last executing test programs: 1m25.073555418s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000240)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@discard}, {@nouid32}, {@data_journal}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@sysvgroups}, {@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x5074}}, {@auto_da_alloc_val}]}, 0x4, 0x46b, &(0x7f0000001040)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000040)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x70002, 0x2d) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000140)=0x56, 0xda, 0x0) 1m24.602332431s ago: executing program 0 (id=8): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) write$tun(r1, &(0x7f0000000680)=ANY=[], 0x272) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1m23.488646711s ago: executing program 1 (id=17): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x5a, &(0x7f0000000840)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3, 0xf}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x6, @loopback, 0x2}]}}}}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) 1m23.190443889s ago: executing program 1 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a000100081234567852540012345652540012345608004500001400000000400000007f0000017f000001"], 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000038c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4844) r8 = msgget(0x3, 0x632) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(r8, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r6, 0x0, r5, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c00028006c001400008000005000740d1000000140000001100010000000000000000000000000a46ece1b1a96759fa8f701b056db1cc1313940dc6cc"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r9, 0xc0106440, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000180)}) 1m22.233099237s ago: executing program 1 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a000100081234567852540012345652540012345608004500001400000000400000007f0000017f000001"], 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000038c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4844) r9 = msgget(0x3, 0x632) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(r9, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r7, 0x0, r6, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x1b) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c00028006c001400008000005000740d1000000140000001100010000000000000000000000000a46ece1b1a96759fa8f701b056db1cc1313940dc6cc"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r10, 0xc0106440, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000180)}) 1m22.103332936s ago: executing program 0 (id=39): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x3, 0x1, 0x2, 0x0, @multicast2, @broadcast}, {0x17, 0x0, 0x0, @rand_addr=0x64010100, "0000000104000001"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) (async) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x16, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x80, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x40000001, 0xffffffff}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x16, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x80, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x40000001, 0xffffffff}}], 0x1, 0x0, 0x0) 1m21.799216815s ago: executing program 32 (id=39): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x3, 0x1, 0x2, 0x0, @multicast2, @broadcast}, {0x17, 0x0, 0x0, @rand_addr=0x64010100, "0000000104000001"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) (async) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x16, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x80, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x40000001, 0xffffffff}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x16, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x80, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x40000001, 0xffffffff}}], 0x1, 0x0, 0x0) 1m21.265193945s ago: executing program 1 (id=42): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40000007, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002005}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@utf8}, {@rodir}, {@shortname_winnt}, {@fat=@discard}, {@fat=@tz_utc}, {@shortname_lower}, {@shortname_win95}, {@utf8no}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'geneve1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="00912c915604ddbe64922696cc6900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100697036746e6c00003400028014000300fc02000000000000000000000000000014000200fc02000000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x64}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) recvmmsg(r7, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x140, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff"]}, 0x104) setns(0xc9, 0x0) r8 = socket(0x2a, 0x2, 0x9) bind$inet(r8, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) 1m20.972311413s ago: executing program 1 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) 1m20.592756139s ago: executing program 1 (id=45): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x8, 0x2], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m20.543621175s ago: executing program 33 (id=45): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x8, 0x2], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m4.261514877s ago: executing program 4 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) 1m4.200336974s ago: executing program 4 (id=258): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000021000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) 1m4.199871595s ago: executing program 4 (id=259): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f00000002c0)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, 0x1, 0x1, 0x0, 0x6, @broadcast}, 0xff4b) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000001400)={{[0x9, 0x800, 0x5, 0x80]}, 0x0, 0x2, 0x7, 0x0, &(0x7f00000012c0)=[{{@_ha_fsid={[0x4, 0x9]}, {0x5, 0x10, 0x4, 0x7}}, 0x2, 0x0, '\x00'}, {{@align=0xe67, {0x6b, 0xfff7, 0x85e0000, 0xc2c}}, 0xa6da, 0x0, 'tunl0\x00'}, {{@_ha_fsid={[0x0, 0x7]}, {0xf800, 0x400, 0x4, 0x5}}, 0x3, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x4b0, 0x6]}, {0x800, 0xc0, 0x5, 0x1}}, 0x9, 0x0, 'tunl0\x00'}, {{@_ha_fsid={[0x80, 0x2]}, {0x6, 0x8, 0x4, 0xa8}}, 0x1, 0x0, 'tunl0\x00'}, {{@align=0xfffffffffffffffb, {0xa9c1, 0xb, 0x5, 0xa}}, 0x200, 0x0, 'tunl0\x00'}, {{@_ha_fsid={[0x5a, 0x44fdd4de]}, {0x0, 0x46c, 0x8, 0x1}}, 0x9, 0x0, '*$+\x00'}]}) sendmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="bea77307119472f1a80264d8a2e1a77a1da5d4ed207480b2899a4b0af8bca8afe8b87740236790ba73d62f4e519ec0ab8bfeaf3825cd5df6be222d36725515b97f834fe75087ec340f343bbc7f0ca1248b23178b0404239fc4a33ff1de92e6af71f240ef4de91235e520ba0cf9493f4687962010a420ed2f23e62602cb7dffd056d5c4cae2fa2a83ce5ff548b1d92fc17cc4ce491c1798f52308ed4be85f6895292dbe53511d0894a61e74d9da0a8473ea1c4d48fea732fef85bc2ccc826c60cdfcc14b70de89f06d1", 0xc9}, {&(0x7f0000000340)="29f0ae9789e5a407c90cb3deb3", 0xd}, {&(0x7f0000000380)="7c6a4e5faf478f0de47108d4f2023f6ea40c8584d83fbfae3a34a510f0921e2119e037dbc744097eda11485b792f232fe1394eebab3a30965d491f725a337678d8523561ea76d5e638918da33fbb3d07695a078e4a47db9558affc2af3ac7ff11c17e00a98e4c6829385b69dd1ae95e5dbf0fb766bbbc269c57a363aa761b83f0bc4b5d4968512532e3deebeec8868ca439928537be8aa857be92bf04b79e35aa316df379187d697f82f91481c", 0xad}, {&(0x7f0000000440)="22dbf88736f4ebd33b8e9460a4a6ef3642af9f90dd8e84c1cc46c0a49b9bf145714133e1e037ddb7ec3f769653da7d0a5ec7cc75ba63e2c297c4c06eaa75f20cd988e8a411ccb94873c7af40ca4a9bd215a12b24528e08cca6295a63f17f5f576ec9eab31f51e3070cc4a2d3151fcbbf87695627da74f16c16e4da09bee6d7d064344f33f814167162e52ba500ebf5b807673b730102fae22c30fe3ed487b04c6c0449ba5fdf639f18de94402df61cef94318880ab0f7926d7b88a871f35492485d81bc10c1be1a6d7382a8ec99d08e5b9ba1edec2d3fe376bde3c0b3a5b20b23fd3796b7333c8afef785938926187ec49110cf229ceed0ca39ec67bc834f963c16b3540bffb645526506b499d2fea1b35a25f476e877cd8074ac2cf1c24b2915acdd3b61be292a86091e90095792ed7f5e33373d12e20f0edd25f30a34c24bd51e55ded865e83d0f2baabe77175f2f2dd305ead6ff4c6e3cc4226a4887b23ca949265f96d6fa6a1c1ca3247aedadec8ec97f7a907716fec9cb2e216adf02950327186a46fd81b236a0e409cd5860c9ddc440163eb06fcb57834fd72b229dca44f904ce07bcb0eaec1df6774ed50f1ffab1c4bd8c744516c730be1d3afd102a1746d70472fe5441e36c84aa8a9391581ff4d1c253fe62c2a0251674ebdaad656d164f54f751f1c1da9c512b38312ad561429494e52abc555522f33963ffcbc8e7b9358e788817ee937974a456de44cd96d594ffcc353811bf3f8fe002f781fe692a05d21b13301b212aeac7b0e28e86765f153e60a4a2080674d1952cad913572b71ccdef94c184be1394b438b466203f4e26d34847f8e15180e21677c77f114ced5b795a15bc7027160a2cb4b78b1667a33224388f23072e7826ecde2a02050092079d7e0e5295b2b134935f12afb8717ffe64007529bb3e82b7dea12c892e626c4e8122fa44f707c2874c7bd4dfbf2467bb49f6f8397b4d81b4358f44da860c896d06b2aab4b5d3016dff7f27a908a0bcb944abc20515b0310d1088f800a7ab54e80153955588f102df7673ab363debe0dd8f7517002484da803e73a345f1a5a5ee3a92eb54add34e670618c5beb51bf041303f601a755a1c11f6a7bb609d2b2881a5b17a4fa59531e86c79d375ed8a0b07f20f4af6b6c914fb9e6d72fdb273bdf5cc61ad2f910f9c085acb452c55c683764f5ace759bceaa7b5137884aa236e29232d30e8d5b5658458be96669326b62d1d261c1d34cf4d342fbfeffd0a0c344eea3e261a9b9103d1820447117815333c944a0601d5162e8b43ec8215e74c6d75ec6d9f8b228d6e9313ee6005bb6f1685725807f6881bb3a3ccfd42e1189084ac74220e1525597e0a63f233d31594f7c03fd7dc9997e810132c8ce71ccbc3fb926f0423d844bc6a43ada78f9c1ee6beb6b26c1c360ad0c30da0a9911758b36e0bed53c35f1ec328b51df1372c330a37a536abed8021bee815ba1f328ffd60be304b42e83b20dd1dec6ac8a39138081fceae5a4244cffcabbb6d4472748e2f3d96fff44011cd1432a4033df98485ef50842eaf72df284c3f2d56c4a970e041f0c01eec762bd1905334ed22f7c45e177dbe26e680b103c8ad63848737b54d25c7144ece5a1dd0467ef9b03ee7d86570fe8835f488469b02df1d234dde5b68a387ff1b8e971e4db65079cece33e518dc2fdba970ec2da03b9c90fa8f65511a8a45ce1a13b4cef9fa7b566e1776f44893c4a7f0fd153f880cdcedd8469353231eb5709720bc05f5c3fb5a491eb6e3a4e2c2e2d27657be8c2ce8e72dc070218245aba7c9e2116ba687f838d55ef78c099f2e23aa5cd75b14f6df6c0e113fdf8dfca10710605738de52d4c70dad9ac319092b537b08633a9723eeeff5fa49ad0ced57a0e3e7b09ad3df2aa223a8f8d6524c3c158d5164425a1abc368b3d72589fdf4d342d5d64bdbd5c33b08ee32095c1a04504c315ee1d807252739e69d9009610a0981a3d8b7b0a57e7342b21bf958eedd64634437dc58a619638e0876ec200a04f5b4f50c7825694c264cad79fa4b8d0dbebf5c875f0da375e058c4653dd0987065208d959c1e305bff44e91f6f978d0b762f53631e89e462fab155e1580017de2aee51617b0d18cdd5ff220570b68575b49bb9e21911c234e3f47cb339e2f1157af4f7101794cfac0fbd68dc52c9199ca1d00d0d899875a2ac53618400f1d8d4ba346b872fdb49201425f41e4547485bce0deedfaee21ee650154f5c96587159b9a579fe1a7f601679c9784966794caa40a0c001dbb6b96eccb4bb4bf5089c1572a6950b0830682d0d928c36aa663d68584e01ade867ba672edcfc1731ef580d19147ac510ffb9e5fbd3b42fb1109b5df4ff25c815a78b61354799e964ec5cc83d53a74544ad9bc059976d90cf3b251247e0ac12fefce96c21829734880e5a890f9d76bf346802e6b4c28840ab1f586452c39898a5d8a9169437c8646431e3fe506305054012f1c40dfe9fd367af0ff0617a36e5cb3b2b0aa01acd07cbfaeef5776d752bc6e486c9c1c0e7ab04c7a5eed001f3b9fa1b4e88aba8a3cdfdfb6d667e431b49fd19402b099ddac0c88a3e1353ba05cf7fb09917fda88f29407722af654019bf2f0b21c48af1f0ad86e484af76e10af5e6dd4dee9945c08a618ac3f726dec1d6bc44363cfc2294241c8efb8e5028741abc47ae5efdeea67a3f8a304de96e53753bcd9506e809b6a848c2720d34d99aae6e832ea8e54b785f007ff6156c336a3f7553aa25836fd7175e89a01e211269fb7ae6596f391d7e832abd3008552dc6e7fed4c024650fc4a080a212aac540fc68974b9d3a10ab50285a1c2961e5f69c50495b571c595653b1bd531f4851a4aae15de63c554206658c0361b405a55686af0b348751574d94c74348f8adb4c3e4c4297a6a67129636158b9d380b1f5da79fd83a774ddd94b803558b06d395d1b629d3d18c3aec5f7f22d0e0685901a51b80cc887e7f072fbdffdfd5fce73b1f2222c0e13005b907a52a907809ff947e01228aa6794d9bf22213438b2775d723ec5b7f21e6d2805da69525e563b5b2cbaf93e60577c284e20cfbb187d60e5bc83df2674ab3f51c27564d00ba2c3bb2bec7a52dde9998726d84ded84d2a36b62c3545e62ec276da3ebbcc2feaaf22b4b61d723be31356f1b54428f96825884666cbaf5fa94bfef16116f68fe8af3bbf30160d585121890dd4cb1138e57a2e511bceb1f7c4bc8c63f34fb89e1a1b5cac08f9ef9ef9b695fcafa724b72873fbf6417975abf4a0a8e3ee721cd5adc2083b2b83293c3c512f29aae6d134d4019adea7e64d6871410b7595f92c4549895746aad6f63cc5a58a298c32d6d1d0d0c9d3389ae6cbf7932e89d42779eacedb6454b03af91747bb01d690a2b9e24666da0188380b4dd93f24f64fc0100ea0f195b8e27dd974bf5ce0705b1e7f2f6408b77fc88b2f548f1d756b041b4d72e4273b4e65876d0d891f3ee71cd4dd218559931cbda4ae727bbd32ee32e7f669ac4451158802f18a2c6bbe997e62c85b2b68ff5b28d0d9c9da421145a82f73a329b61ef699ec076cf4b023f8a8196fc901e5d40559ee7480870a06d47623cb813f0ad651cb4b441591fa3ffc3b0a9e424e283c6f160464d5f858efa36b32d1e1f720d929bd39685a7c1915b8a88f02bee848975937941a64c96671ca89c330fd6e45f7916b083fa8bf8daa51d947b68f5491eafbe18c34ec692ae7908f08364885e6861059e7a62b5348ea6c1e9b7ab2e36c80383974646371bedda80cb62e572a517627a9180035b5170cc9be5315ab158487776f0c41baf0ea394fff8def5f87cd0a6c9b4957b7d2fe24951903fb236fcb524a7098485e3d9ed8468c4775552b84ee111de02f54fbc9592500563b7181121b74f1d38223710efc0c300398bdbed12bcafaccb6ef419cc6f34293d0fb792811e7249c534210e9dc5b5ef51a19e53d9882ccff1c432a1f7c7469550c18bb65b10287013172d808d47eb7f73a88e170ecf28c983047e95f5a94f7942c3a177f773fe55c9911966b1a76df9f1eeb6e13f7d76f34ec7b86426446959b0c26678c9703602cf004654bf19da191e5c09aa13de3e5d12b3ea2ff179747b3bf5ebc71dcd799df939acbfc3cd8ee3b611884fba7bbbb62a090c490d8788eddeb0258c5202e1df6808176c09ca2c2ea985f246cdb225e654907507b13b572c65fc0304190430782155f4af187f8cc92feba0ed410028579bf90094f6578e94629bbcc05867649292df88410bfa8e52064dc6326cb0de2db484170517f571aaf32fcb67640e4461a21460cb707db1e9006c522b476876e8199ec515fc0e9202c26af73885a56377b7188005d0dbf5c5fbea86d0c8b3915788b5dee86a242e1804255f1e0cc15c366521a9a0a94f2b46b3755f02666112becc98dd1ca63c2903f6810d1421951c5d3c573759d26ea7a612c3b213dde525ea432920ea5382ca83fd433f8d71053f85aa7138782a282da1995b68f859b9a00f23a0fa3e1b4d557e0fa59612c44df5fd5c77a07366b523bcfcb594850569b265daf401f112265fa7969fce10f68bcbe8351b232481ba2cda90ed5b6b661fa2aadad68a8255da6944745e2269f1c5986e9dd215ed6e7622f179d540d422d3f9e595ee31f90da6dfc0adb7a60ea9e3a1a3486392bb9a16ed50a0ebac9c0e2ec3dadc1f434215c20df09b37680750ef71fa6efd77b39965d20958152246199784656c07d4169821e0587c13fba88717d1c97abfc6cda82d2568a3e01371dbbb6e28a4593b750fde7869566b08e020d9abd7f3eea67ae15b2b7aa594d4e79c4e650d226ef92f201803f8679d7a0e240656390270aaad323e023d2b8c5a4e5c99cec28a29072e2279a26f653bd2606c580e69a13c07ace58847466dc586d68f3a4144c515dcc7b8cf0fd47f632d5ef63b6b82652048c00aec3f7d049f49e2ef35e8dd9b1f4b159df53568d07cb57938dfbd9be387964d50e4bd1f55fdaddde4ac7bc378a91c2275f76401a19f6193d704b261edac5b3ac33ad489469ffe73c1cecaf634be6b44f7f143534da3f0c5a03ea6e42fd1cf5cc2a18b3ddc3c25aa0878460cf46e926d0a28fa35a514d57aad7e291745f549e0102673e6a6434668586645854d91c5ddc31ad818986f487880201d103d0425acf3c1c779d5a8964f4896c2c575b904a389735eeee49c", 0xe6d}], 0x4}}], 0x1, 0x4000000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8018, 0x80, 0x0, 0x7f, {{0x22, 0x4, 0x1, 0x4, 0x88, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x23, 0x7d, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @multicast2, @remote, @empty]}, @timestamp={0x44, 0x14, 0xf4, 0x0, 0x8, [0x5, 0x800, 0x80, 0x1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0x90, [@rand_addr=0x64010100, @multicast1, @empty, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @broadcast]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x25, [@multicast2, @empty, @broadcast]}, @noop]}}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x5, r4, 0x5}, 0xc) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000001c0)) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r5) 1m4.18798817s ago: executing program 4 (id=260): syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$eJzs3W+IHGcdB/Df7N2l+XM1aWzV1tichtpA6O3lcgmJ+MIS/9Sa1Irii1AIR257F7J3e+Yu0NsKtvimKIjgGxGEin1hRTSQN5VS2xctvlFQ6h8qNQZUEKFopSCCuvLsn+vaTJro3e1o5vOByT3zzNw9z2b57szOPDMTQGmNpX+yiNGIuBAR2zuz/77CWOdH88D5uTRl0Wp98k9Ze72ZA+fneqv2fm9b+mc4YnNE7DyaxZ6Ry9tdWmmema7Xa2e789Xl+cXq0krzrtPz07O12drCwcNTRyYPTR2eWr/XOvHjrbf8/o77Lj3x/F///vVfHvpu6u9od1n/61gvYzHW/T8ZiZv66oeziHvXu7GCDHXe6rijry4bLrBDXLNWa+d30vv31ojY087/9hiKzpv30tMP/GV7/PyeovsIbJxWT/7iV1vAdavS3gfOKuMR0SlXKuPjnX34m2Nrpd5YWt73YOPcwkxnX3lHjFQePF2vTXS/K+yIkSzN72+XX5+ffMP8gYj2PvBjQ1va8+OnGvWZQX/YAW2jERcvfObUpm1vyP8fhjr5B65fKf8/e+GpZ1P5taGiewMMUsr/t1+b/1jIP5SO/EN5yT+Ul/xDeck/lJf8Q3nJP5SX/EN5yT+U13+Y/0cG0SdgMHr5v//48bj/+PFWs3v9+0Jj9vSZucUjkxPj8+dOjZ9qnF0cn200ZttX7Mxf/e/WG43F/ZNx7qHqcm1pubq00jw53zi3sHyyfV3/yVrOrQCAApy4tPnem3Y/91KWNvDv29Kekk3d5bIK17dWK4uir0EGiuHQH5SXW7VBefmOD2RXWb75Sgvq698XYDAqRXcAKMydtzr/B2Xl+D+Ul+P/UF728QHH/6F8HP+H8hq9wvO/bux7dtdERLwlIn40NHJD71lfwP+v0YiLF7/56erqc7gVFBQUVgtFf0IBG+310BfdE6AoMwfOz/WmQbX5zOygWgLyvHJ3ZxBQyn2zO3WWDK+eGxjZoHFCLz8WMRbf//Xje+eG0hTdz6ENaArI8cijEfGOvO1/1j43sKO73s7OanFzRNwSEW+LiLevse2vfiLl/4Vaf538w+Bca/5vjYjbI+K2iHhnROyKiHetse2fXkj5/8WW/jr5h3L47PNF9wDYYFe8xPCjTw22I8D/jhPGGEBpfevhonsAFOXp7xXdA6AoX3qx6B5AuT13d0RM5J3/q7TP9/eMdO8LeEP3XgBbImJrRGzrXkN4Y/cawe195wyv5uTHI8bi9h/01zn/B4PTG//XvGz8X2V1/N9QROxeQxvPvH/0i3n107tS/p94uDf+L02p/d5YQGBjvfJoxG25+c9Wx/xmkXIa8e7/so2xz116Mq/+xfvS3x35ifxDMVrfiHhv5Oe/J5Wqy/OL1aWV5l3t53jP1hYOHp46Mnlo6vBUtX2LkGrvRiE5jv351X159S9Ppvx/7aD8QzHS9n/rFfLfv///njW0cfQrXziRVz/625T/Xc++ef4rf9yUfao933suwUPTy8tn90dsyo5dXj+5ho7Cda6XkV6GUv737sn//r+z+ztp+380Ij6Y9hci4h8R8c+I+FBEfDgiPhIR97xJm1++c/ZSXv1vnkz5f/yM7T8UI+V/5irb//Tzb2toY9/eH34+r/4Du1P+x3/1u2MPDKdJ/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW39JK88x0vV47u4GFol8jAAAAAAAAlMW/AgAA///s8TV1") socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$kcm(0x10, 0x2, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket(0x1e, 0x2, 0x0) (async) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x8, 0xc9, @any, 0x0, 0x3}}}, 0xe) (async) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) 1m3.325098775s ago: executing program 4 (id=276): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = io_uring_setup(0x5aa6, &(0x7f0000000080)={0x0, 0x28ba}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x1c, 0xffffffffffffffff, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) io_uring_setup(0x5aa6, &(0x7f0000000080)={0x0, 0x28ba}) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x1c, 0xffffffffffffffff, 0x1) (async) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) (async) 1m2.903675797s ago: executing program 4 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x800, 0x7fffffff) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000001280)="fa", 0x1}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000400)={r3, &(0x7f0000000000)='\'\x00', 0x400600, &(0x7f0000000280)={@align=0x80000000, {0x33, 0x6, 0x1}}, 0x4, &(0x7f0000000300), &(0x7f00000003c0)=0x7f}) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 1m2.853922243s ago: executing program 34 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x800, 0x7fffffff) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000001280)="fa", 0x1}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000400)={r3, &(0x7f0000000000)='\'\x00', 0x400600, &(0x7f0000000280)={@align=0x80000000, {0x33, 0x6, 0x1}}, 0x4, &(0x7f0000000300), &(0x7f00000003c0)=0x7f}) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 27.873792425s ago: executing program 7 (id=817): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) 27.49533971s ago: executing program 7 (id=820): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x277}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffb78d}, @mss={0x2, 0xd}, @window={0x3, 0x2, 0x5}], 0x3) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x30001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000}, @in6={0xa, 0x4e24, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2fc}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0xfffffffd, 0x1f4, 0x0, r10}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x100, 0x40040003, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x14, 0x0, r1}}], 0x1, 0x0, 0x0) 26.588253566s ago: executing program 7 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0xb00) 26.512554191s ago: executing program 7 (id=829): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") r0 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x2600, 0xc00, 0x2, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000100)={0x4, 0xfffffffffffffffb, 0x7, 0x84}) 26.348986786s ago: executing program 7 (id=832): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.472196841s ago: executing program 7 (id=841): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x2, 0x1000}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x10, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) 25.458622522s ago: executing program 35 (id=841): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x2, 0x1000}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x10, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) 2.242110755s ago: executing program 8 (id=1204): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) setrlimit(0xb, &(0x7f0000000080)={0x3, 0x7}) (async) setrlimit(0xb, &(0x7f0000000080)={0x3, 0x7}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001080)="fef79cf9c579068dda6fdfce43253aeb76a3cb1c0d25e943e785d59ebd3c", 0x1e, 0x0, 0x1}, &(0x7f0000000300)={&(0x7f00000010c0)="e715f67edf1d25f9a6a458caf8cf7c9e4ba3d7a74ea8a0493306313e30506cdcd7ddea7cff5d710f74d7ea86479e6049b1e56227053f0f39438c607f2f7dc7a14bd55a3896f758a0fdd9689917c52bfddb289da2554e3487", 0xfffffffffffffecb, 0x1}}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd}, 0x94) 2.208226966s ago: executing program 8 (id=1205): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x81000}) setsockopt(r0, 0x105, 0x42020057, &(0x7f0000000240)="010000000000000007000d00000000000000000000ebffffff00000000000000000000000000000001000000000b717cbf633f8adf530467c04b0000000000000000000000000000000000000000000000000000200b91066b7c353a6f58bbeb38f2c634e18db26d2915d5549aa825663f097294cb6d9ab80d1e85591b10ec41469afea5e6cb93bbb3d3a80e95f3646f1880aacdf401ff83413fc276ea6df89247ae0783d5bdaea6e940b9947c15fe562e76d8c459c192d8c25b6822bad83936765136c6cb734284", 0xfffffffffffffe0a) bind(r0, &(0x7f0000000100)=@generic={0x8, "00000000000000000200"}, 0xc) 2.188862568s ago: executing program 8 (id=1206): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x16, 0xffffffffffffffff, &(0x7f0000000040)=0x5b) syz_read_part_table(0x1059, &(0x7f0000001c40)="$eJzsz7FRw0AQBdCvuxMiQQFNEdAIXSD1QCVK6YAyqIIIec5jqwTbwXszu8H+nZ3ZcFe1jC35Sq/3eUoyrddsTJuPxe+fLX/7Z8rwv3dPSZ7H4ciXZK9pb3UquUxfeyt5OZ/qhuX3o6x1S0naLb8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMd2CgAA//9cTxH8") r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x72242, 0x11f) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001b80)=ANY=[@ANYBLOB="040e05562a20050054815b3ccde3604cb6a3509d054563d45e625cdedaae5412addd1990ef33e02f1737813ea49d03fa171a18b0c75283d0608e208e83a92828c8280d1493ec4ef28fecb3e214e43885c1c8c4af9be266700c4b2ec24929e1d42e16931844d7fd2e0362299255b3ebb995fb68465c6c0da99eb8ca583acbbe61d652f541d1f5d7c548760dc82a992c8cf143fb756e0defb0ca06718348c919e0126f1eaecf5257d3b52d46605ef09071c1063902a753a1bd95"], 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newqdisc={0x1a0, 0x24, 0x400, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0xf9}}, @qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0x808}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xf, 0x3, 0x0, 0x1, 0x4, 0x2e, 0x5}}, {0xe, 0x2, [0x400, 0x2, 0x0, 0x577f, 0x1]}}]}]}, 0x1a0}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r5, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x0) memfd_create(&(0x7f0000000040)='l2tp\x00', 0x7) r12 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setownex(r12, 0xf, &(0x7f00000001c0)={0x3}) 2.051986984s ago: executing program 5 (id=1207): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r0 = userfaultfd(0x80801) r1 = socket$inet6(0xa, 0x3, 0xffffffff) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000640)=""/27, 0x1b}, {&(0x7f0000000680)=""/186, 0xba}], 0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x145}) read(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) get_robust_list(0x0, 0xffffffffffffffff, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$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") r2 = syz_open_dev$loop(&(0x7f0000000100), 0x7f, 0x101001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.976489216s ago: executing program 5 (id=1208): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="7506000000000000003d312c73686f72746e616d653d77feedcf712c726f6469726c636851636b3d72656c617865642c757466383d312c726f6469722c6e6f7247ec6d6e756d7461696c3d302c6e66733d7374616c655f77772c73686f77657865632c73686f72746e616d653d6d697865642c636865636b3d73747269616d653d77696e6e742c757466383d302c696f636861727365743d6d616363726f617469616e2c6769643d6ed654fa62f8b3e3a7d3b4d06548465eb0210b42f5ef2cf8ac8e42a023ef4313298606bf50bb8cb590c86db3db943b9da0bd0000000000000000", @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,shortname=mixed,\x00'], 0x7, 0x2a6, &(0x7f0000000240)="$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") (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2c7, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000440)=@ethtool_dump={0x40, 0x1, 0xf}}) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) (rerun: 32) 1.866795008s ago: executing program 2 (id=1210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x10, 0x4) 1.836809977s ago: executing program 2 (id=1211): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000ac0), 0xc0c81, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000c00)={0xb2b, 0x0, 0x0, 0x0, 0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xd, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, 0x0, &(0x7f00000000c0)=0x1, 0x45000004) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000300)={[{@sysvgroups}, {@grpjquota}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@grpid}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0xe, 0x5, 0x2000000000, 0x2, 0x3, 0x0, 0x7ffd}) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xa) 1.40393669s ago: executing program 8 (id=1212): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/191, &(0x7f0000000200)=0xbf) r1 = epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a008080ffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) close_range(r1, 0xffffffffffffffff, 0x100000000000000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10842, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESOCT=r4, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x28a, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008891}, 0x0) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000500)={0x18, 0x1, 0x0, {0x800}}, 0x18) 1.400008752s ago: executing program 3 (id=1214): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 1.385841021s ago: executing program 3 (id=1215): r0 = syz_io_uring_setup(0x630e, &(0x7f0000000480)={0x0, 0x40008623, 0x2, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x5f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$eventfd(r5, &(0x7f0000000340), 0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0900be65d246203600001a00dd8d0000b020c28ce976ebe13790f15978bd08000000"], 0x1c}}, 0x8c0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f00000000c0)={0xd0000002}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r3}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) setns(0xc9, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYRES8=r4, @ANYRES32=r12, @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)="6d7f", 0x2}], 0x1}, 0x815) setsockopt$sock_attach_bpf(r13, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r13, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}], 0x10}, 0x140) fcntl$lock(r8, 0x24, &(0x7f0000000200)={0x1, 0x3, 0x963, 0x3, r9}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r16, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x7, 0xf, 0xffff, 0x7, 0x3, 0x4007f, 0x10000003, 0xbf, 0x4, 0x1, 0x81, 0xb, 0x24004000, 0x6], 0x2, 0x4}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) 1.238448704s ago: executing program 8 (id=1218): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000100)=@generic={0x8, "00fffffffe0000000200"}, 0xc) 1.200846385s ago: executing program 3 (id=1219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd9f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x100, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4) 1.200384556s ago: executing program 8 (id=1220): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000500)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x0, @val={0x8c, 0x18, {0x283, "726712ea1b02", @long="0c7bd46649af1bb2c51cfa07605404f8"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}, {0x11, 0xfd, 0x0, @empty, '\x00'}}}}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x2000000000000004) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) 1.119589405s ago: executing program 3 (id=1224): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r4, 0x5411, 0xffefff1f00000000) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB='t'], 0x31) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000500000000000000800900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c0001"], 0x25c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3f7, 0x8, 0x70bd2b, 0x25dfdbfb, {0x1b, 0x1b, './proc/thread-self/fail-nth', './proc/thread-self/fail-nth'}, ["", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x40080) pwritev(r6, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}, {0x0}], 0x2, 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0xc41a, &(0x7f0000000900)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nobarrier}, {@discard}, {@usrjquota, 0x2e}, {@dioread_lock}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") chdir(&(0x7f0000000080)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000000)={0x17c04, r7, 0x15, 0x1004000003, 0x2000000000eadd, 0x9}) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000001c0), &(0x7f0000000400)={0x0, 0xfb, 0x34, 0x2, 0x8, "27760b1bd0baa243a242daaf157f9da4", "665da959049ec232f30f030236141f286817478f066f90a758af6858e2a304"}, 0x34, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffff7a4}}, './file1\x00'}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r9, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/5, 0x5, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r9, &(0x7f0000006b40)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bcb392a8d783153073078f16ad17460c46a65e168feff58b1aadd2b64de48c3b48863c0658b8ae946028244af53abf6183c405f5353157d3178f48e8e24c76342f948a0f5cc3e97f146a8de094c92d055356a39fd6bdae5850a13ae3e08c4522cbeda2f7def4f8cfd8ccfda7bcd4108fa250", @ANYRES16=r8, @ANYBLOB="bbbf2bbd7000fcdbdf25010000001000028007000180080001001c00000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x40c0810}, 0x40004) 1.030337338s ago: executing program 3 (id=1226): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r4, @ANYRES32=r3, @ANYBLOB="3d0033008000e100ffffffffffff0802110000005050505050500000000000000002014003010e05030985fc250301b6017206030303030303"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="9cbb046b5ba4000000000006000000000000006400007f299078ac1e0101ac141421"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) listen(0xffffffffffffffff, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r9, &(0x7f0000000200)="c7", 0x1) add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000640)="1871", 0x2, 0xfffffffffffffffc) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$tipc(0x1e, 0x7, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000180)={'erspan0\x00'}) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)) 1.02755986s ago: executing program 5 (id=1227): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000840)) 967.483933ms ago: executing program 5 (id=1230): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000004c0)={0x0, 0xc2, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff], [0x0, 0x2, 0x56c1, 0x401], [0x5, 0x0, 0x6]}) (async) syz_io_uring_setup(0x24, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./dev\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c7974653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73687672746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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") (async) r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, r2) (async) r3 = getpgid(r2) setpgid(0x0, r3) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000080), 0x3, 0x42f, &(0x7f00000017c0)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x2000, 0x0}, 0x10) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 920.193997ms ago: executing program 2 (id=1231): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x301000) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000140)={0x8000000, 0x0, 0x0, 0x1, 0x6}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES32=r1, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24060850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24000840) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e21, 0xc3, @empty, 0x5}}, 0x86, 0xfffd}, &(0x7f0000000700)=0x3e) socket(0xa, 0x6, 0xf7f7) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r5 = epoll_create1(0x80000) epoll_pwait(r5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) 834.56359ms ago: executing program 2 (id=1233): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x8, 0xfffffffe}) shmget(0x3, 0x3000, 0x201, &(0x7f0000ffc000/0x3000)=nil) shmget(0x3, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) capget(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0x111, 0x4a, 0x7, 0x5b, 0x6, 0x9}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000300)={0xfffffffb, 0x40, 0x1, 0xffffb243, 0x100, 0xe, 0x1, 0xfffffff9, 0x10, 0x80, 0x1, 0x80000000, &(0x7f0000000100)=[0x0, 0x800, 0x8000, 0xfff, 0x9, 0x9], 0x6, &(0x7f0000000200)="c1b1e580fd2f3fc723ce54477d92f2b9dd542bd586e2817efe7ad54cb53d2210b5befd5ebab03f8ef6c8355cdf51aaf472f7cda697e18c7f636c4ae4687448633c2c3f905ca9c04df0c60ddcd814c4feeb8754a37ac77c42d3a347e3ddfe860f3956571bcef22e79083fea8e9e0be100a3ff2758a25b9f30261521af78deff7c8c7d6d58dd9e7e1045061f1df948cef66093b89fbce373fa192dc5672ee0edccd068c504c389cf6c2305a8", 0xab}) 712.267244ms ago: executing program 2 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) syz_emit_ethernet(0x42, &(0x7f0000000300)={@multicast, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @remote, @multicast, @loopback}}}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 705.014604ms ago: executing program 2 (id=1235): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe6100000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x20004810) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) recvmmsg(r9, &(0x7f0000004b00)=[{{&(0x7f0000002240)=@generic, 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/157, 0x9d}], 0x1, &(0x7f00000023c0)=""/159, 0x9f}, 0x5}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002480)=""/200, 0xc8}, {&(0x7f0000002580)=""/171, 0xab}], 0x2, &(0x7f0000002680)=""/140, 0x8c}, 0x3}, {{&(0x7f0000002740)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000027c0)=""/224, 0xe0}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/94, 0x5e}, {&(0x7f0000003940)=""/66, 0x42}], 0x4, &(0x7f0000003a00)=""/105, 0x69}, 0x2}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/29, 0x1d}], 0x1, &(0x7f0000003b00)=""/4096, 0x1000}}], 0x4, 0x18000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_GET_FEATURES(r9, 0x8008af00, &(0x7f0000004c00)) r11 = socket(0x10, 0x803, 0x0) bind$netlink(r11, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001ffffff76020008000a00", @ANYRES32=r12, @ANYBLOB="08001b"], 0x30}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100003050300"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000000000008000500", @ANYRES32=r8, @ANYBLOB="fc5f35bfbe9f131361a3543dbe2da45c3567d96a65"], 0x44}}, 0x4000004) 674.985622ms ago: executing program 5 (id=1236): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f00000002c0)="7fe2fa8611f6c4937fe5ab22c856b896998b4980471daf7229b84dc2000000008c030b", &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x1186, &(0x7f0000003b40)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "7eec65", 0x1150, 0x21, 0xff, @private2, @mcast2, {[@dstopts={0x62, 0x4, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @ra={0x5, 0x2, 0x1}]}, @routing={0x73, 0x10, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0xfd}, @local, @mcast1, @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @dstopts={0x3b, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}, @routing={0x5e, 0x2, 0x0, 0xa, 0x0, [@private1]}, @fragment={0x2c, 0x0, 0xff, 0x0, 0x0, 0x3, 0x68}, @srh={0x3b, 0x8, 0x4, 0x4, 0x5, 0x8, 0x8, [@ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x6, "3e66b2", 0xd4, "508401"}, "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"}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x10, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/26}) r4 = dup(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) write$smackfs_ptrace(r4, &(0x7f0000000500), 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8932, &(0x7f0000000040)={'team_slave_1\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x2e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r8, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000001980)=""/4089, 0xff9}, {&(0x7f0000001880)=""/96, 0x60}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000000400)=""/117, 0x75}], 0x5}, 0x518}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x40010000, 0x0) fchmodat(r4, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 629.23107ms ago: executing program 6 (id=1237): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x300, 0x0, 0x0, 0x2}, 0x48) 492.156162ms ago: executing program 5 (id=1238): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80340, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001010000089"], 0x50) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05040000000000000000020000000900010073797a300000000044000000120a05040000000000000000020000000900010073797a30000000000b00020071756f74613013000800030000000002100004800c0001"], 0x9c}}, 0x0) 471.814683ms ago: executing program 6 (id=1239): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x1, 0xc, 0x4, 0x3, 0x200, 0x7, 0xfff}, &(0x7f0000000380)={0xfffffffffffffffd, 0x4, 0xf, 0x3ff, 0x5, 0x10000, 0x7f, 0xae9}, &(0x7f00000003c0)={0x2, 0x718, 0x5, 0x9, 0x1, 0x3ff, 0x8}, &(0x7f0000000e40)={0x77359400}, &(0x7f0000000ec0)={&(0x7f0000000e80)={[0x7fff]}, 0x8}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xfffffee2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_read_part_table(0x1079, &(0x7f0000000000)="$eJzs0MFNxDAUBNBJNskmYoEG6IAWKA2JPVABV87UQVtIHD6KE6AC2Mt7B0v2l8cjh4ta3scly745rEtVMuQhxyQvd+1o3ocflXzWkEqXLuNNMuW851Tuh/X222Oqa0lT1ZSl6ikZapM1o+r48/x4nVOSU98qXM3nvE7Jc/qxjft8d7vN1q2qDr/t5//4IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4c18BAAD//0BFJGo=") r5 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x50241) sendmsg$inet6(r5, &(0x7f0000000680)={&(0x7f0000000000)={0xa, 0x4e24, 0xc, @mcast2, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000000000029000017390000002f02020100000000fc0100"/40], 0x28}, 0x44040) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711811000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r6, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)={0x20000010}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r8, 0x8919, &(0x7f0000000000)="76657468303a300000000000000000000200") setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) 239.299925ms ago: executing program 6 (id=1240): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x10, 0x4) 172.614049ms ago: executing program 6 (id=1241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r0 = userfaultfd(0x80801) r1 = socket$inet6(0xa, 0x3, 0xffffffff) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000640)=""/27, 0x1b}, {&(0x7f0000000680)=""/186, 0xba}], 0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x145}) read(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) get_robust_list(0x0, 0xffffffffffffffff, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$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") r2 = syz_open_dev$loop(&(0x7f0000000100), 0x7f, 0x101001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 104.287376ms ago: executing program 3 (id=1242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000000c0)=0x4000005, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r3, 0x1) 58.159462ms ago: executing program 6 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) syz_open_dev$usbfs(0x0, 0xfffffbffffffffff, 0x180f81) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1244): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="056471ebe7", 0x5}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0xfd66) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) setns(0xc9, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) kernel console output (not intermixed with test programs): address 0x201b1000 [ 98.311231][ T8974] Memory failure: 0x13e18b: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311245][ T8974] Memory failure: 0x13e18b: recovery action for dirty LRU page: Recovered [ 98.311252][ T8974] Injecting memory failure for pfn 0x134f48 at process virtual address 0x201b2000 [ 98.311272][ T8974] Memory failure: 0x134f48: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311285][ T8974] Memory failure: 0x134f48: recovery action for dirty LRU page: Recovered [ 98.311368][ T8974] Injecting memory failure for pfn 0x134f49 at process virtual address 0x201b3000 [ 98.311402][ T8974] Memory failure: 0x134f49: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311416][ T8974] Memory failure: 0x134f49: recovery action for dirty LRU page: Recovered [ 98.311424][ T8974] Injecting memory failure for pfn 0x134f4a at process virtual address 0x201b4000 [ 98.311448][ T8974] Memory failure: 0x134f4a: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311462][ T8974] Memory failure: 0x134f4a: recovery action for dirty LRU page: Recovered [ 98.311469][ T8974] Injecting memory failure for pfn 0x134f4b at process virtual address 0x201b5000 [ 98.311490][ T8974] Memory failure: 0x134f4b: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311504][ T8974] Memory failure: 0x134f4b: recovery action for dirty LRU page: Recovered [ 98.311511][ T8974] Injecting memory failure for pfn 0x137550 at process virtual address 0x201b6000 [ 98.311533][ T8974] Memory failure: 0x137550: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311547][ T8974] Memory failure: 0x137550: recovery action for dirty LRU page: Recovered [ 98.311554][ T8974] Injecting memory failure for pfn 0x137551 at process virtual address 0x201b7000 [ 98.311575][ T8974] Memory failure: 0x137551: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311589][ T8974] Memory failure: 0x137551: recovery action for dirty LRU page: Recovered [ 98.311595][ T8974] Injecting memory failure for pfn 0x137552 at process virtual address 0x201b8000 [ 98.311623][ T8974] Memory failure: 0x137552: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311636][ T8974] Memory failure: 0x137552: recovery action for dirty LRU page: Recovered [ 98.311643][ T8974] Injecting memory failure for pfn 0x137553 at process virtual address 0x201b9000 [ 98.311663][ T8974] Memory failure: 0x137553: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311677][ T8974] Memory failure: 0x137553: recovery action for dirty LRU page: Recovered [ 98.311684][ T8974] Injecting memory failure for pfn 0x13754c at process virtual address 0x201ba000 [ 98.311704][ T8974] Memory failure: 0x13754c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311718][ T8974] Memory failure: 0x13754c: recovery action for dirty LRU page: Recovered [ 98.311725][ T8974] Injecting memory failure for pfn 0x13754d at process virtual address 0x201bb000 [ 98.311755][ T8974] Memory failure: 0x13754d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311769][ T8974] Memory failure: 0x13754d: recovery action for dirty LRU page: Recovered [ 98.311776][ T8974] Injecting memory failure for pfn 0x13754e at process virtual address 0x201bc000 [ 98.311796][ T8974] Memory failure: 0x13754e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311810][ T8974] Memory failure: 0x13754e: recovery action for dirty LRU page: Recovered [ 98.311817][ T8974] Injecting memory failure for pfn 0x13754f at process virtual address 0x201bd000 [ 98.311837][ T8974] Memory failure: 0x13754f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311851][ T8974] Memory failure: 0x13754f: recovery action for dirty LRU page: Recovered [ 98.311857][ T8974] Injecting memory failure for pfn 0x13c49c at process virtual address 0x201be000 [ 98.311878][ T8974] Memory failure: 0x13c49c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311891][ T8974] Memory failure: 0x13c49c: recovery action for dirty LRU page: Recovered [ 98.311898][ T8974] Injecting memory failure for pfn 0x13c49d at process virtual address 0x201bf000 [ 98.311918][ T8974] Memory failure: 0x13c49d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311932][ T8974] Memory failure: 0x13c49d: recovery action for dirty LRU page: Recovered [ 98.311939][ T8974] Injecting memory failure for pfn 0x13c49e at process virtual address 0x201c0000 [ 98.311960][ T8974] Memory failure: 0x13c49e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.311973][ T8974] Memory failure: 0x13c49e: recovery action for dirty LRU page: Recovered [ 98.311980][ T8974] Injecting memory failure for pfn 0x13c49f at process virtual address 0x201c1000 [ 98.312001][ T8974] Memory failure: 0x13c49f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312014][ T8974] Memory failure: 0x13c49f: recovery action for dirty LRU page: Recovered [ 98.312021][ T8974] Injecting memory failure for pfn 0x13c4a8 at process virtual address 0x201c2000 [ 98.312042][ T8974] Memory failure: 0x13c4a8: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312055][ T8974] Memory failure: 0x13c4a8: recovery action for dirty LRU page: Recovered [ 98.312062][ T8974] Injecting memory failure for pfn 0x13c4a9 at process virtual address 0x201c3000 [ 98.312082][ T8974] Memory failure: 0x13c4a9: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312096][ T8974] Memory failure: 0x13c4a9: recovery action for dirty LRU page: Recovered [ 98.312103][ T8974] Injecting memory failure for pfn 0x13c4aa at process virtual address 0x201c4000 [ 98.312123][ T8974] Memory failure: 0x13c4aa: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312136][ T8974] Memory failure: 0x13c4aa: recovery action for dirty LRU page: Recovered [ 98.312143][ T8974] Injecting memory failure for pfn 0x13c4ab at process virtual address 0x201c5000 [ 98.312170][ T8974] Memory failure: 0x13c4ab: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312187][ T8974] Memory failure: 0x13c4ab: recovery action for dirty LRU page: Recovered [ 98.312194][ T8974] Injecting memory failure for pfn 0x10ff8c at process virtual address 0x201c6000 [ 98.312214][ T8974] Memory failure: 0x10ff8c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312228][ T8974] Memory failure: 0x10ff8c: recovery action for dirty LRU page: Recovered [ 98.312235][ T8974] Injecting memory failure for pfn 0x10ff8d at process virtual address 0x201c7000 [ 98.312256][ T8974] Memory failure: 0x10ff8d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312270][ T8974] Memory failure: 0x10ff8d: recovery action for dirty LRU page: Recovered [ 98.312277][ T8974] Injecting memory failure for pfn 0x10ff8e at process virtual address 0x201c8000 [ 98.312297][ T8974] Memory failure: 0x10ff8e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312311][ T8974] Memory failure: 0x10ff8e: recovery action for dirty LRU page: Recovered [ 98.312318][ T8974] Injecting memory failure for pfn 0x10ff8f at process virtual address 0x201c9000 [ 98.312338][ T8974] Memory failure: 0x10ff8f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312351][ T8974] Memory failure: 0x10ff8f: recovery action for dirty LRU page: Recovered [ 98.312358][ T8974] Injecting memory failure for pfn 0x10ef44 at process virtual address 0x201ca000 [ 98.312378][ T8974] Memory failure: 0x10ef44: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312461][ T8974] Memory failure: 0x10ef44: recovery action for dirty LRU page: Recovered [ 98.312472][ T8974] Injecting memory failure for pfn 0x10ef45 at process virtual address 0x201cb000 [ 98.312499][ T8974] Memory failure: 0x10ef45: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312514][ T8974] Memory failure: 0x10ef45: recovery action for dirty LRU page: Recovered [ 98.312521][ T8974] Injecting memory failure for pfn 0x10ef46 at process virtual address 0x201cc000 [ 98.312548][ T8974] Memory failure: 0x10ef46: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312562][ T8974] Memory failure: 0x10ef46: recovery action for dirty LRU page: Recovered [ 98.312570][ T8974] Injecting memory failure for pfn 0x10ef47 at process virtual address 0x201cd000 [ 98.312593][ T8974] Memory failure: 0x10ef47: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312607][ T8974] Memory failure: 0x10ef47: recovery action for dirty LRU page: Recovered [ 98.312614][ T8974] Injecting memory failure for pfn 0x10dc54 at process virtual address 0x201ce000 [ 98.312635][ T8974] Memory failure: 0x10dc54: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312649][ T8974] Memory failure: 0x10dc54: recovery action for dirty LRU page: Recovered [ 98.312656][ T8974] Injecting memory failure for pfn 0x10dc55 at process virtual address 0x201cf000 [ 98.312677][ T8974] Memory failure: 0x10dc55: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312690][ T8974] Memory failure: 0x10dc55: recovery action for dirty LRU page: Recovered [ 98.312697][ T8974] Injecting memory failure for pfn 0x10dc56 at process virtual address 0x201d0000 [ 98.312718][ T8974] Memory failure: 0x10dc56: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.312732][ T8974] Memory failure: 0x10dc56: recovery action for dirty LRU page: Recovered [ 98.313840][ T8974] Injecting memory failure for pfn 0x10dc57 at process virtual address 0x201d1000 [ 98.313876][ T8974] Memory failure: 0x10dc57: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.313891][ T8974] Memory failure: 0x10dc57: recovery action for dirty LRU page: Recovered [ 98.313899][ T8974] Injecting memory failure for pfn 0x10ff74 at process virtual address 0x201d2000 [ 98.313924][ T8974] Memory failure: 0x10ff74: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.313938][ T8974] Memory failure: 0x10ff74: recovery action for dirty LRU page: Recovered [ 98.313945][ T8974] Injecting memory failure for pfn 0x10ff75 at process virtual address 0x201d3000 [ 98.313971][ T8974] Memory failure: 0x10ff75: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.313985][ T8974] Memory failure: 0x10ff75: recovery action for dirty LRU page: Recovered [ 98.313992][ T8974] Injecting memory failure for pfn 0x10ff76 at process virtual address 0x201d4000 [ 98.314022][ T8974] Memory failure: 0x10ff76: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314036][ T8974] Memory failure: 0x10ff76: recovery action for dirty LRU page: Recovered [ 98.314043][ T8974] Injecting memory failure for pfn 0x10ff77 at process virtual address 0x201d5000 [ 98.314072][ T8974] Memory failure: 0x10ff77: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314085][ T8974] Memory failure: 0x10ff77: recovery action for dirty LRU page: Recovered [ 98.314092][ T8974] Injecting memory failure for pfn 0x10fef4 at process virtual address 0x201d6000 [ 98.314113][ T8974] Memory failure: 0x10fef4: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314127][ T8974] Memory failure: 0x10fef4: recovery action for dirty LRU page: Recovered [ 98.314134][ T8974] Injecting memory failure for pfn 0x10fef5 at process virtual address 0x201d7000 [ 98.314163][ T8974] Memory failure: 0x10fef5: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314186][ T8974] Memory failure: 0x10fef5: recovery action for dirty LRU page: Recovered [ 98.314197][ T8974] Injecting memory failure for pfn 0x10fef6 at process virtual address 0x201d8000 [ 98.314219][ T8974] Memory failure: 0x10fef6: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314233][ T8974] Memory failure: 0x10fef6: recovery action for dirty LRU page: Recovered [ 98.314240][ T8974] Injecting memory failure for pfn 0x10fef7 at process virtual address 0x201d9000 [ 98.314260][ T8974] Memory failure: 0x10fef7: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314274][ T8974] Memory failure: 0x10fef7: recovery action for dirty LRU page: Recovered [ 98.314281][ T8974] Injecting memory failure for pfn 0x110bbc at process virtual address 0x201da000 [ 98.314301][ T8974] Memory failure: 0x110bbc: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314315][ T8974] Memory failure: 0x110bbc: recovery action for dirty LRU page: Recovered [ 98.314322][ T8974] Injecting memory failure for pfn 0x110bbd at process virtual address 0x201db000 [ 98.314342][ T8974] Memory failure: 0x110bbd: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314356][ T8974] Memory failure: 0x110bbd: recovery action for dirty LRU page: Recovered [ 98.314362][ T8974] Injecting memory failure for pfn 0x110bbe at process virtual address 0x201dc000 [ 98.314384][ T8974] Memory failure: 0x110bbe: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314398][ T8974] Memory failure: 0x110bbe: recovery action for dirty LRU page: Recovered [ 98.314405][ T8974] Injecting memory failure for pfn 0x110bbf at process virtual address 0x201dd000 [ 98.314425][ T8974] Memory failure: 0x110bbf: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314438][ T8974] Memory failure: 0x110bbf: recovery action for dirty LRU page: Recovered [ 98.314445][ T8974] Injecting memory failure for pfn 0x10f210 at process virtual address 0x201de000 [ 98.314465][ T8974] Memory failure: 0x10f210: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314479][ T8974] Memory failure: 0x10f210: recovery action for dirty LRU page: Recovered [ 98.314486][ T8974] Injecting memory failure for pfn 0x10f211 at process virtual address 0x201df000 [ 98.314506][ T8974] Memory failure: 0x10f211: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314520][ T8974] Memory failure: 0x10f211: recovery action for dirty LRU page: Recovered [ 98.314526][ T8974] Injecting memory failure for pfn 0x10f212 at process virtual address 0x201e0000 [ 98.314546][ T8974] Memory failure: 0x10f212: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314560][ T8974] Memory failure: 0x10f212: recovery action for dirty LRU page: Recovered [ 98.314567][ T8974] Injecting memory failure for pfn 0x10f213 at process virtual address 0x201e1000 [ 98.314588][ T8974] Memory failure: 0x10f213: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314602][ T8974] Memory failure: 0x10f213: recovery action for dirty LRU page: Recovered [ 98.314609][ T8974] Injecting memory failure for pfn 0x10dc6c at process virtual address 0x201e2000 [ 98.314632][ T8974] Memory failure: 0x10dc6c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314646][ T8974] Memory failure: 0x10dc6c: recovery action for dirty LRU page: Recovered [ 98.314653][ T8974] Injecting memory failure for pfn 0x10dc6d at process virtual address 0x201e3000 [ 98.314679][ T8974] Memory failure: 0x10dc6d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314693][ T8974] Memory failure: 0x10dc6d: recovery action for dirty LRU page: Recovered [ 98.314700][ T8974] Injecting memory failure for pfn 0x10dc6e at process virtual address 0x201e4000 [ 98.314723][ T8974] Memory failure: 0x10dc6e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314737][ T8974] Memory failure: 0x10dc6e: recovery action for dirty LRU page: Recovered [ 98.314744][ T8974] Injecting memory failure for pfn 0x10dc6f at process virtual address 0x201e5000 [ 98.314768][ T8974] Memory failure: 0x10dc6f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314782][ T8974] Memory failure: 0x10dc6f: recovery action for dirty LRU page: Recovered [ 98.314789][ T8974] Injecting memory failure for pfn 0x113e24 at process virtual address 0x201e6000 [ 98.314812][ T8974] Memory failure: 0x113e24: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.314973][ T8974] Memory failure: 0x113e24: recovery action for dirty LRU page: Recovered [ 98.314985][ T8974] Injecting memory failure for pfn 0x113e25 at process virtual address 0x201e7000 [ 98.315011][ T8974] Memory failure: 0x113e25: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315026][ T8974] Memory failure: 0x113e25: recovery action for dirty LRU page: Recovered [ 98.315033][ T8974] Injecting memory failure for pfn 0x113e26 at process virtual address 0x201e8000 [ 98.315055][ T8974] Memory failure: 0x113e26: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315069][ T8974] Memory failure: 0x113e26: recovery action for dirty LRU page: Recovered [ 98.315076][ T8974] Injecting memory failure for pfn 0x113e27 at process virtual address 0x201e9000 [ 98.315102][ T8974] Memory failure: 0x113e27: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315116][ T8974] Memory failure: 0x113e27: recovery action for dirty LRU page: Recovered [ 98.315123][ T8974] Injecting memory failure for pfn 0x10cb14 at process virtual address 0x201ea000 [ 98.315144][ T8974] Memory failure: 0x10cb14: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315167][ T8974] Memory failure: 0x10cb14: recovery action for dirty LRU page: Recovered [ 98.315175][ T8974] Injecting memory failure for pfn 0x10cb15 at process virtual address 0x201eb000 [ 98.315200][ T8974] Memory failure: 0x10cb15: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315214][ T8974] Memory failure: 0x10cb15: recovery action for dirty LRU page: Recovered [ 98.315221][ T8974] Injecting memory failure for pfn 0x10cb16 at process virtual address 0x201ec000 [ 98.315242][ T8974] Memory failure: 0x10cb16: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315256][ T8974] Memory failure: 0x10cb16: recovery action for dirty LRU page: Recovered [ 98.315263][ T8974] Injecting memory failure for pfn 0x10cb17 at process virtual address 0x201ed000 [ 98.315283][ T8974] Memory failure: 0x10cb17: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315297][ T8974] Memory failure: 0x10cb17: recovery action for dirty LRU page: Recovered [ 98.315304][ T8974] Injecting memory failure for pfn 0x105934 at process virtual address 0x201ee000 [ 98.315325][ T8974] Memory failure: 0x105934: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315339][ T8974] Memory failure: 0x105934: recovery action for dirty LRU page: Recovered [ 98.315346][ T8974] Injecting memory failure for pfn 0x105935 at process virtual address 0x201ef000 [ 98.315366][ T8974] Memory failure: 0x105935: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315380][ T8974] Memory failure: 0x105935: recovery action for dirty LRU page: Recovered [ 98.315387][ T8974] Injecting memory failure for pfn 0x105936 at process virtual address 0x201f0000 [ 98.315407][ T8974] Memory failure: 0x105936: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315421][ T8974] Memory failure: 0x105936: recovery action for dirty LRU page: Recovered [ 98.315428][ T8974] Injecting memory failure for pfn 0x105937 at process virtual address 0x201f1000 [ 98.315448][ T8974] Memory failure: 0x105937: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315462][ T8974] Memory failure: 0x105937: recovery action for dirty LRU page: Recovered [ 98.315469][ T8974] Injecting memory failure for pfn 0x10f90c at process virtual address 0x201f2000 [ 98.315489][ T8974] Memory failure: 0x10f90c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315503][ T8974] Memory failure: 0x10f90c: recovery action for dirty LRU page: Recovered [ 98.315509][ T8974] Injecting memory failure for pfn 0x10f90d at process virtual address 0x201f3000 [ 98.315530][ T8974] Memory failure: 0x10f90d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315543][ T8974] Memory failure: 0x10f90d: recovery action for dirty LRU page: Recovered [ 98.315550][ T8974] Injecting memory failure for pfn 0x10f90e at process virtual address 0x201f4000 [ 98.315570][ T8974] Memory failure: 0x10f90e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315584][ T8974] Memory failure: 0x10f90e: recovery action for dirty LRU page: Recovered [ 98.315591][ T8974] Injecting memory failure for pfn 0x10f90f at process virtual address 0x201f5000 [ 98.315611][ T8974] Memory failure: 0x10f90f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315625][ T8974] Memory failure: 0x10f90f: recovery action for dirty LRU page: Recovered [ 98.315632][ T8974] Injecting memory failure for pfn 0x11412c at process virtual address 0x201f6000 [ 98.315652][ T8974] Memory failure: 0x11412c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315666][ T8974] Memory failure: 0x11412c: recovery action for dirty LRU page: Recovered [ 98.315672][ T8974] Injecting memory failure for pfn 0x11412d at process virtual address 0x201f7000 [ 98.315700][ T8974] Memory failure: 0x11412d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315714][ T8974] Memory failure: 0x11412d: recovery action for dirty LRU page: Recovered [ 98.315721][ T8974] Injecting memory failure for pfn 0x11412e at process virtual address 0x201f8000 [ 98.315741][ T8974] Memory failure: 0x11412e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315755][ T8974] Memory failure: 0x11412e: recovery action for dirty LRU page: Recovered [ 98.315761][ T8974] Injecting memory failure for pfn 0x11412f at process virtual address 0x201f9000 [ 98.315782][ T8974] Memory failure: 0x11412f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315795][ T8974] Memory failure: 0x11412f: recovery action for dirty LRU page: Recovered [ 98.315802][ T8974] Injecting memory failure for pfn 0x11a1a4 at process virtual address 0x201fa000 [ 98.315822][ T8974] Memory failure: 0x11a1a4: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315836][ T8974] Memory failure: 0x11a1a4: recovery action for dirty LRU page: Recovered [ 98.315843][ T8974] Injecting memory failure for pfn 0x11a1a5 at process virtual address 0x201fb000 [ 98.315863][ T8974] Memory failure: 0x11a1a5: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315876][ T8974] Memory failure: 0x11a1a5: recovery action for dirty LRU page: Recovered [ 98.315883][ T8974] Injecting memory failure for pfn 0x11a1a6 at process virtual address 0x201fc000 [ 98.315903][ T8974] Memory failure: 0x11a1a6: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.315917][ T8974] Memory failure: 0x11a1a6: recovery action for dirty LRU page: Recovered [ 98.315924][ T8974] Injecting memory failure for pfn 0x11a1a7 at process virtual address 0x201fd000 [ 98.316022][ T8974] Memory failure: 0x11a1a7: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316039][ T8974] Memory failure: 0x11a1a7: recovery action for dirty LRU page: Recovered [ 98.316046][ T8974] Injecting memory failure for pfn 0x10c1bc at process virtual address 0x201fe000 [ 98.316068][ T8974] Memory failure: 0x10c1bc: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316083][ T8974] Memory failure: 0x10c1bc: recovery action for dirty LRU page: Recovered [ 98.316091][ T8974] Injecting memory failure for pfn 0x10c1bd at process virtual address 0x201ff000 [ 98.316113][ T8974] Memory failure: 0x10c1bd: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316127][ T8974] Memory failure: 0x10c1bd: recovery action for dirty LRU page: Recovered [ 98.316135][ T8974] Injecting memory failure for pfn 0x10c1bf at process virtual address 0x20200000 [ 98.316164][ T8974] Memory failure: 0x10c1bf: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316180][ T8974] Memory failure: 0x10c1bf: recovery action for dirty LRU page: Recovered [ 98.316188][ T8974] Injecting memory failure for pfn 0x10a750 at process virtual address 0x20201000 [ 98.316210][ T8974] Memory failure: 0x10a750: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316224][ T8974] Memory failure: 0x10a750: recovery action for dirty LRU page: Recovered [ 98.316231][ T8974] Injecting memory failure for pfn 0x10a751 at process virtual address 0x20202000 [ 98.316255][ T8974] Memory failure: 0x10a751: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316269][ T8974] Memory failure: 0x10a751: recovery action for dirty LRU page: Recovered [ 98.316276][ T8974] Injecting memory failure for pfn 0x10a752 at process virtual address 0x20203000 [ 98.316352][ T8974] Memory failure: 0x10a752: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316369][ T8974] Memory failure: 0x10a752: recovery action for dirty LRU page: Recovered [ 98.316378][ T8974] Injecting memory failure for pfn 0x10a753 at process virtual address 0x20204000 [ 98.316404][ T8974] Memory failure: 0x10a753: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316419][ T8974] Memory failure: 0x10a753: recovery action for dirty LRU page: Recovered [ 98.316426][ T8974] Injecting memory failure for pfn 0x105984 at process virtual address 0x20205000 [ 98.316449][ T8974] Memory failure: 0x105984: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316463][ T8974] Memory failure: 0x105984: recovery action for dirty LRU page: Recovered [ 98.316470][ T8974] Injecting memory failure for pfn 0x105985 at process virtual address 0x20206000 [ 98.316490][ T8974] Memory failure: 0x105985: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316504][ T8974] Memory failure: 0x105985: recovery action for dirty LRU page: Recovered [ 98.316511][ T8974] Injecting memory failure for pfn 0x105986 at process virtual address 0x20207000 [ 98.316535][ T8974] Memory failure: 0x105986: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316548][ T8974] Memory failure: 0x105986: recovery action for dirty LRU page: Recovered [ 98.316556][ T8974] Injecting memory failure for pfn 0x105987 at process virtual address 0x20208000 [ 98.316578][ T8974] Memory failure: 0x105987: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316592][ T8974] Memory failure: 0x105987: recovery action for dirty LRU page: Recovered [ 98.316599][ T8974] Injecting memory failure for pfn 0x1113ac at process virtual address 0x20209000 [ 98.316619][ T8974] Memory failure: 0x1113ac: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316633][ T8974] Memory failure: 0x1113ac: recovery action for dirty LRU page: Recovered [ 98.316640][ T8974] Injecting memory failure for pfn 0x1113ad at process virtual address 0x2020a000 [ 98.316660][ T8974] Memory failure: 0x1113ad: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316674][ T8974] Memory failure: 0x1113ad: recovery action for dirty LRU page: Recovered [ 98.316681][ T8974] Injecting memory failure for pfn 0x1113ae at process virtual address 0x2020b000 [ 98.316701][ T8974] Memory failure: 0x1113ae: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316715][ T8974] Memory failure: 0x1113ae: recovery action for dirty LRU page: Recovered [ 98.316722][ T8974] Injecting memory failure for pfn 0x1113af at process virtual address 0x2020c000 [ 98.316742][ T8974] Memory failure: 0x1113af: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316755][ T8974] Memory failure: 0x1113af: recovery action for dirty LRU page: Recovered [ 98.316762][ T8974] Injecting memory failure for pfn 0x10bb90 at process virtual address 0x2020d000 [ 98.316783][ T8974] Memory failure: 0x10bb90: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316796][ T8974] Memory failure: 0x10bb90: recovery action for dirty LRU page: Recovered [ 98.316803][ T8974] Injecting memory failure for pfn 0x10bb91 at process virtual address 0x2020e000 [ 98.316823][ T8974] Memory failure: 0x10bb91: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316837][ T8974] Memory failure: 0x10bb91: recovery action for dirty LRU page: Recovered [ 98.316844][ T8974] Injecting memory failure for pfn 0x10bb92 at process virtual address 0x2020f000 [ 98.316863][ T8974] Memory failure: 0x10bb92: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316877][ T8974] Memory failure: 0x10bb92: recovery action for dirty LRU page: Recovered [ 98.316884][ T8974] Injecting memory failure for pfn 0x10bb93 at process virtual address 0x20210000 [ 98.316904][ T8974] Memory failure: 0x10bb93: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316918][ T8974] Memory failure: 0x10bb93: recovery action for dirty LRU page: Recovered [ 98.316925][ T8974] Injecting memory failure for pfn 0x137590 at process virtual address 0x20211000 [ 98.316945][ T8974] Memory failure: 0x137590: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316958][ T8974] Memory failure: 0x137590: recovery action for dirty LRU page: Recovered [ 98.316965][ T8974] Injecting memory failure for pfn 0x137591 at process virtual address 0x20212000 [ 98.316985][ T8974] Memory failure: 0x137591: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.316999][ T8974] Memory failure: 0x137591: recovery action for dirty LRU page: Recovered [ 98.317005][ T8974] Injecting memory failure for pfn 0x137592 at process virtual address 0x20213000 [ 98.317112][ T8974] Memory failure: 0x137592: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317127][ T8974] Memory failure: 0x137592: recovery action for dirty LRU page: Recovered [ 98.317135][ T8974] Injecting memory failure for pfn 0x137593 at process virtual address 0x20214000 [ 98.317165][ T8974] Memory failure: 0x137593: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317180][ T8974] Memory failure: 0x137593: recovery action for dirty LRU page: Recovered [ 98.317187][ T8974] Injecting memory failure for pfn 0x1337f4 at process virtual address 0x20215000 [ 98.317208][ T8974] Memory failure: 0x1337f4: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317222][ T8974] Memory failure: 0x1337f4: recovery action for dirty LRU page: Recovered [ 98.317229][ T8974] Injecting memory failure for pfn 0x1337f5 at process virtual address 0x20216000 [ 98.317251][ T8974] Memory failure: 0x1337f5: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317264][ T8974] Memory failure: 0x1337f5: recovery action for dirty LRU page: Recovered [ 98.317271][ T8974] Injecting memory failure for pfn 0x1337f6 at process virtual address 0x20217000 [ 98.317292][ T8974] Memory failure: 0x1337f6: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317306][ T8974] Memory failure: 0x1337f6: recovery action for dirty LRU page: Recovered [ 98.317313][ T8974] Injecting memory failure for pfn 0x1337f7 at process virtual address 0x20218000 [ 98.317333][ T8974] Memory failure: 0x1337f7: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317347][ T8974] Memory failure: 0x1337f7: recovery action for dirty LRU page: Recovered [ 98.317354][ T8974] Injecting memory failure for pfn 0x114338 at process virtual address 0x20219000 [ 98.317374][ T8974] Memory failure: 0x114338: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317388][ T8974] Memory failure: 0x114338: recovery action for dirty LRU page: Recovered [ 98.317395][ T8974] Injecting memory failure for pfn 0x114339 at process virtual address 0x2021a000 [ 98.317416][ T8974] Memory failure: 0x114339: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317430][ T8974] Memory failure: 0x114339: recovery action for dirty LRU page: Recovered [ 98.317437][ T8974] Injecting memory failure for pfn 0x11433a at process virtual address 0x2021b000 [ 98.317457][ T8974] Memory failure: 0x11433a: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317471][ T8974] Memory failure: 0x11433a: recovery action for dirty LRU page: Recovered [ 98.317478][ T8974] Injecting memory failure for pfn 0x11433b at process virtual address 0x2021c000 [ 98.317498][ T8974] Memory failure: 0x11433b: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317512][ T8974] Memory failure: 0x11433b: recovery action for dirty LRU page: Recovered [ 98.317519][ T8974] Injecting memory failure for pfn 0x1337d8 at process virtual address 0x2021d000 [ 98.317539][ T8974] Memory failure: 0x1337d8: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317552][ T8974] Memory failure: 0x1337d8: recovery action for dirty LRU page: Recovered [ 98.317559][ T8974] Injecting memory failure for pfn 0x1337d9 at process virtual address 0x2021e000 [ 98.317579][ T8974] Memory failure: 0x1337d9: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317592][ T8974] Memory failure: 0x1337d9: recovery action for dirty LRU page: Recovered [ 98.317599][ T8974] Injecting memory failure for pfn 0x1337da at process virtual address 0x2021f000 [ 98.317619][ T8974] Memory failure: 0x1337da: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317633][ T8974] Memory failure: 0x1337da: recovery action for dirty LRU page: Recovered [ 98.317640][ T8974] Injecting memory failure for pfn 0x1337db at process virtual address 0x20220000 [ 98.317660][ T8974] Memory failure: 0x1337db: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317674][ T8974] Memory failure: 0x1337db: recovery action for dirty LRU page: Recovered [ 98.317680][ T8974] Injecting memory failure for pfn 0x13e7d4 at process virtual address 0x20221000 [ 98.317701][ T8974] Memory failure: 0x13e7d4: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317715][ T8974] Memory failure: 0x13e7d4: recovery action for dirty LRU page: Recovered [ 98.317722][ T8974] Injecting memory failure for pfn 0x13e7d5 at process virtual address 0x20222000 [ 98.317742][ T8974] Memory failure: 0x13e7d5: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317755][ T8974] Memory failure: 0x13e7d5: recovery action for dirty LRU page: Recovered [ 98.317762][ T8974] Injecting memory failure for pfn 0x13e7d6 at process virtual address 0x20223000 [ 98.317782][ T8974] Memory failure: 0x13e7d6: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317796][ T8974] Memory failure: 0x13e7d6: recovery action for dirty LRU page: Recovered [ 98.317803][ T8974] Injecting memory failure for pfn 0x13e7d7 at process virtual address 0x20224000 [ 98.317823][ T8974] Memory failure: 0x13e7d7: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317836][ T8974] Memory failure: 0x13e7d7: recovery action for dirty LRU page: Recovered [ 98.317843][ T8974] Injecting memory failure for pfn 0x137460 at process virtual address 0x20225000 [ 98.317863][ T8974] Memory failure: 0x137460: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317877][ T8974] Memory failure: 0x137460: recovery action for dirty LRU page: Recovered [ 98.317884][ T8974] Injecting memory failure for pfn 0x137461 at process virtual address 0x20226000 [ 98.317904][ T8974] Memory failure: 0x137461: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317917][ T8974] Memory failure: 0x137461: recovery action for dirty LRU page: Recovered [ 98.317924][ T8974] Injecting memory failure for pfn 0x137462 at process virtual address 0x20227000 [ 98.317945][ T8974] Memory failure: 0x137462: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317958][ T8974] Memory failure: 0x137462: recovery action for dirty LRU page: Recovered [ 98.317965][ T8974] Injecting memory failure for pfn 0x137463 at process virtual address 0x20228000 [ 98.317985][ T8974] Memory failure: 0x137463: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.317999][ T8974] Memory failure: 0x137463: recovery action for dirty LRU page: Recovered [ 98.318006][ T8974] Injecting memory failure for pfn 0x1138a0 at process virtual address 0x20229000 [ 98.318026][ T8974] Memory failure: 0x1138a0: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318039][ T8974] Memory failure: 0x1138a0: recovery action for dirty LRU page: Recovered [ 98.318046][ T8974] Injecting memory failure for pfn 0x1138a1 at process virtual address 0x2022a000 [ 98.318066][ T8974] Memory failure: 0x1138a1: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318080][ T8974] Memory failure: 0x1138a1: recovery action for dirty LRU page: Recovered [ 98.318087][ T8974] Injecting memory failure for pfn 0x1138a2 at process virtual address 0x2022b000 [ 98.318107][ T8974] Memory failure: 0x1138a2: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318214][ T8974] Memory failure: 0x1138a2: recovery action for dirty LRU page: Recovered [ 98.318227][ T8974] Injecting memory failure for pfn 0x1138a3 at process virtual address 0x2022c000 [ 98.318249][ T8974] Memory failure: 0x1138a3: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318264][ T8974] Memory failure: 0x1138a3: recovery action for dirty LRU page: Recovered [ 98.318271][ T8974] Injecting memory failure for pfn 0x119a44 at process virtual address 0x2022d000 [ 98.318295][ T8974] Memory failure: 0x119a44: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318309][ T8974] Memory failure: 0x119a44: recovery action for dirty LRU page: Recovered [ 98.318316][ T8974] Injecting memory failure for pfn 0x119a45 at process virtual address 0x2022e000 [ 98.318342][ T8974] Memory failure: 0x119a45: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318356][ T8974] Memory failure: 0x119a45: recovery action for dirty LRU page: Recovered [ 98.318363][ T8974] Injecting memory failure for pfn 0x119a46 at process virtual address 0x2022f000 [ 98.318388][ T8974] Memory failure: 0x119a46: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318402][ T8974] Memory failure: 0x119a46: recovery action for dirty LRU page: Recovered [ 98.318409][ T8974] Injecting memory failure for pfn 0x119a47 at process virtual address 0x20230000 [ 98.318430][ T8974] Memory failure: 0x119a47: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318444][ T8974] Memory failure: 0x119a47: recovery action for dirty LRU page: Recovered [ 98.318451][ T8974] Injecting memory failure for pfn 0x115804 at process virtual address 0x20231000 [ 98.318471][ T8974] Memory failure: 0x115804: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318485][ T8974] Memory failure: 0x115804: recovery action for dirty LRU page: Recovered [ 98.318492][ T8974] Injecting memory failure for pfn 0x115805 at process virtual address 0x20232000 [ 98.318512][ T8974] Memory failure: 0x115805: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318526][ T8974] Memory failure: 0x115805: recovery action for dirty LRU page: Recovered [ 98.318533][ T8974] Injecting memory failure for pfn 0x115806 at process virtual address 0x20233000 [ 98.318559][ T8974] Memory failure: 0x115806: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318573][ T8974] Memory failure: 0x115806: recovery action for dirty LRU page: Recovered [ 98.318580][ T8974] Injecting memory failure for pfn 0x115807 at process virtual address 0x20234000 [ 98.318600][ T8974] Memory failure: 0x115807: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318614][ T8974] Memory failure: 0x115807: recovery action for dirty LRU page: Recovered [ 98.318621][ T8974] Injecting memory failure for pfn 0x1157fc at process virtual address 0x20235000 [ 98.318641][ T8974] Memory failure: 0x1157fc: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318655][ T8974] Memory failure: 0x1157fc: recovery action for dirty LRU page: Recovered [ 98.318662][ T8974] Injecting memory failure for pfn 0x1157fd at process virtual address 0x20236000 [ 98.318682][ T8974] Memory failure: 0x1157fd: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318696][ T8974] Memory failure: 0x1157fd: recovery action for dirty LRU page: Recovered [ 98.318703][ T8974] Injecting memory failure for pfn 0x1157fe at process virtual address 0x20237000 [ 98.318722][ T8974] Memory failure: 0x1157fe: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318736][ T8974] Memory failure: 0x1157fe: recovery action for dirty LRU page: Recovered [ 98.318743][ T8974] Injecting memory failure for pfn 0x1157ff at process virtual address 0x20238000 [ 98.318764][ T8974] Memory failure: 0x1157ff: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318777][ T8974] Memory failure: 0x1157ff: recovery action for dirty LRU page: Recovered [ 98.318784][ T8974] Injecting memory failure for pfn 0x117208 at process virtual address 0x20239000 [ 98.318806][ T8974] Memory failure: 0x117208: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318821][ T8974] Memory failure: 0x117208: recovery action for dirty LRU page: Recovered [ 98.318827][ T8974] Injecting memory failure for pfn 0x117209 at process virtual address 0x2023a000 [ 98.318849][ T8974] Memory failure: 0x117209: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318864][ T8974] Memory failure: 0x117209: recovery action for dirty LRU page: Recovered [ 98.318870][ T8974] Injecting memory failure for pfn 0x11720a at process virtual address 0x2023b000 [ 98.318890][ T8974] Memory failure: 0x11720a: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318904][ T8974] Memory failure: 0x11720a: recovery action for dirty LRU page: Recovered [ 98.318911][ T8974] Injecting memory failure for pfn 0x11720b at process virtual address 0x2023c000 [ 98.318931][ T8974] Memory failure: 0x11720b: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318944][ T8974] Memory failure: 0x11720b: recovery action for dirty LRU page: Recovered [ 98.318951][ T8974] Injecting memory failure for pfn 0x115684 at process virtual address 0x2023d000 [ 98.318971][ T8974] Memory failure: 0x115684: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.318985][ T8974] Memory failure: 0x115684: recovery action for dirty LRU page: Recovered [ 98.318992][ T8974] Injecting memory failure for pfn 0x115685 at process virtual address 0x2023e000 [ 98.319012][ T8974] Memory failure: 0x115685: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319025][ T8974] Memory failure: 0x115685: recovery action for dirty LRU page: Recovered [ 98.319032][ T8974] Injecting memory failure for pfn 0x115686 at process virtual address 0x2023f000 [ 98.319052][ T8974] Memory failure: 0x115686: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319066][ T8974] Memory failure: 0x115686: recovery action for dirty LRU page: Recovered [ 98.319073][ T8974] Injecting memory failure for pfn 0x115687 at process virtual address 0x20240000 [ 98.319093][ T8974] Memory failure: 0x115687: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319106][ T8974] Memory failure: 0x115687: recovery action for dirty LRU page: Recovered [ 98.319113][ T8974] Injecting memory failure for pfn 0x10a24c at process virtual address 0x20241000 [ 98.319137][ T8974] Memory failure: 0x10a24c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319151][ T8974] Memory failure: 0x10a24c: recovery action for dirty LRU page: Recovered [ 98.319163][ T8974] Injecting memory failure for pfn 0x10a24d at process virtual address 0x20242000 [ 98.319187][ T8974] Memory failure: 0x10a24d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319275][ T8974] Memory failure: 0x10a24d: recovery action for dirty LRU page: Recovered [ 98.319289][ T8974] Injecting memory failure for pfn 0x10a24e at process virtual address 0x20243000 [ 98.319313][ T8974] Memory failure: 0x10a24e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319328][ T8974] Memory failure: 0x10a24e: recovery action for dirty LRU page: Recovered [ 98.319335][ T8974] Injecting memory failure for pfn 0x10a24f at process virtual address 0x20244000 [ 98.319356][ T8974] Memory failure: 0x10a24f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319372][ T8974] Memory failure: 0x10a24f: recovery action for dirty LRU page: Recovered [ 98.319379][ T8974] Injecting memory failure for pfn 0x119748 at process virtual address 0x20245000 [ 98.319399][ T8974] Memory failure: 0x119748: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319413][ T8974] Memory failure: 0x119748: recovery action for dirty LRU page: Recovered [ 98.319421][ T8974] Injecting memory failure for pfn 0x119749 at process virtual address 0x20246000 [ 98.319444][ T8974] Memory failure: 0x119749: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319458][ T8974] Memory failure: 0x119749: recovery action for dirty LRU page: Recovered [ 98.319465][ T8974] Injecting memory failure for pfn 0x11974a at process virtual address 0x20247000 [ 98.319485][ T8974] Memory failure: 0x11974a: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319500][ T8974] Memory failure: 0x11974a: recovery action for dirty LRU page: Recovered [ 98.319506][ T8974] Injecting memory failure for pfn 0x11974b at process virtual address 0x20248000 [ 98.319527][ T8974] Memory failure: 0x11974b: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319540][ T8974] Memory failure: 0x11974b: recovery action for dirty LRU page: Recovered [ 98.319547][ T8974] Injecting memory failure for pfn 0x1198dc at process virtual address 0x20249000 [ 98.319568][ T8974] Memory failure: 0x1198dc: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319581][ T8974] Memory failure: 0x1198dc: recovery action for dirty LRU page: Recovered [ 98.319588][ T8974] Injecting memory failure for pfn 0x1198dd at process virtual address 0x2024a000 [ 98.319608][ T8974] Memory failure: 0x1198dd: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319622][ T8974] Memory failure: 0x1198dd: recovery action for dirty LRU page: Recovered [ 98.319629][ T8974] Injecting memory failure for pfn 0x1198de at process virtual address 0x2024b000 [ 98.319649][ T8974] Memory failure: 0x1198de: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319663][ T8974] Memory failure: 0x1198de: recovery action for dirty LRU page: Recovered [ 98.319669][ T8974] Injecting memory failure for pfn 0x1198df at process virtual address 0x2024c000 [ 98.319689][ T8974] Memory failure: 0x1198df: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319703][ T8974] Memory failure: 0x1198df: recovery action for dirty LRU page: Recovered [ 98.319710][ T8974] Injecting memory failure for pfn 0x1358f8 at process virtual address 0x2024d000 [ 98.319730][ T8974] Memory failure: 0x1358f8: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319744][ T8974] Memory failure: 0x1358f8: recovery action for dirty LRU page: Recovered [ 98.319751][ T8974] Injecting memory failure for pfn 0x1358f9 at process virtual address 0x2024e000 [ 98.319771][ T8974] Memory failure: 0x1358f9: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319785][ T8974] Memory failure: 0x1358f9: recovery action for dirty LRU page: Recovered [ 98.319792][ T8974] Injecting memory failure for pfn 0x1358fa at process virtual address 0x2024f000 [ 98.319812][ T8974] Memory failure: 0x1358fa: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319825][ T8974] Memory failure: 0x1358fa: recovery action for dirty LRU page: Recovered [ 98.319832][ T8974] Injecting memory failure for pfn 0x1358fb at process virtual address 0x20250000 [ 98.319852][ T8974] Memory failure: 0x1358fb: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319866][ T8974] Memory failure: 0x1358fb: recovery action for dirty LRU page: Recovered [ 98.319873][ T8974] Injecting memory failure for pfn 0x13e4cc at process virtual address 0x20251000 [ 98.319893][ T8974] Memory failure: 0x13e4cc: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319907][ T8974] Memory failure: 0x13e4cc: recovery action for dirty LRU page: Recovered [ 98.319914][ T8974] Injecting memory failure for pfn 0x13e4cd at process virtual address 0x20252000 [ 98.319934][ T8974] Memory failure: 0x13e4cd: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319948][ T8974] Memory failure: 0x13e4cd: recovery action for dirty LRU page: Recovered [ 98.319955][ T8974] Injecting memory failure for pfn 0x13e4ce at process virtual address 0x20253000 [ 98.319975][ T8974] Memory failure: 0x13e4ce: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.319988][ T8974] Memory failure: 0x13e4ce: recovery action for dirty LRU page: Recovered [ 98.319995][ T8974] Injecting memory failure for pfn 0x13e4cf at process virtual address 0x20254000 [ 98.320015][ T8974] Memory failure: 0x13e4cf: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320029][ T8974] Memory failure: 0x13e4cf: recovery action for dirty LRU page: Recovered [ 98.320036][ T8974] Injecting memory failure for pfn 0x11567c at process virtual address 0x20255000 [ 98.320056][ T8974] Memory failure: 0x11567c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320070][ T8974] Memory failure: 0x11567c: recovery action for dirty LRU page: Recovered [ 98.320076][ T8974] Injecting memory failure for pfn 0x11567d at process virtual address 0x20256000 [ 98.320096][ T8974] Memory failure: 0x11567d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320110][ T8974] Memory failure: 0x11567d: recovery action for dirty LRU page: Recovered [ 98.320117][ T8974] Injecting memory failure for pfn 0x11567e at process virtual address 0x20257000 [ 98.320137][ T8974] Memory failure: 0x11567e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320151][ T8974] Memory failure: 0x11567e: recovery action for dirty LRU page: Recovered [ 98.320164][ T8974] Injecting memory failure for pfn 0x11567f at process virtual address 0x20258000 [ 98.320191][ T8974] Memory failure: 0x11567f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320204][ T8974] Memory failure: 0x11567f: recovery action for dirty LRU page: Recovered [ 98.320211][ T8974] Injecting memory failure for pfn 0x1078e0 at process virtual address 0x20259000 [ 98.320232][ T8974] Memory failure: 0x1078e0: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320245][ T8974] Memory failure: 0x1078e0: recovery action for dirty LRU page: Recovered [ 98.320252][ T8974] Injecting memory failure for pfn 0x1078e1 at process virtual address 0x2025a000 [ 98.320356][ T8974] Memory failure: 0x1078e1: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320376][ T8974] Memory failure: 0x1078e1: recovery action for dirty LRU page: Recovered [ 98.320385][ T8974] Injecting memory failure for pfn 0x1078e2 at process virtual address 0x2025b000 [ 98.320410][ T8974] Memory failure: 0x1078e2: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320424][ T8974] Memory failure: 0x1078e2: recovery action for dirty LRU page: Recovered [ 98.320432][ T8974] Injecting memory failure for pfn 0x1078e3 at process virtual address 0x2025c000 [ 98.320453][ T8974] Memory failure: 0x1078e3: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320467][ T8974] Memory failure: 0x1078e3: recovery action for dirty LRU page: Recovered [ 98.320474][ T8974] Injecting memory failure for pfn 0x11a410 at process virtual address 0x2025d000 [ 98.320495][ T8974] Memory failure: 0x11a410: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320509][ T8974] Memory failure: 0x11a410: recovery action for dirty LRU page: Recovered [ 98.320516][ T8974] Injecting memory failure for pfn 0x11a411 at process virtual address 0x2025e000 [ 98.320537][ T8974] Memory failure: 0x11a411: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320551][ T8974] Memory failure: 0x11a411: recovery action for dirty LRU page: Recovered [ 98.320558][ T8974] Injecting memory failure for pfn 0x11a412 at process virtual address 0x2025f000 [ 98.320578][ T8974] Memory failure: 0x11a412: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320592][ T8974] Memory failure: 0x11a412: recovery action for dirty LRU page: Recovered [ 98.320599][ T8974] Injecting memory failure for pfn 0x11a413 at process virtual address 0x20260000 [ 98.320619][ T8974] Memory failure: 0x11a413: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320633][ T8974] Memory failure: 0x11a413: recovery action for dirty LRU page: Recovered [ 98.320640][ T8974] Injecting memory failure for pfn 0x13c614 at process virtual address 0x20261000 [ 98.320662][ T8974] Memory failure: 0x13c614: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320676][ T8974] Memory failure: 0x13c614: recovery action for dirty LRU page: Recovered [ 98.320683][ T8974] Injecting memory failure for pfn 0x13c615 at process virtual address 0x20262000 [ 98.320703][ T8974] Memory failure: 0x13c615: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320717][ T8974] Memory failure: 0x13c615: recovery action for dirty LRU page: Recovered [ 98.320723][ T8974] Injecting memory failure for pfn 0x13c616 at process virtual address 0x20263000 [ 98.320743][ T8974] Memory failure: 0x13c616: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320758][ T8974] Memory failure: 0x13c616: recovery action for dirty LRU page: Recovered [ 98.320765][ T8974] Injecting memory failure for pfn 0x13c617 at process virtual address 0x20264000 [ 98.320785][ T8974] Memory failure: 0x13c617: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320798][ T8974] Memory failure: 0x13c617: recovery action for dirty LRU page: Recovered [ 98.320805][ T8974] Injecting memory failure for pfn 0x133650 at process virtual address 0x20265000 [ 98.320826][ T8974] Memory failure: 0x133650: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320839][ T8974] Memory failure: 0x133650: recovery action for dirty LRU page: Recovered [ 98.320846][ T8974] Injecting memory failure for pfn 0x133651 at process virtual address 0x20266000 [ 98.320866][ T8974] Memory failure: 0x133651: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320880][ T8974] Memory failure: 0x133651: recovery action for dirty LRU page: Recovered [ 98.320887][ T8974] Injecting memory failure for pfn 0x133652 at process virtual address 0x20267000 [ 98.320907][ T8974] Memory failure: 0x133652: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320921][ T8974] Memory failure: 0x133652: recovery action for dirty LRU page: Recovered [ 98.320928][ T8974] Injecting memory failure for pfn 0x133653 at process virtual address 0x20268000 [ 98.320948][ T8974] Memory failure: 0x133653: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.320962][ T8974] Memory failure: 0x133653: recovery action for dirty LRU page: Recovered [ 98.320969][ T8974] Injecting memory failure for pfn 0x158730 at process virtual address 0x20269000 [ 98.320989][ T8974] Memory failure: 0x158730: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321002][ T8974] Memory failure: 0x158730: recovery action for dirty LRU page: Recovered [ 98.321009][ T8974] Injecting memory failure for pfn 0x158731 at process virtual address 0x2026a000 [ 98.321029][ T8974] Memory failure: 0x158731: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321043][ T8974] Memory failure: 0x158731: recovery action for dirty LRU page: Recovered [ 98.321049][ T8974] Injecting memory failure for pfn 0x158732 at process virtual address 0x2026b000 [ 98.321070][ T8974] Memory failure: 0x158732: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321083][ T8974] Memory failure: 0x158732: recovery action for dirty LRU page: Recovered [ 98.321090][ T8974] Injecting memory failure for pfn 0x158733 at process virtual address 0x2026c000 [ 98.321110][ T8974] Memory failure: 0x158733: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321124][ T8974] Memory failure: 0x158733: recovery action for dirty LRU page: Recovered [ 98.321131][ T8974] Injecting memory failure for pfn 0x133e74 at process virtual address 0x2026d000 [ 98.321151][ T8974] Memory failure: 0x133e74: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321171][ T8974] Memory failure: 0x133e74: recovery action for dirty LRU page: Recovered [ 98.321180][ T8974] Injecting memory failure for pfn 0x133e75 at process virtual address 0x2026e000 [ 98.321204][ T8974] Memory failure: 0x133e75: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321219][ T8974] Memory failure: 0x133e75: recovery action for dirty LRU page: Recovered [ 98.321226][ T8974] Injecting memory failure for pfn 0x133e76 at process virtual address 0x2026f000 [ 98.321254][ T8974] Memory failure: 0x133e76: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321268][ T8974] Memory failure: 0x133e76: recovery action for dirty LRU page: Recovered [ 98.321275][ T8974] Injecting memory failure for pfn 0x133e77 at process virtual address 0x20270000 [ 98.321295][ T8974] Memory failure: 0x133e77: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321308][ T8974] Memory failure: 0x133e77: recovery action for dirty LRU page: Recovered [ 98.321315][ T8974] Injecting memory failure for pfn 0x154e80 at process virtual address 0x20271000 [ 98.321336][ T8974] Memory failure: 0x154e80: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321350][ T8974] Memory failure: 0x154e80: recovery action for dirty LRU page: Recovered [ 98.321356][ T8974] Injecting memory failure for pfn 0x154e81 at process virtual address 0x20272000 [ 98.321457][ T8974] Memory failure: 0x154e81: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321473][ T8974] Memory failure: 0x154e81: recovery action for dirty LRU page: Recovered [ 98.321481][ T8974] Injecting memory failure for pfn 0x154e82 at process virtual address 0x20273000 [ 98.321504][ T8974] Memory failure: 0x154e82: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321519][ T8974] Memory failure: 0x154e82: recovery action for dirty LRU page: Recovered [ 98.321526][ T8974] Injecting memory failure for pfn 0x154e83 at process virtual address 0x20274000 [ 98.321547][ T8974] Memory failure: 0x154e83: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321561][ T8974] Memory failure: 0x154e83: recovery action for dirty LRU page: Recovered [ 98.321568][ T8974] Injecting memory failure for pfn 0x154c80 at process virtual address 0x20275000 [ 98.321590][ T8974] Memory failure: 0x154c80: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321604][ T8974] Memory failure: 0x154c80: recovery action for dirty LRU page: Recovered [ 98.321611][ T8974] Injecting memory failure for pfn 0x154c81 at process virtual address 0x20276000 [ 98.321632][ T8974] Memory failure: 0x154c81: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321646][ T8974] Memory failure: 0x154c81: recovery action for dirty LRU page: Recovered [ 98.321653][ T8974] Injecting memory failure for pfn 0x154c82 at process virtual address 0x20277000 [ 98.321673][ T8974] Memory failure: 0x154c82: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321688][ T8974] Memory failure: 0x154c82: recovery action for dirty LRU page: Recovered [ 98.321695][ T8974] Injecting memory failure for pfn 0x154c83 at process virtual address 0x20278000 [ 98.321718][ T8974] Memory failure: 0x154c83: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321732][ T8974] Memory failure: 0x154c83: recovery action for dirty LRU page: Recovered [ 98.321739][ T8974] Injecting memory failure for pfn 0x154a80 at process virtual address 0x20279000 [ 98.321760][ T8974] Memory failure: 0x154a80: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321774][ T8974] Memory failure: 0x154a80: recovery action for dirty LRU page: Recovered [ 98.321781][ T8974] Injecting memory failure for pfn 0x154a81 at process virtual address 0x2027a000 [ 98.321808][ T8974] Memory failure: 0x154a81: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321822][ T8974] Memory failure: 0x154a81: recovery action for dirty LRU page: Recovered [ 98.321828][ T8974] Injecting memory failure for pfn 0x154a82 at process virtual address 0x2027b000 [ 98.321849][ T8974] Memory failure: 0x154a82: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321863][ T8974] Memory failure: 0x154a82: recovery action for dirty LRU page: Recovered [ 98.321870][ T8974] Injecting memory failure for pfn 0x154a83 at process virtual address 0x2027c000 [ 98.321890][ T8974] Memory failure: 0x154a83: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321904][ T8974] Memory failure: 0x154a83: recovery action for dirty LRU page: Recovered [ 98.321911][ T8974] Injecting memory failure for pfn 0x154880 at process virtual address 0x2027d000 [ 98.321932][ T8974] Memory failure: 0x154880: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321945][ T8974] Memory failure: 0x154880: recovery action for dirty LRU page: Recovered [ 98.321952][ T8974] Injecting memory failure for pfn 0x154881 at process virtual address 0x2027e000 [ 98.321973][ T8974] Memory failure: 0x154881: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.321987][ T8974] Memory failure: 0x154881: recovery action for dirty LRU page: Recovered [ 98.321993][ T8974] Injecting memory failure for pfn 0x154882 at process virtual address 0x2027f000 [ 98.322014][ T8974] Memory failure: 0x154882: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322028][ T8974] Memory failure: 0x154882: recovery action for dirty LRU page: Recovered [ 98.322035][ T8974] Injecting memory failure for pfn 0x154883 at process virtual address 0x20280000 [ 98.322056][ T8974] Memory failure: 0x154883: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322069][ T8974] Memory failure: 0x154883: recovery action for dirty LRU page: Recovered [ 98.322076][ T8974] Injecting memory failure for pfn 0x114450 at process virtual address 0x20281000 [ 98.322098][ T8974] Memory failure: 0x114450: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322112][ T8974] Memory failure: 0x114450: recovery action for dirty LRU page: Recovered [ 98.322118][ T8974] Injecting memory failure for pfn 0x114451 at process virtual address 0x20282000 [ 98.322138][ T8974] Memory failure: 0x114451: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322152][ T8974] Memory failure: 0x114451: recovery action for dirty LRU page: Recovered [ 98.322164][ T8974] Injecting memory failure for pfn 0x114452 at process virtual address 0x20283000 [ 98.322190][ T8974] Memory failure: 0x114452: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322205][ T8974] Memory failure: 0x114452: recovery action for dirty LRU page: Recovered [ 98.322212][ T8974] Injecting memory failure for pfn 0x114453 at process virtual address 0x20284000 [ 98.322232][ T8974] Memory failure: 0x114453: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322245][ T8974] Memory failure: 0x114453: recovery action for dirty LRU page: Recovered [ 98.322252][ T8974] Injecting memory failure for pfn 0x114d9c at process virtual address 0x20285000 [ 98.322272][ T8974] Memory failure: 0x114d9c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322286][ T8974] Memory failure: 0x114d9c: recovery action for dirty LRU page: Recovered [ 98.322293][ T8974] Injecting memory failure for pfn 0x114d9d at process virtual address 0x20286000 [ 98.322313][ T8974] Memory failure: 0x114d9d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322326][ T8974] Memory failure: 0x114d9d: recovery action for dirty LRU page: Recovered [ 98.322333][ T8974] Injecting memory failure for pfn 0x114d9e at process virtual address 0x20287000 [ 98.322353][ T8974] Memory failure: 0x114d9e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322367][ T8974] Memory failure: 0x114d9e: recovery action for dirty LRU page: Recovered [ 98.322374][ T8974] Injecting memory failure for pfn 0x114d9f at process virtual address 0x20288000 [ 98.322394][ T8974] Memory failure: 0x114d9f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322408][ T8974] Memory failure: 0x114d9f: recovery action for dirty LRU page: Recovered [ 98.322415][ T8974] Injecting memory failure for pfn 0x115514 at process virtual address 0x20289000 [ 98.322435][ T8974] Memory failure: 0x115514: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322527][ T8974] Memory failure: 0x115514: recovery action for dirty LRU page: Recovered [ 98.322539][ T8974] Injecting memory failure for pfn 0x115515 at process virtual address 0x2028a000 [ 98.322565][ T8974] Memory failure: 0x115515: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322579][ T8974] Memory failure: 0x115515: recovery action for dirty LRU page: Recovered [ 98.322587][ T8974] Injecting memory failure for pfn 0x115516 at process virtual address 0x2028b000 [ 98.322608][ T8974] Memory failure: 0x115516: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322622][ T8974] Memory failure: 0x115516: recovery action for dirty LRU page: Recovered [ 98.322629][ T8974] Injecting memory failure for pfn 0x115517 at process virtual address 0x2028c000 [ 98.322651][ T8974] Memory failure: 0x115517: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322665][ T8974] Memory failure: 0x115517: recovery action for dirty LRU page: Recovered [ 98.322672][ T8974] Injecting memory failure for pfn 0x11a11c at process virtual address 0x2028d000 [ 98.322693][ T8974] Memory failure: 0x11a11c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.322707][ T8974] Memory failure: 0x11a11c: recovery action for dirty LRU page: Recovered [ 98.322714][ T8974] Injecting memory failure for pfn 0x11a11d at process virtual address 0x2028e000 [ 98.330274][ T8974] Memory failure: 0x11a11d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330302][ T8974] Memory failure: 0x11a11d: recovery action for dirty LRU page: Recovered [ 98.330312][ T8974] Injecting memory failure for pfn 0x11a11e at process virtual address 0x2028f000 [ 98.330398][ T8974] Memory failure: 0x11a11e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330414][ T8974] Memory failure: 0x11a11e: recovery action for dirty LRU page: Recovered [ 98.330421][ T8974] Injecting memory failure for pfn 0x11a11f at process virtual address 0x20290000 [ 98.330450][ T8974] Memory failure: 0x11a11f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330465][ T8974] Memory failure: 0x11a11f: recovery action for dirty LRU page: Recovered [ 98.330473][ T8974] Injecting memory failure for pfn 0x105a6c at process virtual address 0x20291000 [ 98.330501][ T8974] Memory failure: 0x105a6c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330516][ T8974] Memory failure: 0x105a6c: recovery action for dirty LRU page: Recovered [ 98.330523][ T8974] Injecting memory failure for pfn 0x105a6d at process virtual address 0x20292000 [ 98.330551][ T8974] Memory failure: 0x105a6d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330565][ T8974] Memory failure: 0x105a6d: recovery action for dirty LRU page: Recovered [ 98.330572][ T8974] Injecting memory failure for pfn 0x105a6e at process virtual address 0x20293000 [ 98.330597][ T8974] Memory failure: 0x105a6e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330611][ T8974] Memory failure: 0x105a6e: recovery action for dirty LRU page: Recovered [ 98.330618][ T8974] Injecting memory failure for pfn 0x105a6f at process virtual address 0x20294000 [ 98.330644][ T8974] Memory failure: 0x105a6f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330658][ T8974] Memory failure: 0x105a6f: recovery action for dirty LRU page: Recovered [ 98.330665][ T8974] Injecting memory failure for pfn 0x10b714 at process virtual address 0x20295000 [ 98.330687][ T8974] Memory failure: 0x10b714: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330700][ T8974] Memory failure: 0x10b714: recovery action for dirty LRU page: Recovered [ 98.330707][ T8974] Injecting memory failure for pfn 0x10b715 at process virtual address 0x20296000 [ 98.330728][ T8974] Memory failure: 0x10b715: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330742][ T8974] Memory failure: 0x10b715: recovery action for dirty LRU page: Recovered [ 98.330748][ T8974] Injecting memory failure for pfn 0x10b716 at process virtual address 0x20297000 [ 98.330769][ T8974] Memory failure: 0x10b716: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330783][ T8974] Memory failure: 0x10b716: recovery action for dirty LRU page: Recovered [ 98.330790][ T8974] Injecting memory failure for pfn 0x10b717 at process virtual address 0x20298000 [ 98.330811][ T8974] Memory failure: 0x10b717: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330824][ T8974] Memory failure: 0x10b717: recovery action for dirty LRU page: Recovered [ 98.330831][ T8974] Injecting memory failure for pfn 0x106bc0 at process virtual address 0x20299000 [ 98.330852][ T8974] Memory failure: 0x106bc0: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330866][ T8974] Memory failure: 0x106bc0: recovery action for dirty LRU page: Recovered [ 98.330872][ T8974] Injecting memory failure for pfn 0x106bc1 at process virtual address 0x2029a000 [ 98.330892][ T8974] Memory failure: 0x106bc1: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.330906][ T8974] Memory failure: 0x106bc1: recovery action for dirty LRU page: Recovered [ 98.330913][ T8974] Injecting memory failure for pfn 0x106bc2 at process virtual address 0x2029b000 [ 98.334255][ T8974] Memory failure: 0x106bc2: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.334290][ T8974] Memory failure: 0x106bc2: recovery action for dirty LRU page: Recovered ** 8 printk messages dropped ** [ 98.334493][ T8974] Memory failure: 0x119711: recovery action for dirty LRU page: Recovered ** 3 printk messages dropped ** [ 98.334546][ T8974] Injecting memory failure for pfn 0x119713 at process virtual address 0x202a0000 [ 98.334570][ T8974] Memory failure: 0x119713: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.334584][ T8974] Memory failure: 0x119713: recovery action for dirty LRU page: Recovered [ 98.334591][ T8974] Injecting memory failure for pfn 0x135b8c at process virtual address 0x202a1000 [ 98.335850][ T8974] Memory failure: 0x135b8c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.335867][ T8974] Memory failure: 0x135b8c: recovery action for dirty LRU page: Recovered [ 98.335876][ T8974] Injecting memory failure for pfn 0x135b8d at process virtual address 0x202a2000 [ 98.335902][ T8974] Memory failure: 0x135b8d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.335920][ T8974] Memory failure: 0x135b8d: recovery action for dirty LRU page: Recovered [ 98.335928][ T8974] Injecting memory failure for pfn 0x135b8e at process virtual address 0x202a3000 [ 98.335956][ T8974] Memory failure: 0x135b8e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.335972][ T8974] Memory failure: 0x135b8e: recovery action for dirty LRU page: Recovered [ 98.335979][ T8974] Injecting memory failure for pfn 0x135b8f at process virtual address 0x202a4000 [ 98.336002][ T8974] Memory failure: 0x135b8f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.336016][ T8974] Memory failure: 0x135b8f: recovery action for dirty LRU page: Recovered [ 98.336024][ T8974] Injecting memory failure for pfn 0x10c1b4 at process virtual address 0x202a5000 [ 98.336051][ T8974] Memory failure: 0x10c1b4: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption ** 21 printk messages dropped ** [ 98.336389][ T8974] Memory failure: 0x110f17: recovery action for dirty LRU page: Recovered ** 13 printk messages dropped ** [ 98.336581][ T8974] Memory failure: 0x13c7d0: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.336596][ T8974] Memory failure: 0x13c7d0: recovery action for dirty LRU page: Recovered [ 98.336603][ T8974] Injecting memory failure for pfn 0x13c7d1 at process virtual address 0x202b2000 [ 98.336623][ T8974] Memory failure: 0x13c7d1: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.336636][ T8974] Memory failure: 0x13c7d1: recovery action for dirty LRU page: Recovered [ 98.336643][ T8974] Injecting memory failure for pfn 0x13c7d2 at process virtual address 0x202b3000 [ 98.336663][ T8974] Memory failure: 0x13c7d2: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.336677][ T8974] Memory failure: 0x13c7d2: recovery action for dirty LRU page: Recovered [ 98.336684][ T8974] Injecting memory failure for pfn 0x13c7d3 at process virtual address 0x202b4000 [ 98.336704][ T8974] Memory failure: 0x13c7d3: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.336718][ T8974] Memory failure: 0x13c7d3: recovery action for dirty LRU page: Recovered [ 98.336724][ T8974] Injecting memory failure for pfn 0x13c7c8 at process virtual address 0x202b5000 [ 98.336745][ T8974] Memory failure: 0x13c7c8: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption ** 7 printk messages dropped ** [ 98.338122][ T8974] Injecting memory failure for pfn 0x13c7cb at process virtual address 0x202b8000 [ 98.338147][ T8974] Memory failure: 0x13c7cb: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.338169][ T8974] Memory failure: 0x13c7cb: recovery action for dirty LRU page: Recovered [ 98.338177][ T8974] Injecting memory failure for pfn 0x135344 at process virtual address 0x202b9000 [ 98.338202][ T8974] Memory failure: 0x135344: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption ** 4 printk messages dropped ** [ 98.338277][ T8974] Injecting memory failure for pfn 0x135346 at process virtual address 0x202bb000 ** 1 printk messages dropped ** [ 98.338313][ T8974] Memory failure: 0x135346: recovery action for dirty LRU page: Recovered [ 98.338320][ T8974] Injecting memory failure for pfn 0x135347 at process virtual address 0x202bc000 ** 2 printk messages dropped ** [ 98.338362][ T8974] Injecting memory failure for pfn 0x13c750 at process virtual address 0x202bd000 ** 3 printk messages dropped ** [ 98.338428][ T8974] Memory failure: 0x13c751: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption ** 32 printk messages dropped ** [ 98.338879][ T8974] Memory failure: 0x10c728: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.338893][ T8974] Memory failure: 0x10c728: recovery action for dirty LRU page: Recovered ** 41 printk messages dropped ** [ 98.341214][ T8974] Memory failure: 0x15853e: recovery action for dirty LRU page: Recovered [ 98.341221][ T8974] Injecting memory failure for pfn 0x15853f at process virtual address 0x202d8000 ** 65 printk messages dropped ** [ 98.349246][ T8974] Memory failure: 0x1031a0: recovery action for dirty LRU page: Recovered ** 8 printk messages dropped ** [ 98.349384][ T8974] Memory failure: 0x1031a3: recovery action for dirty LRU page: Recovered [ 98.349391][ T8974] Injecting memory failure for pfn 0x119b8c at process virtual address 0x202f1000 ** 11 printk messages dropped ** [ 98.349558][ T8974] Injecting memory failure for pfn 0x13b76c at process virtual address 0x202f5000 [ 98.349579][ T8974] Memory failure: 0x13b76c: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.349592][ T8974] Memory failure: 0x13b76c: recovery action for dirty LRU page: Recovered [ 98.349599][ T8974] Injecting memory failure for pfn 0x13b76d at process virtual address 0x202f6000 [ 98.349622][ T8974] Memory failure: 0x13b76d: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.349637][ T8974] Memory failure: 0x13b76d: recovery action for dirty LRU page: Recovered [ 98.349644][ T8974] Injecting memory failure for pfn 0x13b76e at process virtual address 0x202f7000 [ 98.352402][ T8974] Memory failure: 0x13b76e: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352425][ T8974] Memory failure: 0x13b76e: recovery action for dirty LRU page: Recovered [ 98.352438][ T8974] Injecting memory failure for pfn 0x13b76f at process virtual address 0x202f8000 [ 98.352468][ T8974] Memory failure: 0x13b76f: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352485][ T8974] Memory failure: 0x13b76f: recovery action for dirty LRU page: Recovered [ 98.352494][ T8974] Injecting memory failure for pfn 0x117964 at process virtual address 0x202f9000 [ 98.352518][ T8974] Memory failure: 0x117964: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352534][ T8974] Memory failure: 0x117964: recovery action for dirty LRU page: Recovered [ 98.352543][ T8974] Injecting memory failure for pfn 0x117965 at process virtual address 0x202fa000 [ 98.352568][ T8974] Memory failure: 0x117965: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352584][ T8974] Memory failure: 0x117965: recovery action for dirty LRU page: Recovered [ 98.352591][ T8974] Injecting memory failure for pfn 0x117966 at process virtual address 0x202fb000 [ 98.352612][ T8974] Memory failure: 0x117966: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352627][ T8974] Memory failure: 0x117966: recovery action for dirty LRU page: Recovered [ 98.352634][ T8974] Injecting memory failure for pfn 0x117967 at process virtual address 0x202fc000 [ 98.352655][ T8974] Memory failure: 0x117967: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352670][ T8974] Memory failure: 0x117967: recovery action for dirty LRU page: Recovered [ 98.352677][ T8974] Injecting memory failure for pfn 0x110904 at process virtual address 0x202fd000 [ 98.352704][ T8974] Memory failure: 0x110904: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.352718][ T8974] Memory failure: 0x110904: recovery action for dirty LRU page: Recovered [ 98.352726][ T8974] Injecting memory failure for pfn 0x110905 at process virtual address 0x202fe000 [ 98.354372][ T8974] Memory failure: 0x110905: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.354394][ T8974] Memory failure: 0x110905: recovery action for dirty LRU page: Recovered [ 98.354403][ T8974] Injecting memory failure for pfn 0x110906 at process virtual address 0x202ff000 [ 98.354431][ T8974] Memory failure: 0x110906: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.354446][ T8974] Memory failure: 0x110906: recovery action for dirty LRU page: Recovered [ 98.354454][ T8974] Injecting memory failure for pfn 0x110907 at process virtual address 0x20300000 [ 98.354478][ T8974] Memory failure: 0x110907: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.354494][ T8974] Memory failure: 0x110907: recovery action for dirty LRU page: Recovered [ 98.354502][ T8974] Injecting memory failure for pfn 0x10f268 at process virtual address 0x20301000 [ 98.354532][ T8974] Memory failure: 0x10f268: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.354547][ T8974] Memory failure: 0x10f268: recovery action for dirty LRU page: Recovered [ 98.354555][ T8974] Injecting memory failure for pfn 0x10f269 at process virtual address 0x20302000 [ 98.354581][ T8974] Memory failure: 0x10f269: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.354596][ T8974] Memory failure: 0x10f269: recovery action for dirty LRU page: Recovered [ 98.354603][ T8974] Injecting memory failure for pfn 0x10f26a at process virtual address 0x20303000 [ 98.354627][ T8974] Memory failure: 0x10f26a: Sending SIGBUS to syz.3.1070:8974 due to hardware memory corruption [ 98.354640][ T8974] Memory failure: 0x10f26a: recovery action for dirty LRU page: Recovered [ 98.354657][ T8974] Injecting memory failure for pfn 0x2191df at process virtual address 0x20304000 [ 98.354666][ T8974] Memory failure: 0x2191df: unhandlable page. [ 98.354672][ T8974] Memory failure: 0x2191df: recovery action for reserved kernel page: Ignored [ 98.468745][ T8986] netlink: 'syz.6.1071': attribute type 10 has an invalid length. [ 98.468765][ T8986] ipvlan0: entered allmulticast mode [ 98.468775][ T8986] veth0_vlan: entered allmulticast mode [ 98.471688][ T8986] team0: Device ipvlan0 failed to register rx_handler [ 98.538458][ T8991] FAULT_INJECTION: forcing a failure. [ 98.538458][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 98.538475][ T8991] CPU: 0 UID: 0 PID: 8991 Comm: syz.3.1075 Tainted: G L syzkaller #0 PREEMPT [ 98.538487][ T8991] Tainted: [L]=SOFTLOCKUP [ 98.538491][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.538502][ T8991] Call trace: [ 98.538505][ T8991] show_stack+0x2c/0x3c (C) [ 98.538521][ T8991] __dump_stack+0x30/0x40 [ 98.538532][ T8991] dump_stack_lvl+0xd8/0x12c [ 98.538542][ T8991] dump_stack+0x1c/0x28 [ 98.538551][ T8991] should_fail_ex+0x418/0x58c [ 98.538563][ T8991] should_failslab+0xc4/0x120 [ 98.538575][ T8991] __kmalloc_noprof+0x108/0x6c8 [ 98.538583][ T8991] tomoyo_realpath_from_path+0xbc/0x4dc [ 98.538595][ T8991] tomoyo_check_open_permission+0x1c4/0x394 [ 98.538603][ T8991] tomoyo_file_open+0x78/0xcc [ 98.538612][ T8991] security_file_open+0xbc/0x258 [ 98.538622][ T8991] do_dentry_open+0x2a8/0xfbc [ 98.538633][ T8991] vfs_open+0x44/0x2dc [ 98.538642][ T8991] path_openat+0x1084/0x18f0 [ 98.538651][ T8991] do_file_open+0x1c8/0x2e8 [ 98.538659][ T8991] do_sys_openat2+0x114/0x1e8 [ 98.538668][ T8991] do_sys_open+0xb0/0xe0 [ 98.538677][ T8991] __arm64_sys_openat+0xa8/0xc4 [ 98.538686][ T8991] invoke_syscall+0x98/0x244 [ 98.538697][ T8991] el0_svc_common+0xec/0x23c [ 98.538706][ T8991] do_el0_svc+0x4c/0x5c [ 98.538715][ T8991] el0_svc+0x60/0x1d8 [ 98.538726][ T8991] el0t_64_sync_handler+0x44/0x104 [ 98.538735][ T8991] el0t_64_sync+0x198/0x19c [ 98.538744][ T8991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.545761][ T8990] loop8: detected capacity change from 0 to 512 [ 98.549630][ T8990] EXT4-fs: Ignoring removed i_version option [ 98.576871][ T8990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.581166][ T8990] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters [ 98.581496][ T8990] EXT4-fs (loop8): Remounting filesystem read-only [ 98.626808][ T8166] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.630664][ T240] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.630687][ T240] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.916621][ T9006] loop5: detected capacity change from 0 to 256 [ 98.978479][ T9008] loop5: detected capacity change from 0 to 512 [ 98.980120][ T9008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.987837][ T9008] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 98.987850][ T9008] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 98.987946][ T9008] EXT4-fs (loop5): orphan cleanup on readonly fs [ 98.990238][ T9008] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1080: bg 0: block 15: invalid block bitmap [ 98.990259][ T9008] loop5: lost filesystem error report for type 5 error -117 [ 98.990362][ T9008] EXT4-fs (loop5): Remounting filesystem read-only [ 98.990482][ T9008] EXT4-fs (loop5): 1 truncate cleaned up [ 98.991085][ T9008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.360992][ T8980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.361632][ T8980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.361743][ T8980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.361842][ T8980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.361939][ T8980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.443794][ T9001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.443911][ T9001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.444008][ T9001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.444104][ T9001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.444203][ T9001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.851224][ T5007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.563437][ T9079] loop5: detected capacity change from 0 to 512 [ 100.566075][ T9079] EXT4-fs: Ignoring removed oldalloc option [ 100.580383][ T9081] __nla_validate_parse: 3 callbacks suppressed [ 100.580392][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 100.589348][ T9079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.627203][ T9081] team1: entered allmulticast mode [ 100.627387][ T9081] 8021q: adding VLAN 0 to HW filter on device team1 [ 100.652591][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.652954][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.716291][ T9089] loop8: detected capacity change from 0 to 512 [ 100.737261][ T9089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.756518][ T9089] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 100.756532][ T9089] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 100.756622][ T9089] EXT4-fs (loop8): orphan cleanup on readonly fs [ 100.768347][ T9089] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.1100: bg 0: block 15: invalid block bitmap [ 100.768370][ T9089] loop8: lost filesystem error report for type 5 error -117 [ 100.769226][ T9089] EXT4-fs (loop8): Remounting filesystem read-only [ 100.769393][ T9089] EXT4-fs (loop8): 1 truncate cleaned up [ 100.793248][ T9089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.339030][ T5007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.465057][ T4709] Bluetooth: hci0: command 0x041b tx timeout [ 101.465093][ T4709] Bluetooth: hci1: command 0x041b tx timeout [ 101.465118][ T4709] Bluetooth: hci2: command 0x040f tx timeout [ 101.465140][ T4709] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.465159][ T4709] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.542766][ C1] net_ratelimit: 256 callbacks suppressed [ 101.764325][ T8166] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.126919][ T9166] netlink: 'syz.8.1113': attribute type 5 has an invalid length. [ 102.187627][ T9169] binder: 9168:9169 Acquire 1 refcount change on invalid ref 3 ret -22 [ 102.225596][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 102.279665][ T9173] 9p: Bad value for 'rfdno' [ 102.286713][ T9173] loop6: detected capacity change from 0 to 256 [ 102.425851][ T9183] loop6: detected capacity change from 0 to 4096 [ 102.438997][ T9183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.461814][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.499850][ T9187] loop6: detected capacity change from 0 to 512 [ 102.500904][ T9187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.504601][ T9187] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 102.504616][ T9187] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 102.504704][ T9187] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.505111][ T9187] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1120: bg 0: block 15: invalid block bitmap [ 102.505130][ T9187] loop6: lost filesystem error report for type 5 error -117 [ 102.505214][ T9187] EXT4-fs (loop6): Remounting filesystem read-only [ 102.505316][ T9187] EXT4-fs (loop6): 1 truncate cleaned up [ 102.505763][ T9187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.840118][ T4713] Bluetooth: hci4: unexpected subevent 0x37 length: 25 > 13 [ 102.904356][ T9201] binder: 9200:9201 Acquire 1 refcount change on invalid ref 3 ret -22 [ 102.981404][ T9203] loop5: detected capacity change from 0 to 256 [ 103.076789][ T9208] FAULT_INJECTION: forcing a failure. [ 103.076789][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 103.076802][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.8.1128 Tainted: G L syzkaller #0 PREEMPT [ 103.076813][ T9208] Tainted: [L]=SOFTLOCKUP [ 103.076816][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.076826][ T9208] Call trace: [ 103.076829][ T9208] show_stack+0x2c/0x3c (C) [ 103.076845][ T9208] __dump_stack+0x30/0x40 [ 103.076856][ T9208] dump_stack_lvl+0xd8/0x12c [ 103.076865][ T9208] dump_stack+0x1c/0x28 [ 103.076874][ T9208] should_fail_ex+0x418/0x58c [ 103.076886][ T9208] should_failslab+0xc4/0x120 [ 103.076896][ T9208] __kmalloc_cache_noprof+0x94/0x5fc [ 103.076904][ T9208] br_vlan_init+0x5c/0x1ac [ 103.076912][ T9208] br_dev_init+0x7c/0x400 [ 103.076921][ T9208] register_netdevice+0x4d4/0x14c0 [ 103.076932][ T9208] br_dev_newlink+0x70/0x140 [ 103.076940][ T9208] rtnl_newlink_create+0x294/0x6b8 [ 103.076949][ T9208] rtnl_newlink+0xfe4/0x138c [ 103.076956][ T9208] rtnetlink_rcv_msg+0x66c/0x9bc [ 103.076964][ T9208] netlink_rcv_skb+0x238/0x414 [ 103.076973][ T9208] rtnetlink_rcv+0x28/0x38 [ 103.076980][ T9208] netlink_unicast+0x600/0x7f8 [ 103.076988][ T9208] netlink_sendmsg+0x648/0x948 [ 103.076997][ T9208] __sock_sendmsg+0xc8/0x17c [ 103.077005][ T9208] ____sys_sendmsg+0x3d0/0x6c8 [ 103.077014][ T9208] ___sys_sendmsg+0x198/0x224 [ 103.077022][ T9208] __sys_sendmsg+0x158/0x204 [ 103.077031][ T9208] __arm64_sys_sendmsg+0x88/0x9c [ 103.077040][ T9208] invoke_syscall+0x98/0x244 [ 103.077050][ T9208] el0_svc_common+0xec/0x23c [ 103.077059][ T9208] do_el0_svc+0x4c/0x5c [ 103.077068][ T9208] el0_svc+0x60/0x1d8 [ 103.077078][ T9208] el0t_64_sync_handler+0x44/0x104 [ 103.077087][ T9208] el0t_64_sync+0x198/0x19c [ 103.320140][ T9220] netlink: 'syz.8.1132': attribute type 1 has an invalid length. [ 103.365709][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.369692][ T9218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.370159][ T9218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.393777][ T9218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.396227][ T9218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.396410][ T9218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.408574][ T9220] bond2: entered promiscuous mode [ 103.408777][ T9220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.418173][ T9218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1131'. [ 103.429194][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 103.546412][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1133'. [ 103.657222][ T9220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.658995][ T9220] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 103.659008][ T9220] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 103.663221][ T9220] bond2: (slave gre1): making interface the new active one [ 103.663231][ T9220] gre1: entered promiscuous mode [ 103.665146][ T9220] bond2: (slave gre1): Enslaving as an active interface with an up link [ 104.112969][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 104.166244][ T9253] FAULT_INJECTION: forcing a failure. [ 104.166244][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 104.166257][ T9253] CPU: 1 UID: 0 PID: 9253 Comm: syz.8.1140 Tainted: G L syzkaller #0 PREEMPT [ 104.166268][ T9253] Tainted: [L]=SOFTLOCKUP [ 104.166271][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.166282][ T9253] Call trace: [ 104.166284][ T9253] show_stack+0x2c/0x3c (C) [ 104.166303][ T9253] __dump_stack+0x30/0x40 [ 104.166314][ T9253] dump_stack_lvl+0xd8/0x12c [ 104.166323][ T9253] dump_stack+0x1c/0x28 [ 104.166332][ T9253] should_fail_ex+0x418/0x58c [ 104.166343][ T9253] should_failslab+0xc4/0x120 [ 104.166354][ T9253] kmem_cache_alloc_node_noprof+0x98/0x604 [ 104.166362][ T9253] __alloc_skb+0x1f0/0x610 [ 104.166371][ T9253] hci_cmd_sync_alloc+0x4c/0x380 [ 104.166380][ T9253] __hci_cmd_sync_sk+0x184/0xa54 [ 104.166388][ T9253] __hci_cmd_sync_status_sk+0x5c/0x170 [ 104.166396][ T9253] hci_suspend_sync+0x23c/0xa34 [ 104.166405][ T9253] hci_suspend_dev+0x214/0x444 [ 104.166415][ T9253] hci_suspend_notifier+0xe4/0x2b0 [ 104.166424][ T9253] notifier_call_chain+0x1a4/0x4cc [ 104.166434][ T9253] notifier_call_chain_robust+0x54/0xc4 [ 104.166443][ T9253] blocking_notifier_call_chain_robust+0x74/0xa8 [ 104.166452][ T9253] pm_notifier_call_chain_robust+0x34/0x60 [ 104.166463][ T9253] snapshot_open+0x17c/0x270 [ 104.166470][ T9253] misc_open+0x2dc/0x338 [ 104.166481][ T9253] chrdev_open+0x398/0x3e8 [ 104.166490][ T9253] do_dentry_open+0x5c4/0xfbc [ 104.166500][ T9253] vfs_open+0x44/0x2dc [ 104.166508][ T9253] path_openat+0x1084/0x18f0 [ 104.166517][ T9253] do_file_open+0x1c8/0x2e8 [ 104.166525][ T9253] do_sys_openat2+0x114/0x1e8 [ 104.166534][ T9253] do_sys_open+0xb0/0xe0 [ 104.166543][ T9253] __arm64_sys_openat+0xa8/0xc4 [ 104.166553][ T9253] invoke_syscall+0x98/0x244 [ 104.166563][ T9253] el0_svc_common+0xec/0x23c [ 104.166575][ T9253] do_el0_svc+0x4c/0x5c [ 104.166584][ T9253] el0_svc+0x60/0x1d8 [ 104.166594][ T9253] el0t_64_sync_handler+0x44/0x104 [ 104.166604][ T9253] el0t_64_sync+0x198/0x19c [ 104.170418][ T9253] Bluetooth: hci3: no memory for command (opcode 0x0c1a) [ 104.170439][ T9253] Bluetooth: hci3: Opcode 0x0c1a failed: -12 [ 104.170561][ T9253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.170673][ T9253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.170768][ T9253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.170868][ T9253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.325628][ T9266] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1145'. [ 104.325642][ T9266] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1145'. [ 104.325654][ T9266] netlink: 30 bytes leftover after parsing attributes in process `syz.8.1145'. [ 104.348966][ T9260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.349128][ T9260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.349250][ T9260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.349359][ T9260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.349463][ T9260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.635212][ T1119] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.697803][ T9292] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 104.706828][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 104.707151][ T9294] Bluetooth: MGMT ver 1.23 [ 104.712913][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.714833][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.714907][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.714978][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.715066][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.715137][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.715213][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.715283][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.715352][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.715426][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.717592][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.717664][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.717736][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.717809][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.717879][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.717948][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718017][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718086][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718156][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718234][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718302][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718371][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718440][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718513][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718583][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718653][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718721][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718790][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718860][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718929][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.718999][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719068][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719137][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719212][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719281][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719350][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719534][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719620][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719691][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719760][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719829][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719898][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.719967][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720036][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720104][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720179][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720250][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720320][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720389][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720458][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720527][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720607][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720677][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720745][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.720814][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.725818][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.725940][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.726318][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730092][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730173][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730244][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730313][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730384][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730452][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.730521][ T4709] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 104.737409][ T4709] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 105.064530][ T9306] Bluetooth: hci3: no memory for command (opcode 0x0c1a) [ 105.064542][ T9306] Bluetooth: hci3: Opcode 0x0c1a failed: -12 [ 105.078371][ T9306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.078516][ T9306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.078625][ T9306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.078867][ T9306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.243961][ T9321] loop8: detected capacity change from 0 to 512 [ 105.345941][ T9323] loop5: detected capacity change from 0 to 128 [ 105.353947][ T9323] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.574916][ T9329] tipc: Enabling of bearer rejected, failed to enable media [ 105.681319][ T9339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.681453][ T9339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.681558][ T9339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.681779][ T9339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.681887][ T9339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.701999][ T9341] syzkaller1: entered promiscuous mode [ 105.702010][ T9341] syzkaller1: entered allmulticast mode [ 105.710422][ T9339] __nla_validate_parse: 1 callbacks suppressed [ 105.710433][ T9339] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1168'. [ 105.719852][ T9341] loop3: detected capacity change from 0 to 1024 [ 105.720268][ T9341] EXT4-fs: Ignoring removed bh option [ 105.720284][ T9341] ext4: Unknown parameter 'hash' [ 105.731706][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'. [ 105.839496][ T9353] FAULT_INJECTION: forcing a failure. [ 105.839496][ T9353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.839514][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.6.1172 Tainted: G L syzkaller #0 PREEMPT [ 105.839527][ T9353] Tainted: [L]=SOFTLOCKUP [ 105.839530][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.839541][ T9353] Call trace: [ 105.839544][ T9353] show_stack+0x2c/0x3c (C) [ 105.839560][ T9353] __dump_stack+0x30/0x40 [ 105.839571][ T9353] dump_stack_lvl+0xd8/0x12c [ 105.839580][ T9353] dump_stack+0x1c/0x28 [ 105.839589][ T9353] should_fail_ex+0x418/0x58c [ 105.839600][ T9353] should_fail+0x14/0x24 [ 105.839610][ T9353] should_fail_usercopy+0x20/0x30 [ 105.839620][ T9353] _inline_copy_from_user+0x3c/0x174 [ 105.839629][ T9353] bpf_test_init+0xd8/0x154 [ 105.839635][ T9353] bpf_prog_test_run_xdp+0x408/0xe0c [ 105.839642][ T9353] bpf_prog_test_run+0x1e0/0x250 [ 105.839651][ T9353] __sys_bpf+0x6bc/0x82c [ 105.839659][ T9353] __arm64_sys_bpf+0xd0/0xec [ 105.839667][ T9353] invoke_syscall+0x98/0x244 [ 105.839680][ T9353] el0_svc_common+0xec/0x23c [ 105.839690][ T9353] do_el0_svc+0x4c/0x5c [ 105.839700][ T9353] el0_svc+0x60/0x1d8 [ 105.839710][ T9353] el0t_64_sync_handler+0x44/0x104 [ 105.839720][ T9353] el0t_64_sync+0x198/0x19c [ 105.874720][ T5007] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.912887][ T9357] tmpfs: Unknown parameter 'mp´ýt�Fc' [ 105.957048][ T9361] tmpfs: Unknown parameter 'mp´ýt�Fc' [ 106.059301][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 106.175645][ T9372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.175734][ T9372] Bluetooth: hci4: no memory for command (opcode 0x0c1a) [ 106.175744][ T9372] Bluetooth: hci4: Opcode 0x0c1a failed: -12 [ 106.175844][ T9372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.175934][ T9372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.176024][ T9372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.197910][ T9377] FAULT_INJECTION: forcing a failure. [ 106.197910][ T9377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.197928][ T9377] CPU: 1 UID: 0 PID: 9377 Comm: syz.5.1181 Tainted: G L syzkaller #0 PREEMPT [ 106.197940][ T9377] Tainted: [L]=SOFTLOCKUP [ 106.197944][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.197957][ T9377] Call trace: [ 106.197960][ T9377] show_stack+0x2c/0x3c (C) [ 106.197979][ T9377] __dump_stack+0x30/0x40 [ 106.197992][ T9377] dump_stack_lvl+0xd8/0x12c [ 106.198003][ T9377] dump_stack+0x1c/0x28 [ 106.198014][ T9377] should_fail_ex+0x418/0x58c [ 106.198027][ T9377] should_fail+0x14/0x24 [ 106.198038][ T9377] should_fail_usercopy+0x20/0x30 [ 106.198050][ T9377] _inline_copy_from_user+0x3c/0x174 [ 106.198062][ T9377] __arm64_sys_io_uring_register+0x1d0/0x12d0 [ 106.198074][ T9377] invoke_syscall+0x98/0x244 [ 106.198086][ T9377] el0_svc_common+0xec/0x23c [ 106.198097][ T9377] do_el0_svc+0x4c/0x5c [ 106.198108][ T9377] el0_svc+0x60/0x1d8 [ 106.198120][ T9377] el0t_64_sync_handler+0x44/0x104 [ 106.198131][ T9377] el0t_64_sync+0x198/0x19c [ 106.357718][ T4718] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 106.421144][ T9403] FAULT_INJECTION: forcing a failure. [ 106.421144][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 106.421169][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.6.1191 Tainted: G L syzkaller #0 PREEMPT [ 106.421183][ T9403] Tainted: [L]=SOFTLOCKUP [ 106.421187][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.421202][ T9403] Call trace: [ 106.421205][ T9403] show_stack+0x2c/0x3c (C) [ 106.421222][ T9403] __dump_stack+0x30/0x40 [ 106.421233][ T9403] dump_stack_lvl+0xd8/0x12c [ 106.421243][ T9403] dump_stack+0x1c/0x28 [ 106.421252][ T9403] should_fail_ex+0x418/0x58c [ 106.421263][ T9403] should_failslab+0xc4/0x120 [ 106.421274][ T9403] __kvmalloc_node_noprof+0x160/0x7fc [ 106.421282][ T9403] bpf_test_run_xdp_live+0x178/0x1770 [ 106.421291][ T9403] bpf_prog_test_run_xdp+0x634/0xe0c [ 106.421298][ T9403] bpf_prog_test_run+0x1e0/0x250 [ 106.421307][ T9403] __sys_bpf+0x6bc/0x82c [ 106.421315][ T9403] __arm64_sys_bpf+0xd0/0xec [ 106.421322][ T9403] invoke_syscall+0x98/0x244 [ 106.421332][ T9403] el0_svc_common+0xec/0x23c [ 106.421342][ T9403] do_el0_svc+0x4c/0x5c [ 106.421351][ T9403] el0_svc+0x60/0x1d8 [ 106.421361][ T9403] el0t_64_sync_handler+0x44/0x104 [ 106.421370][ T9403] el0t_64_sync+0x198/0x19c [ 106.539709][ T9405] FAULT_INJECTION: forcing a failure. [ 106.539709][ T9405] name failslab, interval 1, probability 0, space 0, times 0 [ 106.539725][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.6.1192 Tainted: G L syzkaller #0 PREEMPT [ 106.539737][ T9405] Tainted: [L]=SOFTLOCKUP [ 106.539740][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.539751][ T9405] Call trace: [ 106.539754][ T9405] show_stack+0x2c/0x3c (C) [ 106.539769][ T9405] __dump_stack+0x30/0x40 [ 106.539781][ T9405] dump_stack_lvl+0xd8/0x12c [ 106.539793][ T9405] dump_stack+0x1c/0x28 [ 106.539804][ T9405] should_fail_ex+0x418/0x58c [ 106.539816][ T9405] should_failslab+0xc4/0x120 [ 106.539829][ T9405] __kmalloc_cache_noprof+0x94/0x5fc [ 106.539837][ T9405] call_usermodehelper_setup+0xa4/0x26c [ 106.539850][ T9405] __request_module+0x3c0/0x670 [ 106.539859][ T9405] netlink_create+0x1e0/0x610 [ 106.539871][ T9405] __sock_create+0x31c/0x670 [ 106.539881][ T9405] __sys_socket_create+0xc0/0x11c [ 106.539894][ T9405] __sys_socket+0x44/0xec [ 106.539904][ T9405] __arm64_sys_socket+0x84/0x9c [ 106.539914][ T9405] invoke_syscall+0x98/0x244 [ 106.539926][ T9405] el0_svc_common+0xec/0x23c [ 106.539938][ T9405] do_el0_svc+0x4c/0x5c [ 106.539949][ T9405] el0_svc+0x60/0x1d8 [ 106.539960][ T9405] el0t_64_sync_handler+0x44/0x104 [ 106.539971][ T9405] el0t_64_sync+0x198/0x19c [ 106.663267][ T4713] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.735490][ T9418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.735519][ T9418] FAULT_INJECTION: forcing a failure. [ 106.735519][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 106.735537][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.6.1197 Tainted: G L syzkaller #0 PREEMPT [ 106.735553][ T9418] Tainted: [L]=SOFTLOCKUP [ 106.735556][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.735567][ T9418] Call trace: [ 106.735570][ T9418] show_stack+0x2c/0x3c (C) [ 106.735586][ T9418] __dump_stack+0x30/0x40 [ 106.735596][ T9418] dump_stack_lvl+0xd8/0x12c [ 106.735605][ T9418] dump_stack+0x1c/0x28 [ 106.735614][ T9418] should_fail_ex+0x418/0x58c [ 106.735625][ T9418] should_failslab+0xc4/0x120 [ 106.735636][ T9418] kmem_cache_alloc_node_noprof+0x98/0x604 [ 106.735644][ T9418] __alloc_skb+0x1f0/0x610 [ 106.735653][ T9418] mgmt_alloc_skb+0x38/0x118 [ 106.735665][ T9418] mgmt_send_event+0x4c/0xb8 [ 106.735674][ T9418] mgmt_suspending+0xa0/0xe8 [ 106.735682][ T9418] hci_suspend_dev+0x2b0/0x444 [ 106.735692][ T9418] hci_suspend_notifier+0xe4/0x2b0 [ 106.735701][ T9418] notifier_call_chain+0x1a4/0x4cc [ 106.735711][ T9418] notifier_call_chain_robust+0x54/0xc4 [ 106.735720][ T9418] blocking_notifier_call_chain_robust+0x74/0xa8 [ 106.735730][ T9418] pm_notifier_call_chain_robust+0x34/0x60 [ 106.735740][ T9418] snapshot_open+0x17c/0x270 [ 106.735748][ T9418] misc_open+0x2dc/0x338 [ 106.735758][ T9418] chrdev_open+0x398/0x3e8 [ 106.735767][ T9418] do_dentry_open+0x5c4/0xfbc [ 106.735777][ T9418] vfs_open+0x44/0x2dc [ 106.735785][ T9418] path_openat+0x1084/0x18f0 [ 106.735794][ T9418] do_file_open+0x1c8/0x2e8 [ 106.735802][ T9418] do_sys_openat2+0x114/0x1e8 [ 106.735811][ T9418] do_sys_open+0xb0/0xe0 [ 106.735821][ T9418] __arm64_sys_openat+0xa8/0xc4 [ 106.735830][ T9418] invoke_syscall+0x98/0x244 [ 106.735840][ T9418] el0_svc_common+0xec/0x23c [ 106.735849][ T9418] do_el0_svc+0x4c/0x5c [ 106.735858][ T9418] el0_svc+0x60/0x1d8 [ 106.735868][ T9418] el0t_64_sync_handler+0x44/0x104 [ 106.735877][ T9418] el0t_64_sync+0x198/0x19c [ 106.735979][ T9418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.736077][ T9418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.736421][ T9418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.736524][ T9418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.812664][ T9426] loop3: detected capacity change from 0 to 512 [ 106.825339][ T9426] EXT4-fs: Ignoring removed nobh option [ 106.825364][ T9426] ext4: Unknown parameter 'subj_type' [ 106.829827][ T9426] cgroup: none used incorrectly [ 106.963845][ T9440] loop8: detected capacity change from 0 to 8192 [ 107.054066][ T4718] Bluetooth: hci0: unexpected event for opcode 0x202a [ 107.113919][ T9444] loop5: detected capacity change from 0 to 2048 [ 107.115420][ T9444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.138046][ T9444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.140639][ T9444] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1207: bg 0: block 2: invalid block bitmap [ 107.141809][ T9444] EXT4-fs (loop5): Remounting filesystem read-only [ 107.159082][ T5007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.191343][ T9448] loop5: detected capacity change from 0 to 256 [ 107.194177][ T9448] vfat: Unknown parameter 'u' [ 107.325257][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.327617][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.329714][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.330252][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.332012][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.333498][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.335719][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.336245][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.337835][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.339384][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.341022][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.342158][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.343971][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.364295][ T9459] veth0_vlan: left promiscuous mode [ 107.364946][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.368251][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.369340][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.371513][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.372073][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.373696][ T9459] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 107.375512][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.381109][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.382984][ C0] net_ratelimit: 954 callbacks suppressed [ 107.384733][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.390198][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.392446][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.396487][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.400226][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.404369][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.409386][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.412628][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.418100][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.420191][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.422216][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.428861][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.430891][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.435518][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.441442][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.446468][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.454341][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.460372][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.463216][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.467461][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.469558][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.473147][ T9459] team0: Device veth0_vlan failed to register rx_handler [ 107.717603][ T9463] FAULT_INJECTION: forcing a failure. [ 107.717603][ T9463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.717619][ T9463] CPU: 1 UID: 0 PID: 9463 Comm: syz.3.1213 Tainted: G L syzkaller #0 PREEMPT [ 107.717630][ T9463] Tainted: [L]=SOFTLOCKUP [ 107.717634][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.717644][ T9463] Call trace: [ 107.717647][ T9463] show_stack+0x2c/0x3c (C) [ 107.717667][ T9463] __dump_stack+0x30/0x40 [ 107.717679][ T9463] dump_stack_lvl+0xd8/0x12c [ 107.717690][ T9463] dump_stack+0x1c/0x28 [ 107.717701][ T9463] should_fail_ex+0x418/0x58c [ 107.717712][ T9463] should_fail+0x14/0x24 [ 107.717721][ T9463] should_fail_usercopy+0x20/0x30 [ 107.717731][ T9463] _inline_copy_from_user+0x3c/0x3a4 [ 107.717741][ T9463] sk_setsockopt+0x230/0x2658 [ 107.717752][ T9463] sock_setsockopt+0x68/0x80 [ 107.717762][ T9463] mptcp_setsockopt+0xe38/0x219c [ 107.717772][ T9463] sock_common_setsockopt+0xb0/0xcc [ 107.717780][ T9463] do_sock_setsockopt+0x1f0/0x330 [ 107.717788][ T9463] __sys_setsockopt+0x104/0x170 [ 107.717797][ T9463] __arm64_sys_setsockopt+0xc8/0xe4 [ 107.717806][ T9463] invoke_syscall+0x98/0x244 [ 107.717816][ T9463] el0_svc_common+0xec/0x23c [ 107.717825][ T9463] do_el0_svc+0x4c/0x5c [ 107.717835][ T9463] el0_svc+0x60/0x1d8 [ 107.717844][ T9463] el0t_64_sync_handler+0x44/0x104 [ 107.717853][ T9463] el0t_64_sync+0x198/0x19c [ 107.878210][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1212'. [ 107.887670][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1212'. [ 107.902732][ T9474] gadgetfs: bound to dummy_udc driver [ 107.967727][ T263] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.024581][ T9490] netlink: 352 bytes leftover after parsing attributes in process `syz.3.1224'. [ 108.040545][ T9492] input: syz1 as /devices/virtual/input/input6 [ 108.074842][ T9490] FAULT_INJECTION: forcing a failure. [ 108.074842][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 108.074859][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.3.1224 Tainted: G L syzkaller #0 PREEMPT [ 108.074871][ T9490] Tainted: [L]=SOFTLOCKUP [ 108.074875][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.074887][ T9490] Call trace: [ 108.074890][ T9490] show_stack+0x2c/0x3c (C) [ 108.074908][ T9490] __dump_stack+0x30/0x40 [ 108.074920][ T9490] dump_stack_lvl+0xd8/0x12c [ 108.074931][ T9490] dump_stack+0x1c/0x28 [ 108.074942][ T9490] should_fail_ex+0x418/0x58c [ 108.074955][ T9490] should_failslab+0xc4/0x120 [ 108.074968][ T9490] __kmalloc_cache_noprof+0x94/0x5fc [ 108.074977][ T9490] __arm64_sys_memfd_create+0x258/0x3ec [ 108.074987][ T9490] invoke_syscall+0x98/0x244 [ 108.075000][ T9490] el0_svc_common+0xec/0x23c [ 108.075011][ T9490] do_el0_svc+0x4c/0x5c [ 108.075022][ T9490] el0_svc+0x60/0x1d8 [ 108.075034][ T9490] el0t_64_sync_handler+0x44/0x104 [ 108.075045][ T9490] el0t_64_sync+0x198/0x19c [ 108.079296][ T4717] hid-generic 0006:0004:0009.0001: unknown main item tag 0x3 [ 108.091658][ T4717] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 108.134965][ T9497] FAULT_INJECTION: forcing a failure. [ 108.134965][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.134978][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.6.1228 Tainted: G L syzkaller #0 PREEMPT [ 108.134990][ T9497] Tainted: [L]=SOFTLOCKUP [ 108.134993][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.135003][ T9497] Call trace: [ 108.135006][ T9497] show_stack+0x2c/0x3c (C) [ 108.135019][ T9497] __dump_stack+0x30/0x40 [ 108.135029][ T9497] dump_stack_lvl+0xd8/0x12c [ 108.135039][ T9497] dump_stack+0x1c/0x28 [ 108.135048][ T9497] should_fail_ex+0x418/0x58c [ 108.135058][ T9497] should_fail+0x14/0x24 [ 108.135067][ T9497] should_fail_usercopy+0x20/0x30 [ 108.135078][ T9497] _inline_copy_from_user+0x3c/0x174 [ 108.135088][ T9497] do_sock_getsockopt+0x210/0x720 [ 108.135097][ T9497] __sys_getsockopt+0xfc/0x168 [ 108.135106][ T9497] __arm64_sys_getsockopt+0xc8/0xe4 [ 108.135114][ T9497] invoke_syscall+0x98/0x244 [ 108.135124][ T9497] el0_svc_common+0xec/0x23c [ 108.135134][ T9497] do_el0_svc+0x4c/0x5c [ 108.135143][ T9497] el0_svc+0x60/0x1d8 [ 108.135152][ T9497] el0t_64_sync_handler+0x44/0x104 [ 108.135161][ T9497] el0t_64_sync+0x198/0x19c [ 108.164161][ T9493] fido_id[9493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.179308][ T9499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1226'. [ 108.191878][ T9499] loop3: detected capacity change from 0 to 4096 [ 108.202242][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1229'. [ 108.216632][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 108.216969][ T9499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.234927][ T9509] coredump: 651(syz.5.1230): format_corename failed, aborting core [ 108.237118][ T9507] loop5: detected capacity change from 0 to 512 [ 108.237446][ T9507] vfat: Unknown parameter 'uni_xlyte' [ 108.261571][ T9507] loop5: detected capacity change from 0 to 512 [ 108.311310][ T9507] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.317078][ T9507] EXT4-fs (loop5): 1 truncate cleaned up [ 108.319266][ T9507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.468344][ T5007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.519161][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 108.520762][ T9530] FAULT_INJECTION: forcing a failure. [ 108.520762][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 108.520782][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.5.1236 Tainted: G L syzkaller #0 PREEMPT [ 108.520796][ T9530] Tainted: [L]=SOFTLOCKUP [ 108.520800][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.520813][ T9530] Call trace: [ 108.520816][ T9530] show_stack+0x2c/0x3c (C) [ 108.520837][ T9530] __dump_stack+0x30/0x40 [ 108.520849][ T9530] dump_stack_lvl+0xd8/0x12c [ 108.520860][ T9530] dump_stack+0x1c/0x28 [ 108.520871][ T9530] should_fail_ex+0x418/0x58c [ 108.520885][ T9530] should_failslab+0xc4/0x120 [ 108.520898][ T9530] __kmalloc_cache_noprof+0x94/0x5fc [ 108.520907][ T9530] nl80211_dump_wiphy_parse+0xb8/0x464 [ 108.520919][ T9530] nl80211_dump_wiphy+0x284/0x64c [ 108.520930][ T9530] genl_dumpit+0x108/0x1bc [ 108.520942][ T9530] netlink_dump+0x55c/0xb6c [ 108.520952][ T9530] __netlink_dump_start+0x4c4/0x6f8 [ 108.520963][ T9530] genl_family_rcv_msg_dumpit+0x1a8/0x28c [ 108.520975][ T9530] genl_rcv_msg+0x404/0x620 [ 108.520986][ T9530] netlink_rcv_skb+0x238/0x414 [ 108.520996][ T9530] genl_rcv+0x38/0x50 [ 108.521007][ T9530] netlink_unicast+0x600/0x7f8 [ 108.521017][ T9530] netlink_sendmsg+0x648/0x948 [ 108.521028][ T9530] __sock_sendmsg+0xc8/0x17c [ 108.521037][ T9530] ____sys_sendmsg+0x3d0/0x6c8 [ 108.521048][ T9530] ___sys_sendmsg+0x198/0x224 [ 108.521058][ T9530] __sys_sendmsg+0x158/0x204 [ 108.521069][ T9530] __arm64_sys_sendmsg+0x88/0x9c [ 108.521079][ T9530] invoke_syscall+0x98/0x244 [ 108.521091][ T9530] el0_svc_common+0xec/0x23c [ 108.521103][ T9530] do_el0_svc+0x4c/0x5c [ 108.521114][ T9530] el0_svc+0x60/0x1d8 [ 108.521125][ T9530] el0t_64_sync_handler+0x44/0x104 [ 108.521136][ T9530] el0t_64_sync+0x198/0x19c [ 108.581468][ T9533] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 108.581537][ T9533] Error validating options; rc = [-22] [ 108.614663][ T9533] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 108.616507][ T4468] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 108.657803][ T9537] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 108.657871][ T9537] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.658096][ T9537] EXT4-fs error (device loop6): ext4_get_journal_inode:5927: inode #32: comm syz.6.1239: iget: special inode unallocated [ 108.658112][ T9537] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 108.658283][ T9537] EXT4-fs (loop6): Remounting filesystem read-only [ 108.658314][ T9537] EXT4-fs (loop6): no journal found [ 108.658320][ T9537] EXT4-fs (loop6): can't get journal size [ 108.660693][ T9537] EXT4-fs (loop6): filesystem is read-only [ 108.684067][ T9537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.695867][ T9537] EXT4-fs (loop6): shut down requested (2) [ 108.742837][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 108.742862][ T4712] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.742908][ T51] Bluetooth: hci2: command 0x040f tx timeout [ 108.753295][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.795772][ T9537] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.796138][ T9537] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.796542][ T9537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.797094][ T9537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.797449][ T9537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.897524][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.996175][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.029723][ T9545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.048923][ T9545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.061101][ T9545] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1241: bg 0: block 2: invalid block bitmap [ 109.061428][ T9545] EXT4-fs (loop6): Remounting filesystem read-only [ 109.081277][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.118959][ T9552] gadgetfs: bound to dummy_udc driver [ 109.159519][ T9550] ================================================================== [ 109.159527][ T9550] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0xc28/0x1758 [ 109.159546][ T9550] Write of size 8 at addr ffff800093c79fc0 by task syz.3.1242/9550 [ 109.159554][ T9550] [ 109.159560][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.3.1242 Tainted: G L syzkaller #0 PREEMPT [ 109.159572][ T9550] Tainted: [L]=SOFTLOCKUP [ 109.159575][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.159581][ T9550] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 109.159587][ T9550] Call trace: [ 109.159590][ T9550] show_stack+0x2c/0x3c (C) [ 109.159605][ T9550] __dump_stack+0x30/0x40 [ 109.159617][ T9550] dump_stack_lvl+0xd8/0x12c [ 109.159628][ T9550] print_address_description+0xb0/0x238 [ 109.159638][ T9550] print_report+0x68/0x84 [ 109.159645][ T9550] kasan_report+0x8c/0xc4 [ 109.159656][ T9550] __asan_report_store8_noabort+0x20/0x2c [ 109.159667][ T9550] sys_imageblit+0xc28/0x1758 [ 109.159677][ T9550] drm_fbdev_shmem_defio_imageblit+0x38/0x144 [ 109.159690][ T9550] cw_putcs+0x69c/0x8bc [ 109.159699][ T9550] fbcon_putcs+0x258/0x390 [ 109.159707][ T9550] do_update_region+0x31c/0x3c8 [ 109.159716][ T9550] redraw_screen+0x388/0x51c [ 109.159725][ T9550] vc_do_resize+0x884/0xbbc [ 109.159733][ T9550] __vc_resize+0x60/0x74 [ 109.159742][ T9550] vt_resizex+0x318/0x4b0 [ 109.159753][ T9550] vt_ioctl+0x734/0x1d4c [ 109.159763][ T9550] tty_ioctl+0x828/0xcb0 [ 109.159775][ T9550] __arm64_sys_ioctl+0x154/0x1cc [ 109.159789][ T9550] invoke_syscall+0x98/0x244 [ 109.159801][ T9550] el0_svc_common+0xec/0x23c [ 109.159813][ T9550] do_el0_svc+0x4c/0x5c [ 109.159824][ T9550] el0_svc+0x60/0x1d8 [ 109.159836][ T9550] el0t_64_sync_handler+0x44/0x104 [ 109.159847][ T9550] el0t_64_sync+0x198/0x19c [ 109.159856][ T9550] [ 109.159858][ T9550] The buggy address belongs to a vmalloc virtual mapping [ 109.159867][ T9550] Memory state around the buggy address: [ 109.159872][ T9550] ffff800093c79e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 109.159878][ T9550] ffff800093c79f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 109.159883][ T9550] >ffff800093c79f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 109.159887][ T9550] ^ [ 109.159893][ T9550] ffff800093c7a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 109.159898][ T9550] ffff800093c7a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 109.159902][ T9550] ================================================================== [ 109.160071][ T9550] Disabling lock debugging due to kernel taint [ 109.160088][ T9550] Unable to handle kernel paging request at virtual address ffff800093c79fc0 [ 109.160096][ T9550] KASAN: probably user-memory-access in range [0x000000049e3cfe00-0x000000049e3cfe07] [ 109.160104][ T9550] Mem abort info: [ 109.160108][ T9550] ESR = 0x0000000096000047 [ 109.160113][ T9550] EC = 0x25: DABT (current EL), IL = 32 bits [ 109.160118][ T9550] SET = 0, FnV = 0 [ 109.160122][ T9550] EA = 0, S1PTW = 0 [ 109.160127][ T9550] FSC = 0x07: level 3 translation fault [ 109.160131][ T9550] Data abort info: [ 109.160134][ T9550] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 109.160139][ T9550] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 109.160145][ T9550] GCS = 0, Overlay = 0, DirtyBit = 0 [ 109.160150][ T9550] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021af81000 [ 109.160162][ T9550] [ffff800093c79fc0] pgd=0000000000000000, p4d=1000000221295003, pud=1000000221296003, pmd=1000000106f10403, pte=0000000000000000 [ 109.160182][ T9550] Internal error: Oops: 0000000096000047 [#1] SMP [ 109.221745][ T9550] Modules linked in: [ 109.222462][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.3.1242 Tainted: G B L syzkaller #0 PREEMPT [ 109.224412][ T9550] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 109.225437][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.227276][ T9550] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 109.228784][ T9550] pc : sys_imageblit+0xc30/0x1758 [ 109.229708][ T9550] lr : sys_imageblit+0xc28/0x1758 [ 109.230661][ T9550] sp : ffff8000962a73a0 [ 109.231451][ T9550] x29: ffff8000962a7420 x28: dfff800000000000 x27: ffff800093c78ff8 [ 109.233000][ T9550] x26: ffff800093c79fc0 x25: ffff0000c6848600 x24: 0000000000000004 [ 109.234536][ T9550] x23: 0000000000000000 x22: ffff800093c79fc0 x21: 0000000000000000 [ 109.236087][ T9550] x20: ffff0000c6848601 x19: ffff8000962a73f8 x18: 1fffe00035bd4c28 [ 109.237603][ T9550] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 109.239102][ T9550] x14: 00000000000f2431 x13: 0000000000000001 x12: 0000000000000000 [ 109.240513][ T9550] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 109.241956][ T9550] x8 : ffff0000d7b68000 x7 : 0000000000000000 x6 : ffff800080483164 [ 109.243396][ T9550] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f394c [ 109.244869][ T9550] x2 : 0000000000000000 x1 : ffff0000d7b68000 x0 : ffff800093c79fc0 [ 109.246334][ T9550] dump_backtrace(regs = 0000000049cf1637 tsk = 0000000000000000) [ 109.247766][ T9550] Call trace: [ 109.248427][ T9550] sys_imageblit+0xc30/0x1758 (P) [ 109.249354][ T9550] drm_fbdev_shmem_defio_imageblit+0x38/0x144 [ 109.250396][ T9550] cw_putcs+0x69c/0x8bc [ 109.251113][ T9550] fbcon_putcs+0x258/0x390 [ 109.251910][ T9550] do_update_region+0x31c/0x3c8 [ 109.252756][ T9550] redraw_screen+0x388/0x51c [ 109.253570][ T9550] vc_do_resize+0x884/0xbbc [ 109.254423][ T9550] __vc_resize+0x60/0x74 [ 109.255214][ T9550] vt_resizex+0x318/0x4b0 [ 109.255980][ T9550] vt_ioctl+0x734/0x1d4c [ 109.256745][ T9550] tty_ioctl+0x828/0xcb0 [ 109.257507][ T9550] __arm64_sys_ioctl+0x154/0x1cc [ 109.258359][ T9550] invoke_syscall+0x98/0x244 [ 109.259191][ T9550] el0_svc_common+0xec/0x23c [ 109.260021][ T9550] do_el0_svc+0x4c/0x5c [ 109.260799][ T9550] el0_svc+0x60/0x1d8 [ 109.261522][ T9550] el0t_64_sync_handler+0x44/0x104 [ 109.262460][ T9550] el0t_64_sync+0x198/0x19c [ 109.263304][ T9550] Code: aa1a03e0 97b7aa5c aa1a03e0 d34416e9 (f8008415) [ 109.264593][ T9550] ---[ end trace 0000000000000000 ]--- [ 109.308187][ T9524] nfc: nfc_unregister_rfkill: dev_name=nfc2 [ 109.459543][ T9534] MPTCP: msk=0000000018581da1 state=7 [ 109.459559][ T9534] MPTCP: msk=0000000018581da1 [ 109.459568][ T9534] MPTCP: msk=0000000018581da1 [ 109.459582][ T9534] MPTCP: msk=0000000018581da1 [ 109.460707][ T9539] kcov: kcov_task_exit: t = ffff0000cbaa8000, kcov->t = ffff0000cbaa8000 [ 109.460839][ T9535] kcov: kcov_task_exit: t = ffff0000d4640000, kcov->t = ffff0000d4640000 [ 109.484349][ T9557] kcov: kcov_start: t = ffff0000c8d1bb00, size = 524288, area = ffff8000a9630000 [ 109.485541][ T9555] kcov: kcov_start: t = ffff0000d33f3b00, size = 524288, area = ffff80009a916000 [ 109.537184][ T9558] kcov: kcov_start: t = ffff0000d5dbd880, size = 524288, area = ffff8000a593e000 [ 109.537666][ T9558] MPTCP: sched=default [ 109.537791][ T9558] MPTCP: subflow=00000000825d7e51 [ 109.537798][ T9558] MPTCP: subflow=00000000825d7e51, family=10 [ 109.537807][ T9558] MPTCP: subflow=00000000825d7e51 [ 109.762850][ T9550] Kernel panic - not syncing: Oops: Fatal exception [ 109.779790][ T9550] SMP: stopping secondary CPUs [ 109.780678][ T9550] Kernel Offset: disabled [ 109.781463][ T9550] CPU features: 0x0,50000000,00f00020,9c080a02,a84ff6a7 [ 109.782630][ T9550] Memory Limit: none [ 110.261193][ T9550] Rebooting in 86400 seconds..