last executing test programs: 45.210253775s ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300", @ANYRES32], 0x68}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 44.039703644s ago: executing program 4 (id=9): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x68, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r0, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101095, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) unshare(0x22020600) unshare(0x2070000) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x18, 0x428}}}, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000900000d1af77788d3081da8f3f731d66eaeb9b4fc42b7c12c39a510d1c6c738ded568765da1cc458ca8bf28727bf08b5cf86e144e5a9d78ba31f1b0316a698"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002380)={0x2020}, 0x2020) 43.681543019s ago: executing program 4 (id=13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) (async) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fcntl$addseals(r2, 0x409, 0x7) (async) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000011c0)={r2, 0x1e, 0x0, 0x1000000}) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000011c0)={r2, 0x1e, 0x0, 0x1000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x10}}, './file1\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xe97, 0x63b, 0xf2000000, 0x4, 0x9, "9e0b14185a332bde1ccafb993e1c08663b37b7"}) 41.883313111s ago: executing program 4 (id=27): ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0xffffff3f) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r1) fchownat(r1, &(0x7f0000000140)='./file0\x00', 0xee01, 0x0, 0x800) 41.738262052s ago: executing program 32 (id=27): ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0xffffff3f) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r1) fchownat(r1, &(0x7f0000000140)='./file0\x00', 0xee01, 0x0, 0x800) 11.605771712s ago: executing program 0 (id=396): set_mempolicy(0x8000, &(0x7f0000000080)=0x7e, 0x5) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x7, 0x40, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @remote}}}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, r3}, 0xc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0xe7, &(0x7f00000001c0)=""/231, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0xc503, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a6}, 0x94) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000040)=[{r6, 0x8fae}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000000), &(0x7f0000000400)=r5}, 0x20) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 11.160275879s ago: executing program 0 (id=400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/41, 0x29}, 0x200}], 0x1, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xda, &(0x7f0000000540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0xcc, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x1c, 0x8d, 0x0, 0x0, [0x3, 0x6ba5, 0x8, 0x6, 0x4, 0x4]}]}}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "e82ca9233cd8ac0fe6b4d73798030c0f667ad86fff3f32fa33c2e0fe1ae43d64", "acfb88723558ceeaf86fbed72cf31046bbffe5819111088759971568602602fdceba64124e79599871b0e53eaa3e6c8e", "c0527a7fed7f0b210a44e41677011b892290d4df235708ae273d1dab", {"99829b51f486c2ce12e69f9ed88756da", "af73eef74a94e7bf437f1c274e4abedb"}}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x0, r0, 0x4}) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000040)=0x1b) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x4e20, @multicast1}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e24}}, @sco, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x375, 0x1}) 11.084406265s ago: executing program 0 (id=403): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8, 0x8) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3300051, 0x0, 0x1, 0x0, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r5 = dup(r4) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000400)={0x2, "2dec8fb6a09b4df61480d04be3333bbd37aa461f550d896b55d271c6c32f3697", 0x3, 0x200, 0x7, 0x9, 0x4, 0x0, 0x7, 0x6}) sendfile(r5, r6, 0x0, 0x8000fffffffe) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0xa00}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @generic={0x7, 0x6, 0x6, 0x0, 0xa, @random="00004a9f1b56", "", @local}}}}}, 0x2e) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r8, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000080)={r9, 0xec07}, 0x8) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 11.011929625s ago: executing program 0 (id=405): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x800, 0x3, 0x3}, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x100000001) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) r2 = syz_ublk_setup_io_uring(0x1e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 10.914555776s ago: executing program 0 (id=408): r0 = socket$inet(0x2, 0x4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x302, 0x8, 0x0, 0x0, 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) read(r6, &(0x7f00000001c0)=""/93, 0x5d) socket$unix(0x1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000000)={0x2, 0x3}, 0x2) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2f, 0x0, 0xce2c, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c006200000002907800000000e000000212009078e0000002b2bf7ea80c8490"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000903bdc1a5471274f6a85d98ac910d54400", @ANYRES16=r9, @ANYBLOB="010000000000000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500820000000000"], 0x58}}, 0x60) 2.829570346s ago: executing program 0 (id=423): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x204, &(0x7f0000000180)={[{0x7a, 0x4e00, "4ae4e3d63f63fe629e31ec57363b5788225e7774197cfaf525108cc81ccef5ae2fe1a9229cf80635c98aa430baa035afa74ad855076e24ad30263dc06c531cb815285ef1c33d0c5f9265e6756b5dd7d4cd8a3b232d3909de3078610cc60e0ee43259326967c01ba44443a1e6d9d170dc2f538535e40ba5da5487"}, {0x22, 0x4e00, "e3c871f2b9cfc9185a42f323d0d9a355fc9f1b2126f9e409a163a7ae6d7ce24ef27c"}, {0xf4, 0x4e00, "fcf34638f633c4533c3bfa3535fcb1d1a3ea175a42f0c662253b72a68b3030c09fa7017b2ea80f3e95dd68753ac5e5eec575dab898474a9d56ef01d0f53030eb3cf068d6531ce1b4b9e65e4f3e58ad2c30edbd792baf467941a82d7fd5ce40d06469ed6cc0d21ddac9e15a2a8be37d73d0778a0472574720a054ae545e1f8930acec1eb85f2e0c542d4bff5557a2c52032dd312164b96890481b49438d28edaae1d9b39ca79418f3b9a635f354fa3e7387984ee276efb268489fc3ad749a664be82ccc41fcaa4614de45c0464234468326bfe11b3c71e0b173f69b4fbdfc1547cf381fbbbefea81b53ac797269713571a8ced390"}, {0x5c, 0x4e00, "b3d4c819e6db008e2a80d4a2f1b11628d19691e7905ecebc9749d09cd3391bea232ed17bcae3156b93b5e5a21058be45dc82738654c35f43e3d4d2f2f7ad78f5fd677c60022d7a470896480d43790fc0246a024d456266c82e8020fb"}, {}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffd, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e1fcb4b20"], 0xf) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x1, 0x9}, 0x8) sendto$inet6(r2, &(0x7f0000000080)="0094ddfd", 0x4, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 1.72826541s ago: executing program 1 (id=431): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000280)={{0xcc, 0x8f, 0x9, 0x25e, 0x267, 0x2, 0xb2, 0xffff0001}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa1c) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0603d0f, &(0x7f0000000040)) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf4, 0x15, 0x400, 0x70bd2a, 0x25dfdbfd, {0x2c, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "c9808c4c61ddc9abee02bb02aa01138fab0af32d3208120bc0d291119b12c8c0b996ed0f6bf950091368283a81202bee5ecb42672128ad444356b3858b29fa0d9c58992734455be1fd5e6d1295f10fe43c7bb0380a98e6464b764c5bfc403708c3"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "186b13aa2342dcfab67b06747103f34872497fbd4b2d7dcb55a49c119bded06c0cf1a7429708ab35484bfa608ebdbc0cbb06052868c53e8eb8164841b76f92a627ad9adce0d6f70ef1f6c38e3aeb109c9d0c69d35796ef88768f19f4e6e6387be7662d608baf06"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "3cd08090f1ccf8"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040}, 0x20000885) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f", 0x24}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.713719975s ago: executing program 1 (id=434): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x100058f, &(0x7f0000000200)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@nouid32}, {@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x1f00}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x578, &(0x7f0000000ac0)="$eJzs3d9rHVkdAPDvTHPTX+km6/qgC66rrrSL9qbZ7I/gw9oF0acFcX2vIbkJITe5JbnZNqFg+hcIIir6pC++CP4BghR88VGEguKjwoqyaKoPgtqRO3fy+85t2r29t0k+H5jOmXNm5nvO3M5kzswwE8Cp9XJEXI+Ih1mWvRoRo0V+Wgyx2R5a8z3YujPTGpLIsvf+nkRS5G2vKynGF4vFzkbEN74WcSs5HHd1fWNxul6vrRTT482lm+Or6xtXF5am52vzteXJyYk3p96aemPqWk/aeSki3v7KX77/nZ999e1fffHWn2/87Uqr2TFSlO9tx2NobaKhbjO0m16Jc3vyWgusPEGwZ9VQ3sLC+U5zZFmWPRzdm3O3HxUDAOCQ1gnsxyLisxHxaozGme6nswAAAMAxlH15JP6btO/QdDBckg8AAAAcI2n+DGySVotnAUYiTavV9jO8H48Lab2x2vzCXGNtefb+j0YiYiwq6dxCfTOKZ4XHopLMLdRrE3l6d/q1A9OTEfF8RHxv9Hw+XZ1p1GcHffEDAAAATomLB/r//xpt9/8BAACAE2bscFY6iHoAAAAAT0+H/j8AAABwwuj/AwAAwIn29XffbQ3Z9vevZ99fX1tsvH91tra6WF1am6nONFZuVucbjfn8nX1Le5c902F99Ubj5uuxvHZ7vFlbbY6vrm/cWGqsLTdvLOz7BDYAAADQR89/+t4fkojY/NL5fGgZHnSlgL4Y2kklxbjD3v+n59rjD/pUKaAvOl3DP+iDs32oCNB3Q0+0VHaUwwbwjKsMugLAwCXlRX+cXHm9vPS3xfgzPa8SAADQY5c/WX7/v/s3ADZ9IgCOOTsxnF4HbuRlo4OqCNB3+f3/oz7w62QBTpTKkZ4ABE6yLvf/c6Uv79i+/x93H7GGLHvsSgEAAD01kg9JWi0u741EmlarEZfyzwJUkrmFeu1aRDwXEb8frZxtTU/kSyaP7DMAAAAAAAAAAAAAAAAAAAAAAAAAAG1ZlkTWzfWupQAAAMAxEJH+Nfl1+13+l0dfGTl4fWA4+Xf+SeDhiLj14/d+cHu62VyZaOX/Yye/+cMi/7VBXMEAAAAADtrup2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV9KIeLB1Z+bB1p3sP1t3ZvoZ+8N3ImJsJ34+tEuG4lw+PheViLjwzySG9iyXRMSZHsTfvBsRn+gUP2lVaydkp/jnn378GCu2Qqf4F3sQH06ze+9EXC/S+/e/NF7Oxwf2v7RdOhSxb398UuXHv9g5/p0p2f8vHTHGi/d/MV5SlK/yxaE8/tmI2Hf82Y6fHIqfFOO0POi53eS3vrmxUTZb9pOIy9H5+Lc32nhz6eb46vrG1YWl6fnafG15cnLizam3pt6YujY+t1CvFf92jPHdT/3yYVn8D+9GXCiJP1ba/nadXilv/T7/u39764WSv1et+Fc+1yH+b35azHE4flqs6/NFulV+eTu92U7v9dLPf/dSt/bP7ra/crTfvx3zSvdm7/6AvdhRAICeWV3fWJyu12srxyFReZKlWr30TkUvFFvgo1ds+FnZPhKPmfh2T1eYZVlW8j/qXkQcZT1JPN0mD0fE4navrcM8yW7RYI5HAADA07N79j/omgAAAAAAAAAAAAAAAAAAAMDp1cMXjA13fM1ehzcLbO6kEm8GBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeGf8PAAD//6eNzY8=") r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) syz_read_part_table(0x1078, &(0x7f0000001100)="$eJzs0D1OAzEQBeDnbDabBCRuQEvLEShoEB1chTshjkQPDS2iNrIN2hNAmu8r/PNmNJYcTmq7KXfZJ8vlc+1aOP9W5yytmJSpfCV5n3pcL+bUuuza+bonPT+05XOMqbucJ7U+jVfy+lY/Wriae/5w+3h/WMPpZy/JtrxcjctNazgbc/atpyQ5JsfNX/4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyf7wAAAP//VUEfKw==") 1.536290003s ago: executing program 3 (id=437): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r5, r3, r4, 0x0, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2000000}) 1.455232237s ago: executing program 2 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x388, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x352, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x67, "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"}]}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_open_dev$evdev(&(0x7f00000003c0), 0x80, 0x20000) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4fc927bd7000fedbdf251600000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000a001a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x240040d0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r7, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x10) 1.437908889s ago: executing program 3 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc021000"/65], 0x5c}}, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000180)=[{0x1, 0x1f}, {0x0, 0x0, 0x1000}, {0x1, 0xa7, 0x1000}, {0x1, 0x8, 0x1000}], 0x4, &(0x7f0000000140)={0x77359400}) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000000)=""/83) 1.364276243s ago: executing program 3 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0xfa) 1.36145906s ago: executing program 3 (id=441): timer_create(0x0, &(0x7f0000000180)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/40, 0x28) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8040, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) getdents64(r0, &(0x7f0000002280)=""/233, 0xe9) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) (async) getdents64(r0, &(0x7f0000000040)=""/40, 0x28) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8040, 0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) (async) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) getdents64(r0, &(0x7f0000002280)=""/233, 0xe9) (async) 1.286253949s ago: executing program 5 (id=442): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1c3}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000006c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha256-ni,ecb(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) write$khugepaged_scan(r4, &(0x7f0000000100), 0x8) syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1c3}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2002, 0x1, {0x3}}) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f00000006c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha256-ni,ecb(cast6))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) write$khugepaged_scan(r4, &(0x7f0000000100), 0x8) (async) 1.263751519s ago: executing program 1 (id=443): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0xf, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) 1.13212891s ago: executing program 1 (id=444): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x108001a4) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x444, &(0x7f0000000100), 0x3, 0x446, &(0x7f0000000f40)="$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") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$RNDGETENTCNT(r4, 0x80045200, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) eventfd2(0x4, 0x800) r5 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r6) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000007060101000000000000000009000004080006400000039e08000640fffffff10500011f0700eeff040001d2210000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48041) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000da513f55f8a3b573a931f586a2e5962b47d2d8ed4965ff1d60ac82d873d693f905be1760ecb31acd3deff8f0dc0afb99b83ef39005bdfad76f", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000600a800006f0000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) r8 = accept4$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$F2FS_IOC_DECOMPRESS_FILE(r8, 0xf517, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB='\x00\x00']) 1.130692519s ago: executing program 2 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x138, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2404c850}, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.126030059s ago: executing program 5 (id=446): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r5) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) (async) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in=@loopback}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) 1.118462286s ago: executing program 5 (id=447): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') 1.091500807s ago: executing program 5 (id=448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.016172816s ago: executing program 1 (id=449): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000080)=""/120, &(0x7f0000000140)=0xffffff71) r1 = socket(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x4) sendmsg$key(r1, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 940.326749ms ago: executing program 2 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000004c0)=0x2) r11 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x8e) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) ioctl$RTC_IRQP_SET(r13, 0x4008700c, 0x1517) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r12}, 0x0, 0x0}, 0x20) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r12) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r14, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20048040) bind$bt_l2cap(r12, &(0x7f0000000240)={0x1f, 0x6, @none, 0x1, 0x2}, 0xe) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@delqdisc={0x148, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff2, 0xfff1}, {0xc, 0xb}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x2, 0xa, 0x80000000, 0x5}, 0xd7, 0x1, 0x7fffffff, 0xc741, 0x5, 0x9, 0x5, 0xd, 0x6, 0x7c2b, {0xc5d0, 0x5, 0x42a8, 0x0, 0x1, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x23c05000, 0x0, 0x5}}}}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x9, 0xc, 0x0, 0x1, 0x4, 0x42, 0x2}}, {0x8, 0x2, [0xff, 0xb]}}, {{0x1c, 0x1, {0x4, 0x7, 0x7, 0x2, 0x1, 0x5, 0x6, 0x2}}, {0x8, 0x2, [0x3208, 0x9]}}, {{0x1c, 0x1, {0x3a, 0x3, 0x88, 0x99, 0x2, 0x7f, 0x401, 0x4}}, {0xc, 0x2, [0xc, 0xae, 0x28a, 0x6bb]}}, {{0x1c, 0x1, {0x8b, 0x8, 0x53, 0x4, 0x0, 0xb, 0x5, 0x7}}, {0x12, 0x2, [0x9f4, 0x1, 0xcd01, 0xb278, 0x5c, 0x1, 0x68]}}]}, @TCA_RATE={0x6, 0x5, {0xb, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x2404c0a1}, 0x800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 845.382952ms ago: executing program 2 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0xfa) 784.717282ms ago: executing program 2 (id=452): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 32) futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa0800, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000540)=0xfffffe03) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 720.1079ms ago: executing program 5 (id=453): r0 = socket$inet6(0xa, 0x2, 0x0) syncfs(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffff, 0x4, 0xfffffffffffffffc}, {0xfffffffffffffff4}, 0xe, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x928c, 0x0, 0xfffffffe}}, 0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x8, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x0, 0x3, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8044) r4 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x81004a, &(0x7f0000000000)) r5 = syz_open_dev$rtc(&(0x7f0000002700), 0x0, 0x100) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRESDEC=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x24040000) 719.744398ms ago: executing program 3 (id=454): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2a10044, &(0x7f0000000440)={[{@nodelalloc}, {@resgid}, {}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193940, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) open_by_handle_at(r0, &(0x7f0000001940)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x101, 0x5, 0x401, 0x200, 0x800, 0x9}}, 0x4100) (async, rerun: 64) lsetxattr$smack_xattr_label(&(0x7f0000000000)='./file2\x00', &(0x7f0000000600)='security.SMACK64IPOUT\x00', &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x6, 0x2) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000580)='./file2\x00', &(0x7f00000005c0), 0x20002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x4, 0x1, 0x2}) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000500)={&(0x7f0000000180)=[0x0], 0x1, r3}) bind$alg(r2, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="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", 0x162}, {&(0x7f0000001600)="c9fbe0378bef0a6749d715b5c3e27d03e68c83579553d3bd9cc08edbae86d2f95e95a3fa8ab031e21b5a47e4205c87eefc819e6ea7bd0f6772e957f739339398cd07aeb0522339dde07af5b6ee6b94221ca3494c29be340810d421808f27877885583a2c80d4331aca54533ad84a0ccc5fa28956504f2eafc0f098f878ae3caf30b7981d5e778aaa197d235aa31c4c77fdf0e1c0d31fc7c43969830f82c4b5631e47df6b9a9f59a57e0e7bd1f9e4fcdb4150f713fb9e3530650b43a92853d1e3334fe72113d518a558343615ba8d3412bda82b725855e14c29f7ed81e1cbb76f9684cc6b7fcdc2808119a0f8328b0c5d0e996e50e95605724abb1c635b0bf633f4bcca6213fef03260e56321e3270f322eb13b8ab70c726cbce78c93e4c87d7d7b363542b1b4eb90242ae9459775aa7c045233df9912fc47d6793f40bb5543b537ed6b79e0091e3c069644ce8d6ea00125815fae3c25f4d5c847e76c0c697d7df260ba36e6917f75ccd289070477665e64ac3e00c93228b72763f28104defab475f03841980110b23d02a3d1b74d25c8f2e1c8dfd9243e0bb7a583f091f829329f045f2fc0c40bb4a5205b071d4b6959663c6bfc1f04b23db627ac9fc792cd3355dbbc031d56107ea3379209a49abf03a8347fce6d48cf1968b64558e30210b02214cd0728c6743b89bd4cc2f1d1424fcedd95fa700751a4ff438469fd9e6f3a47200f3fbbde74bdbbeabfb6f96e32366d85a8e6bb6d576687634daac56c9619e4bbeea7606f223d3976c4bea9a07406b037cef4d06cc9e447dc06901c91145aeb9b9726cbf808d253cb01e0806f21d82b928173be2f5bbed1a97e725b17d1d1bd19c14935abd242ca6501c4282f5f1a3e813c68bdb88add0b6fcc14b8355a81b9ac915e5d51212438c5d2993f26456c9ecde871752c99ddbaecb3f6f5f02a0542e898b64a6d475aae01f2aca6c6013907c085ef56483c910cdf4cdcdb516533aeb97644462cd012e0407dfdeff5428e23edd335b1590641353c54f0802f45d880cb8f22ebbac0cc094a771877aac6491aa62350ccde2993826928e6614b76c15e4aae8ede6de392f4f6567f0833ced4458bca37928cc2a70ca20cd38c11138b6ba39a6374ef7f150eb2d5a500a6b9c010d13dcf7318deb8c106e2448c6b21f62051300080dcc9d87db52cefe722035f1508fff231c22bfc8f1d2e14de70a281be8eb3649ace61896f0c33357fcd838db94aaca611b228f76cb4ab983ad3ab636c7260d57bba0061574bb0876afbeb916e252572687b8d28ba7c945f07e0286bedfd7c259769016225a158bf607dd62e11c83bc686a7ab2903ddd64d4e2c44f39ac1f76b80d6be086396e7515441afcadfecb940776ee4f776d3c294dce9aab77e5c2f6c36c20b4343d80d0c3da5f838b948aa684729c578718d3a0811a1dd654e7ad5e414d892ceb3dd704632caa4dcfdc947ce9391ab9abaa0951d12d56623b0028fe78da20a65df9eabb16e4b14bbbfea7108ab4308e7cb540ab8a810cebbf0d3b64ba108d281c91b011f2a8e565c4b802448bad1a57fe6e74fd3278211a70f0767746ed1f234e8edbcb6f8a215e66849a7f10d1533ef626e31725439afd95c9b3a673041459e473d5ddbcc187f55d72d054bf16a714ee0f4bb5d14cf29b853fd6f703b54f227d20ca414b3d6314e9448d211707158ea758e04a2fe7dad468374d62ab4240bb3c9782faa9f87aec26876714b169198931cbd486c01bb2156488467cda498d0a0c62ff6cf03fc68aa3b8051fff5d68e8374796439e9cf12dae426d3692c2d50699eae00ba4b9797fe5295740d8efb64a48bda389e841254638a118337404194e440a2338e2ce0b32395874e0d5cc36c0f1231426d82636e5a7182f82ea545bf7cd5d19ff42a1e8b90193a82452a0eec6575bf7181275d5c2ba2d74a5bda47934d8c89f3225f38959c12b3a2cae85e5108439bc262b69f5bd5f73a86776525f4ecb1685175ffc05aa5faadcc3be80d0b1d1bfc34ffc2ee1cde6bdf0000000000000000000000000000000061293c817aaec775", 0x5ba}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) (async) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1000021, 0x0) 681.844371ms ago: executing program 3 (id=455): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff11, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000140020002cbd7080fedbdf2502dc40fe", @ANYRES32=r2, @ANYBLOB="08000a000300000008000400ac1e000108000100e0000002080008000001000000000a000300000008000200ac1414aa0800080002040000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x2800e810) listen(r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xb6, &(0x7f0000000140)=""/182, 0x41000, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="ee604d7cbe4f38f041155c90f15135dd7e6e24262f0624b1d824ea69f99b53f36a75ff330e2e7e0c732058c2e228a5dd0b41181135c7fc9c3bc7c076679b252c75e68ba3fe6775bd0c798ffddfa8bc80d2ea448386b985f28bccdee6e5b5e11194fd6df75c215f46217ecb40ab039fb85545eb3ab2eb9d611af6ce3fd94ae85d04c19278e2bfb7f5d52fd9af2657f2438db06ea3a80e2f93b49b566fd22cfc80613ed0a942821d06750057a4675cb2374f94e1ff40abe74ab2eaadbe9ac152f036b30f619e579ed8ab84e6c713b5cfa566ef0e1be2ecacb7c17aeac39d9f", 0xde}], 0x1}}], 0x1, 0x9200000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x2e, 0x3, r5}) 603.796221ms ago: executing program 2 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002500)={0x34, r1, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002500)={0x34, r1, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f00000002c0)="58eefdf667f0a9cb42af62717f32163344f2d2ec395950757dbdefab6cc31f38e877fdedbaf2299184137fe267f50f16f8b55f428f82f227eca26b6c0daab3302ee14f7209bb4f884f86581bf53f00ef92a47c9bc192a467bc14e07b8916370cc901b18492a34bd72f9ae6266c08eee6e43e99179837fe6572add782d61b14f07005306dc22bcb4ba14c6fc589d59d5ea2cb9180e9422577bef1bebdbd4f5a4cfd402f5b9063a51d9780c177aba388bb62a4eb0fd4190a0e97d72ab57e74ffb7c2d0c49ecd87953b1d3bc483bfe4119ab73f7e47a1d755782b3144abd6ca724698c9a980f5de9ab6996711ee3f7bb3dc6e0464c4d181e700f0a6350718", 0xfd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace(0x10, r5) ptrace(0x4206, r5) (async) ptrace(0x4206, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x160, 0x14, 0xb, 0x5, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x5}, [@generic="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"]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) ptrace(0x4208, r5) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r8, 0x894c, 0x0) (async) ioctl$sock_SIOCGSKNS(r8, 0x894c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r7, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) (async) write(r7, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x4, 0x7, 0x4, 0x6, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 272.528µs ago: executing program 1 (id=457): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="87fc5d85da21530562070095c108", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x50, 0x0, @default, @void, @void, [{0xdd, 0xa, "0dfa2e3db3c49b9f5665"}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3aeb359a15da3ab0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x26, 0x301, 0x0, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x11c, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 0s ago: executing program 5 (id=458): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x2, @private=0xa010102, 0x4e24, 0x4, 'lblcr\x00', 0x18, 0x4, 0x57}, 0x2c) kernel console output (not intermixed with test programs): 32.993832][ T4897] Memory failure: 0x132f65: recovery action for clean LRU page: Recovered [ 32.993839][ T4897] Injecting memory failure for pfn 0x132f66 at process virtual address 0x20a27000 [ 32.993859][ T4897] Memory failure: 0x132f66: recovery action for clean LRU page: Recovered [ 32.993866][ T4897] Injecting memory failure for pfn 0x132f67 at process virtual address 0x20a28000 [ 32.993887][ T4897] Memory failure: 0x132f67: recovery action for clean LRU page: Recovered [ 32.993894][ T4897] Injecting memory failure for pfn 0x132f68 at process virtual address 0x20a29000 [ 32.993915][ T4897] Memory failure: 0x132f68: recovery action for clean LRU page: Recovered [ 32.993922][ T4897] Injecting memory failure for pfn 0x132f69 at process virtual address 0x20a2a000 [ 32.993943][ T4897] Memory failure: 0x132f69: recovery action for clean LRU page: Recovered [ 32.993950][ T4897] Injecting memory failure for pfn 0x132f6a at process virtual address 0x20a2b000 [ 32.993971][ T4897] Memory failure: 0x132f6a: recovery action for clean LRU page: Recovered [ 32.993978][ T4897] Injecting memory failure for pfn 0x132f6b at process virtual address 0x20a2c000 [ 32.993998][ T4897] Memory failure: 0x132f6b: recovery action for clean LRU page: Recovered [ 32.994005][ T4897] Injecting memory failure for pfn 0x132f6c at process virtual address 0x20a2d000 [ 32.994025][ T4897] Memory failure: 0x132f6c: recovery action for clean LRU page: Recovered [ 32.994032][ T4897] Injecting memory failure for pfn 0x132f6d at process virtual address 0x20a2e000 [ 32.994053][ T4897] Memory failure: 0x132f6d: recovery action for clean LRU page: Recovered [ 32.994060][ T4897] Injecting memory failure for pfn 0x132f6e at process virtual address 0x20a2f000 [ 32.994512][ T4897] Memory failure: 0x132f6e: recovery action for clean LRU page: Recovered [ 32.994519][ T4897] Injecting memory failure for pfn 0x132f6f at process virtual address 0x20a30000 [ 32.994540][ T4897] Memory failure: 0x132f6f: recovery action for clean LRU page: Recovered [ 32.994547][ T4897] Injecting memory failure for pfn 0x132f70 at process virtual address 0x20a31000 [ 32.995648][ T4897] Memory failure: 0x132f70: recovery action for clean LRU page: Recovered [ 32.995655][ T4897] Injecting memory failure for pfn 0x132f71 at process virtual address 0x20a32000 [ 32.995678][ T4897] Memory failure: 0x132f71: recovery action for clean LRU page: Recovered [ 32.995685][ T4897] Injecting memory failure for pfn 0x132f72 at process virtual address 0x20a33000 [ 32.995706][ T4897] Memory failure: 0x132f72: recovery action for clean LRU page: Recovered [ 32.995713][ T4897] Injecting memory failure for pfn 0x132f73 at process virtual address 0x20a34000 [ 32.995861][ T4897] Memory failure: 0x132f73: recovery action for clean LRU page: Recovered [ 32.995868][ T4897] Injecting memory failure for pfn 0x132f74 at process virtual address 0x20a35000 [ 32.995889][ T4897] Memory failure: 0x132f74: recovery action for clean LRU page: Recovered [ 32.995896][ T4897] Injecting memory failure for pfn 0x132f75 at process virtual address 0x20a36000 [ 32.995916][ T4897] Memory failure: 0x132f75: recovery action for clean LRU page: Recovered [ 32.995923][ T4897] Injecting memory failure for pfn 0x132f76 at process virtual address 0x20a37000 [ 32.995944][ T4897] Memory failure: 0x132f76: recovery action for clean LRU page: Recovered [ 32.995951][ T4897] Injecting memory failure for pfn 0x132f77 at process virtual address 0x20a38000 [ 32.995972][ T4897] Memory failure: 0x132f77: recovery action for clean LRU page: Recovered [ 32.995979][ T4897] Injecting memory failure for pfn 0x132f78 at process virtual address 0x20a39000 [ 32.995999][ T4897] Memory failure: 0x132f78: recovery action for clean LRU page: Recovered [ 32.996006][ T4897] Injecting memory failure for pfn 0x132f79 at process virtual address 0x20a3a000 [ 32.996027][ T4897] Memory failure: 0x132f79: recovery action for clean LRU page: Recovered [ 32.996034][ T4897] Injecting memory failure for pfn 0x132f7a at process virtual address 0x20a3b000 [ 32.996054][ T4897] Memory failure: 0x132f7a: recovery action for clean LRU page: Recovered [ 32.996061][ T4897] Injecting memory failure for pfn 0x132f7b at process virtual address 0x20a3c000 [ 32.996082][ T4897] Memory failure: 0x132f7b: recovery action for clean LRU page: Recovered [ 32.996089][ T4897] Injecting memory failure for pfn 0x132f7c at process virtual address 0x20a3d000 [ 32.996109][ T4897] Memory failure: 0x132f7c: recovery action for clean LRU page: Recovered [ 32.996116][ T4897] Injecting memory failure for pfn 0x132f7d at process virtual address 0x20a3e000 [ 32.996136][ T4897] Memory failure: 0x132f7d: recovery action for clean LRU page: Recovered [ 32.996143][ T4897] Injecting memory failure for pfn 0x132f7e at process virtual address 0x20a3f000 [ 32.996164][ T4897] Memory failure: 0x132f7e: recovery action for clean LRU page: Recovered [ 32.996171][ T4897] Injecting memory failure for pfn 0x132f7f at process virtual address 0x20a40000 [ 32.996193][ T4897] Memory failure: 0x132f7f: recovery action for clean LRU page: Recovered [ 32.996200][ T4897] Injecting memory failure for pfn 0x132f80 at process virtual address 0x20a41000 [ 32.996220][ T4897] Memory failure: 0x132f80: recovery action for clean LRU page: Recovered [ 32.996227][ T4897] Injecting memory failure for pfn 0x132f81 at process virtual address 0x20a42000 [ 32.996247][ T4897] Memory failure: 0x132f81: recovery action for clean LRU page: Recovered [ 32.996254][ T4897] Injecting memory failure for pfn 0x132f82 at process virtual address 0x20a43000 [ 32.996278][ T4897] Memory failure: 0x132f82: recovery action for clean LRU page: Recovered [ 32.996286][ T4897] Injecting memory failure for pfn 0x132f83 at process virtual address 0x20a44000 [ 32.996306][ T4897] Memory failure: 0x132f83: recovery action for clean LRU page: Recovered [ 32.996313][ T4897] Injecting memory failure for pfn 0x132f84 at process virtual address 0x20a45000 [ 32.996333][ T4897] Memory failure: 0x132f84: recovery action for clean LRU page: Recovered [ 32.996340][ T4897] Injecting memory failure for pfn 0x132f85 at process virtual address 0x20a46000 [ 32.996360][ T4897] Memory failure: 0x132f85: recovery action for clean LRU page: Recovered [ 32.996367][ T4897] Injecting memory failure for pfn 0x132f86 at process virtual address 0x20a47000 [ 32.996388][ T4897] Memory failure: 0x132f86: recovery action for clean LRU page: Recovered [ 32.996395][ T4897] Injecting memory failure for pfn 0x132f87 at process virtual address 0x20a48000 [ 32.996415][ T4897] Memory failure: 0x132f87: recovery action for clean LRU page: Recovered [ 32.996422][ T4897] Injecting memory failure for pfn 0x132f88 at process virtual address 0x20a49000 [ 32.996442][ T4897] Memory failure: 0x132f88: recovery action for clean LRU page: Recovered [ 32.996449][ T4897] Injecting memory failure for pfn 0x132f89 at process virtual address 0x20a4a000 [ 32.996470][ T4897] Memory failure: 0x132f89: recovery action for clean LRU page: Recovered [ 32.996477][ T4897] Injecting memory failure for pfn 0x132f8a at process virtual address 0x20a4b000 [ 32.996497][ T4897] Memory failure: 0x132f8a: recovery action for clean LRU page: Recovered [ 32.996504][ T4897] Injecting memory failure for pfn 0x132f8b at process virtual address 0x20a4c000 [ 32.996525][ T4897] Memory failure: 0x132f8b: recovery action for clean LRU page: Recovered [ 32.996532][ T4897] Injecting memory failure for pfn 0x132f8c at process virtual address 0x20a4d000 [ 32.996552][ T4897] Memory failure: 0x132f8c: recovery action for clean LRU page: Recovered [ 32.996559][ T4897] Injecting memory failure for pfn 0x132f8d at process virtual address 0x20a4e000 [ 32.996579][ T4897] Memory failure: 0x132f8d: recovery action for clean LRU page: Recovered [ 32.996586][ T4897] Injecting memory failure for pfn 0x132f8e at process virtual address 0x20a4f000 [ 32.996609][ T4897] Memory failure: 0x132f8e: recovery action for clean LRU page: Recovered [ 32.996616][ T4897] Injecting memory failure for pfn 0x132f8f at process virtual address 0x20a50000 [ 32.996636][ T4897] Memory failure: 0x132f8f: recovery action for clean LRU page: Recovered [ 32.996643][ T4897] Injecting memory failure for pfn 0x132f90 at process virtual address 0x20a51000 [ 32.996663][ T4897] Memory failure: 0x132f90: recovery action for clean LRU page: Recovered [ 32.996670][ T4897] Injecting memory failure for pfn 0x132f91 at process virtual address 0x20a52000 [ 32.996690][ T4897] Memory failure: 0x132f91: recovery action for clean LRU page: Recovered [ 32.996697][ T4897] Injecting memory failure for pfn 0x132f92 at process virtual address 0x20a53000 [ 32.996718][ T4897] Memory failure: 0x132f92: recovery action for clean LRU page: Recovered [ 32.996725][ T4897] Injecting memory failure for pfn 0x132f93 at process virtual address 0x20a54000 [ 32.996745][ T4897] Memory failure: 0x132f93: recovery action for clean LRU page: Recovered [ 32.996754][ T4897] Injecting memory failure for pfn 0x132f94 at process virtual address 0x20a55000 [ 32.997058][ T4897] Memory failure: 0x132f94: recovery action for clean LRU page: Recovered [ 32.997066][ T4897] Injecting memory failure for pfn 0x132f95 at process virtual address 0x20a56000 [ 32.997086][ T4897] Memory failure: 0x132f95: recovery action for clean LRU page: Recovered [ 32.997093][ T4897] Injecting memory failure for pfn 0x132f96 at process virtual address 0x20a57000 [ 32.997113][ T4897] Memory failure: 0x132f96: recovery action for clean LRU page: Recovered [ 32.997120][ T4897] Injecting memory failure for pfn 0x132f97 at process virtual address 0x20a58000 [ 32.997141][ T4897] Memory failure: 0x132f97: recovery action for clean LRU page: Recovered [ 32.997148][ T4897] Injecting memory failure for pfn 0x132f98 at process virtual address 0x20a59000 [ 32.997169][ T4897] Memory failure: 0x132f98: recovery action for clean LRU page: Recovered [ 32.997176][ T4897] Injecting memory failure for pfn 0x132f99 at process virtual address 0x20a5a000 [ 32.997197][ T4897] Memory failure: 0x132f99: recovery action for clean LRU page: Recovered [ 32.997204][ T4897] Injecting memory failure for pfn 0x132f9a at process virtual address 0x20a5b000 [ 32.997224][ T4897] Memory failure: 0x132f9a: recovery action for clean LRU page: Recovered [ 32.997231][ T4897] Injecting memory failure for pfn 0x132f9b at process virtual address 0x20a5c000 [ 32.997252][ T4897] Memory failure: 0x132f9b: recovery action for clean LRU page: Recovered [ 32.997259][ T4897] Injecting memory failure for pfn 0x132f9c at process virtual address 0x20a5d000 [ 32.997279][ T4897] Memory failure: 0x132f9c: recovery action for clean LRU page: Recovered [ 32.997286][ T4897] Injecting memory failure for pfn 0x132f9d at process virtual address 0x20a5e000 [ 32.997307][ T4897] Memory failure: 0x132f9d: recovery action for clean LRU page: Recovered [ 32.997314][ T4897] Injecting memory failure for pfn 0x132f9e at process virtual address 0x20a5f000 [ 32.997336][ T4897] Memory failure: 0x132f9e: recovery action for clean LRU page: Recovered [ 32.997343][ T4897] Injecting memory failure for pfn 0x132f9f at process virtual address 0x20a60000 [ 32.997363][ T4897] Memory failure: 0x132f9f: recovery action for clean LRU page: Recovered [ 32.997370][ T4897] Injecting memory failure for pfn 0x132fa0 at process virtual address 0x20a61000 [ 32.997391][ T4897] Memory failure: 0x132fa0: recovery action for clean LRU page: Recovered [ 32.997398][ T4897] Injecting memory failure for pfn 0x132fa1 at process virtual address 0x20a62000 [ 32.997418][ T4897] Memory failure: 0x132fa1: recovery action for clean LRU page: Recovered [ 32.997425][ T4897] Injecting memory failure for pfn 0x132fa2 at process virtual address 0x20a63000 [ 32.997452][ T4897] Memory failure: 0x132fa2: recovery action for clean LRU page: Recovered [ 32.997459][ T4897] Injecting memory failure for pfn 0x132fa3 at process virtual address 0x20a64000 [ 32.997479][ T4897] Memory failure: 0x132fa3: recovery action for clean LRU page: Recovered [ 32.997486][ T4897] Injecting memory failure for pfn 0x132fa4 at process virtual address 0x20a65000 [ 32.997506][ T4897] Memory failure: 0x132fa4: recovery action for clean LRU page: Recovered [ 32.997513][ T4897] Injecting memory failure for pfn 0x132fa5 at process virtual address 0x20a66000 [ 32.997960][ T4897] Memory failure: 0x132fa5: recovery action for clean LRU page: Recovered [ 32.997967][ T4897] Injecting memory failure for pfn 0x132fa6 at process virtual address 0x20a67000 [ 32.997988][ T4897] Memory failure: 0x132fa6: recovery action for clean LRU page: Recovered [ 32.997995][ T4897] Injecting memory failure for pfn 0x132fa7 at process virtual address 0x20a68000 [ 32.998015][ T4897] Memory failure: 0x132fa7: recovery action for clean LRU page: Recovered [ 32.998022][ T4897] Injecting memory failure for pfn 0x132fa8 at process virtual address 0x20a69000 [ 32.998042][ T4897] Memory failure: 0x132fa8: recovery action for clean LRU page: Recovered [ 32.998049][ T4897] Injecting memory failure for pfn 0x132fa9 at process virtual address 0x20a6a000 [ 32.998961][ T4897] Memory failure: 0x132fa9: recovery action for clean LRU page: Recovered [ 32.998968][ T4897] Injecting memory failure for pfn 0x132faa at process virtual address 0x20a6b000 [ 32.998989][ T4897] Memory failure: 0x132faa: recovery action for clean LRU page: Recovered [ 32.998996][ T4897] Injecting memory failure for pfn 0x132fab at process virtual address 0x20a6c000 [ 32.999016][ T4897] Memory failure: 0x132fab: recovery action for clean LRU page: Recovered [ 32.999023][ T4897] Injecting memory failure for pfn 0x132fac at process virtual address 0x20a6d000 [ 32.999044][ T4897] Memory failure: 0x132fac: recovery action for clean LRU page: Recovered [ 32.999051][ T4897] Injecting memory failure for pfn 0x132fad at process virtual address 0x20a6e000 [ 32.999072][ T4897] Memory failure: 0x132fad: recovery action for clean LRU page: Recovered [ 32.999079][ T4897] Injecting memory failure for pfn 0x132fae at process virtual address 0x20a6f000 [ 32.999100][ T4897] Memory failure: 0x132fae: recovery action for clean LRU page: Recovered [ 32.999107][ T4897] Injecting memory failure for pfn 0x132faf at process virtual address 0x20a70000 [ 32.999135][ T4897] Memory failure: 0x132faf: recovery action for clean LRU page: Recovered [ 32.999143][ T4897] Injecting memory failure for pfn 0x132fb0 at process virtual address 0x20a71000 [ 32.999163][ T4897] Memory failure: 0x132fb0: recovery action for clean LRU page: Recovered [ 32.999170][ T4897] Injecting memory failure for pfn 0x132fb1 at process virtual address 0x20a72000 [ 32.999191][ T4897] Memory failure: 0x132fb1: recovery action for clean LRU page: Recovered [ 32.999198][ T4897] Injecting memory failure for pfn 0x132fb2 at process virtual address 0x20a73000 [ 32.999218][ T4897] Memory failure: 0x132fb2: recovery action for clean LRU page: Recovered [ 32.999225][ T4897] Injecting memory failure for pfn 0x132fb3 at process virtual address 0x20a74000 [ 32.999246][ T4897] Memory failure: 0x132fb3: recovery action for clean LRU page: Recovered [ 32.999253][ T4897] Injecting memory failure for pfn 0x132fb4 at process virtual address 0x20a75000 [ 32.999273][ T4897] Memory failure: 0x132fb4: recovery action for clean LRU page: Recovered [ 32.999280][ T4897] Injecting memory failure for pfn 0x132fb5 at process virtual address 0x20a76000 [ 32.999302][ T4897] Memory failure: 0x132fb5: recovery action for clean LRU page: Recovered [ 32.999309][ T4897] Injecting memory failure for pfn 0x132fb6 at process virtual address 0x20a77000 [ 32.999330][ T4897] Memory failure: 0x132fb6: recovery action for clean LRU page: Recovered [ 32.999337][ T4897] Injecting memory failure for pfn 0x132fb7 at process virtual address 0x20a78000 [ 32.999358][ T4897] Memory failure: 0x132fb7: recovery action for clean LRU page: Recovered [ 32.999365][ T4897] Injecting memory failure for pfn 0x132fb8 at process virtual address 0x20a79000 [ 32.999386][ T4897] Memory failure: 0x132fb8: recovery action for clean LRU page: Recovered [ 32.999393][ T4897] Injecting memory failure for pfn 0x132fb9 at process virtual address 0x20a7a000 [ 32.999413][ T4897] Memory failure: 0x132fb9: recovery action for clean LRU page: Recovered [ 32.999420][ T4897] Injecting memory failure for pfn 0x132fba at process virtual address 0x20a7b000 [ 32.999441][ T4897] Memory failure: 0x132fba: recovery action for clean LRU page: Recovered [ 32.999448][ T4897] Injecting memory failure for pfn 0x132fbb at process virtual address 0x20a7c000 [ 32.999469][ T4897] Memory failure: 0x132fbb: recovery action for clean LRU page: Recovered [ 32.999476][ T4897] Injecting memory failure for pfn 0x132fbc at process virtual address 0x20a7d000 [ 32.999497][ T4897] Memory failure: 0x132fbc: recovery action for clean LRU page: Recovered [ 32.999504][ T4897] Injecting memory failure for pfn 0x132fbd at process virtual address 0x20a7e000 [ 32.999525][ T4897] Memory failure: 0x132fbd: recovery action for clean LRU page: Recovered [ 32.999532][ T4897] Injecting memory failure for pfn 0x132fbe at process virtual address 0x20a7f000 [ 32.999552][ T4897] Memory failure: 0x132fbe: recovery action for clean LRU page: Recovered [ 32.999559][ T4897] Injecting memory failure for pfn 0x132fbf at process virtual address 0x20a80000 [ 32.999580][ T4897] Memory failure: 0x132fbf: recovery action for clean LRU page: Recovered [ 32.999587][ T4897] Injecting memory failure for pfn 0x132fc0 at process virtual address 0x20a81000 [ 32.999608][ T4897] Memory failure: 0x132fc0: recovery action for clean LRU page: Recovered [ 32.999615][ T4897] Injecting memory failure for pfn 0x132fc1 at process virtual address 0x20a82000 [ 32.999635][ T4897] Memory failure: 0x132fc1: recovery action for clean LRU page: Recovered [ 32.999642][ T4897] Injecting memory failure for pfn 0x132fc2 at process virtual address 0x20a83000 [ 32.999663][ T4897] Memory failure: 0x132fc2: recovery action for clean LRU page: Recovered [ 32.999670][ T4897] Injecting memory failure for pfn 0x132fc3 at process virtual address 0x20a84000 [ 32.999690][ T4897] Memory failure: 0x132fc3: recovery action for clean LRU page: Recovered [ 32.999697][ T4897] Injecting memory failure for pfn 0x132fc4 at process virtual address 0x20a85000 [ 32.999718][ T4897] Memory failure: 0x132fc4: recovery action for clean LRU page: Recovered [ 32.999725][ T4897] Injecting memory failure for pfn 0x132fc5 at process virtual address 0x20a86000 [ 32.999745][ T4897] Memory failure: 0x132fc5: recovery action for clean LRU page: Recovered [ 32.999755][ T4897] Injecting memory failure for pfn 0x132fc6 at process virtual address 0x20a87000 [ 32.999776][ T4897] Memory failure: 0x132fc6: recovery action for clean LRU page: Recovered [ 32.999783][ T4897] Injecting memory failure for pfn 0x132fc7 at process virtual address 0x20a88000 [ 32.999804][ T4897] Memory failure: 0x132fc7: recovery action for clean LRU page: Recovered [ 32.999811][ T4897] Injecting memory failure for pfn 0x132fc8 at process virtual address 0x20a89000 [ 32.999832][ T4897] Memory failure: 0x132fc8: recovery action for clean LRU page: Recovered [ 32.999839][ T4897] Injecting memory failure for pfn 0x132fc9 at process virtual address 0x20a8a000 [ 32.999860][ T4897] Memory failure: 0x132fc9: recovery action for clean LRU page: Recovered [ 32.999867][ T4897] Injecting memory failure for pfn 0x132fca at process virtual address 0x20a8b000 [ 32.999888][ T4897] Memory failure: 0x132fca: recovery action for clean LRU page: Recovered [ 32.999895][ T4897] Injecting memory failure for pfn 0x132fcb at process virtual address 0x20a8c000 [ 32.999915][ T4897] Memory failure: 0x132fcb: recovery action for clean LRU page: Recovered [ 32.999922][ T4897] Injecting memory failure for pfn 0x132fcc at process virtual address 0x20a8d000 [ 32.999942][ T4897] Memory failure: 0x132fcc: recovery action for clean LRU page: Recovered [ 32.999949][ T4897] Injecting memory failure for pfn 0x132fcd at process virtual address 0x20a8e000 [ 32.999970][ T4897] Memory failure: 0x132fcd: recovery action for clean LRU page: Recovered [ 32.999977][ T4897] Injecting memory failure for pfn 0x132fce at process virtual address 0x20a8f000 [ 32.999997][ T4897] Memory failure: 0x132fce: recovery action for clean LRU page: Recovered [ 33.000004][ T4897] Injecting memory failure for pfn 0x132fcf at process virtual address 0x20a90000 [ 33.000024][ T4897] Memory failure: 0x132fcf: recovery action for clean LRU page: Recovered [ 33.000031][ T4897] Injecting memory failure for pfn 0x132fd0 at process virtual address 0x20a91000 [ 33.000052][ T4897] Memory failure: 0x132fd0: recovery action for clean LRU page: Recovered [ 33.000059][ T4897] Injecting memory failure for pfn 0x132fd1 at process virtual address 0x20a92000 [ 33.000079][ T4897] Memory failure: 0x132fd1: recovery action for clean LRU page: Recovered [ 33.000086][ T4897] Injecting memory failure for pfn 0x132fd2 at process virtual address 0x20a93000 [ 33.000106][ T4897] Memory failure: 0x132fd2: recovery action for clean LRU page: Recovered [ 33.000113][ T4897] Injecting memory failure for pfn 0x132fd3 at process virtual address 0x20a94000 [ 33.000134][ T4897] Memory failure: 0x132fd3: recovery action for clean LRU page: Recovered [ 33.000141][ T4897] Injecting memory failure for pfn 0x132fd4 at process virtual address 0x20a95000 [ 33.000162][ T4897] Memory failure: 0x132fd4: recovery action for clean LRU page: Recovered [ 33.000169][ T4897] Injecting memory failure for pfn 0x132fd5 at process virtual address 0x20a96000 [ 33.000190][ T4897] Memory failure: 0x132fd5: recovery action for clean LRU page: Recovered [ 33.000197][ T4897] Injecting memory failure for pfn 0x132fd6 at process virtual address 0x20a97000 [ 33.000218][ T4897] Memory failure: 0x132fd6: recovery action for clean LRU page: Recovered [ 33.000224][ T4897] Injecting memory failure for pfn 0x132fd7 at process virtual address 0x20a98000 [ 33.000245][ T4897] Memory failure: 0x132fd7: recovery action for clean LRU page: Recovered [ 33.000252][ T4897] Injecting memory failure for pfn 0x132fd8 at process virtual address 0x20a99000 [ 33.000273][ T4897] Memory failure: 0x132fd8: recovery action for clean LRU page: Recovered [ 33.000280][ T4897] Injecting memory failure for pfn 0x132fd9 at process virtual address 0x20a9a000 [ 33.000300][ T4897] Memory failure: 0x132fd9: recovery action for clean LRU page: Recovered [ 33.000307][ T4897] Injecting memory failure for pfn 0x132fda at process virtual address 0x20a9b000 [ 33.000328][ T4897] Memory failure: 0x132fda: recovery action for clean LRU page: Recovered [ 33.000335][ T4897] Injecting memory failure for pfn 0x132fdb at process virtual address 0x20a9c000 [ 33.000356][ T4897] Memory failure: 0x132fdb: recovery action for clean LRU page: Recovered [ 33.000363][ T4897] Injecting memory failure for pfn 0x132fdc at process virtual address 0x20a9d000 [ 33.000384][ T4897] Memory failure: 0x132fdc: recovery action for clean LRU page: Recovered [ 33.000391][ T4897] Injecting memory failure for pfn 0x132fdd at process virtual address 0x20a9e000 [ 33.000413][ T4897] Memory failure: 0x132fdd: recovery action for clean LRU page: Recovered [ 33.000420][ T4897] Injecting memory failure for pfn 0x132fde at process virtual address 0x20a9f000 [ 33.000441][ T4897] Memory failure: 0x132fde: recovery action for clean LRU page: Recovered [ 33.000448][ T4897] Injecting memory failure for pfn 0x132fdf at process virtual address 0x20aa0000 [ 33.000470][ T4897] Memory failure: 0x132fdf: recovery action for clean LRU page: Recovered [ 33.000477][ T4897] Injecting memory failure for pfn 0x132fe0 at process virtual address 0x20aa1000 [ 33.000498][ T4897] Memory failure: 0x132fe0: recovery action for clean LRU page: Recovered [ 33.000505][ T4897] Injecting memory failure for pfn 0x132fe1 at process virtual address 0x20aa2000 [ 33.000527][ T4897] Memory failure: 0x132fe1: recovery action for clean LRU page: Recovered [ 33.000534][ T4897] Injecting memory failure for pfn 0x132fe2 at process virtual address 0x20aa3000 [ 33.000555][ T4897] Memory failure: 0x132fe2: recovery action for clean LRU page: Recovered [ 33.000562][ T4897] Injecting memory failure for pfn 0x132fe3 at process virtual address 0x20aa4000 [ 33.000583][ T4897] Memory failure: 0x132fe3: recovery action for clean LRU page: Recovered [ 33.000590][ T4897] Injecting memory failure for pfn 0x132fe4 at process virtual address 0x20aa5000 [ 33.000611][ T4897] Memory failure: 0x132fe4: recovery action for clean LRU page: Recovered [ 33.000618][ T4897] Injecting memory failure for pfn 0x132fe5 at process virtual address 0x20aa6000 [ 33.000638][ T4897] Memory failure: 0x132fe5: recovery action for clean LRU page: Recovered [ 33.000645][ T4897] Injecting memory failure for pfn 0x132fe6 at process virtual address 0x20aa7000 [ 33.000666][ T4897] Memory failure: 0x132fe6: recovery action for clean LRU page: Recovered [ 33.000673][ T4897] Injecting memory failure for pfn 0x132fe7 at process virtual address 0x20aa8000 [ 33.000693][ T4897] Memory failure: 0x132fe7: recovery action for clean LRU page: Recovered [ 33.000700][ T4897] Injecting memory failure for pfn 0x132fe8 at process virtual address 0x20aa9000 [ 33.000721][ T4897] Memory failure: 0x132fe8: recovery action for clean LRU page: Recovered [ 33.000728][ T4897] Injecting memory failure for pfn 0x132fe9 at process virtual address 0x20aaa000 [ 33.000751][ T4897] Memory failure: 0x132fe9: recovery action for clean LRU page: Recovered [ 33.000758][ T4897] Injecting memory failure for pfn 0x132fea at process virtual address 0x20aab000 [ 33.000779][ T4897] Memory failure: 0x132fea: recovery action for clean LRU page: Recovered [ 33.000786][ T4897] Injecting memory failure for pfn 0x132feb at process virtual address 0x20aac000 [ 33.000806][ T4897] Memory failure: 0x132feb: recovery action for clean LRU page: Recovered [ 33.000813][ T4897] Injecting memory failure for pfn 0x132fec at process virtual address 0x20aad000 [ 33.000835][ T4897] Memory failure: 0x132fec: recovery action for clean LRU page: Recovered [ 33.000842][ T4897] Injecting memory failure for pfn 0x132fed at process virtual address 0x20aae000 [ 33.000863][ T4897] Memory failure: 0x132fed: recovery action for clean LRU page: Recovered [ 33.000870][ T4897] Injecting memory failure for pfn 0x132fee at process virtual address 0x20aaf000 [ 33.000890][ T4897] Memory failure: 0x132fee: recovery action for clean LRU page: Recovered [ 33.000897][ T4897] Injecting memory failure for pfn 0x132fef at process virtual address 0x20ab0000 [ 33.000918][ T4897] Memory failure: 0x132fef: recovery action for clean LRU page: Recovered [ 33.000925][ T4897] Injecting memory failure for pfn 0x132ff0 at process virtual address 0x20ab1000 [ 33.000947][ T4897] Memory failure: 0x132ff0: recovery action for clean LRU page: Recovered [ 33.000986][ T4897] Injecting memory failure for pfn 0x132ff1 at process virtual address 0x20ab2000 [ 33.001008][ T4897] Memory failure: 0x132ff1: recovery action for clean LRU page: Recovered [ 33.001015][ T4897] Injecting memory failure for pfn 0x132ff2 at process virtual address 0x20ab3000 [ 33.001036][ T4897] Memory failure: 0x132ff2: recovery action for clean LRU page: Recovered [ 33.001043][ T4897] Injecting memory failure for pfn 0x132ff3 at process virtual address 0x20ab4000 [ 33.001063][ T4897] Memory failure: 0x132ff3: recovery action for clean LRU page: Recovered [ 33.001070][ T4897] Injecting memory failure for pfn 0x132ff4 at process virtual address 0x20ab5000 [ 33.001091][ T4897] Memory failure: 0x132ff4: recovery action for clean LRU page: Recovered [ 33.001098][ T4897] Injecting memory failure for pfn 0x132ff5 at process virtual address 0x20ab6000 [ 33.001119][ T4897] Memory failure: 0x132ff5: recovery action for clean LRU page: Recovered [ 33.001126][ T4897] Injecting memory failure for pfn 0x132ff6 at process virtual address 0x20ab7000 [ 33.001146][ T4897] Memory failure: 0x132ff6: recovery action for clean LRU page: Recovered [ 33.001153][ T4897] Injecting memory failure for pfn 0x132ff7 at process virtual address 0x20ab8000 [ 33.002103][ T4897] Memory failure: 0x132ff7: recovery action for clean LRU page: Recovered [ 33.002110][ T4897] Injecting memory failure for pfn 0x132ff8 at process virtual address 0x20ab9000 [ 33.002130][ T4897] Memory failure: 0x132ff8: recovery action for clean LRU page: Recovered [ 33.002137][ T4897] Injecting memory failure for pfn 0x132ff9 at process virtual address 0x20aba000 [ 33.002160][ T4897] Memory failure: 0x132ff9: recovery action for clean LRU page: Recovered [ 33.002166][ T4897] Injecting memory failure for pfn 0x132ffa at process virtual address 0x20abb000 [ 33.002188][ T4897] Memory failure: 0x132ffa: recovery action for clean LRU page: Recovered [ 33.002195][ T4897] Injecting memory failure for pfn 0x132ffb at process virtual address 0x20abc000 [ 33.002216][ T4897] Memory failure: 0x132ffb: recovery action for clean LRU page: Recovered [ 33.002223][ T4897] Injecting memory failure for pfn 0x132ffc at process virtual address 0x20abd000 [ 33.002244][ T4897] Memory failure: 0x132ffc: recovery action for clean LRU page: Recovered [ 33.002251][ T4897] Injecting memory failure for pfn 0x132ffd at process virtual address 0x20abe000 [ 33.002271][ T4897] Memory failure: 0x132ffd: recovery action for clean LRU page: Recovered [ 33.002278][ T4897] Injecting memory failure for pfn 0x132ffe at process virtual address 0x20abf000 [ 33.002298][ T4897] Memory failure: 0x132ffe: recovery action for clean LRU page: Recovered [ 33.002305][ T4897] Injecting memory failure for pfn 0x132fff at process virtual address 0x20ac0000 [ 33.002326][ T4897] Memory failure: 0x132fff: recovery action for clean LRU page: Recovered [ 33.002333][ T4897] Injecting memory failure for pfn 0x133000 at process virtual address 0x20ac1000 [ 33.002353][ T4897] Memory failure: 0x133000: recovery action for clean LRU page: Recovered [ 33.002360][ T4897] Injecting memory failure for pfn 0x133001 at process virtual address 0x20ac2000 [ 33.002380][ T4897] Memory failure: 0x133001: recovery action for clean LRU page: Recovered [ 33.002387][ T4897] Injecting memory failure for pfn 0x133002 at process virtual address 0x20ac3000 [ 33.002408][ T4897] Memory failure: 0x133002: recovery action for clean LRU page: Recovered [ 33.002415][ T4897] Injecting memory failure for pfn 0x133003 at process virtual address 0x20ac4000 [ 33.002435][ T4897] Memory failure: 0x133003: recovery action for clean LRU page: Recovered [ 33.002442][ T4897] Injecting memory failure for pfn 0x133004 at process virtual address 0x20ac5000 [ 33.003366][ T4897] Memory failure: 0x133004: recovery action for clean LRU page: Recovered [ 33.003373][ T4897] Injecting memory failure for pfn 0x133005 at process virtual address 0x20ac6000 [ 33.003394][ T4897] Memory failure: 0x133005: recovery action for clean LRU page: Recovered [ 33.003401][ T4897] Injecting memory failure for pfn 0x133006 at process virtual address 0x20ac7000 [ 33.003421][ T4897] Memory failure: 0x133006: recovery action for clean LRU page: Recovered [ 33.003428][ T4897] Injecting memory failure for pfn 0x133007 at process virtual address 0x20ac8000 [ 33.003448][ T4897] Memory failure: 0x133007: recovery action for clean LRU page: Recovered [ 33.003455][ T4897] Injecting memory failure for pfn 0x133008 at process virtual address 0x20ac9000 [ 33.003476][ T4897] Memory failure: 0x133008: recovery action for clean LRU page: Recovered [ 33.003483][ T4897] Injecting memory failure for pfn 0x133009 at process virtual address 0x20aca000 [ 33.003503][ T4897] Memory failure: 0x133009: recovery action for clean LRU page: Recovered [ 33.003510][ T4897] Injecting memory failure for pfn 0x13300a at process virtual address 0x20acb000 [ 33.007386][ T4897] Memory failure: 0x13300a: recovery action for clean LRU page: Recovered [ 33.007400][ T4897] Injecting memory failure for pfn 0x13300b at process virtual address 0x20acc000 [ 33.009664][ T4897] Memory failure: 0x13300b: recovery action for clean LRU page: Recovered [ 33.009678][ T4897] Injecting memory failure for pfn 0x13300c at process virtual address 0x20acd000 [ 33.009745][ T4897] Memory failure: 0x13300c: recovery action for clean LRU page: Recovered [ 33.009758][ T4897] Injecting memory failure for pfn 0x13300d at process virtual address 0x20ace000 [ 33.009786][ T4897] Memory failure: 0x13300d: recovery action for clean LRU page: Recovered [ 33.009795][ T4897] Injecting memory failure for pfn 0x13300e at process virtual address 0x20acf000 [ 33.009819][ T4897] Memory failure: 0x13300e: recovery action for clean LRU page: Recovered [ 33.009827][ T4897] Injecting memory failure for pfn 0x13300f at process virtual address 0x20ad0000 [ 33.009850][ T4897] Memory failure: 0x13300f: recovery action for clean LRU page: Recovered [ 33.009858][ T4897] Injecting memory failure for pfn 0x133010 at process virtual address 0x20ad1000 [ 33.009880][ T4897] Memory failure: 0x133010: recovery action for clean LRU page: Recovered [ 33.009887][ T4897] Injecting memory failure for pfn 0x133011 at process virtual address 0x20ad2000 [ 33.009908][ T4897] Memory failure: 0x133011: recovery action for clean LRU page: Recovered [ 33.009916][ T4897] Injecting memory failure for pfn 0x133012 at process virtual address 0x20ad3000 [ 33.009937][ T4897] Memory failure: 0x133012: recovery action for clean LRU page: Recovered [ 33.009944][ T4897] Injecting memory failure for pfn 0x133013 at process virtual address 0x20ad4000 [ 33.009971][ T4897] Memory failure: 0x133013: recovery action for clean LRU page: Recovered [ 33.009979][ T4897] Injecting memory failure for pfn 0x133014 at process virtual address 0x20ad5000 [ 33.009999][ T4897] Memory failure: 0x133014: recovery action for clean LRU page: Recovered [ 33.010007][ T4897] Injecting memory failure for pfn 0x133015 at process virtual address 0x20ad6000 [ 33.010028][ T4897] Memory failure: 0x133015: recovery action for clean LRU page: Recovered [ 33.010035][ T4897] Injecting memory failure for pfn 0x133016 at process virtual address 0x20ad7000 [ 33.010056][ T4897] Memory failure: 0x133016: recovery action for clean LRU page: Recovered [ 33.010063][ T4897] Injecting memory failure for pfn 0x133017 at process virtual address 0x20ad8000 [ 33.010084][ T4897] Memory failure: 0x133017: recovery action for clean LRU page: Recovered [ 33.010091][ T4897] Injecting memory failure for pfn 0x133018 at process virtual address 0x20ad9000 [ 33.010112][ T4897] Memory failure: 0x133018: recovery action for clean LRU page: Recovered [ 33.010119][ T4897] Injecting memory failure for pfn 0x133019 at process virtual address 0x20ada000 [ 33.010140][ T4897] Memory failure: 0x133019: recovery action for clean LRU page: Recovered [ 33.010147][ T4897] Injecting memory failure for pfn 0x13301a at process virtual address 0x20adb000 [ 33.010168][ T4897] Memory failure: 0x13301a: recovery action for clean LRU page: Recovered [ 33.010175][ T4897] Injecting memory failure for pfn 0x13301b at process virtual address 0x20adc000 [ 33.010197][ T4897] Memory failure: 0x13301b: recovery action for clean LRU page: Recovered [ 33.010204][ T4897] Injecting memory failure for pfn 0x13301c at process virtual address 0x20add000 [ 33.010224][ T4897] Memory failure: 0x13301c: recovery action for clean LRU page: Recovered [ 33.010231][ T4897] Injecting memory failure for pfn 0x13301d at process virtual address 0x20ade000 [ 33.010252][ T4897] Memory failure: 0x13301d: recovery action for clean LRU page: Recovered [ 33.010259][ T4897] Injecting memory failure for pfn 0x13301e at process virtual address 0x20adf000 [ 33.010279][ T4897] Memory failure: 0x13301e: recovery action for clean LRU page: Recovered [ 33.010286][ T4897] Injecting memory failure for pfn 0x13301f at process virtual address 0x20ae0000 [ 33.010306][ T4897] Memory failure: 0x13301f: recovery action for clean LRU page: Recovered [ 33.010314][ T4897] Injecting memory failure for pfn 0x133020 at process virtual address 0x20ae1000 [ 33.010334][ T4897] Memory failure: 0x133020: recovery action for clean LRU page: Recovered [ 33.010341][ T4897] Injecting memory failure for pfn 0x133021 at process virtual address 0x20ae2000 [ 33.010361][ T4897] Memory failure: 0x133021: recovery action for clean LRU page: Recovered [ 33.010368][ T4897] Injecting memory failure for pfn 0x133022 at process virtual address 0x20ae3000 [ 33.010389][ T4897] Memory failure: 0x133022: recovery action for clean LRU page: Recovered [ 33.010396][ T4897] Injecting memory failure for pfn 0x133023 at process virtual address 0x20ae4000 [ 33.010629][ T4897] Memory failure: 0x133023: recovery action for clean LRU page: Recovered [ 33.010636][ T4897] Injecting memory failure for pfn 0x133024 at process virtual address 0x20ae5000 [ 33.010640][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.010656][ T4897] Memory failure: 0x133024: recovery action for clean LRU page: Recovered [ 33.010659][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.010664][ T4897] Injecting memory failure for pfn 0x133025 at process virtual address 0x20ae6000 [ 33.010684][ T4897] Memory failure: 0x133025: recovery action for clean LRU page: Recovered [ 33.010692][ T4897] Injecting memory failure for pfn 0x133026 at process virtual address 0x20ae7000 [ 33.010713][ T4897] Memory failure: 0x133026: recovery action for clean LRU page: Recovered [ 33.010720][ T4897] Injecting memory failure for pfn 0x133027 at process virtual address 0x20ae8000 [ 33.010740][ T4897] Memory failure: 0x133027: recovery action for clean LRU page: Recovered [ 33.010747][ T4897] Injecting memory failure for pfn 0x133028 at process virtual address 0x20ae9000 [ 33.010772][ T4897] Memory failure: 0x133028: recovery action for clean LRU page: Recovered [ 33.010779][ T4897] Injecting memory failure for pfn 0x133029 at process virtual address 0x20aea000 [ 33.010799][ T4897] Memory failure: 0x133029: recovery action for clean LRU page: Recovered [ 33.010806][ T4897] Injecting memory failure for pfn 0x13302a at process virtual address 0x20aeb000 [ 33.010836][ T4897] Memory failure: 0x13302a: recovery action for clean LRU page: Recovered [ 33.010843][ T4897] Injecting memory failure for pfn 0x13302b at process virtual address 0x20aec000 [ 33.010868][ T4897] Memory failure: 0x13302b: recovery action for clean LRU page: Recovered [ 33.010876][ T4897] Injecting memory failure for pfn 0x13302c at process virtual address 0x20aed000 [ 33.010896][ T4897] Memory failure: 0x13302c: recovery action for clean LRU page: Recovered [ 33.010903][ T4897] Injecting memory failure for pfn 0x13302d at process virtual address 0x20aee000 [ 33.010924][ T4897] Memory failure: 0x13302d: recovery action for clean LRU page: Recovered [ 33.010931][ T4897] Injecting memory failure for pfn 0x13302e at process virtual address 0x20aef000 [ 33.011034][ T4897] Memory failure: 0x13302e: recovery action for clean LRU page: Recovered [ 33.011042][ T4897] Injecting memory failure for pfn 0x13302f at process virtual address 0x20af0000 [ 33.011063][ T4897] Memory failure: 0x13302f: recovery action for clean LRU page: Recovered [ 33.011070][ T4897] Injecting memory failure for pfn 0x133030 at process virtual address 0x20af1000 [ 33.011091][ T4897] Memory failure: 0x133030: recovery action for clean LRU page: Recovered [ 33.011098][ T4897] Injecting memory failure for pfn 0x133031 at process virtual address 0x20af2000 [ 33.011119][ T4897] Memory failure: 0x133031: recovery action for clean LRU page: Recovered [ 33.011126][ T4897] Injecting memory failure for pfn 0x133032 at process virtual address 0x20af3000 [ 33.011148][ T4897] Memory failure: 0x133032: recovery action for clean LRU page: Recovered [ 33.011155][ T4897] Injecting memory failure for pfn 0x133033 at process virtual address 0x20af4000 [ 33.011177][ T4897] Memory failure: 0x133033: recovery action for clean LRU page: Recovered [ 33.011183][ T4897] Injecting memory failure for pfn 0x133034 at process virtual address 0x20af5000 [ 33.011206][ T4897] Memory failure: 0x133034: recovery action for clean LRU page: Recovered [ 33.011214][ T4897] Injecting memory failure for pfn 0x133035 at process virtual address 0x20af6000 [ 33.011236][ T4897] Memory failure: 0x133035: recovery action for clean LRU page: Recovered [ 33.011243][ T4897] Injecting memory failure for pfn 0x133036 at process virtual address 0x20af7000 [ 33.011266][ T4897] Memory failure: 0x133036: recovery action for clean LRU page: Recovered [ 33.011274][ T4897] Injecting memory failure for pfn 0x133037 at process virtual address 0x20af8000 [ 33.011295][ T4897] Memory failure: 0x133037: recovery action for clean LRU page: Recovered [ 33.011302][ T4897] Injecting memory failure for pfn 0x133038 at process virtual address 0x20af9000 [ 33.011323][ T4897] Memory failure: 0x133038: recovery action for clean LRU page: Recovered [ 33.011330][ T4897] Injecting memory failure for pfn 0x133039 at process virtual address 0x20afa000 [ 33.011351][ T4897] Memory failure: 0x133039: recovery action for clean LRU page: Recovered [ 33.011358][ T4897] Injecting memory failure for pfn 0x13303a at process virtual address 0x20afb000 [ 33.011378][ T4897] Memory failure: 0x13303a: recovery action for clean LRU page: Recovered [ 33.011385][ T4897] Injecting memory failure for pfn 0x13303b at process virtual address 0x20afc000 [ 33.011408][ T4897] Memory failure: 0x13303b: recovery action for clean LRU page: Recovered [ 33.011415][ T4897] Injecting memory failure for pfn 0x13303c at process virtual address 0x20afd000 [ 33.011436][ T4897] Memory failure: 0x13303c: recovery action for clean LRU page: Recovered [ 33.011443][ T4897] Injecting memory failure for pfn 0x13303d at process virtual address 0x20afe000 [ 33.011463][ T4897] Memory failure: 0x13303d: recovery action for clean LRU page: Recovered [ 33.011470][ T4897] Injecting memory failure for pfn 0x13303e at process virtual address 0x20aff000 [ 33.011491][ T4897] Memory failure: 0x13303e: recovery action for clean LRU page: Recovered [ 33.011498][ T4897] Injecting memory failure for pfn 0x13303f at process virtual address 0x20b00000 [ 33.011518][ T4897] Memory failure: 0x13303f: recovery action for clean LRU page: Recovered [ 33.011525][ T4897] Injecting memory failure for pfn 0x133040 at process virtual address 0x20b01000 [ 33.011546][ T4897] Memory failure: 0x133040: recovery action for clean LRU page: Recovered [ 33.011553][ T4897] Injecting memory failure for pfn 0x133041 at process virtual address 0x20b02000 [ 33.011573][ T4897] Memory failure: 0x133041: recovery action for clean LRU page: Recovered [ 33.011580][ T4897] Injecting memory failure for pfn 0x133042 at process virtual address 0x20b03000 [ 33.011600][ T4897] Memory failure: 0x133042: recovery action for clean LRU page: Recovered [ 33.011607][ T4897] Injecting memory failure for pfn 0x133043 at process virtual address 0x20b04000 [ 33.011628][ T4897] Memory failure: 0x133043: recovery action for clean LRU page: Recovered [ 33.011635][ T4897] Injecting memory failure for pfn 0x133044 at process virtual address 0x20b05000 [ 33.011655][ T4897] Memory failure: 0x133044: recovery action for clean LRU page: Recovered [ 33.011662][ T4897] Injecting memory failure for pfn 0x133045 at process virtual address 0x20b06000 [ 33.011683][ T4897] Memory failure: 0x133045: recovery action for clean LRU page: Recovered [ 33.011690][ T4897] Injecting memory failure for pfn 0x133046 at process virtual address 0x20b07000 [ 33.011710][ T4897] Memory failure: 0x133046: recovery action for clean LRU page: Recovered [ 33.011717][ T4897] Injecting memory failure for pfn 0x133047 at process virtual address 0x20b08000 [ 33.011738][ T4897] Memory failure: 0x133047: recovery action for clean LRU page: Recovered [ 33.011745][ T4897] Injecting memory failure for pfn 0x133048 at process virtual address 0x20b09000 [ 33.011769][ T4897] Memory failure: 0x133048: recovery action for clean LRU page: Recovered [ 33.011777][ T4897] Injecting memory failure for pfn 0x133049 at process virtual address 0x20b0a000 [ 33.011797][ T4897] Memory failure: 0x133049: recovery action for clean LRU page: Recovered [ 33.011804][ T4897] Injecting memory failure for pfn 0x13304a at process virtual address 0x20b0b000 [ 33.011824][ T4897] Memory failure: 0x13304a: recovery action for clean LRU page: Recovered [ 33.011831][ T4897] Injecting memory failure for pfn 0x13304b at process virtual address 0x20b0c000 [ 33.011852][ T4897] Memory failure: 0x13304b: recovery action for clean LRU page: Recovered [ 33.011859][ T4897] Injecting memory failure for pfn 0x13304c at process virtual address 0x20b0d000 [ 33.011879][ T4897] Memory failure: 0x13304c: recovery action for clean LRU page: Recovered [ 33.011886][ T4897] Injecting memory failure for pfn 0x13304d at process virtual address 0x20b0e000 [ 33.011907][ T4897] Memory failure: 0x13304d: recovery action for clean LRU page: Recovered [ 33.011914][ T4897] Injecting memory failure for pfn 0x13304e at process virtual address 0x20b0f000 [ 33.011934][ T4897] Memory failure: 0x13304e: recovery action for clean LRU page: Recovered [ 33.011942][ T4897] Injecting memory failure for pfn 0x13304f at process virtual address 0x20b10000 [ 33.011962][ T4897] Memory failure: 0x13304f: recovery action for clean LRU page: Recovered [ 33.011969][ T4897] Injecting memory failure for pfn 0x133050 at process virtual address 0x20b11000 [ 33.012008][ T4897] Memory failure: 0x133050: recovery action for clean LRU page: Recovered [ 33.012015][ T4897] Injecting memory failure for pfn 0x133051 at process virtual address 0x20b12000 [ 33.012082][ T4897] Memory failure: 0x133051: recovery action for clean LRU page: Recovered [ 33.012090][ T4897] Injecting memory failure for pfn 0x133052 at process virtual address 0x20b13000 [ 33.012111][ T4897] Memory failure: 0x133052: recovery action for clean LRU page: Recovered [ 33.012118][ T4897] Injecting memory failure for pfn 0x133053 at process virtual address 0x20b14000 [ 33.012138][ T4897] Memory failure: 0x133053: recovery action for clean LRU page: Recovered [ 33.012145][ T4897] Injecting memory failure for pfn 0x133054 at process virtual address 0x20b15000 [ 33.014562][ T4897] Memory failure: 0x133054: recovery action for clean LRU page: Recovered [ 33.014576][ T4897] Injecting memory failure for pfn 0x133055 at process virtual address 0x20b16000 [ 33.017276][ T4897] Memory failure: 0x133055: recovery action for clean LRU page: Recovered [ 33.017289][ T4897] Injecting memory failure for pfn 0x133056 at process virtual address 0x20b17000 [ 33.017323][ T4897] Memory failure: 0x133056: recovery action for clean LRU page: Recovered [ 33.017331][ T4897] Injecting memory failure for pfn 0x133057 at process virtual address 0x20b18000 [ 33.017355][ T4897] Memory failure: 0x133057: recovery action for clean LRU page: Recovered [ 33.017362][ T4897] Injecting memory failure for pfn 0x133058 at process virtual address 0x20b19000 [ 33.017387][ T4897] Memory failure: 0x133058: recovery action for clean LRU page: Recovered [ 33.017394][ T4897] Injecting memory failure for pfn 0x133059 at process virtual address 0x20b1a000 [ 33.017417][ T4897] Memory failure: 0x133059: recovery action for clean LRU page: Recovered [ 33.017424][ T4897] Injecting memory failure for pfn 0x13305a at process virtual address 0x20b1b000 [ 33.017446][ T4897] Memory failure: 0x13305a: recovery action for clean LRU page: Recovered [ 33.017453][ T4897] Injecting memory failure for pfn 0x13305b at process virtual address 0x20b1c000 [ 33.017475][ T4897] Memory failure: 0x13305b: recovery action for clean LRU page: Recovered [ 33.017482][ T4897] Injecting memory failure for pfn 0x13305c at process virtual address 0x20b1d000 [ 33.017503][ T4897] Memory failure: 0x13305c: recovery action for clean LRU page: Recovered [ 33.017510][ T4897] Injecting memory failure for pfn 0x13305d at process virtual address 0x20b1e000 [ 33.017531][ T4897] Memory failure: 0x13305d: recovery action for clean LRU page: Recovered [ 33.017538][ T4897] Injecting memory failure for pfn 0x13305e at process virtual address 0x20b1f000 [ 33.017559][ T4897] Memory failure: 0x13305e: recovery action for clean LRU page: Recovered [ 33.017566][ T4897] Injecting memory failure for pfn 0x13305f at process virtual address 0x20b20000 [ 33.017586][ T4897] Memory failure: 0x13305f: recovery action for clean LRU page: Recovered [ 33.017593][ T4897] Injecting memory failure for pfn 0x133060 at process virtual address 0x20b21000 [ 33.017614][ T4897] Memory failure: 0x133060: recovery action for clean LRU page: Recovered [ 33.017621][ T4897] Injecting memory failure for pfn 0x133061 at process virtual address 0x20b22000 [ 33.017642][ T4897] Memory failure: 0x133061: recovery action for clean LRU page: Recovered [ 33.017649][ T4897] Injecting memory failure for pfn 0x133062 at process virtual address 0x20b23000 [ 33.017670][ T4897] Memory failure: 0x133062: recovery action for clean LRU page: Recovered [ 33.017677][ T4897] Injecting memory failure for pfn 0x133063 at process virtual address 0x20b24000 [ 33.017697][ T4897] Memory failure: 0x133063: recovery action for clean LRU page: Recovered [ 33.017704][ T4897] Injecting memory failure for pfn 0x133064 at process virtual address 0x20b25000 [ 33.017725][ T4897] Memory failure: 0x133064: recovery action for clean LRU page: Recovered [ 33.017732][ T4897] Injecting memory failure for pfn 0x133065 at process virtual address 0x20b26000 [ 33.017756][ T4897] Memory failure: 0x133065: recovery action for clean LRU page: Recovered [ 33.017764][ T4897] Injecting memory failure for pfn 0x133066 at process virtual address 0x20b27000 [ 33.017784][ T4897] Memory failure: 0x133066: recovery action for clean LRU page: Recovered [ 33.017792][ T4897] Injecting memory failure for pfn 0x133067 at process virtual address 0x20b28000 [ 33.017812][ T4897] Memory failure: 0x133067: recovery action for clean LRU page: Recovered [ 33.017819][ T4897] Injecting memory failure for pfn 0x133068 at process virtual address 0x20b29000 [ 33.017840][ T4897] Memory failure: 0x133068: recovery action for clean LRU page: Recovered [ 33.017847][ T4897] Injecting memory failure for pfn 0x133069 at process virtual address 0x20b2a000 [ 33.017867][ T4897] Memory failure: 0x133069: recovery action for clean LRU page: Recovered [ 33.017874][ T4897] Injecting memory failure for pfn 0x13306a at process virtual address 0x20b2b000 [ 33.017895][ T4897] Memory failure: 0x13306a: recovery action for clean LRU page: Recovered [ 33.017902][ T4897] Injecting memory failure for pfn 0x13306b at process virtual address 0x20b2c000 [ 33.017923][ T4897] Memory failure: 0x13306b: recovery action for clean LRU page: Recovered [ 33.017930][ T4897] Injecting memory failure for pfn 0x13306c at process virtual address 0x20b2d000 [ 33.017952][ T4897] Memory failure: 0x13306c: recovery action for clean LRU page: Recovered [ 33.017959][ T4897] Injecting memory failure for pfn 0x13306d at process virtual address 0x20b2e000 [ 33.017979][ T4897] Memory failure: 0x13306d: recovery action for clean LRU page: Recovered [ 33.017986][ T4897] Injecting memory failure for pfn 0x13306e at process virtual address 0x20b2f000 [ 33.018007][ T4897] Memory failure: 0x13306e: recovery action for clean LRU page: Recovered [ 33.018014][ T4897] Injecting memory failure for pfn 0x13306f at process virtual address 0x20b30000 [ 33.018034][ T4897] Memory failure: 0x13306f: recovery action for clean LRU page: Recovered [ 33.018041][ T4897] Injecting memory failure for pfn 0x133070 at process virtual address 0x20b31000 [ 33.018064][ T4897] Memory failure: 0x133070: recovery action for clean LRU page: Recovered [ 33.018071][ T4897] Injecting memory failure for pfn 0x133071 at process virtual address 0x20b32000 [ 33.018092][ T4897] Memory failure: 0x133071: recovery action for clean LRU page: Recovered [ 33.018099][ T4897] Injecting memory failure for pfn 0x133072 at process virtual address 0x20b33000 [ 33.018119][ T4897] Memory failure: 0x133072: recovery action for clean LRU page: Recovered [ 33.018126][ T4897] Injecting memory failure for pfn 0x133073 at process virtual address 0x20b34000 [ 33.018147][ T4897] Memory failure: 0x133073: recovery action for clean LRU page: Recovered [ 33.018154][ T4897] Injecting memory failure for pfn 0x133074 at process virtual address 0x20b35000 [ 33.018175][ T4897] Memory failure: 0x133074: recovery action for clean LRU page: Recovered [ 33.355977][ T4912] dummy0: entered allmulticast mode [ 33.702716][ T4714] Bluetooth: hci0: command tx timeout [ 33.885413][ T4919] process 'syz.0.7' launched './file0' with NULL argv: empty string added [ 34.048474][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 34.094780][ T4722] Bluetooth: hci3: command tx timeout [ 34.094805][ T4722] Bluetooth: hci4: command tx timeout [ 34.094923][ T4714] Bluetooth: hci2: command tx timeout [ 34.101463][ T4714] Bluetooth: hci1: command tx timeout [ 34.102727][ T4924] loop3: detected capacity change from 0 to 8 [ 34.103149][ T4924] ======================================================= [ 34.103149][ T4924] WARNING: The mand mount option has been deprecated and [ 34.103149][ T4924] and is ignored by this kernel. Remove the mand [ 34.103149][ T4924] option from the mount to silence this warning. [ 34.103149][ T4924] ======================================================= [ 34.153814][ T4921] veth3: entered promiscuous mode [ 34.165780][ T4924] fuse: Bad value for 'group_id' [ 34.165793][ T4924] fuse: Bad value for 'group_id' [ 34.237009][ T4927] loop2: detected capacity change from 0 to 8192 [ 34.273803][ T4927] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.875886][ T4947] loop1: detected capacity change from 0 to 256 [ 34.992769][ T4952] loop3: detected capacity change from 0 to 256 [ 35.038672][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 35.151678][ T4960] loop0: detected capacity change from 0 to 512 [ 35.154414][ T4960] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.188452][ T4960] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.192570][ T4960] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.22: bg 0: block 248: padding at end of block bitmap is not set [ 35.192653][ T4960] loop0: lost filesystem error report for type 5 error -117 [ 35.193345][ T4960] Quota error (device loop0): write_blk: dquota write failed [ 35.193378][ T4960] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 35.193400][ T4960] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.22: Failed to acquire dquot type 1 [ 35.193410][ T4960] loop0: lost filesystem error report for type 5 error -28 [ 35.198311][ T4960] EXT4-fs (loop0): 1 truncate cleaned up [ 35.198773][ T4960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 35.378172][ T4962] loop3: detected capacity change from 0 to 2048 [ 35.423314][ T4962] loop3: p1 < > p3 [ 35.426015][ T4962] loop3: p3 size 134217728 extends beyond EOD, truncated [ 35.445961][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 35.771288][ T4714] Bluetooth: hci0: command tx timeout [ 36.140777][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.148824][ T4986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 36.172746][ T4714] Bluetooth: hci2: command tx timeout [ 36.172782][ T4714] Bluetooth: hci4: command tx timeout [ 36.172805][ T4714] Bluetooth: hci3: command tx timeout [ 36.242019][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.245951][ T4993] Zero length message leads to an empty skb [ 36.277371][ T4995] loop2: detected capacity change from 0 to 512 [ 36.282430][ T4995] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.282442][ T4995] EXT4-fs (loop2): filesystem is read-only [ 36.293509][ T4995] EXT4-fs (loop2): filesystem is read-only [ 36.293523][ T4995] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.293543][ T4995] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.31: bad orphan inode 16 [ 36.293555][ T4995] loop2: lost filesystem error report for type 5 error -117 [ 36.294178][ T4995] ext4_test_bit(bit=15, block=3) = 0 [ 36.297999][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.376434][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.392122][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.631538][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.183357][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.232357][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.245082][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.252314][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.322124][ T5008] Injecting memory failure for pfn 0x133492 at process virtual address 0x20000000 [ 37.373895][ T5008] Memory failure: 0x133492: Sending SIGBUS to syz.1.33:5008 due to hardware memory corruption [ 37.373936][ T5008] Memory failure: 0x133492: dirty LRU page still referenced by 1 users [ 37.374120][ T5008] Memory failure: 0x133492: recovery action for dirty LRU page: Failed [ 37.402024][ T5014] nft_compat: unsupported protocol 13 [ 37.522117][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 37.522165][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 37.524964][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.550145][ T5025] loop1: detected capacity change from 0 to 4096 [ 37.586323][ T5025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.669852][ T5038] loop3: detected capacity change from 0 to 2048 [ 37.729594][ T5038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.749595][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.851666][ T4714] Bluetooth: hci0: command tx timeout [ 37.865106][ T5052] loop2: detected capacity change from 0 to 2048 [ 37.887696][ T5051] 9p: Bad value for 'rfdno' [ 37.891234][ T5051] max out of range [ 37.894192][ T5052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.001937][ T39] bridge_slave_1: left allmulticast mode [ 38.001964][ T39] bridge_slave_1: left promiscuous mode [ 38.002501][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.013312][ T39] bridge_slave_0: left allmulticast mode [ 38.013332][ T39] bridge_slave_0: left promiscuous mode [ 38.013446][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.108630][ T4899] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.109876][ T4899] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 514 with error 28 [ 38.109892][ T4899] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.109892][ T4899] [ 38.109900][ T4899] EXT4-fs (loop2): Total free blocks count 0 [ 38.109907][ T4899] EXT4-fs (loop2): Free/Dirty block details [ 38.109917][ T4899] EXT4-fs (loop2): free_blocks=2415919504 [ 38.109927][ T4899] EXT4-fs (loop2): dirty_blocks=528 [ 38.109933][ T4899] EXT4-fs (loop2): Block reservation details [ 38.109939][ T4899] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 38.125134][ T4716] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 38.127185][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.214167][ T5066] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 38.214206][ T5066] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 38.222451][ T5066] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.49: Invalid inode table block 1 in block_group 0 [ 38.222477][ T5066] loop2: lost filesystem error report for type 5 error -117 [ 38.224887][ T5066] EXT4-fs (loop2): Remounting filesystem read-only [ 38.224953][ T5066] EXT4-fs (loop2): get root inode failed [ 38.224964][ T5066] EXT4-fs (loop2): mount failed [ 38.295481][ T4709] Bluetooth: hci4: command tx timeout [ 38.295508][ T4709] Bluetooth: hci2: command tx timeout [ 38.295557][ T4714] Bluetooth: hci3: command tx timeout [ 38.439989][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.484825][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.523644][ T39] bond0 (unregistering): Released all slaves [ 38.536261][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.536980][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 38.537049][ T5038] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 38.537201][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 38.617836][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.756600][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 38.823697][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 39.034229][ T5086] netlink: 'syz.3.53': attribute type 21 has an invalid length. [ 39.034247][ T5086] netlink: 128 bytes leftover after parsing attributes in process `syz.3.53'. [ 39.034277][ T5086] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 39.034285][ T5086] netlink: 'syz.3.53': attribute type 3 has an invalid length. [ 39.034293][ T5086] netlink: 3 bytes leftover after parsing attributes in process `syz.3.53'. [ 39.158222][ T5101] set_capacity_and_notify: 1 callbacks suppressed [ 39.158234][ T5101] loop0: detected capacity change from 0 to 128 [ 39.269623][ T5101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 39.369692][ T5112] Injecting memory failure for pfn 0x1344f8 at process virtual address 0x20000000 [ 39.372100][ T4722] Bluetooth: hci1: command tx timeout [ 39.384422][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.408050][ T5112] Memory failure: 0x1344f8: recovery action for dirty LRU page: Recovered [ 39.414218][ T5116] loop2: detected capacity change from 0 to 512 [ 39.448524][ T5116] EXT4-fs (loop2): 1 truncate cleaned up [ 39.458209][ T5116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.503503][ T5116] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 39.506945][ T5116] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.59: invalid indirect mapped block 234881024 (level 0) [ 39.513412][ T5116] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.514711][ T5132] loop3: detected capacity change from 0 to 256 [ 39.525443][ T39] hsr_slave_0: left promiscuous mode [ 39.532447][ T39] hsr_slave_1: left promiscuous mode [ 39.533760][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.535358][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.537844][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.539455][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.544902][ T39] veth1_macvtap: left promiscuous mode [ 39.546157][ T39] veth0_macvtap: left promiscuous mode [ 39.547475][ T39] veth1_vlan: left promiscuous mode [ 39.548524][ T39] veth0_vlan: left promiscuous mode [ 39.606745][ T4713] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.902996][ T5140] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.59: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 39.940837][ T5140] overlayfs: failed to resolve './bus': -2 [ 40.386197][ T4722] Bluetooth: hci4: command tx timeout [ 40.516035][ T39] team0 (unregistering): Port device team_slave_1 removed [ 40.528688][ T39] team0 (unregistering): Port device team_slave_0 removed [ 40.576273][ T5147] loop0: detected capacity change from 0 to 128 [ 40.625456][ T5149] loop3: detected capacity change from 0 to 512 [ 40.625854][ T5149] EXT4-fs: Ignoring removed oldalloc option [ 40.626367][ T5149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.632477][ T5149] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.632522][ T5149] EXT4-fs (loop3): 1 truncate cleaned up [ 40.633309][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.640704][ T5153] loop0: detected capacity change from 0 to 128 [ 40.650360][ T5149] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 40.655331][ T5130] : renamed from virt_wifi0 [ 40.658795][ T5153] Smack: duplicate mount options [ 40.738538][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.753807][ T5156] Bluetooth: MGMT ver 1.23 [ 40.754366][ T5156] Bluetooth: hci0: service_discovery: too big uuid_count value 63764 [ 40.758297][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.758694][ T5153] loop0: detected capacity change from 0 to 4096 [ 40.767519][ T5153] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.769145][ T5153] EXT4-fs (loop0): Test dummy encryption mode enabled [ 40.792849][ T5153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.806244][ T5153] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 40.819432][ T5168] sctp: [Deprecated]: syz.3.72 (pid 5168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.819432][ T5168] Use struct sctp_sack_info instead [ 40.820775][ T5168] loop3: detected capacity change from 0 to 256 [ 40.877082][ T5003] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.893131][ T5003] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.893696][ T5003] bridge_slave_0: entered allmulticast mode [ 40.894200][ T5003] bridge_slave_0: entered promiscuous mode [ 40.896546][ T5003] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.896570][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.896637][ T5003] bridge_slave_1: entered allmulticast mode [ 40.897094][ T5003] bridge_slave_1: entered promiscuous mode [ 40.950833][ T5003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.983081][ T5003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.042665][ T5189] loop1: detected capacity change from 0 to 512 [ 41.049364][ T5003] team0: Port device team_slave_0 added [ 41.057406][ T5189] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.063624][ T5003] team0: Port device team_slave_1 added [ 41.093253][ T5189] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.093441][ T5189] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.77: bg 0: block 248: padding at end of block bitmap is not set [ 41.093467][ T5189] loop1: lost filesystem error report for type 5 error -117 [ 41.093647][ T5189] Quota error (device loop1): write_blk: dquota write failed [ 41.093673][ T5189] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 41.093692][ T5189] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.77: Failed to acquire dquot type 1 [ 41.093705][ T5189] loop1: lost filesystem error report for type 5 error -28 [ 41.101010][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 41.101031][ C0] EXT4-fs (loop1): last error at time 41: ext4_acquire_dquot:7034 [ 41.106785][ T5189] EXT4-fs (loop1): 1 truncate cleaned up [ 41.107206][ T5189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 41.119156][ T5003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.119168][ T5003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.119184][ T5003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.119802][ T5003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.119809][ T5003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.119823][ T5003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.134604][ T5195] syz.3.78 uses obsolete (PF_INET,SOCK_PACKET) [ 41.197848][ T5003] hsr_slave_0: entered promiscuous mode [ 41.199818][ T5003] hsr_slave_1: entered promiscuous mode [ 41.248098][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.369299][ T5003] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.412866][ T5003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.413225][ T5003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.417623][ T5003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.419893][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 41.419913][ T5209] netlink: 'syz.2.81': attribute type 9 has an invalid length. [ 41.439194][ T5003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.451196][ T4722] Bluetooth: hci1: command tx timeout [ 41.455643][ T5003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.458619][ T5003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.464357][ T5003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.466373][ T1312] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.466447][ T1312] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.466473][ T1312] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.466491][ T1312] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.466639][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 41.466656][ T5209] netlink: 'syz.2.81': attribute type 9 has an invalid length. [ 41.841584][ T5221] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 41.842603][ T5221] loop2: detected capacity change from 0 to 8 [ 41.842942][ T5221] squashfs: Unknown parameter '00000000000000000010' [ 41.874087][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.953580][ T5003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.984482][ T5003] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.988817][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.988873][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.994290][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.994336][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.026940][ T5233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.85'. [ 42.147275][ T5245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.86'. [ 42.335954][ T5254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.340783][ T5264] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.340823][ T5264] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.350030][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.369883][ T5264] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.88: iget: special inode unallocated [ 42.369952][ T5264] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 42.370997][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 42.371014][ C0] EXT4-fs (loop2): initial error at time 42: __ext4_fill_super:5596: inode 2 [ 42.371030][ C0] EXT4-fs (loop2): last error at time 42: __ext4_fill_super:5596: inode 2 [ 42.379438][ T5264] EXT4-fs (loop2): Remounting filesystem read-only [ 42.379516][ T5264] EXT4-fs (loop2): get root inode failed [ 42.379526][ T5264] EXT4-fs (loop2): mount failed [ 42.454702][ T5003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.755675][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.876682][ T5296] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.945397][ T5003] veth0_vlan: entered promiscuous mode [ 42.947210][ T5003] veth1_vlan: entered promiscuous mode [ 42.966260][ T5296] bridge2: port 1(vlan2) entered blocking state [ 42.966323][ T5296] bridge2: port 1(vlan2) entered disabled state [ 42.966398][ T5296] vlan2: entered allmulticast mode [ 42.966407][ T5296] bridge2: entered allmulticast mode [ 42.968050][ T5296] vlan2: left allmulticast mode [ 42.968061][ T5296] bridge2: left allmulticast mode [ 42.984185][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.000450][ T5003] veth0_macvtap: entered promiscuous mode [ 43.006718][ T5003] veth1_macvtap: entered promiscuous mode [ 43.010093][ T5003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.036893][ T5003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.052861][ T4899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.052971][ T4899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.052997][ T4899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.053019][ T4899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.143358][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.143391][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.173135][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.173170][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.351826][ T5339] Injecting memory failure for pfn 0x11bfc3 at process virtual address 0x20001000 [ 43.358105][ T5339] Memory failure: 0x11bfc3: Sending SIGBUS to syz.5.28:5339 due to hardware memory corruption [ 43.360178][ T5339] Memory failure: 0x11bfc3: recovery action for dirty LRU page: Recovered [ 43.362392][ T5339] Injecting memory failure for pfn 0x10a179 at process virtual address 0x20002000 [ 43.364913][ T5339] Memory failure: 0x10a179: Sending SIGBUS to syz.5.28:5339 due to hardware memory corruption [ 43.364952][ T5339] Memory failure: 0x10a179: recovery action for dirty LRU page: Recovered [ 43.364971][ T5339] Injecting memory failure for pfn 0x1313ba at process virtual address 0x20003000 [ 43.370495][ T5339] Memory failure: 0x1313ba: Sending SIGBUS to syz.5.28:5339 due to hardware memory corruption [ 43.370550][ T5339] Memory failure: 0x1313ba: recovery action for dirty LRU page: Recovered [ 43.410123][ T5345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.440470][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 43.474383][ T5353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.494563][ T5350] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 43.499238][ T5350] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 43.502562][ T5350] EXT4-fs (loop5): This should not happen!! Data will be lost [ 43.502562][ T5350] [ 43.504937][ T5350] EXT4-fs (loop5): Total free blocks count 0 [ 43.506257][ T5350] EXT4-fs (loop5): Free/Dirty block details [ 43.507542][ T5350] EXT4-fs (loop5): free_blocks=65280 [ 43.508761][ T5350] EXT4-fs (loop5): dirty_blocks=33 [ 43.509938][ T5350] EXT4-fs (loop5): Block reservation details [ 43.511467][ T5350] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 43.524167][ T5370] vfat: Unknown parameter '01777777777777777777777' [ 43.528155][ T5368] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 43.530545][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.541309][ T4722] Bluetooth: hci1: command tx timeout [ 43.566447][ T5364] capability: warning: `syz.3.105' uses 32-bit capabilities (legacy support in use) [ 43.607720][ T5003] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 43.701403][ T5379] __nla_validate_parse: 4 callbacks suppressed [ 43.701458][ T5379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 44.305410][ T5407] netlink: 76 bytes leftover after parsing attributes in process `syz.3.113'. [ 44.467992][ T5424] netlink: 43 bytes leftover after parsing attributes in process `syz.3.115'. [ 44.483849][ T5424] IPv6: sit1: Disabled Multicast RS [ 44.484274][ T5424] sit1: entered allmulticast mode [ 44.573304][ T5439] set_capacity_and_notify: 6 callbacks suppressed [ 44.573341][ T5439] loop0: detected capacity change from 0 to 128 [ 44.574885][ T5438] netlink: 40 bytes leftover after parsing attributes in process `syz.5.119'. [ 44.583409][ T5439] FAT-fs (loop0): bogus logical sector size 0 [ 44.583463][ T5439] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 44.583493][ T5439] FAT-fs (loop0): Can't find a valid FAT filesystem [ 44.791861][ T5461] loop5: detected capacity change from 0 to 512 [ 44.826332][ T5461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.964027][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 44.966744][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 45.500720][ T5003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.618392][ T4722] Bluetooth: hci1: command tx timeout [ 45.864509][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.131'. [ 45.961359][ T5503] input input3: cannot allocate more than FF_MAX_EFFECTS effects [ 45.977362][ T5503] loop0: detected capacity change from 0 to 512 [ 45.985070][ T5503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.014855][ T30] audit: type=1326 audit(524333.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5504 comm="syz.2.134" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1777aa8 code=0x0 [ 46.028490][ T5503] EXT4-fs (loop0): 1 orphan inode deleted [ 46.031143][ T5503] EXT4-fs (loop0): 1 truncate cleaned up [ 46.033921][ T5503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.088001][ T5503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 46.100184][ T5508] loop2: detected capacity change from 0 to 512 [ 46.507762][ T5521] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 46.525600][ T5521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.526420][ T5521] team0: Port device netdevsim1 added [ 46.526591][ T5521] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 46.530941][ T5521] team0: Port device netdevsim1 removed [ 46.531488][ T5521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.532168][ T5521] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 46.766897][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.140705][ T5541] loop3: detected capacity change from 0 to 1024 [ 47.161346][ T5541] EXT4-fs: Ignoring removed bh option [ 47.165931][ T5541] EXT4-fs: Mount option(s) incompatible with ext3 [ 47.181075][ T5545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 47.194560][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.199437][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.240994][ T5547] 9pnet_fd: Insufficient options for proto=fd [ 47.295576][ T5556] tipc: Started in network mode [ 47.295614][ T5556] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 47.295638][ T5556] tipc: Enabling of bearer rejected, failed to enable media [ 47.378510][ T5562] loop3: detected capacity change from 0 to 512 [ 47.393285][ T5565] loop5: detected capacity change from 0 to 512 [ 47.394213][ T5565] EXT4-fs: Ignoring removed i_version option [ 47.394242][ T5565] EXT4-fs: Ignoring removed nobh option [ 47.394856][ T5565] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.493848][ T5570] loop0: detected capacity change from 0 to 512 [ 47.507499][ T5565] EXT4-fs (loop5): 1 truncate cleaned up [ 47.507978][ T5565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.538620][ T5570] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=3 [ 47.540823][ T5570] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 47.547267][ T5570] EXT4-fs (loop0): mount failed [ 47.651403][ T4722] Bluetooth: hci1: command tx timeout [ 47.869393][ T5582] xt_hashlimit: max too large, truncated to 1048576 [ 48.013920][ T5003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.202104][ T5595] loop2: detected capacity change from 0 to 1024 [ 48.205452][ T5595] EXT4-fs (loop2): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 48.227855][ T5595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.239330][ T5595] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 48.245699][ T5595] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 48.249355][ T5595] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.249355][ T5595] [ 48.249397][ T5595] EXT4-fs (loop2): Total free blocks count 0 [ 48.249414][ T5595] EXT4-fs (loop2): Free/Dirty block details [ 48.249431][ T5595] EXT4-fs (loop2): free_blocks=20480 [ 48.249449][ T5595] EXT4-fs (loop2): dirty_blocks=32 [ 48.249463][ T5595] EXT4-fs (loop2): Block reservation details [ 48.249475][ T5595] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 48.279819][ T15] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.283233][ T4716] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.392036][ T5608] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 48.516027][ T5617] bond1: option ad_user_port_key: invalid value (48424) [ 48.516059][ T5617] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 48.520278][ T5617] bond1 (unregistering): Released all slaves [ 48.775179][ T5635] loop2: detected capacity change from 0 to 512 [ 48.775856][ T5635] EXT4-fs: quotafile must be on filesystem root [ 48.947330][ T5641] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.412165][ T5654] __nla_validate_parse: 5 callbacks suppressed [ 49.412201][ T5654] netlink: 56 bytes leftover after parsing attributes in process `syz.5.174'. [ 49.463908][ T5654] macvlan2: entered allmulticast mode [ 49.463958][ T5654] veth1_vlan: entered allmulticast mode [ 49.464894][ T5654] veth1_vlan: left allmulticast mode [ 49.474721][ T5657] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 49.474910][ T5657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 49.654941][ T5682] set_capacity_and_notify: 1 callbacks suppressed [ 49.656376][ T5682] loop5: detected capacity change from 0 to 512 [ 49.717912][ T5682] EXT4-fs (loop5): 1 truncate cleaned up [ 49.718468][ T5682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.747072][ T5686] netlink: 'syz.2.184': attribute type 3 has an invalid length. [ 49.760107][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 49.782749][ T5682] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 49.786950][ T5682] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.183: invalid indirect mapped block 234881024 (level 0) [ 49.786997][ T5682] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 49.797749][ T5690] loop3: detected capacity change from 0 to 512 [ 49.825945][ T5003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.855390][ T5695] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 49.901119][ T5705] loop5: detected capacity change from 0 to 512 [ 49.913123][ T5705] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.188: inode has both inline data and extents flags [ 49.916598][ T5709] loop3: detected capacity change from 0 to 512 [ 49.917952][ T5705] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.918183][ T5705] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.188: couldn't read orphan inode 15 (err -117) [ 49.922322][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 49.922335][ C0] EXT4-fs (loop5): initial error at time 524338: ext4_orphan_get:1397: inode 15 [ 49.922353][ C0] EXT4-fs (loop5): last error at time 524338: ext4_orphan_get:1397: inode 15 [ 49.929658][ T5705] loop5: lost filesystem error report for type 5 error -117 [ 49.930350][ T5705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.949891][ T5706] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 49.960117][ T5709] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.000207][ T5709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 50.002150][ T5709] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.006157][ T5709] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.192: Allocating blocks 41-42 which overlap fs metadata [ 50.006191][ T5709] loop3: lost filesystem error report for type 5 error -117 [ 50.009194][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 50.009210][ C0] EXT4-fs (loop3): initial error at time 524338: ext4_mb_mark_diskspace_used:4222 [ 50.009224][ C0] EXT4-fs (loop3): last error at time 524338: ext4_mb_mark_diskspace_used:4222 [ 50.019420][ T5709] EXT4-fs (loop3): Remounting filesystem read-only [ 50.019593][ T5709] Quota error (device loop3): write_blk: dquota write failed [ 50.019650][ T5709] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 50.019740][ T5709] EXT4-fs (loop3): 1 truncate cleaned up [ 50.028904][ T5709] EXT4-fs (loop3): pa 000000007231e2ff: logic 1, phys. 41, len 23 [ 50.029503][ T5709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.037726][ T5003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.041078][ T5709] netlink: 52 bytes leftover after parsing attributes in process `syz.3.192'. [ 50.305061][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.359775][ T5725] loop5: detected capacity change from 0 to 1024 [ 50.363115][ T5725] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 50.384860][ T5725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.463104][ T5731] loop0: detected capacity change from 0 to 8192 [ 50.473724][ T5731] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.482998][ T5738] overlayfs: missing 'lowerdir' [ 50.562580][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 50.674113][ T5685] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 50.914583][ T5003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.020372][ T5758] overlayfs: failed lookup in lower (newroot/48, name='file0', err=-40): overlapping layers [ 51.127770][ T5767] loop1: detected capacity change from 0 to 512 [ 51.130752][ T5767] EXT4-fs: Ignoring removed nobh option [ 51.142176][ T5767] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.154985][ T5767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 51.155043][ T5767] System zones: 1-12 [ 51.155128][ T5767] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.164591][ T5767] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.208: attempt to clear invalid blocks 1024 len 1 [ 51.164668][ T5767] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.165827][ T5767] EXT4-fs (loop1): Remounting filesystem read-only [ 51.166441][ T5767] EXT4-fs (loop1): 1 truncate cleaned up [ 51.166901][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 51.246814][ T5761] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 51.261082][ T5775] netlink: 256 bytes leftover after parsing attributes in process `syz.0.210'. [ 51.288850][ T5775] netlink: 256 bytes leftover after parsing attributes in process `syz.0.210'. [ 51.409863][ T5782] loop2: detected capacity change from 0 to 512 [ 51.413919][ T5782] EXT4-fs: Ignoring removed orlov option [ 51.520998][ T5782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.631087][ T5782] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.209: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 51.631167][ T5782] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.636265][ T5782] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.209: couldn't read orphan inode 16 (err -117) [ 51.636328][ T5782] loop2: lost filesystem error report for type 5 error -117 [ 51.640800][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 51.640810][ C1] EXT4-fs (loop2): initial error at time 524339: ext4_ext_check_inode:521: inode 16 [ 51.640825][ C1] EXT4-fs (loop2): last error at time 524339: ext4_orphan_get:1402 [ 51.652215][ T5782] EXT4-fs (loop2): 1 orphan inode deleted [ 51.657811][ T5782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.005071][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 54.037052][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.056074][ T5791] netlink: 128 bytes leftover after parsing attributes in process `syz.0.212'. [ 54.058810][ T5791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.068746][ T5791] loop0: detected capacity change from 0 to 1024 [ 54.099612][ T5791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.113464][ T5795] loop5: detected capacity change from 0 to 2048 [ 54.142497][ T5793] capability: warning: `syz.1.211' uses deprecated v2 capabilities in a way that may be insecure [ 54.156678][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.163405][ T5795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.214229][ T5003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.228972][ T5812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.260186][ T5810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.299330][ T5823] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.351633][ T2706] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 54.351780][ T2706] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.351797][ T2706] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.351797][ T2706] [ 54.351808][ T2706] EXT4-fs (loop0): Total free blocks count 0 [ 54.351819][ T2706] EXT4-fs (loop0): Free/Dirty block details [ 54.351830][ T2706] EXT4-fs (loop0): free_blocks=4096 [ 54.351841][ T2706] EXT4-fs (loop0): dirty_blocks=512 [ 54.351850][ T2706] EXT4-fs (loop0): Block reservation details [ 54.351859][ T2706] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 54.358372][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 494 with error 28 [ 54.361289][ T4713] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 54.380994][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.755902][ T5835] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.758054][ T4790] team_slave_0: entered promiscuous mode [ 54.758129][ T4790] team_slave_1: entered promiscuous mode [ 54.764487][ T5835] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 54.784435][ T5840] set_capacity_and_notify: 3 callbacks suppressed [ 54.788485][ T5840] loop3: detected capacity change from 0 to 128 [ 54.917447][ T2706] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.934725][ T5852] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.934769][ T5852] vhci_hcd vhci_hcd.2: invalid port number 96 [ 54.935301][ T5852] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 54.961303][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.963033][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.964142][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.964515][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.964822][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.992007][ T2706] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.064408][ T2706] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.173093][ T5882] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 55.179231][ T2706] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.256815][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.256894][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.256953][ T5855] bridge_slave_0: entered allmulticast mode [ 55.257396][ T5855] bridge_slave_0: entered promiscuous mode [ 55.258184][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.260000][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.260071][ T5855] bridge_slave_1: entered allmulticast mode [ 55.260476][ T5855] bridge_slave_1: entered promiscuous mode [ 55.277433][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.279772][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.301321][ T5855] team0: Port device team_slave_0 added [ 55.303487][ T5855] team0: Port device team_slave_1 added [ 55.329577][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 55.331616][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 55.334432][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.334460][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.334473][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.339773][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.339786][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.339805][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.373433][ T5899] loop1: detected capacity change from 0 to 256 [ 55.513971][ T2706] bridge_slave_1: left allmulticast mode [ 55.514006][ T2706] bridge_slave_1: left promiscuous mode [ 55.514751][ T2706] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.521947][ T2706] bridge_slave_0: left allmulticast mode [ 55.521981][ T2706] bridge_slave_0: left promiscuous mode [ 55.522063][ T2706] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.661798][ T2706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.693571][ T2706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.714816][ T2706] bond0 (unregistering): Released all slaves [ 55.721651][ T5855] hsr_slave_0: entered promiscuous mode [ 55.722023][ T5855] hsr_slave_1: entered promiscuous mode [ 55.722250][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 55.722262][ T5855] Cannot create hsr debugfs directory [ 56.273154][ T5932] loop3: detected capacity change from 0 to 512 [ 56.284646][ T5931] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 56.284668][ T5931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.285274][ T5931] vhci_hcd vhci_hcd.0: Device attached [ 56.316394][ T5932] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.243: inode has both inline data and extents flags [ 56.316465][ T5932] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.320356][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.320384][ C1] EXT4-fs (loop3): initial error at time 524344: ext4_orphan_get:1397: inode 15 [ 56.320420][ C1] EXT4-fs (loop3): last error at time 524344: ext4_orphan_get:1397: inode 15 [ 56.327931][ T5932] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.243: couldn't read orphan inode 15 (err -117) [ 56.327991][ T5932] loop3: lost filesystem error report for type 5 error -117 [ 56.338887][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.515942][ T5933] vhci_hcd: connection closed [ 56.527912][ T5938] vhci_hcd vhci_hcd.3: stop threads [ 56.532251][ T5938] vhci_hcd vhci_hcd.3: release socket [ 56.549489][ T5938] vhci_hcd vhci_hcd.3: disconnect device [ 56.553451][ T1096] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 56.676438][ T4394] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.712979][ T5928] loop1: detected capacity change from 0 to 8192 [ 56.725096][ T5928] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.824552][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.824728][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.989888][ T4722] Bluetooth: hci1: command tx timeout [ 57.034323][ T5953] loop2: detected capacity change from 0 to 256 [ 57.042710][ T5953] vfat: Bad value for 'uni_xlate' [ 57.051090][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.313732][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.313987][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.447878][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 57.502636][ T5999] loop3: detected capacity change from 0 to 1024 [ 57.611345][ T5999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.661880][ T2706] hsr_slave_0: left promiscuous mode [ 57.663867][ T2706] hsr_slave_1: left promiscuous mode [ 57.666156][ T2706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.667678][ T2706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.676800][ T2706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.678822][ T2706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.694994][ T2706] veth1_macvtap: left promiscuous mode [ 57.697013][ T2706] veth0_macvtap: left promiscuous mode [ 57.697116][ T2706] veth1_vlan: left promiscuous mode [ 57.697160][ T2706] veth0_vlan: left promiscuous mode [ 57.750236][ T866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.905727][ T866] usb 1-1: Using ep0 maxpacket: 8 [ 57.909385][ T2706] team0 (unregistering): Port device team_slave_1 removed [ 57.909885][ T866] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 57.909901][ T866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.909911][ T866] usb 1-1: config 0 has no interface number 0 [ 57.909932][ T866] usb 1-1: config 0 interface 9 has no altsetting 0 [ 57.909947][ T866] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 57.909957][ T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.914079][ T866] usb 1-1: config 0 descriptor?? [ 57.938262][ T2706] team0 (unregistering): Port device team_slave_0 removed [ 58.018526][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.053691][ T6018] loop3: detected capacity change from 0 to 512 [ 58.064628][ T6018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.070462][ T6018] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.259: bad orphan inode 131083 [ 58.070489][ T6018] loop3: lost filesystem error report for type 5 error -117 [ 58.073115][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.073132][ C0] EXT4-fs (loop3): initial error at time 524346: ext4_orphan_get:1423 [ 58.073146][ C0] EXT4-fs (loop3): last error at time 524346: ext4_orphan_get:1423 [ 58.080529][ T6018] EXT4-fs (loop3): Remounting filesystem read-only [ 58.081044][ T6018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.087188][ T6010] tipc: Cannot configure node identity twice [ 58.100438][ T6022] overlay: ./file0 is not a directory [ 58.113493][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.117743][ T4722] Bluetooth: hci2: Malformed LE Event: 0x0d [ 58.191295][ T6025] loop2: detected capacity change from 0 to 512 [ 58.194607][ T6028] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 58.194635][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.194712][ T6028] vhci_hcd vhci_hcd.0: Device attached [ 58.198598][ T6025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.216921][ T6030] vhci_hcd: connection closed [ 58.220002][ T1191] vhci_hcd vhci_hcd.3: stop threads [ 58.220044][ T1191] vhci_hcd vhci_hcd.3: release socket [ 58.220065][ T1191] vhci_hcd vhci_hcd.3: disconnect device [ 58.233074][ T6025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.265941][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.309079][ T6044] warning: `syz.1.263' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.355797][ T4882] usb 1-1: USB disconnect, device number 2 [ 58.425559][ T5855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.434877][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.436712][ T5855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.439168][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.441721][ T5855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.444976][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.445290][ T5855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.449854][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.476467][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.481212][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.486285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.486330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.492079][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.492144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.623470][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.703258][ T5855] veth0_vlan: entered promiscuous mode [ 58.706394][ T5855] veth1_vlan: entered promiscuous mode [ 58.716681][ T5855] veth0_macvtap: entered promiscuous mode [ 58.722559][ T5855] veth1_macvtap: entered promiscuous mode [ 58.731323][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.739778][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.751415][ T1191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.751473][ T1191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.751508][ T1191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.751531][ T1191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.873481][ T4790] IPVS: starting estimator thread 0... [ 58.881042][ T2706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.881078][ T2706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.904575][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.904609][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.963060][ T6112] IPVS: using max 57 ests per chain, 136800 per kthread [ 58.969851][ T6121] loop5: detected capacity change from 0 to 2048 [ 59.010051][ T4722] Bluetooth: hci1: command tx timeout [ 59.100906][ T866] Process accounting resumed [ 59.154884][ T6135] loop3: detected capacity change from 0 to 512 [ 59.156768][ T6135] ext4: Unknown parameter 'subj_role' [ 59.209156][ T6121] loop5: p2 p3 < > p4 < p5 > [ 59.323894][ T6147] netlink: 72 bytes leftover after parsing attributes in process `syz.2.275'. [ 59.330337][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 59.334839][ T5046] udevd[5046]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 59.338710][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 59.342254][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 59.436455][ T6160] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.438802][ T6159] overlayfs: failed to resolve 'permit_directio': -2 [ 59.608846][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 59.608892][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 59.608923][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 59.608942][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 59.608958][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 59.608982][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 59.761029][ T4790] Process accounting resumed [ 60.132097][ T6199] set_capacity_and_notify: 1 callbacks suppressed [ 60.132151][ T6199] loop1: detected capacity change from 0 to 1024 [ 60.136579][ T6199] EXT4-fs: Ignoring removed orlov option [ 60.262731][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.469601][ T6207] loop2: detected capacity change from 0 to 512 [ 60.472474][ T6207] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 60.478132][ T6207] loop8: detected capacity change from 0 to 7 [ 60.493982][ T6207] Dev loop8: unable to read RDB block 7 [ 60.494034][ T6207] loop8: unable to read partition table [ 60.494106][ T6207] loop8: partition table beyond EOD, truncated [ 60.494125][ T6207] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 60.531249][ T6209] __nla_validate_parse: 102 callbacks suppressed [ 60.531289][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz.3.295'. [ 60.747972][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 60.752990][ T6234] loop3: detected capacity change from 0 to 1024 [ 60.772007][ T6232] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 60.830376][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.862810][ T6242] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 60.896008][ T6242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.943022][ T6253] autofs: Unknown parameter '' [ 61.063602][ T4722] Bluetooth: hci1: command tx timeout [ 61.257640][ T6268] loop2: detected capacity change from 0 to 512 [ 61.353865][ T6271] loop2: detected capacity change from 0 to 2048 [ 61.422604][ T6275] loop2: detected capacity change from 0 to 1024 [ 61.556804][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.315'. [ 61.599474][ T6288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.317'. [ 61.632111][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 61.660775][ T6296] loop5: detected capacity change from 0 to 512 [ 61.664631][ T6296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 61.664687][ T6296] System zones: 1-12 [ 61.665122][ T6296] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.320: Directory hole found for htree index block 0 [ 61.665138][ T6296] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 61.666496][ T6296] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 61.666529][ T6296] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.320: Directory hole found for htree index block 0 [ 61.666542][ T6296] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 61.668829][ T6296] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 61.670986][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.321'. [ 61.671003][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.321'. [ 61.673476][ T6294] EXT4-fs (loop5): shut down requested (1) [ 61.794626][ T6310] loop3: detected capacity change from 0 to 256 [ 61.795150][ T6310] vfat: Unknown parameter 'iocharse000000000000000000003' [ 61.881501][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 61.978361][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 61.980787][ T6319] netlink: 'syz.1.329': attribute type 2 has an invalid length. [ 61.983433][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 62.135476][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.145055][ T6325] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 62.173052][ T6325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.182533][ T6334] gretap1: entered promiscuous mode [ 62.218260][ T6325] bond2: (slave ip6gretap1): making interface the new active one [ 62.223800][ T6325] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 62.417340][ T6343] netlink: 'syz.0.336': attribute type 49 has an invalid length. [ 62.520358][ T6343] ip6gretap0: entered promiscuous mode [ 62.520389][ T6343] ip6gretap0: entered allmulticast mode [ 62.525500][ T6353] sctp: [Deprecated]: syz.3.339 (pid 6353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.525500][ T6353] Use struct sctp_sack_info instead [ 62.534186][ T6355] netlink: 'syz.5.340': attribute type 1 has an invalid length. [ 62.592570][ T6355] netlink: 'syz.5.340': attribute type 1 has an invalid length. [ 62.658572][ T6368] bond2: option lacp_rate: invalid value (128) [ 62.664899][ T6368] bond2 (unregistering): Released all slaves [ 62.774954][ T6387] loop5: detected capacity change from 0 to 128 [ 62.779325][ T6387] vfat: Unknown parameter 'shtrtname' [ 62.818892][ T6387] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.821995][ T6387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 62.822064][ T6387] System zones: 1-12 [ 62.838501][ T6395] bond0: entered promiscuous mode [ 62.838539][ T6395] bond_slave_0: entered promiscuous mode [ 62.838626][ T6395] bond_slave_1: entered promiscuous mode [ 62.838834][ T6395] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 62.840151][ T6387] EXT4-fs (loop5): 1 truncate cleaned up [ 62.853144][ T6395] batadv0: entered promiscuous mode [ 62.857376][ T6395] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 62.860017][ T6395] bond0: left promiscuous mode [ 62.860066][ T6395] bond_slave_0: left promiscuous mode [ 62.860181][ T6395] bond_slave_1: left promiscuous mode [ 62.860253][ T6395] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 62.924243][ T6395] batadv0: left promiscuous mode [ 63.130440][ T4722] Bluetooth: hci1: command tx timeout [ 63.445634][ T6423] tipc: Can't bind to reserved service type 0 [ 63.798512][ T6452] overlayfs: failed to resolve './file0': -2 [ 63.817506][ T6451] EXT4-fs: Ignoring removed bh option [ 63.819044][ T6451] EXT4-fs: quotafile must be on filesystem root [ 63.894845][ T6451] fuse: Bad value for 'fd' [ 63.966284][ T6457] EXT4-fs: Invalid want_extra_isize 2 [ 64.037188][ T6465] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 64.152849][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.152899][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.155142][ T1024] cfg80211: failed to load regulatory.db [ 64.217631][ T6471] [U] [ 64.303286][ T6487] netlink: 'syz.2.373': attribute type 5 has an invalid length. [ 64.326214][ T6489] mmap: syz.0.374 (6489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.805533][ T6504] FAT-fs (loop2): Directory bread(block 64) failed [ 64.805669][ T6504] FAT-fs (loop2): Directory bread(block 65) failed [ 64.805865][ T6504] FAT-fs (loop2): Directory bread(block 66) failed [ 64.805948][ T6504] FAT-fs (loop2): Directory bread(block 67) failed [ 64.806106][ T6504] FAT-fs (loop2): Directory bread(block 68) failed [ 64.806190][ T6504] FAT-fs (loop2): Directory bread(block 69) failed [ 64.806336][ T6504] FAT-fs (loop2): Directory bread(block 70) failed [ 64.806394][ T6504] FAT-fs (loop2): Directory bread(block 71) failed [ 64.806528][ T6504] FAT-fs (loop2): Directory bread(block 72) failed [ 64.806613][ T6504] FAT-fs (loop2): Directory bread(block 73) failed [ 65.200183][ T4722] Bluetooth: hci1: command tx timeout [ 65.541595][ T6513] set_capacity_and_notify: 7 callbacks suppressed [ 65.542981][ T6513] loop2: detected capacity change from 0 to 512 [ 65.564192][ T6513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.583158][ T6513] EXT4-fs (loop2): 1 truncate cleaned up [ 65.583816][ T6513] EXT4-fs mount: 10 callbacks suppressed [ 65.583827][ T6513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.618323][ T6517] loop5: detected capacity change from 0 to 128 [ 65.669667][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.673272][ T6522] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 65.720379][ T6525] loop2: detected capacity change from 0 to 256 [ 65.724062][ T6525] vfat: Bad value for 'shortname' [ 65.859711][ T6535] __nla_validate_parse: 3 callbacks suppressed [ 65.859751][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.5.389'. [ 65.948063][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 65.960811][ T6539] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 65.966303][ T4800] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 65.991523][ T6540] tipc: Started in network mode [ 65.991554][ T6540] tipc: Node identity 4, cluster identity 4711 [ 65.991565][ T6540] tipc: Node number set to 4 [ 66.026715][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.226090][ T6553] tmpfs: Cannot disable swap on remount [ 66.227732][ T6553] loop2: detected capacity change from 0 to 128 [ 66.606715][ T6557] loop5: detected capacity change from 0 to 4096 [ 66.611456][ T6557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.688596][ T6567] EXT4-fs error (device loop5): ext4_get_first_dir_block:3557: inode #12: block 80: comm syz.5.397: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 66.698435][ T6567] EXT4-fs error (device loop5): ext4_get_first_dir_block:3560: inode #12: comm syz.5.397: directory missing '..' [ 66.767067][ T6573] loop1: detected capacity change from 0 to 512 [ 66.794142][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.800203][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.806909][ T6574] fuse: Bad value for 'rootmode' [ 66.809468][ T6573] fuse: Bad value for 'rootmode' [ 66.904984][ T6533] loop3: detected capacity change from 0 to 1024 [ 66.921869][ T6587] i2c i2c-0: dtv_property_process_set: SET cmd 0x25dfdbfb undefined [ 66.940288][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.964716][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.969828][ T6595] loop5: detected capacity change from 0 to 1024 [ 66.970188][ T6595] EXT4-fs: Ignoring removed oldalloc option [ 67.000273][ T6595] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 67.430555][ T6618] loop1: detected capacity change from 0 to 512 [ 67.513670][ T6618] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.410: corrupted in-inode xattr: e_value size too large [ 67.513756][ T6618] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.519830][ T6618] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.410: couldn't read orphan inode 15 (err -117) [ 67.519888][ T6618] loop1: lost filesystem error report for type 5 error -117 [ 67.522112][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 67.522128][ C0] EXT4-fs (loop1): initial error at time 524355: ext4_iget_extra_inode:5128: inode 15 [ 67.522147][ C0] EXT4-fs (loop1): last error at time 524355: ext4_orphan_get:1402 [ 67.541250][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.145058][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.187872][ T6533] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.388: lblock 0 mapped to illegal pblock 0 (length 6) [ 68.210733][ T6632] loop1: detected capacity change from 0 to 256 [ 68.354296][ T4882] psmouse serio0: Failed to reset mouse on : -5 [ 68.531135][ T6647] Injecting memory failure for pfn 0x162800 at process virtual address 0x20000000 [ 68.544002][ T6647] Memory failure: 0x162800: recovery action for dirty LRU page: Recovered [ 68.580242][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.139007][ T4882] misc userio: Buffer overflowed, userio client isn't keeping up [ 73.196709][ T4882] input: PS/2 Generic Mouse as /devices/serio0/input/input6 [ 73.401934][ T4882] psmouse serio0: Failed to enable mouse on [ 75.710648][ T6721] No such timeout policy "syz1" [ 75.873656][ T4882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.262689][ T6732] loop1: detected capacity change from 0 to 512 [ 76.284987][ T6732] EXT4-fs: Ignoring removed nobh option [ 76.289522][ T6732] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 76.289610][ T6732] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 76.290580][ T6732] EXT4-fs (loop1): external journal has bad superblock [ 76.318924][ T6734] Injecting memory failure for pfn 0x163c42 at process virtual address 0x20000000 [ 76.320624][ T6734] Memory failure: 0x163c42: Sending SIGBUS to syz.3.435:6734 due to hardware memory corruption [ 76.327635][ T4882] usb 1-1: Using ep0 maxpacket: 32 [ 76.331849][ T4882] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 76.332172][ T4882] usb 1-1: config 0 has no interface number 0 [ 76.335349][ T6734] Memory failure: 0x163c42: recovery action for dirty LRU page: Recovered [ 76.335393][ T6734] Injecting memory failure for pfn 0x163bf7 at process virtual address 0x20001000 [ 76.335658][ T6734] Memory failure: 0x163bf7: Sending SIGBUS to syz.3.435:6734 due to hardware memory corruption [ 76.335688][ T6734] Memory failure: 0x163bf7: recovery action for dirty LRU page: Recovered [ 76.336082][ T6734] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20002000 [ 76.336887][ T6734] Memory failure: 0x21cf58: unhandlable page. [ 76.336906][ T6734] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored [ 76.350465][ T4882] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 76.350494][ T4882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.350516][ T4882] usb 1-1: Product: syz [ 76.350523][ T4882] usb 1-1: Manufacturer: syz [ 76.350530][ T4882] usb 1-1: SerialNumber: syz [ 76.371623][ T6736] loop2: detected capacity change from 0 to 1024 [ 76.372092][ T6736] EXT4-fs: Ignoring removed bh option [ 76.392682][ T6736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.395063][ T4882] usb 1-1: config 0 descriptor?? [ 76.399943][ T4882] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 76.448444][ T6732] loop1: detected capacity change from 0 to 8192 [ 76.473605][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.638602][ T4882] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 76.659201][ T4882] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 76.804249][ T6765] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 76.819432][ T6765] bond1: entered promiscuous mode [ 76.819705][ T6765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.836675][ T6749] 9p: Bad value for 'rfdno' [ 76.853209][ T6765] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 76.855903][ T6765] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 76.858322][ T6765] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 77.032380][ T6700] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.035254][ T4722] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 77.049412][ T6783] tipc: Enabled bearer , priority 0 [ 77.052784][ T6783] syzkaller0: entered promiscuous mode [ 77.054291][ T6783] syzkaller0: entered allmulticast mode [ 77.286617][ T6818] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 77.286617][ T6818] Ue[%#s' [ 77.300449][ T6818] netlink: 44 bytes leftover after parsing attributes in process `syz.5.453'. [ 77.981811][ T6871] ================================================================== [ 77.981830][ T6871] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x374/0x414 [ 77.981853][ T6871] Read of size 4 at addr ffff0000cd1f943c by task syz.5.458/6871 [ 77.981861][ T6871] [ 77.981868][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.5.458 Tainted: G L syzkaller #0 PREEMPT [ 77.981879][ T6871] Tainted: [L]=SOFTLOCKUP [ 77.981882][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.981887][ T6871] Call trace: [ 77.981890][ T6871] show_stack+0x2c/0x3c (C) [ 77.981903][ T6871] __dump_stack+0x30/0x40 [ 77.981913][ T6871] dump_stack_lvl+0xd8/0x12c [ 77.981923][ T6871] print_address_description+0xb0/0x238 [ 77.981931][ T6871] print_report+0x68/0x84 [ 77.981938][ T6871] kasan_report+0x8c/0xc4 [ 77.981948][ T6871] __asan_report_load4_noabort+0x20/0x2c [ 77.981958][ T6871] dvb_frontend_release+0x374/0x414 [ 77.981966][ T6871] __fput+0x340/0x744 [ 77.981974][ T6871] ____fput+0x20/0x30 [ 77.981981][ T6871] task_work_run+0x1c4/0x254 [ 77.981991][ T6871] exit_to_user_mode_loop+0x10c/0x17c [ 77.981999][ T6871] el0_svc+0x18c/0x260 [ 77.982007][ T6871] el0t_64_sync_handler+0x48/0x148 [ 77.982015][ T6871] el0t_64_sync+0x198/0x19c [ 77.982023][ T6871] [ 77.982025][ T6871] Allocated by task 1: [ 77.982029][ T6871] kasan_save_track+0x40/0x78 [ 77.982036][ T6871] kasan_save_alloc_info+0x44/0x54 [ 77.982045][ T6871] __kasan_kmalloc+0x9c/0xb4 [ 77.982052][ T6871] __kmalloc_cache_noprof+0x2d4/0x624 [ 77.982060][ T6871] dvb_register_device+0x1ac/0x16ec [ 77.982069][ T6871] dvb_register_frontend+0x464/0x698 [ 77.982076][ T6871] vidtv_bridge_probe+0x57c/0xa24 [ 77.982084][ T6871] platform_probe+0xfc/0x198 [ 77.982092][ T6871] really_probe+0x2a8/0x7e8 [ 77.982098][ T6871] __driver_probe_device+0x1e0/0x33c [ 77.982104][ T6871] driver_probe_device+0x6c/0x19c [ 77.982109][ T6871] __driver_attach+0x164/0x374 [ 77.982115][ T6871] bus_for_each_dev+0x128/0x1b4 [ 77.982123][ T6871] driver_attach+0x4c/0x5c [ 77.982128][ T6871] bus_add_driver+0x208/0x4fc [ 77.982136][ T6871] driver_register+0x220/0x30c [ 77.982142][ T6871] __platform_driver_register+0x6c/0x80 [ 77.982149][ T6871] vidtv_bridge_init+0x34/0x5c [ 77.982158][ T6871] do_one_initcall+0x274/0xc20 [ 77.982167][ T6871] do_initcall_level+0x128/0x1c4 [ 77.982173][ T6871] do_initcalls+0x70/0xd0 [ 77.982179][ T6871] do_basic_setup+0x7c/0x90 [ 77.982185][ T6871] kernel_init_freeable+0x268/0x3a8 [ 77.982191][ T6871] kernel_init+0x24/0x1dc [ 77.982198][ T6871] ret_from_fork+0x10/0x20 [ 77.982204][ T6871] [ 77.982205][ T6871] Freed by task 6871: [ 77.982209][ T6871] kasan_save_track+0x40/0x78 [ 77.982216][ T6871] kasan_save_free_info+0x58/0x70 [ 77.982224][ T6871] __kasan_slab_free+0x74/0xa4 [ 77.982231][ T6871] kfree+0x188/0x690 [ 77.982237][ T6871] dvb_device_put+0x64/0xd0 [ 77.982246][ T6871] dvb_generic_release+0xec/0x154 [ 77.982254][ T6871] dvb_frontend_release+0x114/0x414 [ 77.982261][ T6871] __fput+0x340/0x744 [ 77.982266][ T6871] ____fput+0x20/0x30 [ 77.982272][ T6871] task_work_run+0x1c4/0x254 [ 77.982280][ T6871] exit_to_user_mode_loop+0x10c/0x17c [ 77.982286][ T6871] el0_svc+0x18c/0x260 [ 77.982291][ T6871] el0t_64_sync_handler+0x48/0x148 [ 77.982297][ T6871] el0t_64_sync+0x198/0x19c [ 77.982302][ T6871] [ 77.982304][ T6871] The buggy address belongs to the object at ffff0000cd1f9400 [ 77.982304][ T6871] which belongs to the cache kmalloc-256 of size 256 [ 77.982311][ T6871] The buggy address is located 60 bytes inside of [ 77.982311][ T6871] freed 256-byte region [ffff0000cd1f9400, ffff0000cd1f9500) [ 77.982318][ T6871] [ 77.982320][ T6871] The buggy address belongs to the physical page: [ 77.982324][ T6871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d1f8 [ 77.982331][ T6871] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.982337][ T6871] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 77.982345][ T6871] page_type: f5(slab) [ 77.982352][ T6871] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 77.982358][ T6871] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 77.982364][ T6871] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 77.982370][ T6871] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 77.982376][ T6871] head: 05ffc00000000001 fffffdffc3347e01 00000000ffffffff 00000000ffffffff [ 77.982381][ T6871] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 77.982385][ T6871] page dumped because: kasan: bad access detected [ 77.982388][ T6871] [ 77.982390][ T6871] Memory state around the buggy address: [ 77.982394][ T6871] ffff0000cd1f9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.982399][ T6871] ffff0000cd1f9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.982403][ T6871] >ffff0000cd1f9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.982407][ T6871] ^ [ 77.982411][ T6871] ffff0000cd1f9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.982415][ T6871] ffff0000cd1f9500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.982418][ T6871] ================================================================== [ 77.982437][ T6871] Disabling lock debugging due to kernel taint [ 78.136960][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 78.137198][ T4885] usb 1-1: USB disconnect, device number 3 [ 78.138777][ T4885] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 78.145542][ T4885] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 78.145783][ T4885] quatech2 1-1:0.51: device disconnected [ 78.159923][ T1096] tipc: Node number set to 4294246401