aa}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m4.776743518s ago: executing program 1 (id=172): pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4101, 0x1005, 0x1) 1m4.518284932s ago: executing program 1 (id=174): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340), 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1m1.218731722s ago: executing program 1 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4004c010) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) 57.970573433s ago: executing program 1 (id=182): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000350000000801000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) 50.611928961s ago: executing program 1 (id=187): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x306}, 0x8, {0x2, 0x4e24, @multicast2}, 'pim6reg\x00'}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) r5 = timerfd_create(0x0, 0x800) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp864'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) syz_genetlink_get_family_id$nl80211(0x0, r6) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x100}) 35.199533561s ago: executing program 34 (id=187): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x306}, 0x8, {0x2, 0x4e24, @multicast2}, 'pim6reg\x00'}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) r5 = timerfd_create(0x0, 0x800) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp864'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) syz_genetlink_get_family_id$nl80211(0x0, r6) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x100}) 14.09037838s ago: executing program 2 (id=211): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.975867515s ago: executing program 2 (id=212): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMO'], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000fe000075fcce5b576247ac"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) 11.975475247s ago: executing program 3 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) pidfd_send_signal(r3, 0x7, &(0x7f0000000040)={0xc, 0x80000001, 0x5}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_secret(0x80000) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) pipe2(&(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, 0x0, 0x4001) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 10.552884433s ago: executing program 3 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000aae000/0x4000)=nil, 0x4000, 0x2000003) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r6 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r6, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 8.818482019s ago: executing program 2 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 8.388159129s ago: executing program 3 (id=216): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x3a3d00, 0x183) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9e}}, {0x2, 0x4e24, @local}, 0x221, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd1, 0xbc, 0xfffc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7.84905021s ago: executing program 3 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4004c010) 6.960110698s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) syz_open_procfs(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069ed", 0x57}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}], 0x6, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) 6.959038065s ago: executing program 2 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 5.686244468s ago: executing program 2 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stat\x00') pread64(r3, &(0x7f0000000180)=""/158, 0x9e, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x6d2b, &(0x7f0000000480)={0x0, 0x37e4, 0x10100, 0x1, 0x10000034}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000280)) 121.752274ms ago: executing program 3 (id=220): r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, 0x0, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) unshare(0x8000000) setresuid(0xee01, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=221): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpeername$qrtr(r0, &(0x7f0000000880), &(0x7f00000000c0)=0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x5a030280) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x2, 0x3, 0x100, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r4, 0x100}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) unshare(0x8040480) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x5, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x5, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x131, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x0, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xfffb, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x1, 0x4, 0x1, 0x10000, 0xffffffff, 0x8, 0x2b91, 0x4, 0x8, 0x8, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r6, &(0x7f0000000240)="1e98c44126cf9d15499afaf8a1378f92c46fc1b93da9fd5a57eed6268f", 0x1d, 0xc4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 78.630146][ T5595] cgroup: Unknown subsys name 'net' [ 78.881166][ T5595] cgroup: Unknown subsys name 'cpuset' [ 78.926768][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.832311][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.257658][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.264246][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.287291][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.295653][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.307857][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.309586][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.311231][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.312167][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.326446][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.347625][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.410852][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.428393][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.429468][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.458234][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.461826][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.479730][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.499571][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.501197][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.503868][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.510943][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.608151][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.615194][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.639093][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.642174][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.661001][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.388472][ T60] Bluetooth: hci0: command tx timeout [ 85.466565][ T60] Bluetooth: hci2: command tx timeout [ 85.626365][ T60] Bluetooth: hci3: command tx timeout [ 85.627222][ T60] Bluetooth: hci1: command tx timeout [ 85.706272][ T60] Bluetooth: hci4: command tx timeout [ 86.280609][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.281841][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.282020][ T5610] bridge_slave_0: entered allmulticast mode [ 86.284624][ T5610] bridge_slave_0: entered promiscuous mode [ 86.292350][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.292631][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.292878][ T5609] bridge_slave_0: entered allmulticast mode [ 86.301182][ T5609] bridge_slave_0: entered promiscuous mode [ 86.328358][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.328647][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.329234][ T5621] bridge_slave_0: entered allmulticast mode [ 86.332792][ T5621] bridge_slave_0: entered promiscuous mode [ 86.364483][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.364766][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.365029][ T5610] bridge_slave_1: entered allmulticast mode [ 86.370456][ T5610] bridge_slave_1: entered promiscuous mode [ 86.373062][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.373631][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.378378][ T5609] bridge_slave_1: entered allmulticast mode [ 86.381653][ T5609] bridge_slave_1: entered promiscuous mode [ 86.408106][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.408391][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.408621][ T5621] bridge_slave_1: entered allmulticast mode [ 86.414734][ T5621] bridge_slave_1: entered promiscuous mode [ 86.475407][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.475624][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.476021][ T5619] bridge_slave_0: entered allmulticast mode [ 86.480143][ T5619] bridge_slave_0: entered promiscuous mode [ 86.511313][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.511629][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.511814][ T5608] bridge_slave_0: entered allmulticast mode [ 86.513828][ T5608] bridge_slave_0: entered promiscuous mode [ 86.558923][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.559246][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.559521][ T5619] bridge_slave_1: entered allmulticast mode [ 86.561605][ T5619] bridge_slave_1: entered promiscuous mode [ 86.589048][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.589332][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.589578][ T5608] bridge_slave_1: entered allmulticast mode [ 86.592805][ T5608] bridge_slave_1: entered promiscuous mode [ 86.606032][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.618263][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.649787][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.672404][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.675834][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.708163][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.761993][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.787846][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.824635][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.847337][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.850226][ T5610] team0: Port device team_slave_0 added [ 86.853371][ T5609] team0: Port device team_slave_0 added [ 86.881867][ T5621] team0: Port device team_slave_0 added [ 86.909009][ T5610] team0: Port device team_slave_1 added [ 86.911753][ T5609] team0: Port device team_slave_1 added [ 86.935012][ T5621] team0: Port device team_slave_1 added [ 86.982542][ T5619] team0: Port device team_slave_0 added [ 87.019729][ T5608] team0: Port device team_slave_0 added [ 87.063655][ T10] cfg80211: failed to load regulatory.db [ 87.100813][ T5619] team0: Port device team_slave_1 added [ 87.169547][ T5608] team0: Port device team_slave_1 added [ 87.172419][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.172434][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.172461][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.179947][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.179961][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.179986][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.210113][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.210129][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.210152][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.239691][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.239706][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.239730][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.244378][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.244396][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.244420][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.273073][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.273090][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.273113][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.334447][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.334464][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.334486][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.356893][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.356908][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.356931][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.378257][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.378275][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.378298][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.469693][ T60] Bluetooth: hci0: command tx timeout [ 87.546548][ T60] Bluetooth: hci2: command tx timeout [ 87.615577][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.615596][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.615623][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.707363][ T60] Bluetooth: hci3: command tx timeout [ 87.707389][ T5618] Bluetooth: hci1: command tx timeout [ 87.786634][ T60] Bluetooth: hci4: command tx timeout [ 88.062288][ T5610] hsr_slave_0: entered promiscuous mode [ 88.063762][ T5610] hsr_slave_1: entered promiscuous mode [ 88.078795][ T5609] hsr_slave_0: entered promiscuous mode [ 88.080174][ T5609] hsr_slave_1: entered promiscuous mode [ 88.081247][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 88.081318][ T5609] Cannot create hsr debugfs directory [ 88.113302][ T5621] hsr_slave_0: entered promiscuous mode [ 88.114638][ T5621] hsr_slave_1: entered promiscuous mode [ 88.115660][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 88.115686][ T5621] Cannot create hsr debugfs directory [ 88.190254][ T5619] hsr_slave_0: entered promiscuous mode [ 88.192947][ T5619] hsr_slave_1: entered promiscuous mode [ 88.194702][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 88.194729][ T5619] Cannot create hsr debugfs directory [ 88.230730][ T5608] hsr_slave_0: entered promiscuous mode [ 88.232967][ T5608] hsr_slave_1: entered promiscuous mode [ 88.234910][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 88.234936][ T5608] Cannot create hsr debugfs directory [ 89.281778][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.347705][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.361705][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.399483][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.403476][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.443256][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.464536][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.505246][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.546554][ T60] Bluetooth: hci0: command tx timeout [ 89.621409][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.628252][ T60] Bluetooth: hci2: command tx timeout [ 89.660312][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.675430][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.701028][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.703443][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.740642][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.763160][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.786478][ T60] Bluetooth: hci3: command tx timeout [ 89.786519][ T60] Bluetooth: hci1: command tx timeout [ 89.801637][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.878293][ T5618] Bluetooth: hci4: command tx timeout [ 89.962747][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.992242][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.003248][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.041401][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.067694][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.103925][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.120217][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.159944][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.343262][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.377766][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.403065][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.472764][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.479261][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.513383][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.548849][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.569846][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.722929][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.745428][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.774360][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.786637][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.832728][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.843856][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.872927][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.893190][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.931144][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.033497][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.108590][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.128123][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.128292][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.205016][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.205157][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.285677][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.328669][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.358583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.358825][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.450236][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.450366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.517483][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.587505][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.595286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.598030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.626281][ T5618] Bluetooth: hci0: command tx timeout [ 91.678490][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.678682][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.717268][ T5618] Bluetooth: hci2: command tx timeout [ 91.815763][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.866617][ T5618] Bluetooth: hci1: command tx timeout [ 91.868486][ T5618] Bluetooth: hci3: command tx timeout [ 91.898378][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.915347][ T1532] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.924408][ T1532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.946665][ T5618] Bluetooth: hci4: command tx timeout [ 91.993756][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.993920][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.112066][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.175011][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.175274][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.268019][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.268201][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.018829][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.545008][ T5610] veth0_vlan: entered promiscuous mode [ 93.626055][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.684080][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.712669][ T5610] veth1_vlan: entered promiscuous mode [ 94.183192][ T5610] veth0_macvtap: entered promiscuous mode [ 94.241532][ T5608] veth0_vlan: entered promiscuous mode [ 94.261246][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.265576][ T5610] veth1_macvtap: entered promiscuous mode [ 94.338922][ T5619] veth0_vlan: entered promiscuous mode [ 94.360049][ T5608] veth1_vlan: entered promiscuous mode [ 94.380285][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.424176][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.425388][ T5619] veth1_vlan: entered promiscuous mode [ 94.509972][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.583387][ T3292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.612329][ T3292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.628440][ T3292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.655442][ T420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.828719][ T5608] veth0_macvtap: entered promiscuous mode [ 94.845342][ T5609] veth0_vlan: entered promiscuous mode [ 94.924401][ T5608] veth1_macvtap: entered promiscuous mode [ 94.950934][ T5619] veth0_macvtap: entered promiscuous mode [ 95.059737][ T5619] veth1_macvtap: entered promiscuous mode [ 95.082453][ T5609] veth1_vlan: entered promiscuous mode [ 95.206984][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.267451][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.269420][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.269439][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.292226][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.360402][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.373010][ T3292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.402834][ T3292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.423791][ T5621] veth0_vlan: entered promiscuous mode [ 95.437449][ T3292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.459372][ T3292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.467530][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.467547][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.499663][ T3292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.550189][ T3292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.562188][ T5609] veth0_macvtap: entered promiscuous mode [ 95.582515][ T3292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.595703][ T3292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.605498][ T5621] veth1_vlan: entered promiscuous mode [ 95.755577][ T5609] veth1_macvtap: entered promiscuous mode [ 96.523288][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.523311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.557289][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.690489][ T5802] loop0: detected capacity change from 0 to 64 [ 96.844909][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.866691][ T3292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.866711][ T3292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.980259][ T5621] veth0_macvtap: entered promiscuous mode [ 97.072562][ T3435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.089062][ T3435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.173218][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.173520][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.173538][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.086013][ T5621] veth1_macvtap: entered promiscuous mode [ 98.125549][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.376214][ T1488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.376235][ T1488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.718095][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.885682][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.041973][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.148850][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.153480][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.185285][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.297174][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.297195][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.445493][ T5816] ALSA: mixer_oss: invalid OSS volume 'MO' [ 102.834638][ T5821] loop0: detected capacity change from 0 to 128 [ 103.171857][ T5821] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.175493][ T5821] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.773826][ T5830] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.796909][ T5830] ubi31: attaching mtd0 [ 103.805705][ T5830] ubi31: scanning is finished [ 103.805754][ T5830] ubi31: empty MTD device detected [ 107.768095][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.768117][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.842088][ T5830] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 107.962836][ T5610] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.064085][ T5847] loop3: detected capacity change from 0 to 512 [ 109.070670][ T5847] ======================================================= [ 109.070670][ T5847] WARNING: The mand mount option has been deprecated and [ 109.070670][ T5847] and is ignored by this kernel. Remove the mand [ 109.070670][ T5847] option from the mount to silence this warning. [ 109.070670][ T5847] ======================================================= [ 109.150274][ T5847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.324849][ T5847] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.12: invalid block [ 109.325038][ T5847] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.326226][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 109.326251][ C0] EXT4-fs (loop3): initial error at time 1777477921: ext4_get_branch:178: inode 11: block 4294967295 [ 109.326290][ C0] EXT4-fs (loop3): last error at time 1777477921: ext4_get_branch:178: inode 11: block 4294967295 [ 109.435544][ T5847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12: invalid indirect mapped block 4294967295 (level 1) [ 109.436236][ T5847] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.460556][ T5847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12: invalid indirect mapped block 4294967295 (level 1) [ 109.460601][ T5847] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.509946][ T5847] EXT4-fs (loop3): 2 truncates cleaned up [ 109.513379][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.902749][ T5853] loop0: detected capacity change from 0 to 128 [ 110.249125][ T5853] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.251620][ T5853] hpfs: filesystem error: improperly stopped [ 110.251694][ T5853] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.251759][ T5853] hpfs: You really don't want any checks? You are crazy... [ 110.259626][ T5853] hpfs: hpfs_map_sector(): read error [ 110.259671][ T5853] hpfs: code page support is disabled [ 110.343700][ T5853] hpfs: hpfs_map_4sectors(): unaligned read [ 110.348027][ T5853] hpfs: hpfs_map_4sectors(): unaligned read [ 110.348071][ T5853] hpfs: filesystem error: unable to find root dir [ 111.947264][ T5849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 112.039220][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.039244][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.272677][ T5870] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 114.824676][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.895049][ T5870] ftl_cs: FTL header not found. [ 114.976134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.016132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.192253][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.192275][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.888429][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 121.119526][ T5902] loop3: detected capacity change from 0 to 128 [ 121.751488][ T5902] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 121.751807][ T5902] hpfs: filesystem error: improperly stopped [ 121.751871][ T5902] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 121.751933][ T5902] hpfs: You really don't want any checks? You are crazy... [ 121.757059][ T5902] hpfs: hpfs_map_sector(): read error [ 121.757102][ T5902] hpfs: code page support is disabled [ 121.926258][ T5902] hpfs: hpfs_map_4sectors(): unaligned read [ 121.926402][ T5902] hpfs: hpfs_map_4sectors(): unaligned read [ 121.926411][ T5902] hpfs: filesystem error: unable to find root dir [ 126.120981][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 126.926175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.946117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.956117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.966115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.976124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.986116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.996159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.006123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.483176][ T37] audit: type=1326 audit(1777477940.122:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 127.483237][ T37] audit: type=1326 audit(1777477940.132:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 127.605152][ T37] audit: type=1326 audit(1777477940.182:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 127.605436][ T37] audit: type=1326 audit(1777477940.252:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 127.605715][ T37] audit: type=1326 audit(1777477940.252:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 128.425628][ T37] audit: type=1326 audit(1777477940.252:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 128.425685][ T37] audit: type=1326 audit(1777477940.262:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 128.425828][ T37] audit: type=1326 audit(1777477940.262:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 128.425874][ T37] audit: type=1326 audit(1777477941.072:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 128.425917][ T37] audit: type=1326 audit(1777477941.072:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13cdacdd9 code=0x7ffc0000 [ 134.409944][ T5955] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 135.721934][ C0] sched: DL replenish lagged too much [ 136.555682][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.555884][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.520376][ T5960] loop2: detected capacity change from 0 to 16 [ 139.682974][ T5960] erofs (device loop2): mounted with root inode @ nid 36. [ 140.977948][ T5971] process 'syz.1.33' launched './file0' with NULL argv: empty string added [ 140.980375][ T5971] Invalid argument reading file caps for ./file0 [ 143.816033][ T5987] loop4: detected capacity change from 0 to 128 [ 143.932999][ T5988] Bluetooth: MGMT ver 1.23 [ 145.230666][ T6002] binder: Binderfs stats mode cannot be changed during a remount [ 145.611520][ T5987] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.684848][ T5987] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.951954][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.110607][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 148.042674][ T6012] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 148.042723][ T6012] netlink: 'syz.2.43': attribute type 2 has an invalid length. [ 148.512786][ T6009] [U]  [ 148.885871][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.278523][ T6014] loop2: detected capacity change from 0 to 40427 [ 149.322261][ T6014] F2FS-fs (loop2): invalid crc value [ 149.582503][ T6014] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 149.651864][ T6014] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.211585][ T6027] IPVS: rr: FWM 3 0x00000003 - no destination available [ 152.012867][ T5887] IPVS: starting estimator thread 0... [ 152.196706][ T6030] IPVS: using max 7 ests per chain, 16800 per kthread [ 152.809592][ T5619] syz-executor: attempt to access beyond end of device [ 152.809592][ T5619] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.809920][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.809938][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.809945][ T5619] Call Trace: [ 152.809950][ T5619] [ 152.809955][ T5619] dump_stack_lvl+0xe8/0x150 [ 152.809977][ T5619] f2fs_stop_checkpoint+0x383/0x540 [ 152.809999][ T5619] f2fs_write_end_io+0x1274/0x1740 [ 152.810025][ T5619] __submit_merged_bio+0x256/0x6a0 [ 152.810050][ T5619] __submit_merged_write_cond+0x3c9/0x4e0 [ 152.810079][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 152.810111][ T5619] f2fs_write_data_pages+0x287e/0x34f0 [ 152.810146][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.810167][ T5619] ? ktime_get+0x45/0x220 [ 152.810203][ T5619] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.810233][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 152.810260][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.810287][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 152.810315][ T5619] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 152.810339][ T5619] ? reacquire_held_locks+0x104/0x190 [ 152.810359][ T5619] ? rt_spin_lock+0x1e0/0x400 [ 152.810379][ T5619] ? rt_spin_unlock+0x14f/0x200 [ 152.810394][ T5619] ? rt_spin_unlock+0x160/0x200 [ 152.810406][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.810421][ T5619] do_writepages+0x32e/0x550 [ 152.810436][ T5619] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 152.810450][ T5619] ? rt_spin_unlock+0x14f/0x200 [ 152.810468][ T5619] filemap_fdatawrite+0x1ec/0x2f0 [ 152.810485][ T5619] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 152.810497][ T5619] ? __lock_acquire+0x6b5/0x2d10 [ 152.810534][ T5619] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 152.810552][ T5619] ? rt_spin_unlock+0x160/0x200 [ 152.810566][ T5619] f2fs_sync_dirty_inodes+0x30e/0x830 [ 152.810590][ T5619] f2fs_write_checkpoint+0x9df/0x26a0 [ 152.810604][ T5619] ? __lock_acquire+0x6b5/0x2d10 [ 152.810638][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 152.810684][ T5619] kill_f2fs_super+0x314/0x730 [ 152.810702][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 152.810723][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.810746][ T5619] deactivate_locked_super+0xbc/0x130 [ 152.810761][ T5619] cleanup_mnt+0x437/0x4d0 [ 152.810776][ T5619] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.810796][ T5619] task_work_run+0x1d9/0x270 [ 152.810810][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 152.810826][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.810839][ T5619] exit_to_user_mode_loop+0xed/0x480 [ 152.810854][ T5619] ? rcu_is_watching+0x15/0xb0 [ 152.810867][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.810879][ T5619] do_syscall_64+0x33e/0xf80 [ 152.810894][ T5619] ? trace_irq_disable+0x3b/0x140 [ 152.810910][ T5619] ? clear_bhb_loop+0x40/0x90 [ 152.810924][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.810935][ T5619] RIP: 0033:0x7f2b2f03e017 [ 152.810948][ T5619] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 152.810958][ T5619] RSP: 002b:00007fff676e00f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.810972][ T5619] RAX: 0000000000000000 RBX: 00007f2b2f0d2120 RCX: 00007f2b2f03e017 [ 152.810980][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff676e01b0 [ 152.810988][ T5619] RBP: 00007fff676e01b0 R08: 00007fff676e11b0 R09: 00000000ffffffff [ 152.810995][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff676e1240 [ 152.811003][ T5619] R13: 00007f2b2f0d2120 R14: 0000000000025095 R15: 00007fff676e1280 [ 152.811022][ T5619] [ 152.954040][ T5619] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 155.095510][ T6044] syz.3.50 (6044) used greatest stack depth: 18824 bytes left [ 158.116477][ T6058] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 158.116502][ T6058] netlink: 'syz.0.54': attribute type 2 has an invalid length. [ 158.296668][ T6053] [U]  [ 159.967650][ T6065] loop0: detected capacity change from 0 to 512 [ 161.720116][ T6074] ALSA: mixer_oss: invalid OSS volume 'MO' [ 161.791314][ T6065] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.56: bg 0: block 393: padding at end of block bitmap is not set [ 161.791501][ T6065] loop0: lost filesystem error report for type 5 error -117 [ 161.797461][ C1] EXT4-fs (loop0): initial error at time 1777478205: ext4_validate_block_bitmap:441 [ 161.797496][ C1] EXT4-fs (loop0): last error at time 1777478205: ext4_validate_block_bitmap:441 [ 162.062979][ T6065] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 162.063007][ T6065] loop0: lost filesystem error report for type 5 error -117 [ 162.249776][ T6083] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 162.249828][ T6083] netlink: 'syz.2.48': attribute type 2 has an invalid length. [ 163.450661][ T6065] EXT4-fs (loop0): 2 truncates cleaned up [ 163.470187][ T6076] [U]  [ 163.518383][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.865434][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.018476][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 168.018496][ T37] audit: type=1326 audit(1777478211.605:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018548][ T37] audit: type=1326 audit(1777478211.605:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018593][ T37] audit: type=1326 audit(1777478211.615:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018639][ T37] audit: type=1326 audit(1777478211.625:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018684][ T37] audit: type=1326 audit(1777478211.625:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018728][ T37] audit: type=1326 audit(1777478211.635:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7205fd60e code=0x7ffc0000 [ 168.018772][ T37] audit: type=1326 audit(1777478211.645:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018817][ T37] audit: type=1326 audit(1777478211.645:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018871][ T37] audit: type=1326 audit(1777478211.655:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 168.018916][ T37] audit: type=1326 audit(1777478211.655:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72063cdd9 code=0x7ffc0000 [ 170.373085][ T6122] netlink: 'syz.4.66': attribute type 1 has an invalid length. [ 170.373109][ T6122] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 171.104630][ T6112] [U]  [ 173.064643][ T6134] ubi31: attaching mtd0 [ 173.101480][ T6134] ubi31: scanning is finished [ 174.826767][ T5618] Bluetooth: Frame is too long (len 12, expected len 4) [ 176.146528][ T6136] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 176.146552][ T6136] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 176.314669][ T6130] [U]  [ 180.488331][ T6148] [U]  [ 180.880558][ T6140] Zero length message leads to an empty skb [ 181.282219][ T6154] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 181.282661][ T6154] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.542184][ T6155] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 183.096743][ T6165] trusted_key: encrypted_key: insufficient parameters specified [ 183.101454][ T6162] loop1: detected capacity change from 0 to 40427 [ 183.407250][ T6162] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 183.407279][ T6162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 183.416442][ T6162] F2FS-fs (loop1): invalid crc value [ 183.553312][ T6134] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 183.689789][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.760644][ T6162] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.867857][ T6162] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 183.867891][ T6162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.831097][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 184.831119][ T37] audit: type=1800 audit(1777478227.995:56): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.77" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 185.192642][ T6183] netlink: 'syz.4.81': attribute type 1 has an invalid length. [ 185.192665][ T6183] netlink: 'syz.4.81': attribute type 2 has an invalid length. [ 189.923171][ T6200] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.031103][ T6196] [U]  [ 194.320086][ T6229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.89'. [ 197.897412][ T6252] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 199.545373][ T6262] loop1: detected capacity change from 0 to 164 [ 201.058588][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.058704][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.061148][ T6265] loop2: detected capacity change from 0 to 64 [ 201.402926][ T6262] rock: directory entry would overflow storage [ 201.402943][ T6262] rock: sig=0x66, size=4, remaining=3 [ 201.463368][ T6256] rock: directory entry would overflow storage [ 201.463385][ T6256] rock: sig=0x66, size=4, remaining=3 [ 201.485211][ T6256] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.525864][ T6256] block device autoloading is deprecated and will be removed. [ 205.682401][ T6292] ALSA: mixer_oss: invalid OSS volume 'MO' [ 207.170951][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 207.171097][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 207.423685][ T6299] syz.0.107 uses obsolete (PF_INET,SOCK_PACKET) [ 207.609238][ T60] Bluetooth: hci0: unexpected event for opcode 0x200a [ 208.998532][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 209.043405][ T6300] [U]  [ 210.105175][ T6314] ALSA: mixer_oss: invalid OSS volume 'MO' [ 213.855618][ T6342] program syz.2.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.859867][ T6342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 221.374704][ T6378] loop3: detected capacity change from 0 to 1024 [ 221.428556][ T6376] loop1: detected capacity change from 0 to 40427 [ 221.505118][ T6378] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 221.571487][ T6376] F2FS-fs (loop1): invalid crc value [ 221.968655][ T6373] ALSA: mixer_oss: invalid OSS volume 'MO' [ 222.092455][ T6378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 222.499149][ T6376] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.570490][ T6376] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 222.961579][ T6378] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.125: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.961626][ T6378] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 222.968939][ C0] EXT4-fs (loop3): initial error at time 1777478266: ext4_map_blocks:791: inode 3: block 2 [ 222.969002][ C0] EXT4-fs (loop3): last error at time 1777478266: ext4_map_blocks:791: inode 3: block 2 [ 223.085823][ T6378] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 223.085889][ T6378] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.125: lblock 0 mapped to illegal pblock 48 (length 1) [ 223.085923][ T6378] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 223.118148][ T6378] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 223.118178][ T6378] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.125: Failed to acquire dquot type 0 [ 223.118203][ T6378] loop3: lost filesystem error report for type 5 error -117 [ 223.121253][ T6378] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 224.110378][ T6378] loop3: lost filesystem error report for type 5 error -117 [ 225.104681][ T6378] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.125: mark_inode_dirty error [ 225.104720][ T6378] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 225.105248][ T6378] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 225.108317][ T6378] EXT4-fs (loop3): 1 orphan inode deleted [ 225.111490][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.575633][ T6389] syz.1.124: attempt to access beyond end of device [ 225.575633][ T6389] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 226.186357][ T6398] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm syz.3.125: lblock 1 mapped to illegal pblock 1 (length 1) [ 227.145357][ T4929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.890449][ T6398] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1 [ 227.890508][ T6398] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 60928 [ 227.890531][ T6398] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.125: Failed to acquire dquot type 0 [ 227.952228][ T4929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.082699][ T4929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.171667][ T4929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.173615][ T4929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.017579][ T5609] syz-executor: attempt to access beyond end of device [ 231.017579][ T5609] loop1: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 231.044893][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.044925][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.044938][ T5609] Call Trace: [ 231.044946][ T5609] [ 231.044955][ T5609] dump_stack_lvl+0xe8/0x150 [ 231.045000][ T5609] f2fs_stop_checkpoint+0x383/0x540 [ 231.045040][ T5609] f2fs_write_end_io+0x1274/0x1740 [ 231.045101][ T5609] __submit_merged_bio+0x256/0x6a0 [ 231.045132][ T5609] __submit_merged_write_cond+0x3c9/0x4e0 [ 231.045177][ T5609] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 231.045239][ T5609] f2fs_write_data_pages+0x287e/0x34f0 [ 231.045305][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.045390][ T5609] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.045433][ T5609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.045463][ T5609] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.045496][ T5609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.045525][ T5609] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 231.045549][ T5609] ? reacquire_held_locks+0x104/0x190 [ 231.045571][ T5609] ? rt_spin_lock+0x1e0/0x400 [ 231.045603][ T5609] ? rt_spin_unlock+0x14f/0x200 [ 231.045632][ T5609] ? rt_spin_unlock+0x160/0x200 [ 231.045654][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.045681][ T5609] do_writepages+0x32e/0x550 [ 231.045706][ T5609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.045732][ T5609] ? rt_spin_unlock+0x14f/0x200 [ 231.045767][ T5609] filemap_fdatawrite+0x1ec/0x2f0 [ 231.045796][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 231.045817][ T5609] ? __lock_acquire+0x6b5/0x2d10 [ 231.045885][ T5609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.045918][ T5609] ? rt_spin_unlock+0x160/0x200 [ 231.045945][ T5609] f2fs_sync_dirty_inodes+0x30e/0x830 [ 231.045989][ T5609] f2fs_write_checkpoint+0x9df/0x26a0 [ 231.046014][ T5609] ? __lock_acquire+0x6b5/0x2d10 [ 231.046071][ T5609] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 231.046184][ T5609] kill_f2fs_super+0x314/0x730 [ 231.046218][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 231.046259][ T5609] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.046302][ T5609] deactivate_locked_super+0xbc/0x130 [ 231.046330][ T5609] cleanup_mnt+0x437/0x4d0 [ 231.046357][ T5609] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.046390][ T5609] task_work_run+0x1d9/0x270 [ 231.046416][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 231.046447][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.046471][ T5609] exit_to_user_mode_loop+0xed/0x480 [ 231.046500][ T5609] ? rcu_is_watching+0x15/0xb0 [ 231.046524][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.046547][ T5609] do_syscall_64+0x33e/0xf80 [ 231.046575][ T5609] ? trace_irq_disable+0x3b/0x140 [ 231.046604][ T5609] ? clear_bhb_loop+0x40/0x90 [ 231.046631][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.046653][ T5609] RIP: 0033:0x7f6b5393e017 [ 231.046674][ T5609] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 231.046691][ T5609] RSP: 002b:00007ffec774da38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 231.046714][ T5609] RAX: 0000000000000000 RBX: 00007f6b539d2120 RCX: 00007f6b5393e017 [ 231.046728][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec774daf0 [ 231.046740][ T5609] RBP: 00007ffec774daf0 R08: 00007ffec774eaf0 R09: 00000000ffffffff [ 231.046754][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec774eb80 [ 231.046767][ T5609] R13: 00007f6b539d2120 R14: 0000000000036600 R15: 00007ffec774ebc0 [ 231.046803][ T5609] [ 231.073365][ T5609] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 231.073669][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.073715][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.073727][ T5609] Call Trace: [ 231.073736][ T5609] [ 231.073745][ T5609] dump_stack_lvl+0xe8/0x150 [ 231.073780][ T5609] f2fs_stop_checkpoint+0x383/0x540 [ 231.073821][ T5609] f2fs_write_end_io+0x1274/0x1740 [ 231.073871][ T5609] __submit_merged_bio+0x256/0x6a0 [ 231.073903][ T5609] __submit_merged_write_cond+0x3c9/0x4e0 [ 231.073948][ T5609] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 231.074008][ T5609] f2fs_write_data_pages+0x287e/0x34f0 [ 231.074075][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.074165][ T5609] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.074206][ T5609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.074236][ T5609] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.074264][ T5609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.074293][ T5609] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 231.074317][ T5609] ? reacquire_held_locks+0x104/0x190 [ 231.074338][ T5609] ? rt_spin_lock+0x1e0/0x400 [ 231.074370][ T5609] ? rt_spin_unlock+0x14f/0x200 [ 231.074405][ T5609] ? rt_spin_unlock+0x160/0x200 [ 231.074426][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.074452][ T5609] do_writepages+0x32e/0x550 [ 231.074477][ T5609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.074504][ T5609] ? rt_spin_unlock+0x14f/0x200 [ 231.074539][ T5609] filemap_fdatawrite+0x1ec/0x2f0 [ 231.074568][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 231.074590][ T5609] ? __lock_acquire+0x6b5/0x2d10 [ 231.074661][ T5609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.074694][ T5609] ? rt_spin_unlock+0x160/0x200 [ 231.074722][ T5609] f2fs_sync_dirty_inodes+0x30e/0x830 [ 231.074766][ T5609] f2fs_write_checkpoint+0x9df/0x26a0 [ 231.074792][ T5609] ? __lock_acquire+0x6b5/0x2d10 [ 231.074857][ T5609] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 231.074945][ T5609] kill_f2fs_super+0x314/0x730 [ 231.074978][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 231.075019][ T5609] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.075062][ T5609] deactivate_locked_super+0xbc/0x130 [ 231.075098][ T5609] cleanup_mnt+0x437/0x4d0 [ 231.075124][ T5609] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.075157][ T5609] task_work_run+0x1d9/0x270 [ 231.075182][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 231.075211][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.075235][ T5609] exit_to_user_mode_loop+0xed/0x480 [ 231.075263][ T5609] ? rcu_is_watching+0x15/0xb0 [ 231.075287][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.075310][ T5609] do_syscall_64+0x33e/0xf80 [ 231.075338][ T5609] ? trace_irq_disable+0x3b/0x140 [ 231.075366][ T5609] ? clear_bhb_loop+0x40/0x90 [ 231.075392][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.075413][ T5609] RIP: 0033:0x7f6b5393e017 [ 231.075434][ T5609] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 231.075450][ T5609] RSP: 002b:00007ffec774da38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 231.075473][ T5609] RAX: 0000000000000000 RBX: 00007f6b539d2120 RCX: 00007f6b5393e017 [ 231.075487][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec774daf0 [ 231.075500][ T5609] RBP: 00007ffec774daf0 R08: 00007ffec774eaf0 R09: 00000000ffffffff [ 231.075515][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec774eb80 [ 231.075528][ T5609] R13: 00007f6b539d2120 R14: 0000000000036600 R15: 00007ffec774ebc0 [ 231.075564][ T5609] [ 231.120793][ T1038] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 231.168723][ T5609] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 231.339845][ T6405] loop4: detected capacity change from 0 to 2048 [ 231.364226][ T1038] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 231.364334][ T1038] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 231.408645][ T6405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.668171][ T4929] Bluetooth: hci5: command tx timeout [ 233.004374][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.028931][ T5608] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 233.028965][ T5608] loop3: lost filesystem error report for type 5 error -117 [ 233.081018][ T5608] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 233.081046][ T5608] loop3: lost filesystem error report for type 5 error -117 [ 233.209002][ T5608] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 233.209025][ T5608] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.968126][ T4929] Bluetooth: hci5: command tx timeout [ 234.928623][ T6422] comedi comedi3: pcl812: I/O base address or length out of range [ 236.186871][ T4929] Bluetooth: hci5: command tx timeout [ 237.460659][ T6429] netlink: 'syz.1.129': attribute type 7 has an invalid length. [ 237.460714][ T6429] netlink: 'syz.1.129': attribute type 8 has an invalid length. [ 239.593465][ T6431] blktrace: Concurrent blktraces are not allowed on loop4 [ 240.889929][ T4929] Bluetooth: hci5: command tx timeout [ 243.317878][ T6452] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 244.884430][ T6459] loop1: detected capacity change from 0 to 8 [ 246.797761][ T6459] SQUASHFS error: xz decompression failed, data probably corrupt [ 246.797798][ T6459] SQUASHFS error: Failed to read block 0x108: -5 [ 246.797816][ T6459] SQUASHFS error: Unable to read metadata cache entry [106] [ 246.797831][ T6459] SQUASHFS error: Unable to read inode 0x101f [ 249.589475][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 253.073522][ T4929] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.156387][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.242884][ T60] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 259.430123][ T4929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.499779][ T4929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.531831][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.534277][ T4929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.552881][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.792834][ T6511] loop2: detected capacity change from 0 to 512 [ 259.793645][ T6511] EXT4-fs: Ignoring removed oldalloc option [ 259.826131][ T6511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 259.826150][ T6511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.975776][ T6509] loop1: detected capacity change from 0 to 2048 [ 259.993109][ T6511] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #11: comm syz.2.153: corrupted in-inode xattr: invalid ea_ino [ 259.993145][ T6511] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 260.000061][ C1] EXT4-fs (loop2): initial error at time 1777478303: ext4_iget_extra_inode:5128: inode 11 [ 260.000098][ C1] EXT4-fs (loop2): last error at time 1777478303: ext4_iget_extra_inode:5128: inode 11 [ 260.079914][ T6511] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.153: couldn't read orphan inode 11 (err -117) [ 260.079950][ T6511] loop2: lost filesystem error report for type 5 error -117 [ 260.160868][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.295868][ T4929] Bluetooth: hci4: command tx timeout [ 262.311622][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.311721][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.220745][ T6509] EXT4-fs: error -4 creating inode table initialization thread [ 263.223836][ T6509] EXT4-fs (loop1): mount failed [ 264.349634][ T4929] Bluetooth: hci4: command tx timeout [ 264.480962][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.646269][ T4929] Bluetooth: hci4: command tx timeout [ 266.957365][ T6535] evm: overlay not supported [ 267.934244][ T6526] ALSA: mixer_oss: invalid OSS volume 'MO' [ 268.053778][ T6532] binder: Binderfs stats mode cannot be changed during a remount [ 268.666586][ T4929] Bluetooth: hci4: command tx timeout [ 271.178217][ T6557] loop3: detected capacity change from 0 to 32768 [ 272.248149][ T6566] PKCS7: Unknown OID: [4] 0.0 [ 272.248195][ T6566] PKCS7: Only support pkcs7_signedData type [ 273.150872][ T6557] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.505237][ T6557] XFS (loop3): Ending clean mount [ 274.702619][ T5608] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.262512][ T6610] overlayfs: overlapping lowerdir path [ 280.531589][ T6609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 283.072732][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.071831][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.701680][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.727661][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.734812][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.324531][ T6643] ubi31: attaching mtd0 [ 287.327866][ T6643] ubi31: scanning is finished [ 287.338072][ T6642] random: crng reseeded on system resumption [ 290.232846][ T6645] qnx6: unable to read the first superblock [ 290.366316][ T4929] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 291.753167][ T4929] Bluetooth: hci6: command tx timeout [ 293.441479][ T6643] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 294.873484][ T6668] loop1: detected capacity change from 0 to 1024 [ 297.150575][ T4929] Bluetooth: hci6: command tx timeout [ 298.314063][ T6678] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 298.314085][ T6678] netlink: 'syz.2.188': attribute type 2 has an invalid length. [ 299.696381][ T6673] [U]  [ 302.035165][ T4929] Bluetooth: hci6: command tx timeout [ 303.487037][ T6692] loop2: detected capacity change from 0 to 128 [ 303.558847][ T6692] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 303.558905][ T6692] hpfs: filesystem error: improperly stopped [ 303.558930][ T6692] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 303.558945][ T6692] hpfs: You really don't want any checks? You are crazy... [ 303.559542][ T6692] hpfs: hpfs_map_sector(): read error [ 303.559554][ T6692] hpfs: code page support is disabled [ 303.560164][ T6692] hpfs: hpfs_map_4sectors(): unaligned read [ 303.560296][ T6692] hpfs: hpfs_map_4sectors(): unaligned read [ 303.560306][ T6692] hpfs: filesystem error: unable to find root dir [ 304.290690][ T4929] Bluetooth: hci6: command tx timeout [ 306.948508][ T6704] loop2: detected capacity change from 0 to 64 [ 307.132995][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 307.133022][ T6704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.195'. [ 307.814889][ T5614] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 308.104033][ T6708] ALSA: mixer_oss: invalid OSS volume 'MO' [ 309.555104][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.508366][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.568771][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.613591][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.632688][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.973803][ T5614] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 310.973846][ T5614] usb 3-1: can't read configurations, error -71 [ 313.177263][ T60] Bluetooth: hci7: command tx timeout [ 313.572802][ T4929] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 313.613580][ T4929] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 313.628888][ T4929] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 313.639514][ T4929] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 313.644257][ T4929] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 315.246882][ T60] Bluetooth: hci7: command tx timeout [ 315.303487][ T60] Bluetooth: hci3: unexpected event for opcode 0x200a [ 316.445942][ T6738] loop3: detected capacity change from 0 to 256 [ 316.462285][ T6738] vfat: Bad value for 'nonumtail' [ 316.626554][ T60] Bluetooth: hci8: command tx timeout [ 319.046992][ T60] Bluetooth: hci7: command tx timeout [ 319.047003][ T4929] Bluetooth: hci8: command tx timeout [ 320.786703][ T6763] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 320.786728][ T6763] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 321.074184][ T60] Bluetooth: hci8: command tx timeout [ 321.074225][ T60] Bluetooth: hci7: command tx timeout [ 321.117641][ T6759] [U]  [ 323.281248][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.281451][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.289726][ T4929] Bluetooth: hci8: command tx timeout [ 333.583408][ T6798] ALSA: mixer_oss: invalid OSS volume 'MO' [ 335.570471][ T4929] Bluetooth: hci3: unexpected event for opcode 0x200a [ 335.869997][ T6807] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 335.870020][ T6807] netlink: 'syz.2.215': attribute type 2 has an invalid length. [ 336.445109][ T6803] [U]  [ 337.274453][ T4929] Bluetooth: hci3: unexpected event for opcode 0x200a [ 337.728153][ T6820] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 337.728204][ T6820] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 338.287949][ T6815] [U]  [ 340.950026][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 340.950053][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x32 [ 340.950070][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 340.950084][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 340.950097][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x39 [ 340.950110][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x32 [ 340.950124][ T4929] Bluetooth: hci3: unknown advertising packet type: 0x39 [ 346.917006][ T38] INFO: task kworker/0:0:9 blocked for more than 145 seconds. [ 346.917038][ T38] Tainted: G L syzkaller #0 [ 346.917050][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.917060][ T38] task:kworker/0:0 state:D stack:20664 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 346.917122][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 346.917161][ T38] Call Trace: [ 346.917169][ T38] [ 346.917184][ T38] __schedule+0x169e/0x54f0 [ 346.917246][ T38] ? __pfx___schedule+0x10/0x10 [ 346.917270][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 346.917308][ T38] rt_mutex_schedule+0x76/0xf0 [ 346.917333][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 346.917378][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 346.917405][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 346.917441][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 346.917465][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 346.917499][ T38] ? reg_check_chans_work+0x197/0x1090 [ 346.917528][ T38] ? reg_check_chans_work+0x197/0x1090 [ 346.917559][ T38] ? reg_check_chans_work+0x197/0x1090 [ 346.917583][ T38] mutex_lock_nested+0x168/0x1d0 [ 346.917608][ T38] reg_check_chans_work+0x197/0x1090 [ 346.917666][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 346.917695][ T38] ? process_one_work+0x8b7/0x1710 [ 346.917733][ T38] ? process_one_work+0x8b7/0x1710 [ 346.917752][ T38] process_one_work+0x9a3/0x1710 [ 346.917792][ T38] ? __pfx_process_one_work+0x10/0x10 [ 346.917810][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.917849][ T38] worker_thread+0xba8/0x11e0 [ 346.917897][ T38] kthread+0x388/0x470 [ 346.917922][ T38] ? __pfx_worker_thread+0x10/0x10 [ 346.917941][ T38] ? __pfx_kthread+0x10/0x10 [ 346.917967][ T38] ret_from_fork+0x514/0xb70 [ 346.917993][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 346.918014][ T38] ? __switch_to+0xc79/0x1410 [ 346.918036][ T38] ? __pfx_kthread+0x10/0x10 [ 346.918062][ T38] ret_from_fork_asm+0x1a/0x30 [ 346.918102][ T38] [ 346.918246][ T38] [ 346.918246][ T38] Showing all locks held in the system: [ 346.918254][ T38] 4 locks held by kworker/0:0/9: [ 346.918264][ T38] #0: ffff88813fe42538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.918310][ T38] #1: ffffc900000e7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.918352][ T38] #2: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 346.918398][ T38] #3: ffff888061b208b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x197/0x1090 [ 346.918454][ T38] 3 locks held by kworker/u8:1/13: [ 346.918463][ T38] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.918505][ T38] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.918546][ T38] #2: ffff88804d1e08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.918590][ T38] 3 locks held by ksoftirqd/1/31: [ 346.918599][ T38] #0: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 346.918642][ T38] #1: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 346.918691][ T38] #2: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xf9/0x900 [ 346.918731][ T38] 1 lock held by khungtaskd/38: [ 346.934011][ T38] #0: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 346.934094][ T38] 3 locks held by kworker/u8:2/43: [ 346.934107][ T38] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.934173][ T38] #1: ffffc90000b47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.934225][ T38] #2: ffff88804d0d08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.934290][ T38] 3 locks held by kworker/u8:5/141: [ 346.934302][ T38] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.934354][ T38] #1: ffffc900039c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.934407][ T38] #2: ffff8880614d08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.934473][ T38] 3 locks held by kworker/u8:7/420: [ 346.934484][ T38] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.934537][ T38] #1: ffffc90004567c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.934590][ T38] #2: ffff888061b208b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.934651][ T38] 5 locks held by kworker/u8:10/1132: [ 346.934663][ T38] #0: ffff8880331e4138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.934706][ T38] #1: ffffc9000634fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.934760][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 346.934813][ T38] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 346.934866][ T38] #4: ffff88805dd6a758 (key#17){+...}-{3:3}, at: batadv_tt_local_purge+0x143/0x380 [ 346.934927][ T38] 4 locks held by kworker/u8:12/1465: [ 346.934939][ T38] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.934993][ T38] #1: ffffc90006d5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.935048][ T38] #2: ffff888037b9c310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 346.935112][ T38] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 346.935164][ T38] 3 locks held by kworker/u8:15/1513: [ 346.935175][ T38] #0: ffff8880320af138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.935229][ T38] #1: ffffc90006f2fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.935303][ T38] #2: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 346.935378][ T38] 7 locks held by kworker/u8:19/3435: [ 346.935389][ T38] #0: ffff88801e2b9938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.935529][ T38] #1: ffffc9000f0e7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.935582][ T38] #2: ffff888035f920d0 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 346.935639][ T38] #3: ffff888035fc0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 346.937032][ T38] #4: ffff8880b863b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 346.937093][ T38] #5: ffff8880b87246c8 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 346.937155][ T38] #6: ffff88801b744870 (&p->pi_lock){-...}-{2:2}, at: try_to_wake_up+0x66/0x1380 [ 346.937214][ T38] 3 locks held by kworker/u9:1/4929: [ 346.937226][ T38] #0: ffff88804d7b3938 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.937279][ T38] #1: ffffc900109e7c40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.937332][ T38] #2: ffff888069af8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x710 [ 346.937408][ T38] 2 locks held by getty/5367: [ 346.937428][ T38] #0: ffff88823beee8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.937732][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 346.937801][ T38] 2 locks held by kworker/1:9/5993: [ 346.937813][ T38] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 346.937866][ T38] #1: ffffc900066afc40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 346.937918][ T38] 1 lock held by syz.4.64/6111: [ 346.937930][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 346.937983][ T38] 2 locks held by syz.0.107/6299: [ 346.937994][ T38] #0: ffffffff8f34f338 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fd/0x7f0 [ 346.938053][ T38] #1: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 346.938104][ T38] 1 lock held by syz-executor/6393: [ 346.938116][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 346.938173][ T38] 1 lock held by syz-executor/6506: [ 346.938184][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 346.938239][ T38] 1 lock held by syz-executor/6621: [ 346.938250][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 346.938307][ T38] 1 lock held by syz.1.187/6663: [ 346.938318][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x390/0x490 [ 346.938373][ T38] 1 lock held by syz-executor/6712: [ 346.938385][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 346.938450][ T38] 1 lock held by syz-executor/6725: [ 346.938462][ T38] #0: ffffffff8f36edb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 346.938517][ T38] 1 lock held by syz.2.221/6836: [ 346.938528][ T38] #0: ffff8880714007f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.938584][ T38] [ 346.938589][ T38] ============================================= [ 346.938589][ T38] [ 346.938598][ T38] NMI backtrace for cpu 1 [ 346.938616][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.938650][ T38] Tainted: [L]=SOFTLOCKUP [ 346.938657][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.938668][ T38] Call Trace: [ 346.938676][ T38] [ 346.938685][ T38] dump_stack_lvl+0xe8/0x150 [ 346.938715][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 346.938739][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 346.938767][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 346.938794][ T38] sys_info+0x135/0x170 [ 346.938813][ T38] watchdog+0xfd3/0x1030 [ 346.938849][ T38] ? watchdog+0x1c9/0x1030 [ 346.938882][ T38] kthread+0x388/0x470 [ 346.938913][ T38] ? __pfx_watchdog+0x10/0x10 [ 346.938937][ T38] ? __pfx_kthread+0x10/0x10 [ 346.938970][ T38] ret_from_fork+0x514/0xb70 [ 346.939000][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 346.939026][ T38] ? __switch_to+0xc79/0x1410 [ 346.939051][ T38] ? __pfx_kthread+0x10/0x10 [ 346.939083][ T38] ret_from_fork_asm+0x1a/0x30 [ 346.939127][ T38] [ 346.939153][ T38] Sending NMI from CPU 1 to CPUs 0: [ 346.939181][ C0] NMI backtrace for cpu 0 [ 346.939198][ C0] CPU: 0 UID: 0 PID: 6836 Comm: syz.2.221 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.939220][ C0] Tainted: [L]=SOFTLOCKUP [ 346.939226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.939234][ C0] RIP: 0010:__lock_acquire+0x75c/0x2d10 [ 346.939260][ C0] Code: 44 c1 f8 31 e8 25 00 60 00 00 0f 95 c1 89 0c 24 31 c9 f7 d8 48 19 c9 48 09 cb 48 83 bc 24 20 01 00 00 00 75 67 e9 bb 00 00 00 00 00 03 00 0f 84 54 02 00 00 48 8b 5c 24 08 48 89 df 4c 89 ee [ 346.939274][ C0] RSP: 0018:ffffc9000616f4c8 EFLAGS: 00000046 [ 346.939289][ C0] RAX: 000000000004083d RBX: 0000000000000000 RCX: 0000000000000000 [ 346.939301][ C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.939310][ C0] RBP: ffff88802a8aaab8 R08: ffffffff89cda632 R09: ffff8880714007f0 [ 346.939322][ C0] R10: ffffc9000616f780 R11: fffff52000c2def4 R12: ffffffffffffff05 [ 346.939333][ C0] R13: ffff88802a8aaab8 R14: ffff88802a8a9ec0 R15: ffff88802a8aaab8 [ 346.939345][ C0] FS: 00007f2b2d2756c0(0000) GS:ffff888125f2d000(0000) knlGS:0000000000000000 [ 346.939358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.939369][ C0] CR2: 00007f03e71cf023 CR3: 000000006fdc0000 CR4: 00000000003526f0 [ 346.939386][ C0] Call Trace: [ 346.939392][ C0] [ 346.939401][ C0] ? put_pid+0xd8/0x130 [ 346.939423][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.939445][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.939462][ C0] lock_acquire+0x106/0x350 [ 346.939483][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.939502][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.939521][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.939537][ C0] mutex_lock_nested+0x5a/0x1d0 [ 346.939553][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.939572][ C0] __unix_dgram_recvmsg+0x1e2/0xd60 [ 346.939592][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 346.939613][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 346.939635][ C0] ? rcu_is_watching+0x15/0xb0 [ 346.939651][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 346.939678][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 346.939699][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 346.939717][ C0] ____sys_recvmsg+0x23d/0x4f0 [ 346.939740][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 346.939766][ C0] ? import_iovec+0x73/0xa0 [ 346.939785][ C0] ___sys_recvmsg+0x215/0x590 [ 346.939807][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 346.939841][ C0] do_recvmmsg+0x33a/0x800 [ 346.939864][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 346.939883][ C0] ? file_init_path+0x3b/0x5b0 [ 346.939903][ C0] ? __pfx_do_futex+0x10/0x10 [ 346.939925][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 346.939947][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 346.939971][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.939987][ C0] do_syscall_64+0x15f/0xf80 [ 346.940007][ C0] ? trace_irq_disable+0x3b/0x140 [ 346.940027][ C0] ? clear_bhb_loop+0x40/0x90 [ 346.940044][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.940060][ C0] RIP: 0033:0x7f2b2f03cdd9 [ 346.940074][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.940086][ C0] RSP: 002b:00007f2b2d275028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 346.940102][ C0] RAX: ffffffffffffffda RBX: 00007f2b2f2b6090 RCX: 00007f2b2f03cdd9 [ 346.940115][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 346.940125][ C0] RBP: 00007f2b2f0d2d69 R08: 0000000000000000 R09: 0000000000000000 [ 346.940135][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 346.940144][ C0] R13: 00007f2b2f2b6128 R14: 00007f2b2f2b6090 R15: 00007fff676e0e88 [ 346.940162][ C0] [ 346.941110][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 346.941130][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.941157][ T38] Tainted: [L]=SOFTLOCKUP [ 346.941164][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.941175][ T38] Call Trace: [ 346.941183][ T38] [ 346.941191][ T38] vpanic+0x56c/0xa60 [ 346.941221][ T38] ? __pfx___schedule+0x10/0x10 [ 346.941248][ T38] ? __pfx_vpanic+0x10/0x10 [ 346.941286][ T38] panic+0xc5/0xd0 [ 346.941314][ T38] ? __pfx_panic+0x10/0x10 [ 346.941343][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 346.941371][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 346.941398][ T38] watchdog+0x102c/0x1030 [ 346.941442][ T38] ? watchdog+0x1c9/0x1030 [ 346.941475][ T38] kthread+0x388/0x470 [ 346.941506][ T38] ? __pfx_watchdog+0x10/0x10 [ 346.941530][ T38] ? __pfx_kthread+0x10/0x10 [ 346.941562][ T38] ret_from_fork+0x514/0xb70 [ 346.941592][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 346.941619][ T38] ? __switch_to+0xc79/0x1410 [ 346.941644][ T38] ? __pfx_kthread+0x10/0x10 [ 346.941675][ T38] ret_from_fork_asm+0x1a/0x30 [ 346.941719][ T38] [ 346.942133][ T38] Kernel Offset: disabled