last executing test programs: 12.96640916s ago: executing program 2 (id=564): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) shutdown(r4, 0x1) ptrace$setregset(0x4205, r0, 0x6, 0x0) statx(r1, 0x0, 0x1000, 0x3ff7a9721f23b969, &(0x7f00000004c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000009c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @mcast1, 0x7fff}, {0xa, 0x4e23, 0xc3, @local}, 0xffffffffffffffff, 0x7f}}, 0x48) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'}) 10.540492992s ago: executing program 2 (id=568): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) 10.529493216s ago: executing program 3 (id=570): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_getscheduler(r0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@usrjquota}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) syz_io_uring_setup(0xdf0, &(0x7f0000000280)={0x0, 0x72de, 0x0, 0x1, 0x271}, &(0x7f0000000140), &(0x7f0000000780), &(0x7f0000000000)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.888558984s ago: executing program 4 (id=574): syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[], 0x0) 8.887134539s ago: executing program 2 (id=575): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$smackfs_label(0xffffffffffffffff, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x783042, 0x10c) pwrite64(r4, 0x0, 0x0, 0x8080c61) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x6e1e, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r6 = openat(0xffffffffffffff9c, 0x0, 0x10042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7, 0x0, 0x0, 0x0, 0x85ffffff}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) sendfile(r6, r6, 0x0, 0x1000000000007) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 8.833122772s ago: executing program 4 (id=576): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r5, 0x1) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) ioctl$NBD_DISCONNECT(r6, 0xab08) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000400000"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 8.59099411s ago: executing program 3 (id=577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 7.858350732s ago: executing program 4 (id=578): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x81, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03feff00000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r5, 0x5efaa000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2) 7.546252791s ago: executing program 1 (id=579): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x18440, 0x80) fspick(r1, &(0x7f0000000340)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x14, 0xcf0be2279761c16b) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) 6.521716608s ago: executing program 0 (id=580): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c696f636861727365743d757466382c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c6e8d6e756d7461696c07000000000000007461696c3d302c636865636b3d72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c73686f73746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c74696d655f6f66667365743d3078666666660100000066666666666262362c00"], 0x1, 0x363, &(0x7f0000000280)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) socket(0x10, 0x4, 0x3bf3e3f3) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) read$FUSE(r5, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, 0x0) ioctl$COMEDI_BUFINFO(r5, 0xc02c640e, &(0x7f00000002c0)={0x4, 0x7, 0x1, 0x9db, 0x7, 0x7f, 0x8}) 5.924222093s ago: executing program 1 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000034, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket(0x3, 0x2, 0xffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x44, 0x3, 0x2, "6040a3b794fd2e0000000b010000000000000000000800", 0x59555956}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r7, 0x40a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/ZFxBbFgIcWpGlSi1Uv1nqwh4IFexDx0NAkNXT7gyYFWwum4EFBQcSrSC/+A96ld28iqDfPQhWpKKh0ZXZn281mN13T7E6b+XxgsvM8s7vP893Jk3memTw7AZTWZPYjjdgVcftkEjHRsm08Ghsn8+fd+vXqqWxJolZ77Zckkjyv+fwkf9yeJ0Yj4psjEf+vrC136fKVM7PVWsO7EfuXz17Yv3T5yr7Fs7On50/Pn5s58NzBQ9PPzxyc2ZQ4t+ePR4+9+vhH77317MK31X1JHI4Tw+/MRVscm2UyJuN2HmJr/lBEHMpWOnwuD5stEEKpVfLfx+GIeDQmolJPNUzE4oeFVg7oq1ologaUVKL9Q0k1+wHNsX1v4+ATfe6VDM7NlxoDoLXxDzXOjcRofWy07VbSMjJqnNvYsQnlZ2X8fXX3Z9kSq85D/HFn7wxtQjndrFyLiMc6xZ/U67ajHmkWf7qqHslKxHREjOT1e/k+6pC0rPfjPMx6Nhp/GhGH88cs/8gGy59sSw86fgDK6UbW/8kO5CtZ6u7xL+t7NPs/0aH/M97h2LURRR//uvf/msf70fo58rStH5b1WY53fsvh9owfPzj6SbfyW/t/2ZKV3+wLDsLNaxG72+J/Pws27/9k8Scd9n/2lJOHeyvjle9+PtptW9Hx165H7Ok4/rnbK83W1rk+uX9hsTo/3fjZsYyvvn7zi27lFx1/tv+3dYm/Zf+n7a/LPpMLPZbx5fHrZ7ttG+8Y/0rL6DT9aSRpjDdH8te8Pbu8fHEmYiQ51shIW/IPrF+X5nOa75HFv/epzu1/1e//tdXvM9b8k9mDC6+fudVt20b2f8vF5Nu1HuvQTRb/3L33/5r2n+V93GMZv79x6Ylu29aLf+x+AgMAAAAAAIASSuvXYJN06s56mk5NNebLPhLb0ur5peWnF85fOjcXsbf+/5DDafNK90QjnWTpmfz/YZvpA23pZyJiZ0R8Whmrp6dOna/OFR08AAAAAAAAAAAAAAAAAAAAPCC25/P/m/ep/q3SmP8PlEQ/bzAHPNi0fyivevtfc4snoAwc/6G8tH8oL+0fykv7h/LS/qG8tH8oL+0fykv7BwAAAIAtaeeTN35IImLlhbH6khnJt5kRBFvbcNEVAApTKboCQGHuXPrX2YfS6an//2f+5YD9rw5QgKRTZr1zUFu/8d/o+EoAAAAAAAAAAAAAoA/27Oo+/9/cYNjaTPuD8rqP+f++OgAecr76H8rLGB+41yz+0W4bzP8HAAAAAAAAAAAAgIEZry9JOpXPBR6PNJ2aivhvROyI4WRhsTo/HRH/i4jvK8P/ydIzRVcaAAAAAAAAAAAAAAAAAAAAtpily1fOzFar8xdbV/5ak7O1V5p3QR1AWS/Gv3xVJIP/WMYiovCd0reVoZacJGIl2/MPRMUuLkVLzlDBu6DgP0wAAAAAAAAAAAAAAAAAAFBCLXOPO9v9+YBrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDd/f+//1bKTpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODh9E8AAAD//yTFRqU=") read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) getpid() r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f005, 0x5}) 5.902621592s ago: executing program 3 (id=582): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r9) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@generic={0x71, 0x0, 0x1, 0x43}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 5.533466181s ago: executing program 0 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20040040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}}, 0x3, 0x800, 0xf, 0xffffffff, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r6, 0x5efaa000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 5.531799434s ago: executing program 4 (id=584): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="ab6c6453c6e30a5d0bf694038b30489d59260bae5e05ce87c6242a6fc84965bec3cfa6d58f85b94c35130b3463176f4fb40565bd75528cceb85a4296b0814532562dd18517f403a833fa0763d2953c413636c96f1e27555c86a49021e6e05e6034b73540617ad9cec49efa20", @ANYBLOB="1e87cdafaba71e00d4dbd2d162836e200513f845eb442d9b03dc447e441420f66757ff03000000000000275e88ec554077633bd3bcafbb3e728f5468b515c2b90ce0ef68f88333e5b00000000000"], 0x3, 0x2a3, &(0x7f00000009c0)="$eJzs281qE10cx/Ff+v7ytJPn6WO1FfGgG90MbbyCUFoQA0ptxBcQpnaiIdOkzIRKRGx3br2O4tKdIN5AN16BC3fduGxBHMkkbZMmtlpfxprvB8qccvKbnMP/TDiLM1u3XywXcoGdc8rqShj1SH3alpLqUrdqEvVrV/TXp0brujyWeX/u5p2719KZzOy8MXPphSspY8zo+TePn7688LY8fOvV6Ot+bSbvb31Mfdgc35zY+rzwKB+YfGCKpbJxzGKpVHYWPdcs5YOCbcwNz3UC1+SLges39ee80spKxTjFpZGhFd8NAuMUK6bgVky5ZMp+xTgPnXzR2LZtRoaEo2Q35ueddNyjwK/l+2lnRtJkS092I5YBAQCAWLXZ/68ftv9PHMiz/z/J2P93gur+/179+W3Sy/4fAAAAAAAAAAAAAAAAAAAAAICTYDsMrTAMrd1rrxS94R/W/x+UNCRpWNI/kkYkjUqyJCUl/SvpP0ljkv6XdErSuKTTks5Immi4V9xzRavW+u+E1fp3/3D9Q+p/AvD8dzbq39kaXtwdkJafr2ZXs7VrrT+dU16eXE3J0qeolnW19tzVzOyUiSR1dnmtnl9bzXY356dlVRdMu/x0LW+a8/3RutvLp2RVF1i7fKptfkCXLjbkbVl690AleVqK1uR+/tm0MTPXMwfyk9Hn/na22dO2frb9tf5a/hvWRzjVtj49muyJd+6QgsqTguN5rv8bG4NxfGlnN3qPX27FPvj4G/pJ99mp/zb+KfM6tO7oAPtFj3skAAAAAAAAAAAAAAAAAIDvcbwTgrsHt/2gkpCOOh0Z8xQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxJQAA///wI100") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="03030800040016000500452d002400650000098490780a010101ac1414aac70500040000000002000000c2000003c32902281bea49d5cafc6b947a7b6c6e38c1eb08750c31269c4125cbb5cbbae3b87a51a26c9b64a37b0cd3091a18b236ad1fd99fcfe856b3196903d26999c84f1c80f1a4ab7235329f84554a2c7f13c176c48a8cf4a09915887ad6e3a782d5c31da8fcb746961400ac633f8343897188bac1505f6a3b540379b6276b1611bc76d4403bdbb89b11d888666a7fe66969d524696c61675b0f33a4d508900112dee9b459"], 0x2e) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2200414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f0000000040)='./file0\x00', 0x7) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @loopback}, 0x82, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)='nicvf0\x00', 0x57bf, 0xa849, 0x3}) ftruncate(0xffffffffffffffff, 0x81ff) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.480810928s ago: executing program 3 (id=585): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x6, 0x1, {{0x23, 0x4, 0x0, 0x2b, 0x8c, 0x67, 0x0, 0xb, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0xd, 0x0, [{0x7, 0x7, "a752face16"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x57, 0x0, 0x8, [0xbd35, 0x7]}, @lsrr={0x83, 0x13, 0x1e, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x1, 0xc, "ba168dbecdc22a0729b1"}, {0x6, 0x12, "c7daf48ce00b02760be0a73a5f44e46f"}, {0x0, 0x12, "35ff3131ed09ef5e93ce6904fbdd65db"}, {0x5, 0x12, "cd6ba6b891b9a6cce699f61b297583a0"}]}]}}}}}) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="dfffffffffff6c76000000004305"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000680)=""/74, 0x110, 0x4a, 0x0, 0x1}, 0x28) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2141, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000a3c0)=ANY=[@ANYBLOB="1c0000020000000127bd700000000000047c00000400fc8004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x4040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'pimreg\x00', @multicast}) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) file_getattr(r2, 0x0, &(0x7f0000000040), 0x64, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000000000000010001000700000040000000", @ANYRES32, @ANYBLOB="000000000a86af33dea9ebe9ee352b88f93f6465d1401369ec00f6cf71380200000063bccdc066bcdd91aad95153410e93bb9f83cf91cdf1067068c648d9df70f3d1f6e3d4c69e31f87b538d70981ca7e786182e881152336c113ac7b7b50e1e175d67e3b14424fd108c27b50197913d", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05000000050000000300"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000210000000000000700000500fcffd5495933a81c00"/35], &(0x7f00000004c0)='syzkaller\x00'}, 0x94) membarrier(0x10, 0x0) 4.479032815s ago: executing program 2 (id=586): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) connect$pptp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[], 0x0) 3.871828871s ago: executing program 1 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 3.870484892s ago: executing program 1 (id=588): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getxattr(0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x701c2, 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002540)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,']) 2.493954472s ago: executing program 3 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=""/189, 0x0, 0xbd, 0x1}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 2.426498213s ago: executing program 2 (id=590): semget$private(0x0, 0x2, 0x241) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbf9, {0xa, 0x8, 0x1, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x50804) sendto$inet(r1, 0x0, 0x0, 0x200007f9, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20004010, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet(0x2, 0x3, 0x5) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIOCLEX(r6, 0x5451) pipe2(&(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.310336367s ago: executing program 0 (id=591): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r5, 0x1) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$NBD_DISCONNECT(r6, 0xab08) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r9, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 1.658605494s ago: executing program 4 (id=592): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={0x0, 0x0, 0x4f, 0x0, 0x8}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fbfffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x3], 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r7, 0x1d, 0x0, @void}, 0x10) 1.631786106s ago: executing program 0 (id=593): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x30d, 0xf7, 0x0, 0x6b, 0x0, @local}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) openat(0xffffffffffffffff, 0x0, 0x40001, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x13, 0x0, &(0x7f0000001800)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x24000000) 1.521419656s ago: executing program 3 (id=594): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_ublk_setup_io_uring(0x6593, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05800720"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x1) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0xa, @pix_mp={0x2, 0xb2dd, 0x3631564e, 0x2, 0x8, [{0x2, 0x7fc}, {0x20000, 0x3550}, {0x5, 0x95ea}, {0x1, 0x3}, {0xd, 0x4}, {0x7df, 0x6314}, {0xffffffe7}, {0x3, 0x9}], 0x0, 0x7, 0x4, 0x0, 0x5}}) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x1fe}, {0x6, 0x0, 0x25}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfffffff1, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508000100000000000ae38f64b47de72b79a6c275b37d6fca3ee44d9eeaeac267fbeb811dfcf3843f6d53ac128a28b3"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.275285629s ago: executing program 1 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000500000002000000040000000000", @ANYBLOB="00000000000000000000000000000000000000000cbd0d2a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x20000010) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000080), 0x58, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = socket(0x10, 0x803, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000002bd21d09ffcddaa0fb580000000000000068575fe35d1e79639f5f0013429df573216e4549d7abf5c62209000000000000003a0f21b8956ae5464ca57e27eb479fa05c73d1d14c9ec49ec8c70e513be2129bdaa6fee4c7f6178bd3176cc433f8adb0565e7c79862d9654135fa5795ce3bf43adf998c3ff223c220e726a2d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x6, 0x3, 0x1, 0x401, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000000) 907.829937ms ago: executing program 2 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100004000000000000007000000", @ANYRES32=r9, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/27, 0x1b) 143.442896ms ago: executing program 4 (id=597): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'batadv_slave_1\x00', {0x2, 0x4e1e, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2f, &(0x7f0000000440), 0x4) 125.791ms ago: executing program 1 (id=598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) 39.589541ms ago: executing program 0 (id=599): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 0 (id=600): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000000)) clock_gettime(0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000580)}}], 0x1, 0x4000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r4, 0x8, 0x4000, 0x8000) kernel console output (not intermixed with test programs): e for pfn 0x13735a at process virtual address 0x20b35000 [ 48.553637][ T5035] Memory failure: 0x13735a: recovery action for dirty LRU page: Recovered [ 48.553644][ T5035] Injecting memory failure for pfn 0x120e28 at process virtual address 0x20b36000 [ 48.553848][ T5035] Memory failure: 0x120e28: recovery action for dirty LRU page: Recovered [ 48.553859][ T5035] Injecting memory failure for pfn 0x120e29 at process virtual address 0x20b37000 [ 48.553893][ T5035] Memory failure: 0x120e29: recovery action for dirty LRU page: Recovered [ 48.553900][ T5035] Injecting memory failure for pfn 0x120e2a at process virtual address 0x20b38000 [ 48.556389][ T5035] Memory failure: 0x120e2a: recovery action for dirty LRU page: Recovered [ 48.556407][ T5035] Injecting memory failure for pfn 0x120e2b at process virtual address 0x20b39000 [ 48.646689][ T5078] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 48.654701][ T5035] Memory failure: 0x120e2b: recovery action for dirty LRU page: Recovered [ 48.654770][ T5035] Injecting memory failure for pfn 0x120e2c at process virtual address 0x20b3a000 [ 48.656329][ T5035] Memory failure: 0x120e2c: recovery action for dirty LRU page: Recovered [ 48.656376][ T5035] Injecting memory failure for pfn 0x120e2d at process virtual address 0x20b3b000 [ 48.656607][ T5035] Memory failure: 0x120e2d: recovery action for dirty LRU page: Recovered [ 48.656643][ T5035] Injecting memory failure for pfn 0x120e2e at process virtual address 0x20b3c000 [ 48.656814][ T5035] Memory failure: 0x120e2e: recovery action for dirty LRU page: Recovered [ 48.656847][ T5035] Injecting memory failure for pfn 0x120e2f at process virtual address 0x20b3d000 [ 48.657033][ T5035] Memory failure: 0x120e2f: recovery action for dirty LRU page: Recovered [ 48.657065][ T5035] Injecting memory failure for pfn 0x120e30 at process virtual address 0x20b3e000 [ 48.657236][ T5035] Memory failure: 0x120e30: recovery action for dirty LRU page: Recovered [ 48.657296][ T5035] Injecting memory failure for pfn 0x120e31 at process virtual address 0x20b3f000 [ 48.657467][ T5035] Memory failure: 0x120e31: recovery action for dirty LRU page: Recovered [ 48.657499][ T5035] Injecting memory failure for pfn 0x120e32 at process virtual address 0x20b40000 [ 48.657658][ T5035] Memory failure: 0x120e32: recovery action for dirty LRU page: Recovered [ 48.657690][ T5035] Injecting memory failure for pfn 0x120e33 at process virtual address 0x20b41000 [ 48.657839][ T5035] Memory failure: 0x120e33: recovery action for dirty LRU page: Recovered [ 48.657870][ T5035] Injecting memory failure for pfn 0x120e34 at process virtual address 0x20b42000 [ 48.658035][ T5035] Memory failure: 0x120e34: recovery action for dirty LRU page: Recovered [ 48.658067][ T5035] Injecting memory failure for pfn 0x120e35 at process virtual address 0x20b43000 [ 48.658212][ T5035] Memory failure: 0x120e35: recovery action for dirty LRU page: Recovered [ 48.658291][ T5035] Injecting memory failure for pfn 0x120e36 at process virtual address 0x20b44000 [ 48.658458][ T5035] Memory failure: 0x120e36: recovery action for dirty LRU page: Recovered [ 48.658490][ T5035] Injecting memory failure for pfn 0x120e37 at process virtual address 0x20b45000 [ 48.658649][ T5035] Memory failure: 0x120e37: recovery action for dirty LRU page: Recovered [ 48.658681][ T5035] Injecting memory failure for pfn 0x120e38 at process virtual address 0x20b46000 [ 48.658840][ T5035] Memory failure: 0x120e38: recovery action for dirty LRU page: Recovered [ 48.658887][ T5035] Injecting memory failure for pfn 0x120e39 at process virtual address 0x20b47000 [ 48.659060][ T5035] Memory failure: 0x120e39: recovery action for dirty LRU page: Recovered [ 48.659091][ T5035] Injecting memory failure for pfn 0x120e3a at process virtual address 0x20b48000 [ 48.659301][ T5035] Memory failure: 0x120e3a: recovery action for dirty LRU page: Recovered [ 48.659337][ T5035] Injecting memory failure for pfn 0x120e3b at process virtual address 0x20b49000 [ 48.659496][ T5035] Memory failure: 0x120e3b: recovery action for dirty LRU page: Recovered [ 48.659528][ T5035] Injecting memory failure for pfn 0x120e3c at process virtual address 0x20b4a000 [ 48.659697][ T5035] Memory failure: 0x120e3c: recovery action for dirty LRU page: Recovered [ 48.659729][ T5035] Injecting memory failure for pfn 0x120e3d at process virtual address 0x20b4b000 [ 48.659886][ T5035] Memory failure: 0x120e3d: recovery action for dirty LRU page: Recovered [ 48.659921][ T5035] Injecting memory failure for pfn 0x120e3e at process virtual address 0x20b4c000 [ 48.660065][ T5035] Memory failure: 0x120e3e: recovery action for dirty LRU page: Recovered [ 48.660097][ T5035] Injecting memory failure for pfn 0x120e3f at process virtual address 0x20b4d000 [ 48.660302][ T5035] Memory failure: 0x120e3f: recovery action for dirty LRU page: Recovered [ 48.660338][ T5035] Injecting memory failure for pfn 0x120e40 at process virtual address 0x20b4e000 [ 48.660496][ T5035] Memory failure: 0x120e40: recovery action for dirty LRU page: Recovered [ 48.660528][ T5035] Injecting memory failure for pfn 0x120e41 at process virtual address 0x20b4f000 [ 48.660687][ T5035] Memory failure: 0x120e41: recovery action for dirty LRU page: Recovered [ 48.660723][ T5035] Injecting memory failure for pfn 0x120e42 at process virtual address 0x20b50000 [ 48.661183][ T5035] Memory failure: 0x120e42: recovery action for dirty LRU page: Recovered [ 48.661224][ T5035] Injecting memory failure for pfn 0x120e43 at process virtual address 0x20b51000 [ 48.661527][ T5035] Memory failure: 0x120e43: recovery action for dirty LRU page: Recovered [ 48.661584][ T5035] Injecting memory failure for pfn 0x120e44 at process virtual address 0x20b52000 [ 48.661778][ T5035] Memory failure: 0x120e44: recovery action for dirty LRU page: Recovered [ 48.661810][ T5035] Injecting memory failure for pfn 0x120e45 at process virtual address 0x20b53000 [ 48.661999][ T5035] Memory failure: 0x120e45: recovery action for dirty LRU page: Recovered [ 48.662031][ T5035] Injecting memory failure for pfn 0x120e46 at process virtual address 0x20b54000 [ 48.662231][ T5035] Memory failure: 0x120e46: recovery action for dirty LRU page: Recovered [ 48.662293][ T5035] Injecting memory failure for pfn 0x120e47 at process virtual address 0x20b55000 [ 48.662487][ T5035] Memory failure: 0x120e47: recovery action for dirty LRU page: Recovered [ 48.662519][ T5035] Injecting memory failure for pfn 0x120e48 at process virtual address 0x20b56000 [ 48.662770][ T5035] Memory failure: 0x120e48: recovery action for dirty LRU page: Recovered [ 48.662801][ T5035] Injecting memory failure for pfn 0x120e49 at process virtual address 0x20b57000 [ 48.663003][ T5035] Memory failure: 0x120e49: recovery action for dirty LRU page: Recovered [ 48.663034][ T5035] Injecting memory failure for pfn 0x120e4a at process virtual address 0x20b58000 [ 48.663331][ T5035] Memory failure: 0x120e4a: recovery action for dirty LRU page: Recovered [ 48.663363][ T5035] Injecting memory failure for pfn 0x120e4b at process virtual address 0x20b59000 [ 48.663535][ T5035] Memory failure: 0x120e4b: recovery action for dirty LRU page: Recovered [ 48.663567][ T5035] Injecting memory failure for pfn 0x120e4c at process virtual address 0x20b5a000 [ 48.663739][ T5035] Memory failure: 0x120e4c: recovery action for dirty LRU page: Recovered [ 48.663770][ T5035] Injecting memory failure for pfn 0x120e4d at process virtual address 0x20b5b000 [ 48.663929][ T5035] Memory failure: 0x120e4d: recovery action for dirty LRU page: Recovered [ 48.663961][ T5035] Injecting memory failure for pfn 0x120e4e at process virtual address 0x20b5c000 [ 48.664140][ T5035] Memory failure: 0x120e4e: recovery action for dirty LRU page: Recovered [ 48.664172][ T5035] Injecting memory failure for pfn 0x120e4f at process virtual address 0x20b5d000 [ 48.664407][ T5035] Memory failure: 0x120e4f: recovery action for dirty LRU page: Recovered [ 48.664439][ T5035] Injecting memory failure for pfn 0x120e50 at process virtual address 0x20b5e000 [ 48.664599][ T5035] Memory failure: 0x120e50: recovery action for dirty LRU page: Recovered [ 48.664630][ T5035] Injecting memory failure for pfn 0x120e51 at process virtual address 0x20b5f000 [ 48.664816][ T5035] Memory failure: 0x120e51: recovery action for dirty LRU page: Recovered [ 48.664848][ T5035] Injecting memory failure for pfn 0x120e52 at process virtual address 0x20b60000 [ 48.665005][ T5035] Memory failure: 0x120e52: recovery action for dirty LRU page: Recovered [ 48.665037][ T5035] Injecting memory failure for pfn 0x120e53 at process virtual address 0x20b61000 [ 48.665198][ T5035] Memory failure: 0x120e53: recovery action for dirty LRU page: Recovered [ 48.665229][ T5035] Injecting memory failure for pfn 0x120e54 at process virtual address 0x20b62000 [ 48.665592][ T5035] Memory failure: 0x120e54: recovery action for dirty LRU page: Recovered [ 48.665602][ T5035] Injecting memory failure for pfn 0x120e55 at process virtual address 0x20b63000 [ 48.665648][ T5035] Memory failure: 0x120e55: recovery action for dirty LRU page: Recovered [ 48.665655][ T5035] Injecting memory failure for pfn 0x120e56 at process virtual address 0x20b64000 [ 48.665679][ T5035] Memory failure: 0x120e56: recovery action for dirty LRU page: Recovered [ 48.665686][ T5035] Injecting memory failure for pfn 0x120e57 at process virtual address 0x20b65000 [ 48.665708][ T5035] Memory failure: 0x120e57: recovery action for dirty LRU page: Recovered [ 48.665715][ T5035] Injecting memory failure for pfn 0x120e58 at process virtual address 0x20b66000 [ 48.665737][ T5035] Memory failure: 0x120e58: recovery action for dirty LRU page: Recovered [ 48.665744][ T5035] Injecting memory failure for pfn 0x120e59 at process virtual address 0x20b67000 [ 48.665765][ T5035] Memory failure: 0x120e59: recovery action for dirty LRU page: Recovered [ 48.665959][ T5035] Injecting memory failure for pfn 0x120e5a at process virtual address 0x20b68000 [ 48.666147][ T5035] Memory failure: 0x120e5a: recovery action for dirty LRU page: Recovered [ 48.666191][ T5035] Injecting memory failure for pfn 0x120e5b at process virtual address 0x20b69000 [ 48.666366][ T5035] Memory failure: 0x120e5b: recovery action for dirty LRU page: Recovered [ 48.666398][ T5035] Injecting memory failure for pfn 0x120e5c at process virtual address 0x20b6a000 [ 48.666574][ T5035] Memory failure: 0x120e5c: recovery action for dirty LRU page: Recovered [ 48.666606][ T5035] Injecting memory failure for pfn 0x120e5d at process virtual address 0x20b6b000 [ 48.666778][ T5035] Memory failure: 0x120e5d: recovery action for dirty LRU page: Recovered [ 48.666809][ T5035] Injecting memory failure for pfn 0x120e5e at process virtual address 0x20b6c000 [ 48.666967][ T5035] Memory failure: 0x120e5e: recovery action for dirty LRU page: Recovered [ 48.666998][ T5035] Injecting memory failure for pfn 0x120e5f at process virtual address 0x20b6d000 [ 48.667170][ T5035] Memory failure: 0x120e5f: recovery action for dirty LRU page: Recovered [ 48.667202][ T5035] Injecting memory failure for pfn 0x120e60 at process virtual address 0x20b6e000 [ 48.667392][ T5035] Memory failure: 0x120e60: recovery action for dirty LRU page: Recovered [ 48.667424][ T5035] Injecting memory failure for pfn 0x120e61 at process virtual address 0x20b6f000 [ 48.667594][ T5035] Memory failure: 0x120e61: recovery action for dirty LRU page: Recovered [ 48.667626][ T5035] Injecting memory failure for pfn 0x120e62 at process virtual address 0x20b70000 [ 48.667811][ T5035] Memory failure: 0x120e62: recovery action for dirty LRU page: Recovered [ 48.667868][ T5035] Injecting memory failure for pfn 0x120e63 at process virtual address 0x20b71000 [ 48.668138][ T5035] Memory failure: 0x120e63: recovery action for dirty LRU page: Recovered [ 48.668175][ T5035] Injecting memory failure for pfn 0x120e64 at process virtual address 0x20b72000 [ 48.668418][ T5035] Memory failure: 0x120e64: recovery action for dirty LRU page: Recovered [ 48.668450][ T5035] Injecting memory failure for pfn 0x120e65 at process virtual address 0x20b73000 [ 48.668629][ T5035] Memory failure: 0x120e65: recovery action for dirty LRU page: Recovered [ 48.668661][ T5035] Injecting memory failure for pfn 0x120e66 at process virtual address 0x20b74000 [ 48.668819][ T5035] Memory failure: 0x120e66: recovery action for dirty LRU page: Recovered [ 48.668851][ T5035] Injecting memory failure for pfn 0x120e67 at process virtual address 0x20b75000 [ 48.668996][ T5035] Memory failure: 0x120e67: recovery action for dirty LRU page: Recovered [ 48.669027][ T5035] Injecting memory failure for pfn 0x120e68 at process virtual address 0x20b76000 [ 48.669198][ T5035] Memory failure: 0x120e68: recovery action for dirty LRU page: Recovered [ 48.669233][ T5035] Injecting memory failure for pfn 0x11fe01 at process virtual address 0x20b77000 [ 48.669433][ T5035] Memory failure: 0x11fe01: recovery action for dirty LRU page: Recovered [ 48.669466][ T5035] Injecting memory failure for pfn 0x11f27a at process virtual address 0x20b78000 [ 48.669635][ T5035] Memory failure: 0x11f27a: recovery action for dirty LRU page: Recovered [ 48.669667][ T5035] Injecting memory failure for pfn 0x11fd26 at process virtual address 0x20b79000 [ 48.669825][ T5035] Memory failure: 0x11fd26: recovery action for dirty LRU page: Recovered [ 48.669857][ T5035] Injecting memory failure for pfn 0x11fd33 at process virtual address 0x20b7a000 [ 48.670028][ T5035] Memory failure: 0x11fd33: recovery action for dirty LRU page: Recovered [ 48.670060][ T5035] Injecting memory failure for pfn 0x11ef62 at process virtual address 0x20b7b000 [ 48.670233][ T5035] Memory failure: 0x11ef62: recovery action for dirty LRU page: Recovered [ 48.670277][ T5035] Injecting memory failure for pfn 0x11fd34 at process virtual address 0x20b7c000 [ 48.670436][ T5035] Memory failure: 0x11fd34: recovery action for dirty LRU page: Recovered [ 48.670473][ T5035] Injecting memory failure for pfn 0x11e17f at process virtual address 0x20b7d000 [ 48.670633][ T5035] Memory failure: 0x11e17f: recovery action for dirty LRU page: Recovered [ 48.670665][ T5035] Injecting memory failure for pfn 0x11fd89 at process virtual address 0x20b7e000 [ 48.670836][ T5035] Memory failure: 0x11fd89: recovery action for dirty LRU page: Recovered [ 48.670867][ T5035] Injecting memory failure for pfn 0x120923 at process virtual address 0x20b7f000 [ 48.671013][ T5035] Memory failure: 0x120923: recovery action for dirty LRU page: Recovered [ 48.671045][ T5035] Injecting memory failure for pfn 0x1211e5 at process virtual address 0x20b80000 [ 48.671216][ T5035] Memory failure: 0x1211e5: recovery action for dirty LRU page: Recovered [ 48.671286][ T5035] Injecting memory failure for pfn 0x136d94 at process virtual address 0x20b81000 [ 48.671469][ T5035] Memory failure: 0x136d94: recovery action for dirty LRU page: Recovered [ 48.671501][ T5035] Injecting memory failure for pfn 0x121467 at process virtual address 0x20b82000 [ 48.671660][ T5035] Memory failure: 0x121467: recovery action for dirty LRU page: Recovered [ 48.671692][ T5035] Injecting memory failure for pfn 0x11e31a at process virtual address 0x20b83000 [ 48.671849][ T5035] Memory failure: 0x11e31a: recovery action for dirty LRU page: Recovered [ 48.671881][ T5035] Injecting memory failure for pfn 0x1223cb at process virtual address 0x20b84000 [ 48.672026][ T5035] Memory failure: 0x1223cb: recovery action for dirty LRU page: Recovered [ 48.672057][ T5035] Injecting memory failure for pfn 0x11ef60 at process virtual address 0x20b85000 [ 48.672228][ T5035] Memory failure: 0x11ef60: recovery action for dirty LRU page: Recovered [ 48.672304][ T5035] Injecting memory failure for pfn 0x121df2 at process virtual address 0x20b86000 [ 48.672462][ T5035] Memory failure: 0x121df2: recovery action for dirty LRU page: Recovered [ 48.672493][ T5035] Injecting memory failure for pfn 0x11aaa4 at process virtual address 0x20b87000 [ 48.776492][ T5080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.786259][ T5035] Memory failure: 0x11aaa4: recovery action for dirty LRU page: Recovered [ 48.786338][ T5035] Injecting memory failure for pfn 0x121df5 at process virtual address 0x20b88000 [ 48.852554][ T5078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.863589][ T5078] team0: Port device netdevsim1 added [ 48.899970][ T5035] Memory failure: 0x121df5: recovery action for dirty LRU page: Recovered [ 48.899991][ T5035] Injecting memory failure for pfn 0x11e137 at process virtual address 0x20b89000 [ 48.902160][ T5035] Memory failure: 0x11e137: recovery action for dirty LRU page: Recovered [ 48.902179][ T5035] Injecting memory failure for pfn 0x1211e6 at process virtual address 0x20b8a000 [ 48.902290][ T5035] Memory failure: 0x1211e6: recovery action for dirty LRU page: Recovered [ 48.902300][ T5035] Injecting memory failure for pfn 0x121da4 at process virtual address 0x20b8b000 [ 48.902333][ T5035] Memory failure: 0x121da4: recovery action for dirty LRU page: Recovered [ 48.902342][ T5035] Injecting memory failure for pfn 0x11fd4f at process virtual address 0x20b8c000 [ 48.902367][ T5035] Memory failure: 0x11fd4f: recovery action for dirty LRU page: Recovered [ 48.902375][ T5035] Injecting memory failure for pfn 0x121ddc at process virtual address 0x20b8d000 [ 48.902398][ T5035] Memory failure: 0x121ddc: recovery action for dirty LRU page: Recovered [ 48.902406][ T5035] Injecting memory failure for pfn 0x136ecf at process virtual address 0x20b8e000 [ 48.902429][ T5035] Memory failure: 0x136ecf: recovery action for dirty LRU page: Recovered [ 48.902436][ T5035] Injecting memory failure for pfn 0x12030b at process virtual address 0x20b8f000 [ 48.902458][ T5035] Memory failure: 0x12030b: recovery action for dirty LRU page: Recovered [ 48.902465][ T5035] Injecting memory failure for pfn 0x11e17d at process virtual address 0x20b90000 [ 48.902487][ T5035] Memory failure: 0x11e17d: recovery action for dirty LRU page: Recovered [ 48.902494][ T5035] Injecting memory failure for pfn 0x121da1 at process virtual address 0x20b91000 [ 48.902516][ T5035] Memory failure: 0x121da1: recovery action for dirty LRU page: Recovered [ 48.902523][ T5035] Injecting memory failure for pfn 0x121da8 at process virtual address 0x20b92000 [ 48.903965][ T5035] Memory failure: 0x121da8: recovery action for dirty LRU page: Recovered [ 48.903980][ T5035] Injecting memory failure for pfn 0x121ddf at process virtual address 0x20b93000 [ 48.904009][ T5035] Memory failure: 0x121ddf: recovery action for dirty LRU page: Recovered [ 48.904018][ T5035] Injecting memory failure for pfn 0x136a7f at process virtual address 0x20b94000 [ 48.904043][ T5035] Memory failure: 0x136a7f: recovery action for dirty LRU page: Recovered [ 48.904051][ T5035] Injecting memory failure for pfn 0x120393 at process virtual address 0x20b95000 [ 48.904074][ T5035] Memory failure: 0x120393: recovery action for dirty LRU page: Recovered [ 48.904081][ T5035] Injecting memory failure for pfn 0x136ee3 at process virtual address 0x20b96000 [ 48.904104][ T5035] Memory failure: 0x136ee3: recovery action for dirty LRU page: Recovered [ 48.904112][ T5035] Injecting memory failure for pfn 0x11ef66 at process virtual address 0x20b97000 [ 48.904137][ T5035] Memory failure: 0x11ef66: recovery action for dirty LRU page: Recovered [ 48.904144][ T5035] Injecting memory failure for pfn 0x11ed0b at process virtual address 0x20b98000 [ 48.904166][ T5035] Memory failure: 0x11ed0b: recovery action for dirty LRU page: Recovered [ 48.904173][ T5035] Injecting memory failure for pfn 0x11ed1a at process virtual address 0x20b99000 [ 48.904194][ T5035] Memory failure: 0x11ed1a: recovery action for dirty LRU page: Recovered [ 48.904201][ T5035] Injecting memory failure for pfn 0x121de6 at process virtual address 0x20b9a000 [ 48.904223][ T5035] Memory failure: 0x121de6: recovery action for dirty LRU page: Recovered [ 48.904230][ T5035] Injecting memory failure for pfn 0x121d9c at process virtual address 0x20b9b000 [ 48.904257][ T5035] Memory failure: 0x121d9c: recovery action for dirty LRU page: Recovered [ 48.904266][ T5035] Injecting memory failure for pfn 0x120e69 at process virtual address 0x20b9c000 [ 48.904288][ T5035] Memory failure: 0x120e69: recovery action for dirty LRU page: Recovered [ 48.904295][ T5035] Injecting memory failure for pfn 0x11fe02 at process virtual address 0x20b9d000 [ 48.904316][ T5035] Memory failure: 0x11fe02: recovery action for dirty LRU page: Recovered [ 48.904323][ T5035] Injecting memory failure for pfn 0x11fe03 at process virtual address 0x20b9e000 [ 48.904344][ T5035] Memory failure: 0x11fe03: recovery action for dirty LRU page: Recovered [ 48.904351][ T5035] Injecting memory failure for pfn 0x11e318 at process virtual address 0x20b9f000 [ 48.904373][ T5035] Memory failure: 0x11e318: recovery action for dirty LRU page: Recovered [ 48.904380][ T5035] Injecting memory failure for pfn 0x11f27e at process virtual address 0x20ba0000 [ 48.904401][ T5035] Memory failure: 0x11f27e: recovery action for dirty LRU page: Recovered [ 48.904408][ T5035] Injecting memory failure for pfn 0x11f27f at process virtual address 0x20ba1000 [ 48.904430][ T5035] Memory failure: 0x11f27f: recovery action for dirty LRU page: Recovered [ 48.904437][ T5035] Injecting memory failure for pfn 0x1223f6 at process virtual address 0x20ba2000 [ 48.904459][ T5035] Memory failure: 0x1223f6: recovery action for dirty LRU page: Recovered [ 48.904466][ T5035] Injecting memory failure for pfn 0x1223f7 at process virtual address 0x20ba3000 [ 48.904487][ T5035] Memory failure: 0x1223f7: recovery action for dirty LRU page: Recovered [ 48.904494][ T5035] Injecting memory failure for pfn 0x1223be at process virtual address 0x20ba4000 [ 48.904516][ T5035] Memory failure: 0x1223be: recovery action for dirty LRU page: Recovered [ 48.904523][ T5035] Injecting memory failure for pfn 0x1223bf at process virtual address 0x20ba5000 [ 48.904543][ T5035] Memory failure: 0x1223bf: recovery action for dirty LRU page: Recovered [ 48.904550][ T5035] Injecting memory failure for pfn 0x11f6a6 at process virtual address 0x20ba6000 [ 48.904572][ T5035] Memory failure: 0x11f6a6: recovery action for dirty LRU page: Recovered [ 48.904578][ T5035] Injecting memory failure for pfn 0x11f6a7 at process virtual address 0x20ba7000 [ 48.904599][ T5035] Memory failure: 0x11f6a7: recovery action for dirty LRU page: Recovered [ 48.904606][ T5035] Injecting memory failure for pfn 0x11f2c6 at process virtual address 0x20ba8000 [ 48.906307][ T5035] Memory failure: 0x11f2c6: recovery action for dirty LRU page: Recovered [ 48.906319][ T5035] Injecting memory failure for pfn 0x11f2c7 at process virtual address 0x20ba9000 [ 48.906389][ T5035] Memory failure: 0x11f2c7: recovery action for dirty LRU page: Recovered [ 48.906399][ T5035] Injecting memory failure for pfn 0x11f2d2 at process virtual address 0x20baa000 [ 48.906426][ T5035] Memory failure: 0x11f2d2: recovery action for dirty LRU page: Recovered [ 48.906434][ T5035] Injecting memory failure for pfn 0x11f2d3 at process virtual address 0x20bab000 [ 48.906458][ T5035] Memory failure: 0x11f2d3: recovery action for dirty LRU page: Recovered [ 48.906466][ T5035] Injecting memory failure for pfn 0x11f2e2 at process virtual address 0x20bac000 [ 48.906489][ T5035] Memory failure: 0x11f2e2: recovery action for dirty LRU page: Recovered [ 48.906496][ T5035] Injecting memory failure for pfn 0x11f2e3 at process virtual address 0x20bad000 [ 48.906518][ T5035] Memory failure: 0x11f2e3: recovery action for dirty LRU page: Recovered [ 48.906525][ T5035] Injecting memory failure for pfn 0x11f2e6 at process virtual address 0x20bae000 [ 48.906547][ T5035] Memory failure: 0x11f2e6: recovery action for dirty LRU page: Recovered [ 48.906554][ T5035] Injecting memory failure for pfn 0x11f2e7 at process virtual address 0x20baf000 [ 48.906578][ T5035] Memory failure: 0x11f2e7: recovery action for dirty LRU page: Recovered [ 48.906586][ T5035] Injecting memory failure for pfn 0x120d92 at process virtual address 0x20bb0000 [ 48.906607][ T5035] Memory failure: 0x120d92: recovery action for dirty LRU page: Recovered [ 48.906614][ T5035] Injecting memory failure for pfn 0x120d93 at process virtual address 0x20bb1000 [ 48.906635][ T5035] Memory failure: 0x120d93: recovery action for dirty LRU page: Recovered [ 48.906642][ T5035] Injecting memory failure for pfn 0x120929 at process virtual address 0x20bb2000 [ 48.906665][ T5035] Memory failure: 0x120929: recovery action for dirty LRU page: Recovered [ 48.906672][ T5035] Injecting memory failure for pfn 0x11e134 at process virtual address 0x20bb3000 [ 48.906693][ T5035] Memory failure: 0x11e134: recovery action for dirty LRU page: Recovered [ 48.906700][ T5035] Injecting memory failure for pfn 0x11e135 at process virtual address 0x20bb4000 [ 48.906721][ T5035] Memory failure: 0x11e135: recovery action for dirty LRU page: Recovered [ 48.906728][ T5035] Injecting memory failure for pfn 0x11f1c6 at process virtual address 0x20bb5000 [ 48.908952][ T5035] Memory failure: 0x11f1c6: recovery action for dirty LRU page: Recovered [ 48.908978][ T5035] Injecting memory failure for pfn 0x11f1c7 at process virtual address 0x20bb6000 [ 48.909071][ T5035] Memory failure: 0x11f1c7: recovery action for dirty LRU page: Recovered [ 48.909081][ T5035] Injecting memory failure for pfn 0x11f1e8 at process virtual address 0x20bb7000 [ 48.909110][ T5035] Memory failure: 0x11f1e8: recovery action for dirty LRU page: Recovered [ 48.909119][ T5035] Injecting memory failure for pfn 0x11f1e9 at process virtual address 0x20bb8000 [ 48.909144][ T5035] Memory failure: 0x11f1e9: recovery action for dirty LRU page: Recovered [ 48.909151][ T5035] Injecting memory failure for pfn 0x11f206 at process virtual address 0x20bb9000 [ 48.909175][ T5035] Memory failure: 0x11f206: recovery action for dirty LRU page: Recovered [ 48.909182][ T5035] Injecting memory failure for pfn 0x11f207 at process virtual address 0x20bba000 [ 48.909204][ T5035] Memory failure: 0x11f207: recovery action for dirty LRU page: Recovered [ 48.909211][ T5035] Injecting memory failure for pfn 0x11f20c at process virtual address 0x20bbb000 [ 48.909233][ T5035] Memory failure: 0x11f20c: recovery action for dirty LRU page: Recovered [ 48.909245][ T5035] Injecting memory failure for pfn 0x11f20d at process virtual address 0x20bbc000 [ 48.909271][ T5035] Memory failure: 0x11f20d: recovery action for dirty LRU page: Recovered [ 48.909279][ T5035] Injecting memory failure for pfn 0x11f20a at process virtual address 0x20bbd000 [ 48.909304][ T5035] Memory failure: 0x11f20a: recovery action for dirty LRU page: Recovered [ 48.909312][ T5035] Injecting memory failure for pfn 0x11f20b at process virtual address 0x20bbe000 [ 48.909334][ T5035] Memory failure: 0x11f20b: recovery action for dirty LRU page: Recovered [ 48.909341][ T5035] Injecting memory failure for pfn 0x121da2 at process virtual address 0x20bbf000 [ 48.909362][ T5035] Memory failure: 0x121da2: recovery action for dirty LRU page: Recovered [ 48.909369][ T5035] Injecting memory failure for pfn 0x121da3 at process virtual address 0x20bc0000 [ 48.909391][ T5035] Memory failure: 0x121da3: recovery action for dirty LRU page: Recovered [ 48.909398][ T5035] Injecting memory failure for pfn 0x136a7c at process virtual address 0x20bc1000 [ 48.909419][ T5035] Memory failure: 0x136a7c: recovery action for dirty LRU page: Recovered [ 48.909426][ T5035] Injecting memory failure for pfn 0x136a7d at process virtual address 0x20bc2000 [ 48.909447][ T5035] Memory failure: 0x136a7d: recovery action for dirty LRU page: Recovered [ 48.909454][ T5035] Injecting memory failure for pfn 0x121d9e at process virtual address 0x20bc3000 [ 48.909475][ T5035] Memory failure: 0x121d9e: recovery action for dirty LRU page: Recovered [ 48.909482][ T5035] Injecting memory failure for pfn 0x121d9f at process virtual address 0x20bc4000 [ 48.909503][ T5035] Memory failure: 0x121d9f: recovery action for dirty LRU page: Recovered [ 48.909510][ T5035] Injecting memory failure for pfn 0x11ed1c at process virtual address 0x20bc5000 [ 48.909531][ T5035] Memory failure: 0x11ed1c: recovery action for dirty LRU page: Recovered [ 48.909538][ T5035] Injecting memory failure for pfn 0x11ed1d at process virtual address 0x20bc6000 [ 48.909559][ T5035] Memory failure: 0x11ed1d: recovery action for dirty LRU page: Recovered [ 48.909566][ T5035] Injecting memory failure for pfn 0x136ee0 at process virtual address 0x20bc7000 [ 48.909587][ T5035] Memory failure: 0x136ee0: recovery action for dirty LRU page: Recovered [ 48.909594][ T5035] Injecting memory failure for pfn 0x136ee1 at process virtual address 0x20bc8000 [ 48.909616][ T5035] Memory failure: 0x136ee1: recovery action for dirty LRU page: Recovered [ 48.909623][ T5035] Injecting memory failure for pfn 0x1362cc at process virtual address 0x20bc9000 [ 48.909644][ T5035] Memory failure: 0x1362cc: recovery action for dirty LRU page: Recovered [ 48.909651][ T5035] Injecting memory failure for pfn 0x1362cd at process virtual address 0x20bca000 [ 48.909672][ T5035] Memory failure: 0x1362cd: recovery action for dirty LRU page: Recovered [ 48.909679][ T5035] Injecting memory failure for pfn 0x120308 at process virtual address 0x20bcb000 [ 48.909700][ T5035] Memory failure: 0x120308: recovery action for dirty LRU page: Recovered [ 48.909707][ T5035] Injecting memory failure for pfn 0x120309 at process virtual address 0x20bcc000 [ 48.909728][ T5035] Memory failure: 0x120309: recovery action for dirty LRU page: Recovered [ 48.909734][ T5035] Injecting memory failure for pfn 0x11ed18 at process virtual address 0x20bcd000 [ 48.909756][ T5035] Memory failure: 0x11ed18: recovery action for dirty LRU page: Recovered [ 48.909763][ T5035] Injecting memory failure for pfn 0x11ed19 at process virtual address 0x20bce000 [ 48.909783][ T5035] Memory failure: 0x11ed19: recovery action for dirty LRU page: Recovered [ 48.909790][ T5035] Injecting memory failure for pfn 0x11ffbe at process virtual address 0x20bcf000 [ 48.909812][ T5035] Memory failure: 0x11ffbe: recovery action for dirty LRU page: Recovered [ 48.909819][ T5035] Injecting memory failure for pfn 0x11ffbf at process virtual address 0x20bd0000 [ 48.909840][ T5035] Memory failure: 0x11ffbf: recovery action for dirty LRU page: Recovered [ 48.909847][ T5035] Injecting memory failure for pfn 0x11ed08 at process virtual address 0x20bd1000 [ 48.909867][ T5035] Memory failure: 0x11ed08: recovery action for dirty LRU page: Recovered [ 48.909877][ T5035] Injecting memory failure for pfn 0x11ed09 at process virtual address 0x20bd2000 [ 48.911324][ T5035] Memory failure: 0x11ed09: recovery action for dirty LRU page: Recovered [ 48.911338][ T5035] Injecting memory failure for pfn 0x11f256 at process virtual address 0x20bd3000 [ 48.911370][ T5035] Memory failure: 0x11f256: recovery action for dirty LRU page: Recovered [ 48.911381][ T5035] Injecting memory failure for pfn 0x122392 at process virtual address 0x20bd4000 [ 48.911408][ T5035] Memory failure: 0x122392: recovery action for dirty LRU page: Recovered [ 48.911416][ T5035] Injecting memory failure for pfn 0x122393 at process virtual address 0x20bd5000 [ 48.911439][ T5035] Memory failure: 0x122393: recovery action for dirty LRU page: Recovered [ 48.911447][ T5035] Injecting memory failure for pfn 0x122394 at process virtual address 0x20bd6000 [ 48.911470][ T5035] Memory failure: 0x122394: recovery action for dirty LRU page: Recovered [ 48.911477][ T5035] Injecting memory failure for pfn 0x122395 at process virtual address 0x20bd7000 [ 48.911499][ T5035] Memory failure: 0x122395: recovery action for dirty LRU page: Recovered [ 48.911506][ T5035] Injecting memory failure for pfn 0x122396 at process virtual address 0x20bd8000 [ 48.911528][ T5035] Memory failure: 0x122396: recovery action for dirty LRU page: Recovered [ 48.911535][ T5035] Injecting memory failure for pfn 0x122397 at process virtual address 0x20bd9000 [ 48.911557][ T5035] Memory failure: 0x122397: recovery action for dirty LRU page: Recovered [ 48.911564][ T5035] Injecting memory failure for pfn 0x122398 at process virtual address 0x20bda000 [ 48.911585][ T5035] Memory failure: 0x122398: recovery action for dirty LRU page: Recovered [ 48.911592][ T5035] Injecting memory failure for pfn 0x122399 at process virtual address 0x20bdb000 [ 48.911613][ T5035] Memory failure: 0x122399: recovery action for dirty LRU page: Recovered [ 48.911620][ T5035] Injecting memory failure for pfn 0x12239a at process virtual address 0x20bdc000 [ 48.911642][ T5035] Memory failure: 0x12239a: recovery action for dirty LRU page: Recovered [ 48.911649][ T5035] Injecting memory failure for pfn 0x12239b at process virtual address 0x20bdd000 [ 48.911670][ T5035] Memory failure: 0x12239b: recovery action for dirty LRU page: Recovered [ 48.911677][ T5035] Injecting memory failure for pfn 0x12239c at process virtual address 0x20bde000 [ 48.911698][ T5035] Memory failure: 0x12239c: recovery action for dirty LRU page: Recovered [ 48.911704][ T5035] Injecting memory failure for pfn 0x12239d at process virtual address 0x20bdf000 [ 48.911726][ T5035] Memory failure: 0x12239d: recovery action for dirty LRU page: Recovered [ 48.911732][ T5035] Injecting memory failure for pfn 0x12239e at process virtual address 0x20be0000 [ 48.911754][ T5035] Memory failure: 0x12239e: recovery action for dirty LRU page: Recovered [ 48.911761][ T5035] Injecting memory failure for pfn 0x12239f at process virtual address 0x20be1000 [ 48.911782][ T5035] Memory failure: 0x12239f: recovery action for dirty LRU page: Recovered [ 48.911789][ T5035] Injecting memory failure for pfn 0x11e100 at process virtual address 0x20be2000 [ 48.911810][ T5035] Memory failure: 0x11e100: recovery action for dirty LRU page: Recovered [ 48.911817][ T5035] Injecting memory failure for pfn 0x11e101 at process virtual address 0x20be3000 [ 48.911837][ T5035] Memory failure: 0x11e101: recovery action for dirty LRU page: Recovered [ 48.911844][ T5035] Injecting memory failure for pfn 0x11e102 at process virtual address 0x20be4000 [ 48.911865][ T5035] Memory failure: 0x11e102: recovery action for dirty LRU page: Recovered [ 48.911872][ T5035] Injecting memory failure for pfn 0x11e103 at process virtual address 0x20be5000 [ 48.911893][ T5035] Memory failure: 0x11e103: recovery action for dirty LRU page: Recovered [ 48.911900][ T5035] Injecting memory failure for pfn 0x11e104 at process virtual address 0x20be6000 [ 48.911920][ T5035] Memory failure: 0x11e104: recovery action for dirty LRU page: Recovered [ 48.911927][ T5035] Injecting memory failure for pfn 0x11e105 at process virtual address 0x20be7000 [ 48.911948][ T5035] Memory failure: 0x11e105: recovery action for dirty LRU page: Recovered [ 48.911955][ T5035] Injecting memory failure for pfn 0x11e106 at process virtual address 0x20be8000 [ 48.911976][ T5035] Memory failure: 0x11e106: recovery action for dirty LRU page: Recovered [ 48.913853][ T5035] Injecting memory failure for pfn 0x11e107 at process virtual address 0x20be9000 [ 48.913922][ T5035] Memory failure: 0x11e107: recovery action for dirty LRU page: Recovered [ 48.913934][ T5035] Injecting memory failure for pfn 0x11e108 at process virtual address 0x20bea000 [ 48.913963][ T5035] Memory failure: 0x11e108: recovery action for dirty LRU page: Recovered [ 48.913973][ T5035] Injecting memory failure for pfn 0x11e109 at process virtual address 0x20beb000 [ 48.913997][ T5035] Memory failure: 0x11e109: recovery action for dirty LRU page: Recovered [ 48.914005][ T5035] Injecting memory failure for pfn 0x11e10a at process virtual address 0x20bec000 [ 48.914027][ T5035] Memory failure: 0x11e10a: recovery action for dirty LRU page: Recovered [ 48.914035][ T5035] Injecting memory failure for pfn 0x11e10b at process virtual address 0x20bed000 [ 48.914057][ T5035] Memory failure: 0x11e10b: recovery action for dirty LRU page: Recovered [ 48.914064][ T5035] Injecting memory failure for pfn 0x11e10c at process virtual address 0x20bee000 [ 48.916324][ T5035] Memory failure: 0x11e10c: recovery action for dirty LRU page: Recovered [ 48.916343][ T5035] Injecting memory failure for pfn 0x11e10d at process virtual address 0x20bef000 [ 48.916450][ T5035] Memory failure: 0x11e10d: recovery action for dirty LRU page: Recovered [ 48.916461][ T5035] Injecting memory failure for pfn 0x11e10e at process virtual address 0x20bf0000 [ 48.916488][ T5035] Memory failure: 0x11e10e: recovery action for dirty LRU page: Recovered [ 48.916496][ T5035] Injecting memory failure for pfn 0x11e10f at process virtual address 0x20bf1000 [ 48.916519][ T5035] Memory failure: 0x11e10f: recovery action for dirty LRU page: Recovered [ 48.916527][ T5035] Injecting memory failure for pfn 0x11e110 at process virtual address 0x20bf2000 [ 48.916551][ T5035] Memory failure: 0x11e110: recovery action for dirty LRU page: Recovered [ 48.916558][ T5035] Injecting memory failure for pfn 0x11e111 at process virtual address 0x20bf3000 [ 48.916580][ T5035] Memory failure: 0x11e111: recovery action for dirty LRU page: Recovered [ 48.916587][ T5035] Injecting memory failure for pfn 0x11e112 at process virtual address 0x20bf4000 [ 48.916608][ T5035] Memory failure: 0x11e112: recovery action for dirty LRU page: Recovered [ 48.916616][ T5035] Injecting memory failure for pfn 0x11e113 at process virtual address 0x20bf5000 [ 48.916637][ T5035] Memory failure: 0x11e113: recovery action for dirty LRU page: Recovered [ 48.916644][ T5035] Injecting memory failure for pfn 0x11e114 at process virtual address 0x20bf6000 [ 48.916667][ T5035] Memory failure: 0x11e114: recovery action for dirty LRU page: Recovered [ 48.916674][ T5035] Injecting memory failure for pfn 0x11e115 at process virtual address 0x20bf7000 [ 48.916695][ T5035] Memory failure: 0x11e115: recovery action for dirty LRU page: Recovered [ 48.916702][ T5035] Injecting memory failure for pfn 0x11e116 at process virtual address 0x20bf8000 [ 48.916724][ T5035] Memory failure: 0x11e116: recovery action for dirty LRU page: Recovered [ 48.916731][ T5035] Injecting memory failure for pfn 0x11e117 at process virtual address 0x20bf9000 [ 48.916752][ T5035] Memory failure: 0x11e117: recovery action for dirty LRU page: Recovered [ 48.916759][ T5035] Injecting memory failure for pfn 0x11e118 at process virtual address 0x20bfa000 [ 48.916780][ T5035] Memory failure: 0x11e118: recovery action for dirty LRU page: Recovered [ 48.916787][ T5035] Injecting memory failure for pfn 0x11e119 at process virtual address 0x20bfb000 [ 48.916808][ T5035] Memory failure: 0x11e119: recovery action for dirty LRU page: Recovered [ 48.916814][ T5035] Injecting memory failure for pfn 0x11e11a at process virtual address 0x20bfc000 [ 48.916836][ T5035] Memory failure: 0x11e11a: recovery action for dirty LRU page: Recovered [ 48.916842][ T5035] Injecting memory failure for pfn 0x11e11b at process virtual address 0x20bfd000 [ 48.916864][ T5035] Memory failure: 0x11e11b: recovery action for dirty LRU page: Recovered [ 48.916871][ T5035] Injecting memory failure for pfn 0x11e11c at process virtual address 0x20bfe000 [ 48.916892][ T5035] Memory failure: 0x11e11c: recovery action for dirty LRU page: Recovered [ 48.916899][ T5035] Injecting memory failure for pfn 0x11e11d at process virtual address 0x20bff000 [ 48.916920][ T5035] Memory failure: 0x11e11d: recovery action for dirty LRU page: Recovered [ 49.573776][ T5089] Zero length message leads to an empty skb [ 50.126281][ T30] audit: type=1326 audit(50.090:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5097 comm="syz.1.44" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa977fe8 code=0x0 [ 50.751874][ T5110] xt_connbytes: Forcing CT accounting to be enabled [ 50.751894][ T5110] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.751933][ T5110] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 50.784304][ T5115] loop3: detected capacity change from 0 to 2048 [ 50.825911][ T4720] Bluetooth: hci4: command 0x2016 tx timeout [ 50.858344][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 51.037144][ T5115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.226044][ T5124] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.226607][ T5124] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 51.226643][ T5124] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.226643][ T5124] [ 51.226672][ T5124] EXT4-fs (loop3): Total free blocks count 0 [ 51.226700][ T5124] EXT4-fs (loop3): Free/Dirty block details [ 51.226732][ T5124] EXT4-fs (loop3): free_blocks=2415919504 [ 51.226934][ T5124] EXT4-fs (loop3): dirty_blocks=48 [ 51.226962][ T5124] EXT4-fs (loop3): Block reservation details [ 51.226990][ T5124] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 51.706112][ T5137] input: syz0 as /devices/virtual/input/input3 [ 51.884687][ T5140] hub 8-0:1.0: USB hub found [ 51.885507][ T5140] hub 8-0:1.0: 8 ports detected [ 52.238697][ T4715] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 52.239630][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.604432][ T5150] loop1: detected capacity change from 0 to 1024 [ 52.607415][ T5150] EXT4-fs: Ignoring removed bh option [ 52.635935][ T5150] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 52.649774][ T5150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 52.649812][ T5150] System zones: 0-1, 3-12 [ 52.675529][ T5150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.113697][ T4720] Bluetooth: hci4: command 0x2016 tx timeout [ 53.306276][ T5159] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.55: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 53.376340][ T5159] EXT4-fs (loop1): Remounting filesystem read-only [ 55.282191][ T5169] Injecting memory failure for pfn 0x13b201 at process virtual address 0x20001000 [ 55.291201][ T5169] Memory failure: 0x13b201: Sending SIGBUS to syz.0.57:5169 due to hardware memory corruption [ 55.291350][ T5169] Memory failure: 0x13b201: recovery action for unsplit thp: Failed [ 55.469826][ T4720] Bluetooth: hci4: command 0x2016 tx timeout [ 55.502888][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.425609][ T5190] loop0: detected capacity change from 0 to 2048 [ 56.856573][ T5192] loop3: detected capacity change from 0 to 512 [ 57.032030][ T5192] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 57.032120][ T5192] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 57.041654][ T5192] EXT4-fs (loop3): 1 truncate cleaned up [ 57.044982][ T5192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.059375][ T5198] loop1: detected capacity change from 0 to 512 [ 57.197430][ T5190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.626636][ T5198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.732019][ T5192] kthread_run failed with err -4 [ 58.118681][ T5197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 58.121727][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.341681][ T5216] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.61: corrupted xattr block 33: overlapping e_value [ 58.698390][ T5216] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.61: corrupted xattr block 33: overlapping e_value [ 58.699121][ T5216] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.61: corrupted xattr block 33: overlapping e_value [ 59.509897][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.518252][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.535417][ T5234] Invalid source name [ 60.535431][ T5234] UBIFS error (pid: 5234): cannot open "ubifs", error -22 [ 61.871903][ T5250] can0: slcan on ttyS3. [ 62.137636][ T5250] can0 (unregistered): slcan off ttyS3. [ 63.731251][ T5261] loop4: detected capacity change from 0 to 1024 [ 63.734661][ T5261] EXT4-fs: Ignoring removed bh option [ 64.294711][ T5261] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.419785][ T5261] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 64.419960][ T5261] System zones: 0-1, 3-12 [ 64.460024][ T5261] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.77: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.460050][ T5261] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.460363][ T5261] EXT4-fs (loop4): Remounting filesystem read-only [ 64.460375][ T5261] Quota error (device loop4): write_blk: dquota write failed [ 64.460389][ T5261] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.460424][ T5261] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 64.460479][ T5261] EXT4-fs (loop4): 1 orphan inode deleted [ 64.460946][ T5261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.507135][ T1558] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.507168][ T1558] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.519997][ T1083] cfg80211: failed to load regulatory.db [ 64.922391][ T5277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.80'. [ 65.711489][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.929614][ T5284] loop0: detected capacity change from 0 to 512 [ 66.895487][ T50] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 66.897877][ T5284] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.82: invalid indirect mapped block 4294967295 (level 1) [ 66.903817][ T5284] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.904877][ T5284] EXT4-fs (loop0): Remounting filesystem read-only [ 66.905018][ T5284] EXT4-fs (loop0): 2 truncates cleaned up [ 67.058982][ T5284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.626687][ T5295] loop4: detected capacity change from 0 to 1024 [ 67.641418][ T5295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.132809][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.134186][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.476662][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.969667][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.223997][ T5332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.89'. [ 70.225816][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.226171][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.235949][ T5357] process 'syz.0.93' launched './file0' with NULL argv: empty string added [ 73.358520][ T5374] loop3: detected capacity change from 0 to 128 [ 73.364647][ T5374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.386878][ T5374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.746523][ T5381] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 74.081700][ T5391] loop0: detected capacity change from 0 to 8192 [ 74.149229][ T5391] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.088195][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.563918][ T5405] »»»»»»: renamed from vlan0 (while UP) [ 76.373115][ T5413] loop0: detected capacity change from 0 to 8 [ 76.748539][ T5415] tipc: Started in network mode [ 76.748564][ T5415] tipc: Node identity 4, cluster identity 4711 [ 76.748577][ T5415] tipc: Node number set to 4 [ 76.784045][ T5419] loop4: detected capacity change from 0 to 1024 [ 76.784441][ T5419] EXT4-fs: Ignoring removed bh option [ 76.789556][ T5419] EXT4-fs: Mount option(s) incompatible with ext3 [ 77.770175][ T5412] SQUASHFS error: zlib decompression failed, data probably corrupt [ 77.772024][ T5412] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.773590][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.775616][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.777800][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.783619][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.783714][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.783721][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.783744][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.783750][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.795950][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.795982][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.796020][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.796033][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.796108][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.796119][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 77.796142][ T5412] SQUASHFS error: Unable to read data cache entry [4de] [ 77.796152][ T5412] SQUASHFS error: Unable to read page, block 4de, size 1 [ 80.175784][ T5447] loop3: detected capacity change from 0 to 1024 [ 80.365960][ T5451] loop4: detected capacity change from 0 to 1024 [ 80.402639][ T5447] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 80.402712][ T5447] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 80.402723][ T5447] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.117: Failed to acquire dquot type 0 [ 80.402736][ T5447] loop3: lost filesystem error report for type 5 error -5 [ 80.404648][ T5447] EXT4-fs (loop3): 1 truncate cleaned up [ 80.407180][ T5447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.409798][ T5451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.387949][ T5475] warning: `syz.1.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.787512][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.959217][ T5480] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 82.959508][ T5480] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 82.959573][ T5480] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.117: Failed to acquire dquot type 0 [ 83.009193][ T4889] IPVS: starting estimator thread 0... [ 83.067242][ T30] audit: type=1326 audit(524371.099:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377fe8 code=0x7ffc0000 [ 83.067288][ T30] audit: type=1326 audit(524371.099:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377fe8 code=0x7ffc0000 [ 83.068034][ T30] audit: type=1326 audit(524371.099:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff80377fe8 code=0x7ffc0000 [ 83.068060][ T30] audit: type=1326 audit(524371.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377fe8 code=0x7ffc0000 [ 83.068091][ T30] audit: type=1326 audit(524371.099:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377fe8 code=0x7ffc0000 [ 83.068860][ T30] audit: type=1326 audit(524371.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff80377fe8 code=0x7ffc0000 [ 83.197172][ T5482] IPVS: using max 59 ests per chain, 141600 per kthread [ 83.379273][ T5488] netlink: set zone limit has 8 unknown bytes [ 83.390052][ T5490] loop4: detected capacity change from 0 to 256 [ 83.390436][ T5490] vfat: Unknown parameter '½ä%k0x0000000000000000' [ 83.477303][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.040332][ T5502] input: syz0 as /devices/virtual/input/input4 [ 84.342117][ T5504] loop3: detected capacity change from 0 to 512 [ 85.012907][ T5504] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.471927][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 85.471958][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 85.471971][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 85.471977][ T50] Workqueue: hci3 hci_rx_work [ 85.472000][ T50] Call trace: [ 85.472003][ T50] show_stack+0x2c/0x3c (C) [ 85.472019][ T50] __dump_stack+0x30/0x40 [ 85.472031][ T50] dump_stack_lvl+0xd8/0x12c [ 85.472043][ T50] dump_stack+0x1c/0x28 [ 85.472055][ T50] sysfs_warn_dup+0x9c/0xb8 [ 85.472067][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 85.472078][ T50] kobject_add_internal+0x290/0x6f0 [ 85.472088][ T50] kobject_add_varg+0x9c/0xe8 [ 85.472101][ T50] kobject_add+0x110/0x1c8 [ 85.472113][ T50] device_add+0x394/0x9e0 [ 85.472127][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 85.472138][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 85.472147][ T50] hci_le_conn_complete_evt+0x114/0x3d8 [ 85.472156][ T50] hci_le_meta_evt+0x2b0/0x46c [ 85.472167][ T50] hci_event_packet+0x4c0/0x9c8 [ 85.472177][ T50] hci_rx_work+0x2f4/0xd78 [ 85.472189][ T50] process_scheduled_works+0x788/0x10b8 [ 85.472201][ T50] worker_thread+0x798/0xbd0 [ 85.472211][ T50] kthread+0x304/0x3d4 [ 85.472220][ T50] ret_from_fork+0x10/0x20 [ 85.472252][ T50] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.472275][ T50] Bluetooth: hci3: failed to register connection device [ 85.493290][ T5504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 85.493474][ T5504] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.493625][ T5504] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.126: bg 0: block 361: padding at end of block bitmap is not set [ 85.493640][ T5504] loop3: lost filesystem error report for type 5 error -117 [ 85.501099][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 85.501110][ C1] EXT4-fs (loop3): initial error at time 524373: ext4_validate_block_bitmap:441 [ 85.501123][ C1] EXT4-fs (loop3): last error at time 524373: ext4_validate_block_bitmap:441 [ 85.940526][ T5504] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 85.940576][ T5504] loop3: lost filesystem error report for type 5 error -117 [ 86.107006][ T5504] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.126: attempt to clear invalid blocks 33619980 len 1 [ 86.107133][ T5504] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.085120][ T5504] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.126: invalid indirect mapped block 1811939328 (level 0) [ 88.085172][ T5504] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.120335][ T5504] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.126: invalid indirect mapped block 2185560079 (level 1) [ 88.120442][ T5504] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.121312][ T5504] EXT4-fs (loop3): 1 truncate cleaned up [ 88.121798][ T5504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 88.161631][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 88.787852][ T5537] loop0: detected capacity change from 0 to 128 [ 89.207472][ T5541] loop3: detected capacity change from 0 to 512 [ 89.467360][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 89.467396][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 89.467410][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 89.467417][ T4720] Workqueue: hci4 hci_rx_work [ 89.467442][ T4720] Call trace: [ 89.467445][ T4720] show_stack+0x2c/0x3c (C) [ 89.467464][ T4720] __dump_stack+0x30/0x40 [ 89.467477][ T4720] dump_stack_lvl+0xd8/0x12c [ 89.467489][ T4720] dump_stack+0x1c/0x28 [ 89.467501][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 89.467514][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 89.467525][ T4720] kobject_add_internal+0x290/0x6f0 [ 89.467538][ T4720] kobject_add_varg+0x9c/0xe8 [ 89.467551][ T4720] kobject_add+0x110/0x1c8 [ 89.467563][ T4720] device_add+0x394/0x9e0 [ 89.467578][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 89.467589][ T4720] le_conn_complete_evt+0xc68/0x10f8 [ 89.467600][ T4720] hci_le_conn_complete_evt+0x114/0x3d8 [ 89.467609][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 89.467620][ T4720] hci_event_packet+0x4c0/0x9c8 [ 89.467630][ T4720] hci_rx_work+0x2f4/0xd78 [ 89.467642][ T4720] process_scheduled_works+0x788/0x10b8 [ 89.467654][ T4720] worker_thread+0x798/0xbd0 [ 89.467665][ T4720] kthread+0x304/0x3d4 [ 89.467674][ T4720] ret_from_fork+0x10/0x20 [ 89.468453][ T4720] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.468482][ T4720] Bluetooth: hci4: failed to register connection device [ 89.942551][ T5553] loop4: detected capacity change from 0 to 8 [ 90.721752][ T5562] loop3: detected capacity change from 0 to 256 [ 90.725014][ T5562] vfat: Unknown parameter '' [ 91.462717][ T4720] Bluetooth: hci3: command 0x0406 tx timeout [ 92.832050][ T5576] loop0: detected capacity change from 0 to 8 [ 93.540047][ T5579] Injecting memory failure for pfn 0x142801 at process virtual address 0x20001000 [ 93.540813][ T5579] Memory failure: 0x142801: Sending SIGBUS to syz.3.145:5579 due to hardware memory corruption [ 93.540862][ T5579] Memory failure: 0x142801: recovery action for unsplit thp: Failed [ 94.341013][ T5607] loop0: detected capacity change from 0 to 256 [ 95.285626][ T5620] loop4: detected capacity change from 0 to 128 [ 95.507086][ T4720] Bluetooth: hci4: command 0x2016 tx timeout [ 96.003134][ T5627] loop0: detected capacity change from 0 to 8 [ 96.339910][ T5633] loop3: detected capacity change from 0 to 128 [ 96.368031][ T5627] SQUASHFS error: zlib decompression failed, data probably corrupt [ 96.368074][ T5627] SQUASHFS error: Failed to read block 0x4de: -5 [ 96.368082][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368089][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368116][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368122][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368147][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368152][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368201][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368207][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368589][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368595][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368612][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368617][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368636][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368641][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.368661][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.368666][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.369101][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.369109][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.369127][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.369132][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.369152][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.369157][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 96.369176][ T5627] SQUASHFS error: Unable to read data cache entry [4de] [ 96.369181][ T5627] SQUASHFS error: Unable to read page, block 4de, size 1 [ 97.160710][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 101.314875][ T5663] Injecting memory failure for pfn 0x139817 at process virtual address 0x20001000 [ 101.653299][ T5663] Memory failure: 0x139817: Sending SIGBUS to syz.3.165:5663 due to hardware memory corruption [ 101.653591][ T5663] Memory failure: 0x139817: recovery action for dirty LRU page: Recovered [ 101.653660][ T5663] Injecting memory failure for pfn 0x139819 at process virtual address 0x20002000 [ 102.042740][ T5663] Memory failure: 0x139819: recovery action for dirty LRU page: Recovered [ 102.042785][ T5663] Injecting memory failure for pfn 0x139750 at process virtual address 0x20003000 [ 102.043511][ T5663] Memory failure: 0x139750: recovery action for dirty LRU page: Recovered [ 102.426150][ T5688] loop3: detected capacity change from 0 to 128 [ 102.690379][ T5667] »»»»»»: renamed from vlan0 (while UP) [ 104.263378][ T5702] block nbd0: NBD_DISCONNECT [ 104.267823][ T5702] tmpfs: Bad value for 'mpol' [ 104.333927][ T1083] IPVS: starting estimator thread 0... [ 104.534238][ T5703] IPVS: using max 41 ests per chain, 98400 per kthread [ 105.161254][ T5713] x_tables: duplicate underflow at hook 3 [ 105.972020][ T5721] loop3: detected capacity change from 0 to 128 [ 105.984285][ T5692] Set syz1 is full, maxelem 65536 reached [ 106.035374][ T5721] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.037799][ T5721] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 106.037844][ T5721] FAT-fs (loop3): Filesystem has been set read-only [ 106.167221][ T5730] Injecting memory failure for pfn 0x138f5d at process virtual address 0x20001000 [ 107.127360][ T5730] Memory failure: 0x138f5d: Sending SIGBUS to syz.4.183:5730 due to hardware memory corruption [ 107.127728][ T5730] Memory failure: 0x138f5d: recovery action for dirty LRU page: Recovered [ 107.127845][ T5730] Injecting memory failure for pfn 0x138f96 at process virtual address 0x20002000 [ 107.192259][ T5730] Memory failure: 0x138f96: Sending SIGBUS to syz.4.183:5730 due to hardware memory corruption [ 107.192601][ T5730] Memory failure: 0x138f96: recovery action for dirty LRU page: Recovered [ 107.192703][ T5730] Injecting memory failure for pfn 0x1351e6 at process virtual address 0x20003000 [ 107.193187][ T5730] Memory failure: 0x1351e6: Sending SIGBUS to syz.4.183:5730 due to hardware memory corruption [ 107.193430][ T5730] Memory failure: 0x1351e6: recovery action for dirty LRU page: Recovered [ 107.447359][ T5744] loop0: detected capacity change from 0 to 256 [ 108.377013][ T5749] input: syz0 as /devices/virtual/input/input5 [ 108.933753][ T5755] loop4: detected capacity change from 0 to 512 [ 109.391397][ T5755] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 109.571011][ T5750] loop3: detected capacity change from 0 to 8 [ 109.672614][ T5755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 109.672754][ T5755] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.673419][ T5755] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.189: bg 0: block 361: padding at end of block bitmap is not set [ 109.673599][ T5755] loop4: lost filesystem error report for type 5 error -117 [ 109.673822][ T5755] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 109.674060][ T5755] loop4: lost filesystem error report for type 5 error -117 [ 109.674212][ T5755] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.189: attempt to clear invalid blocks 33619980 len 1 [ 109.674450][ T5755] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.674775][ T5755] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.189: invalid indirect mapped block 1811939328 (level 0) [ 109.675041][ T5755] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.675216][ T5755] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.189: invalid indirect mapped block 2185560079 (level 1) [ 109.675458][ T5755] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.675696][ T5755] EXT4-fs (loop4): 1 truncate cleaned up [ 109.676422][ T5755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 111.377679][ T5750] SQUASHFS error: zlib decompression failed, data probably corrupt [ 111.377727][ T5750] SQUASHFS error: Failed to read block 0x4de: -5 [ 111.377735][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.377741][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.377815][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.377821][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.377846][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.377851][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.377870][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.377875][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.378512][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.378520][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.378547][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.378552][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.378574][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.378579][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.378595][ T5750] SQUASHFS error: Unable to read data cache entry [4de] [ 111.378600][ T5750] SQUASHFS error: Unable to read page, block 4de, size 1 [ 111.793404][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 112.701151][ T5747] infiniband syz2: set down [ 112.701187][ T5747] infiniband syz2: added ipvlan0 [ 112.702581][ T5747] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 112.703694][ T5747] infiniband syz2: Couldn't open port 1 [ 112.837460][ T5767] loop4: detected capacity change from 0 to 512 [ 112.839691][ T5767] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 112.839724][ T5767] EXT4-fs (loop4): group descriptors corrupted! [ 112.910563][ T5747] RDS/IB: syz2: added [ 112.910707][ T5747] smc: adding ib device syz2 with port count 1 [ 112.910757][ T5747] smc: ib device syz2 port 1 has no pnetid [ 113.732876][ T5777] loop4: detected capacity change from 0 to 8 [ 113.874833][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.875232][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.875545][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.875996][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.876318][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.876677][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.877184][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.877455][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.877794][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.878313][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.878622][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.879101][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.879484][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.879797][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.880361][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.880655][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.881230][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.881675][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.882296][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.882633][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.883031][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.883508][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.883850][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.884154][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.884713][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.884998][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.885440][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.885633][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.885894][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.886081][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.886575][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.886764][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.887045][ T5777] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.104125][ T5791] loop0: detected capacity change from 0 to 128 [ 114.104858][ T5791] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.105023][ T5791] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 114.105033][ T5791] FAT-fs (loop0): Filesystem has been set read-only [ 114.291351][ T5801] Injecting memory failure for pfn 0x11e0e2 at process virtual address 0x20001000 [ 114.385755][ T5803] loop4: detected capacity change from 0 to 8 [ 114.898542][ T5804] loop3: detected capacity change from 0 to 8 [ 115.197071][ T5801] Memory failure: 0x11e0e2: Sending SIGBUS to syz.2.200:5801 due to hardware memory corruption [ 115.197143][ T5801] Memory failure: 0x11e0e2: recovery action for dirty LRU page: Recovered [ 115.197171][ T5801] Injecting memory failure for pfn 0x11e0e3 at process virtual address 0x20002000 [ 115.406173][ T5803] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 115.406207][ T5803] unable to read xattr id index table [ 115.701719][ T5801] Memory failure: 0x11e0e3: recovery action for dirty LRU page: Recovered [ 115.701742][ T5801] Injecting memory failure for pfn 0x11e0e4 at process virtual address 0x20003000 [ 115.713715][ T5803] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.713734][ T5803] SQUASHFS error: Failed to read block 0x9b: -5 [ 115.713742][ T5803] SQUASHFS error: Unable to read metadata cache entry [99] [ 115.713750][ T5803] SQUASHFS error: Unable to read inode 0x127 [ 115.741585][ T5801] Memory failure: 0x11e0e4: recovery action for dirty LRU page: Recovered [ 115.746084][ T5802] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.746114][ T5802] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.746126][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746136][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746165][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746175][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746201][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746209][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746229][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746238][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746604][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746614][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746638][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746646][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746669][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746678][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.746697][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.746705][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.747001][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.747015][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.747044][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.747054][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.747077][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.747086][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 115.747105][ T5802] SQUASHFS error: Unable to read data cache entry [4de] [ 115.747114][ T5802] SQUASHFS error: Unable to read page, block 4de, size 1 [ 116.918068][ T5828] mmap: syz.1.208 (5828): VmData 164413440 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 117.049844][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 117.829635][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.837262][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.390290][ T5853] loop0: detected capacity change from 0 to 128 [ 118.619953][ T5853] FAT-fs (loop0): data area starts beyond volume (414 > 128) [ 118.619988][ T5853] FAT-fs (loop0): Can't find a valid FAT filesystem [ 119.537706][ T5866] loop0: detected capacity change from 0 to 1024 [ 119.731392][ T5866] __quota_error: 18 callbacks suppressed [ 119.732858][ T5866] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 119.739220][ T5866] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 119.739275][ T5866] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.218: Failed to acquire dquot type 0 [ 119.739299][ T5866] loop0: lost filesystem error report for type 5 error -5 [ 119.743197][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.743215][ C0] EXT4-fs (loop0): initial error at time 524408: ext4_acquire_dquot:7041 [ 119.743231][ C0] EXT4-fs (loop0): last error at time 524408: ext4_acquire_dquot:7041 [ 119.750688][ T5866] EXT4-fs (loop0): 1 truncate cleaned up [ 119.752368][ T5866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.244691][ T5879] Injecting memory failure for pfn 0x13939b at process virtual address 0x20001000 [ 120.258771][ T5877] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 120.258960][ T5877] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 120.259044][ T5877] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.218: Failed to acquire dquot type 0 [ 120.358580][ T5879] Memory failure: 0x13939b: Sending SIGBUS to syz.1.220:5879 due to hardware memory corruption [ 120.358697][ T5879] Memory failure: 0x13939b: recovery action for dirty LRU page: Recovered [ 120.358715][ T5879] Injecting memory failure for pfn 0x13939a at process virtual address 0x20002000 [ 120.361257][ T5879] Memory failure: 0x13939a: Sending SIGBUS to syz.1.220:5879 due to hardware memory corruption [ 120.361435][ T5879] Memory failure: 0x13939a: recovery action for dirty LRU page: Recovered [ 120.361481][ T5879] Injecting memory failure for pfn 0x139399 at process virtual address 0x20003000 [ 120.361702][ T5879] Memory failure: 0x139399: Sending SIGBUS to syz.1.220:5879 due to hardware memory corruption [ 120.361758][ T5879] Memory failure: 0x139399: recovery action for dirty LRU page: Recovered [ 120.652879][ T30] audit: type=1326 audit(524409.073:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5881 comm="syz.3.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b177fe8 code=0x0 [ 121.127278][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.103986][ T5922] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 123.839708][ T5931] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.839961][ T5931] overlayfs: failed to set xattr on upper [ 123.840004][ T5931] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.840037][ T5931] overlayfs: ...falling back to uuid=null. [ 123.840111][ T5931] overlayfs: maximum fs stacking depth exceeded [ 124.365400][ T5938] xt_NFQUEUE: number of total queues is 0 [ 125.485403][ T1558] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.486655][ T1558] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.603885][ T5939] loop4: detected capacity change from 0 to 8 [ 126.610968][ T4815] IPVS: starting estimator thread 0... [ 126.698834][ T5951] IPVS: using max 60 ests per chain, 144000 per kthread [ 127.214525][ T5956] @0Ù: renamed from dummy0 (while UP) [ 128.586679][ T5965] netlink: 64 bytes leftover after parsing attributes in process `syz.0.238'. [ 129.889451][ T5983] Injecting memory failure for pfn 0x142d3d at process virtual address 0x20001000 [ 129.914778][ T5983] Memory failure: 0x142d3d: Sending SIGBUS to syz.4.239:5983 due to hardware memory corruption [ 129.914897][ T5983] Memory failure: 0x142d3d: recovery action for dirty LRU page: Recovered [ 129.914943][ T5983] Injecting memory failure for pfn 0x142d3e at process virtual address 0x20002000 [ 129.920624][ T5983] Memory failure: 0x142d3e: Sending SIGBUS to syz.4.239:5983 due to hardware memory corruption [ 129.920793][ T5983] Memory failure: 0x142d3e: recovery action for dirty LRU page: Recovered [ 129.920840][ T5983] Injecting memory failure for pfn 0x142d3f at process virtual address 0x20003000 [ 129.920941][ T5983] Memory failure: 0x142d3f: Sending SIGBUS to syz.4.239:5983 due to hardware memory corruption [ 129.921029][ T5983] Memory failure: 0x142d3f: recovery action for dirty LRU page: Recovered [ 130.577295][ T5994] futex_wake_op: syz.1.245 tries to shift op by -65; fix this program [ 133.553633][ T6023] Bluetooth: MGMT ver 1.23 [ 135.327285][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 135.327995][ T6042] bridge_slave_1: left allmulticast mode [ 135.328109][ T6042] bridge_slave_1: left promiscuous mode [ 135.330199][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.990023][ T6045] Injecting memory failure for pfn 0x13c201 at process virtual address 0x20001000 [ 136.434926][ T6045] Memory failure: 0x13c201: recovery action for dirty LRU page: Recovered [ 136.854537][ T6042] bridge_slave_0: left allmulticast mode [ 136.854581][ T6042] bridge_slave_0: left promiscuous mode [ 136.854687][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.923558][ T6062] Soft offlining pfn 0x11fc4b at process virtual address 0x20ffe000 [ 137.925919][ T6062] Soft offlining pfn 0x1393e4 at process virtual address 0x20fff000 [ 138.019002][ T6059] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 138.206633][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.207502][ T6059] team0: Port device bond0 added [ 138.315952][ T6066] Injecting memory failure for pfn 0x139797 at process virtual address 0x20001000 [ 138.462709][ T6067] loop3: detected capacity change from 0 to 1024 [ 139.105946][ T6066] Memory failure: 0x139797: Sending SIGBUS to syz.3.259:6066 due to hardware memory corruption [ 139.106022][ T6066] Memory failure: 0x139797: recovery action for dirty LRU page: Recovered [ 139.106315][ T6066] Injecting memory failure for pfn 0x139796 at process virtual address 0x20002000 [ 139.107619][ T6066] Memory failure: 0x139796: Sending SIGBUS to syz.3.259:6066 due to hardware memory corruption [ 139.107645][ T6066] Memory failure: 0x139796: recovery action for dirty LRU page: Recovered [ 139.107656][ T6066] Injecting memory failure for pfn 0x139795 at process virtual address 0x20003000 [ 139.107688][ T6066] Memory failure: 0x139795: Sending SIGBUS to syz.3.259:6066 due to hardware memory corruption [ 139.107707][ T6066] Memory failure: 0x139795: recovery action for dirty LRU page: Recovered [ 139.122227][ T6067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.397385][ T6079] Injecting memory failure for pfn 0x142c23 at process virtual address 0x20001000 [ 139.529255][ T6080] loop4: detected capacity change from 0 to 1024 [ 140.187440][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.222052][ T6079] Memory failure: 0x142c23: Sending SIGBUS to syz.4.262:6079 due to hardware memory corruption [ 140.222329][ T6079] Memory failure: 0x142c23: recovery action for dirty LRU page: Recovered [ 140.222400][ T6079] Injecting memory failure for pfn 0x142c08 at process virtual address 0x20002000 [ 140.803358][ T6079] Memory failure: 0x142c08: Sending SIGBUS to syz.4.262:6079 due to hardware memory corruption [ 140.803421][ T6079] Memory failure: 0x142c08: recovery action for dirty LRU page: Recovered [ 140.803452][ T6079] Injecting memory failure for pfn 0x142c09 at process virtual address 0x20003000 [ 140.805689][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.857786][ T6079] Memory failure: 0x142c09: Sending SIGBUS to syz.4.262:6079 due to hardware memory corruption [ 140.857843][ T6079] Memory failure: 0x142c09: recovery action for dirty LRU page: Recovered [ 140.952403][ T6091] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.974950][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.402175][ T6123] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 142.418534][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 142.518995][ T6118] loop4: detected capacity change from 0 to 512 [ 142.564807][ T6118] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 144.422030][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 146.736677][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 146.738667][ T6176] bridge_slave_1: left allmulticast mode [ 146.739954][ T6176] bridge_slave_1: left promiscuous mode [ 146.741925][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.745986][ T6176] bridge_slave_0: left allmulticast mode [ 146.748704][ T6176] bridge_slave_0: left promiscuous mode [ 146.750671][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.261013][ T6199] loop3: detected capacity change from 0 to 128 [ 148.355462][ T6199] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 148.497331][ T6208] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 148.497358][ T6208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.498315][ T6208] vhci_hcd vhci_hcd.0: Device attached [ 148.501968][ T6208] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.516711][ T6207] loop4: detected capacity change from 0 to 1024 [ 148.524621][ T6207] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 148.524764][ T6207] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 148.524777][ T6207] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.288: Failed to acquire dquot type 0 [ 148.524792][ T6207] loop4: lost filesystem error report for type 5 error -5 [ 148.525425][ T6207] EXT4-fs (loop4): 1 truncate cleaned up [ 148.527043][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.867182][ T6209] vhci_hcd: connection closed [ 149.623650][ T4815] IPVS: starting estimator thread 0... [ 149.723438][ T24] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 149.726337][ T6210] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 149.742310][ T1139] vhci_hcd vhci_hcd.3: stop threads [ 149.742347][ T1139] vhci_hcd vhci_hcd.3: release socket [ 149.742385][ T1139] vhci_hcd vhci_hcd.3: disconnect device [ 149.929131][ T6221] IPVS: using max 59 ests per chain, 141600 per kthread [ 150.249153][ T6219] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 150.249211][ T6219] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 150.249225][ T6219] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.288: Failed to acquire dquot type 0 [ 150.673233][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.677602][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.770638][ T6236] Invalid source name [ 150.770708][ T6236] UBIFS error (pid: 6236): cannot open "ubifs", error -22 [ 151.024986][ T6241] loop3: detected capacity change from 0 to 512 [ 151.030632][ T6241] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.034187][ T6241] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 151.034844][ T6241] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 151.035321][ T6241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.344874][ T6247] Injecting memory failure for pfn 0x13bd5f at process virtual address 0x20001000 [ 151.368117][ T6247] Memory failure: 0x13bd5f: Sending SIGBUS to syz.4.293:6247 due to hardware memory corruption [ 151.368350][ T6247] Memory failure: 0x13bd5f: recovery action for dirty LRU page: Recovered [ 151.368368][ T6247] Injecting memory failure for pfn 0x136a80 at process virtual address 0x20002000 [ 151.369097][ T6247] Memory failure: 0x136a80: Sending SIGBUS to syz.4.293:6247 due to hardware memory corruption [ 151.369228][ T6247] Memory failure: 0x136a80: recovery action for dirty LRU page: Recovered [ 151.369277][ T6247] Injecting memory failure for pfn 0x136a81 at process virtual address 0x20003000 [ 151.369395][ T6247] Memory failure: 0x136a81: Sending SIGBUS to syz.4.293:6247 due to hardware memory corruption [ 151.369416][ T6247] Memory failure: 0x136a81: recovery action for dirty LRU page: Recovered [ 152.042647][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.458966][ T6258] overlayfs: failed to clone lowerpath [ 152.459855][ T4711] Bluetooth: hci3: command 0x0406 tx timeout [ 152.507877][ T6258] overlayfs: failed to clone lowerpath [ 152.509547][ T4720] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 153.160190][ T6271] nbd: must specify a size in bytes for the device [ 153.247792][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 153.470546][ T6275] loop4: detected capacity change from 0 to 512 [ 153.479319][ T6278] Bluetooth: hci0: command 0x0406 tx timeout [ 153.479414][ T6278] Bluetooth: hci1: command 0x0406 tx timeout [ 153.481488][ T4711] Bluetooth: hci2: command 0x0406 tx timeout [ 153.516733][ T6275] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.561496][ T6275] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 153.562276][ T6275] Quota error (device loop4): write_blk: dquota write failed [ 153.562295][ T6275] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 153.562461][ T6275] Quota error (device loop4): write_blk: dquota write failed [ 153.562657][ T6275] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 153.562679][ T6275] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.299: Failed to acquire dquot type 1 [ 153.562694][ T6275] loop4: lost filesystem error report for type 5 error -28 [ 153.569107][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 153.569119][ C0] EXT4-fs (loop4): initial error at time 524442: ext4_mb_generate_buddy:1317 [ 153.569131][ C0] EXT4-fs (loop4): last error at time 524442: ext4_acquire_dquot:7041 [ 153.584995][ T6275] EXT4-fs (loop4): 1 truncate cleaned up [ 153.587115][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.699684][ T6275] EXT4-fs error (device loop4): __ext4_remount:6844: comm syz.4.299: Abort forced by user [ 153.702594][ T6275] EXT4-fs (loop4): Remounting filesystem read-only [ 153.702628][ T6275] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.865092][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.256577][ T6291] overlayfs: failed to clone upperpath [ 154.594784][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 154.912178][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 156.676843][ T6322] Injecting memory failure for pfn 0x143aa7 at process virtual address 0x20001000 [ 156.788180][ T6324] loop4: detected capacity change from 0 to 1024 [ 157.434033][ T6322] Memory failure: 0x143aa7: Sending SIGBUS to syz.4.310:6322 due to hardware memory corruption [ 157.434360][ T6322] Memory failure: 0x143aa7: recovery action for dirty LRU page: Recovered [ 157.434419][ T6322] Injecting memory failure for pfn 0x143aa8 at process virtual address 0x20002000 [ 158.312102][ T6322] Memory failure: 0x143aa8: Sending SIGBUS to syz.4.310:6322 due to hardware memory corruption [ 158.312173][ T6322] Memory failure: 0x143aa8: recovery action for dirty LRU page: Recovered [ 158.312203][ T6322] Injecting memory failure for pfn 0x143aa9 at process virtual address 0x20003000 [ 158.318823][ T6322] Memory failure: 0x143aa9: Sending SIGBUS to syz.4.310:6322 due to hardware memory corruption [ 158.318864][ T6322] Memory failure: 0x143aa9: recovery action for dirty LRU page: Recovered [ 158.411635][ T6324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.302737][ T867] IPVS: starting estimator thread 0... [ 159.408076][ T6346] IPVS: using max 61 ests per chain, 146400 per kthread [ 159.439067][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.860095][ T4720] Bluetooth: Wrong link type (-71) [ 163.181789][ T6378] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 164.560567][ T6380] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 164.587109][ T6395] binder: 6394:6395 BC_INCREFS_DONE u0000000000000002 no match [ 164.899019][ T6398] binder: 6394:6398 got reply transaction with no transaction stack [ 164.899119][ T6398] binder: 6394:6398 transaction reply to 0:0 failed 5/29201/-71, code 0 size 88-24 line 3155 [ 164.993032][ T6402] openvswitch: netlink: Message has 78 unknown bytes. [ 168.232088][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232253][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232532][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232621][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232710][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232798][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232886][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.232972][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.233059][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.233145][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.554327][ T6443] ubi0: attaching mtd0 [ 168.555161][ T6443] ubi0: scanning is finished [ 168.555176][ T6443] ubi0: empty MTD device detected [ 168.617980][ T6443] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 168.618014][ T6443] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 168.618038][ T6443] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 168.618053][ T6443] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 168.618066][ T6443] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 168.618078][ T6443] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 168.618089][ T6443] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1404656710 [ 168.618101][ T6443] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 168.618440][ T6445] ubi0: background thread "ubi_bgt0d" started, PID 6445 [ 169.090161][ T6452] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 170.518625][ T6484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.665334][ T6486] loop4: detected capacity change from 0 to 1024 [ 170.665718][ T6486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.681681][ T6486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.001567][ T4720] Bluetooth: hci2: command 0x0406 tx timeout [ 173.017402][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.108298][ T6498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.656580][ T6514] ipvlan1: renamed from veth0_vlan [ 175.205996][ T6528] loop3: detected capacity change from 0 to 256 [ 175.234585][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 175.332788][ T6498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.555121][ T6544] futex_wake_op: syz.1.357 tries to shift op by -65; fix this program [ 177.137457][ T6561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.229928][ T6498] team0: Port device netdevsim1 removed [ 177.230827][ T6498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.435622][ T6562] loop2: detected capacity change from 0 to 7 [ 177.438352][ T6562] Dev loop2: unable to read RDB block 7 [ 177.438370][ T6562] loop2: AHDI p1 p2 p3 [ 177.438378][ T6562] loop2: partition table partially beyond EOD, truncated [ 177.438460][ T6562] loop2: p1 start 1601398130 is beyond EOD, truncated [ 177.438469][ T6562] loop2: p2 start 1702059890 is beyond EOD, truncated [ 177.514871][ T6498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.180899][ T6580] x_tables: duplicate underflow at hook 3 [ 178.307926][ T6582] netlink: 'syz.1.363': attribute type 8 has an invalid length. [ 178.462664][ T1139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.463666][ T4932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.463692][ T4932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.463707][ T4932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.811820][ T6608] xt_time: unknown flags 0x4 [ 180.418966][ T6612] block device autoloading is deprecated and will be removed. [ 182.530763][ T6630] Injecting memory failure for pfn 0x142d20 at process virtual address 0x20001000 [ 182.535617][ T6621] Injecting memory failure for pfn 0x1359db at process virtual address 0x20001000 [ 182.538927][ T6630] Memory failure: 0x142d20: Sending SIGBUS to syz.2.371:6630 due to hardware memory corruption [ 182.539081][ T6630] Memory failure: 0x142d20: recovery action for dirty LRU page: Recovered [ 182.539906][ T6630] Injecting memory failure for pfn 0x11efaf at process virtual address 0x20002000 [ 182.540133][ T6630] Memory failure: 0x11efaf: Sending SIGBUS to syz.2.371:6630 due to hardware memory corruption [ 182.540220][ T6630] Memory failure: 0x11efaf: recovery action for dirty LRU page: Recovered [ 182.540285][ T6630] Injecting memory failure for pfn 0x11efae at process virtual address 0x20003000 [ 182.540582][ T6630] Memory failure: 0x11efae: Sending SIGBUS to syz.2.371:6630 due to hardware memory corruption [ 182.540714][ T6630] Memory failure: 0x11efae: recovery action for dirty LRU page: Recovered [ 182.541697][ T6621] Memory failure: 0x1359db: Sending SIGBUS to syz.4.372:6621 due to hardware memory corruption [ 182.541922][ T6621] Memory failure: 0x1359db: recovery action for dirty LRU page: Recovered [ 182.542013][ T6621] Injecting memory failure for pfn 0x1359da at process virtual address 0x20002000 [ 182.542193][ T6621] Memory failure: 0x1359da: Sending SIGBUS to syz.4.372:6621 due to hardware memory corruption [ 182.542217][ T6621] Memory failure: 0x1359da: recovery action for dirty LRU page: Recovered [ 182.542285][ T6621] Injecting memory failure for pfn 0x1359d9 at process virtual address 0x20003000 [ 182.542599][ T6621] Memory failure: 0x1359d9: Sending SIGBUS to syz.4.372:6621 due to hardware memory corruption [ 182.542794][ T6621] Memory failure: 0x1359d9: recovery action for dirty LRU page: Recovered [ 184.060304][ T6654] xt_nfacct: accounting object `syz1' does not exist [ 185.114773][ T6673] __nla_validate_parse: 40 callbacks suppressed [ 185.114990][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 185.435494][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.437027][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.439519][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.440993][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.625429][ T6701] Injecting memory failure for pfn 0x1362b2 at process virtual address 0x20001000 [ 186.656956][ T4931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.657024][ T4931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.705262][ T6702] loop3: detected capacity change from 0 to 1024 [ 186.787438][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.895494][ T1558] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.897199][ T1558] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.112611][ T6701] Memory failure: 0x1362b2: recovery action for dirty LRU page: Recovered [ 187.112650][ T6701] Injecting memory failure for pfn 0x136c76 at process virtual address 0x20002000 [ 187.178313][ T6701] Memory failure: 0x136c76: recovery action for dirty LRU page: Recovered [ 187.178337][ T6701] Injecting memory failure for pfn 0x136c78 at process virtual address 0x20003000 [ 187.226720][ T6701] Memory failure: 0x136c78: recovery action for dirty LRU page: Recovered [ 187.769341][ T4720] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 188.542518][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.230813][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 189.447688][ T6738] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20004 [ 190.170353][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 192.554992][ T6782] loop3: detected capacity change from 0 to 8 [ 192.685545][ T6782] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.685635][ T6782] SQUASHFS error: Failed to read block 0x4de: -5 [ 192.685671][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.685703][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.686371][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.686411][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.686584][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.686593][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.686661][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.686691][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.692790][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.692807][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.692835][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.692870][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.693054][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.693086][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.694029][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.694067][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.696963][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.696978][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.697038][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.697070][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.697255][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.697292][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 192.697520][ T6782] SQUASHFS error: Unable to read data cache entry [4de] [ 192.697554][ T6782] SQUASHFS error: Unable to read page, block 4de, size 1 [ 193.126158][ T6785] netlink: 136 bytes leftover after parsing attributes in process `syz.4.408'. [ 193.528407][ T6788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 195.247555][ T6810] Soft offlining pfn 0x1439e1 at process virtual address 0x20000000 [ 195.252699][ T6810] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 195.279675][ T6810] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.872538][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 199.872570][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 199.872586][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 199.872593][ T4720] Workqueue: hci1 hci_rx_work [ 199.872616][ T4720] Call trace: [ 199.872620][ T4720] show_stack+0x2c/0x3c (C) [ 199.872636][ T4720] __dump_stack+0x30/0x40 [ 199.872649][ T4720] dump_stack_lvl+0xd8/0x12c [ 199.872661][ T4720] dump_stack+0x1c/0x28 [ 199.872672][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 199.872685][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 199.872696][ T4720] kobject_add_internal+0x290/0x6f0 [ 199.872707][ T4720] kobject_add_varg+0x9c/0xe8 [ 199.872719][ T4720] kobject_add+0x110/0x1c8 [ 199.872732][ T4720] device_add+0x394/0x9e0 [ 199.872745][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 199.872756][ T4720] le_conn_complete_evt+0xc68/0x10f8 [ 199.872766][ T4720] hci_le_conn_complete_evt+0x114/0x3d8 [ 199.872775][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 199.872786][ T4720] hci_event_packet+0x4c0/0x9c8 [ 199.872796][ T4720] hci_rx_work+0x2f4/0xd78 [ 199.872808][ T4720] process_scheduled_works+0x788/0x10b8 [ 199.872819][ T4720] worker_thread+0x798/0xbd0 [ 199.872830][ T4720] kthread+0x304/0x3d4 [ 199.872841][ T4720] ret_from_fork+0x10/0x20 [ 199.873399][ T4720] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.873433][ T4720] Bluetooth: hci1: failed to register connection device [ 200.442664][ T6890] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 201.118089][ T6899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.127826][ T6904] loop3: detected capacity change from 0 to 128 [ 201.131522][ T6904] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.196531][ T6904] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.213077][ T6899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.279916][ T6917] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 202.663065][ T6899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.755716][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.978570][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 202.978605][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 202.978620][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 202.978627][ T50] Workqueue: hci2 hci_rx_work [ 202.978651][ T50] Call trace: [ 202.978654][ T50] show_stack+0x2c/0x3c (C) [ 202.978673][ T50] __dump_stack+0x30/0x40 [ 202.978686][ T50] dump_stack_lvl+0xd8/0x12c [ 202.978697][ T50] dump_stack+0x1c/0x28 [ 202.978709][ T50] sysfs_warn_dup+0x9c/0xb8 [ 202.978722][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 202.978733][ T50] kobject_add_internal+0x290/0x6f0 [ 202.978743][ T50] kobject_add_varg+0x9c/0xe8 [ 202.978756][ T50] kobject_add+0x110/0x1c8 [ 202.978768][ T50] device_add+0x394/0x9e0 [ 202.978782][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 202.978793][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 202.978803][ T50] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 202.978812][ T50] hci_le_meta_evt+0x2b0/0x46c [ 202.978823][ T50] hci_event_packet+0x4c0/0x9c8 [ 202.978833][ T50] hci_rx_work+0x2f4/0xd78 [ 202.978845][ T50] process_scheduled_works+0x788/0x10b8 [ 202.978857][ T50] worker_thread+0x798/0xbd0 [ 202.978867][ T50] kthread+0x304/0x3d4 [ 202.978876][ T50] ret_from_fork+0x10/0x20 [ 202.978909][ T50] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.978931][ T50] Bluetooth: hci2: failed to register connection device [ 202.984360][ T6927] loop3: detected capacity change from 0 to 256 [ 203.955795][ T6899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.085051][ T6929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.085972][ T6929] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.330999][ T1186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.333317][ T1186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.340908][ T1186] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.341048][ T1186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.377349][ T6929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.377581][ T6929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.395518][ T6929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.399414][ T6929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.399603][ T6929] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.407305][ T6929] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.409743][ T6929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.409919][ T6929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 205.417341][ T6929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 205.420074][ T6929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.420302][ T6929] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 205.427490][ T6929] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.869822][ T6959] syz_tun: entered allmulticast mode [ 207.596085][ T6973] futex_wake_op: syz.3.451 tries to shift op by -65; fix this program [ 208.019985][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 208.020043][ T4710] Bluetooth: hci4: command 0x2016 tx timeout [ 208.021028][ T4710] Bluetooth: hci1: command 0x0406 tx timeout [ 208.023133][ T4710] Bluetooth: hci2: command 0x0406 tx timeout [ 208.025251][ T4710] Bluetooth: hci0: command 0x0406 tx timeout [ 208.542795][ T6991] loop3: detected capacity change from 0 to 256 [ 208.756699][ T6994] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 208.756945][ T6994] FAT-fs (loop3): Filesystem has been set read-only [ 208.876572][ T6996] trusted_key: encrypted_key: master key parameter 'XVxC[ì&ÿŒDnr' is invalid [ 210.093538][ T4710] Bluetooth: hci0: command 0x0406 tx timeout [ 210.095437][ T4710] Bluetooth: hci2: command 0x0406 tx timeout [ 210.095476][ T4710] Bluetooth: hci1: command 0x0406 tx timeout [ 210.095497][ T4710] Bluetooth: hci4: command 0x2016 tx timeout [ 210.095518][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 210.110620][ T7019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.221877][ T7019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.643439][ T7019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.709966][ T7019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.855730][ T4931] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.856127][ T4931] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.859575][ T4931] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.859842][ T4931] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.203481][ T4710] Bluetooth: hci4: command 0x2016 tx timeout [ 212.203533][ T4710] Bluetooth: hci1: command 0x0406 tx timeout [ 212.203565][ T4710] Bluetooth: hci2: command 0x0406 tx timeout [ 212.205890][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 213.964037][ T7074] loop3: detected capacity change from 0 to 8 [ 214.150163][ T7069] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 216.885713][ T7095] loop3: detected capacity change from 0 to 256 [ 216.887751][ T7095] FAT-fs (loop3): Directory bread(block 1285) failed [ 216.887772][ T7095] FAT-fs (loop3): Directory bread(block 1286) failed [ 216.887784][ T7095] FAT-fs (loop3): Directory bread(block 1287) failed [ 216.887820][ T7095] FAT-fs (loop3): Directory bread(block 1288) failed [ 216.896731][ T7095] FAT-fs (loop3): Directory bread(block 1285) failed [ 216.896768][ T7095] FAT-fs (loop3): Directory bread(block 1286) failed [ 216.896783][ T7095] FAT-fs (loop3): Directory bread(block 1287) failed [ 216.896812][ T7095] FAT-fs (loop3): Directory bread(block 1288) failed [ 216.896838][ T7095] FAT-fs (loop3): Directory bread(block 1285) failed [ 216.896851][ T7095] FAT-fs (loop3): Directory bread(block 1286) failed [ 217.533653][ T7107] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 218.835816][ T7107] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 219.050006][ T7117] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 220.710727][ T7141] loop3: detected capacity change from 0 to 8 [ 220.726535][ T7141] SQUASHFS error: zlib decompression failed, data probably corrupt [ 220.726578][ T7141] SQUASHFS error: Failed to read block 0x4de: -5 [ 220.726593][ T7141] SQUASHFS error: Unable to read data cache entry [4de] [ 220.726608][ T7141] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.726646][ T7141] SQUASHFS error: Unable to read data cache entry [4de] [ 220.726658][ T7141] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.726694][ T7141] SQUASHFS error: Unable to read data cache entry [4de] [ 220.726705][ T7141] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.726738][ T7141] SQUASHFS error: Unable to read data cache entry [4de] [ 220.726747][ T7141] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.749583][ T7133] SQUASHFS error: Unable to read data cache entry [4de] [ 220.749613][ T7133] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.749656][ T7133] SQUASHFS error: Unable to read data cache entry [4de] [ 220.749669][ T7133] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.749703][ T7133] SQUASHFS error: Unable to read data cache entry [4de] [ 220.749716][ T7133] SQUASHFS error: Unable to read page, block 4de, size 1 [ 220.749742][ T7133] SQUASHFS error: Unable to read data cache entry [4de] [ 220.749755][ T7133] SQUASHFS error: Unable to read page, block 4de, size 1 [ 221.592287][ T7151] Injecting memory failure for pfn 0x135f5f at process virtual address 0x20001000 [ 221.620731][ T7151] Memory failure: 0x135f5f: Sending SIGBUS to syz.4.488:7151 due to hardware memory corruption [ 221.620917][ T7151] Memory failure: 0x135f5f: recovery action for dirty LRU page: Recovered [ 221.620936][ T7151] Injecting memory failure for pfn 0x135f5e at process virtual address 0x20002000 [ 221.621297][ T7151] Memory failure: 0x135f5e: Sending SIGBUS to syz.4.488:7151 due to hardware memory corruption [ 221.621436][ T7151] Memory failure: 0x135f5e: recovery action for dirty LRU page: Recovered [ 221.621482][ T7151] Injecting memory failure for pfn 0x11ee59 at process virtual address 0x20003000 [ 221.621695][ T7151] Memory failure: 0x11ee59: Sending SIGBUS to syz.4.488:7151 due to hardware memory corruption [ 221.621824][ T7151] Memory failure: 0x11ee59: recovery action for dirty LRU page: Recovered [ 223.854474][ T7181] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.496'. [ 223.892609][ T7176] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.496'. [ 224.339846][ T7193] loop3: detected capacity change from 0 to 512 [ 224.343127][ T7193] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 224.343156][ T7193] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.351737][ T7193] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 225.470960][ T7215] Injecting memory failure for pfn 0x143d26 at process virtual address 0x20001000 [ 225.682292][ T7215] Memory failure: 0x143d26: Sending SIGBUS to syz.2.506:7215 due to hardware memory corruption [ 225.682385][ T7215] Memory failure: 0x143d26: recovery action for dirty LRU page: Recovered [ 225.682399][ T7215] Injecting memory failure for pfn 0x142f30 at process virtual address 0x20002000 [ 225.691655][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 225.693885][ T7215] Memory failure: 0x142f30: Sending SIGBUS to syz.2.506:7215 due to hardware memory corruption [ 225.694094][ T7215] Memory failure: 0x142f30: recovery action for dirty LRU page: Recovered [ 225.694150][ T7215] Injecting memory failure for pfn 0x14364b at process virtual address 0x20003000 [ 225.694532][ T7215] Memory failure: 0x14364b: Sending SIGBUS to syz.2.506:7215 due to hardware memory corruption [ 225.694646][ T7215] Memory failure: 0x14364b: recovery action for dirty LRU page: Recovered [ 227.296016][ T7235] Injecting memory failure for pfn 0x146e2e at process virtual address 0x20001000 [ 227.331413][ T7235] Memory failure: 0x146e2e: Sending SIGBUS to syz.2.511:7235 due to hardware memory corruption [ 227.331574][ T7235] Memory failure: 0x146e2e: recovery action for dirty LRU page: Recovered [ 227.331595][ T7235] Injecting memory failure for pfn 0x146e2d at process virtual address 0x20002000 [ 227.331930][ T7235] Memory failure: 0x146e2d: Sending SIGBUS to syz.2.511:7235 due to hardware memory corruption [ 227.332060][ T7235] Memory failure: 0x146e2d: recovery action for dirty LRU page: Recovered [ 227.332105][ T7235] Injecting memory failure for pfn 0x146e2c at process virtual address 0x20003000 [ 227.332299][ T7235] Memory failure: 0x146e2c: Sending SIGBUS to syz.2.511:7235 due to hardware memory corruption [ 227.332416][ T7235] Memory failure: 0x146e2c: recovery action for dirty LRU page: Recovered [ 230.185277][ T7259] Injecting memory failure for pfn 0x11d92a at process virtual address 0x20001000 [ 230.191296][ T7259] Memory failure: 0x11d92a: Sending SIGBUS to syz.1.515:7259 due to hardware memory corruption [ 230.193644][ T7259] Memory failure: 0x11d92a: recovery action for dirty LRU page: Recovered [ 230.195357][ T7259] Injecting memory failure for pfn 0x11d92b at process virtual address 0x20002000 [ 230.197539][ T7259] Memory failure: 0x11d92b: Sending SIGBUS to syz.1.515:7259 due to hardware memory corruption [ 230.199875][ T7259] Memory failure: 0x11d92b: recovery action for dirty LRU page: Recovered [ 230.201664][ T7259] Injecting memory failure for pfn 0x13be5c at process virtual address 0x20003000 [ 230.441312][ T7268] fuse: Bad value for 'fd' [ 230.461541][ T7268] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 230.462328][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 231.216627][ T7259] Memory failure: 0x13be5c: recovery action for dirty LRU page: Recovered [ 231.716799][ T7280] overlay: ./file0 is not a directory [ 231.963970][ T7284] Injecting memory failure for pfn 0x11f691 at process virtual address 0x20001000 [ 232.239382][ T7284] Memory failure: 0x11f691: Sending SIGBUS to syz.0.521:7284 due to hardware memory corruption [ 232.239453][ T7284] Memory failure: 0x11f691: recovery action for dirty LRU page: Recovered [ 232.239484][ T7284] Injecting memory failure for pfn 0x11f692 at process virtual address 0x20002000 [ 232.239689][ T7284] Memory failure: 0x11f692: Sending SIGBUS to syz.0.521:7284 due to hardware memory corruption [ 232.239715][ T7284] Memory failure: 0x11f692: recovery action for dirty LRU page: Recovered [ 232.239729][ T7284] Injecting memory failure for pfn 0x11f693 at process virtual address 0x20003000 [ 232.239761][ T7284] Memory failure: 0x11f693: Sending SIGBUS to syz.0.521:7284 due to hardware memory corruption [ 232.240352][ T7284] Memory failure: 0x11f693: recovery action for dirty LRU page: Recovered [ 232.524930][ T7286] loop3: detected capacity change from 0 to 128 [ 232.587745][ T7286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.603787][ T7286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.190451][ T7298] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 233.622343][ T7306] netlink: 'syz.0.525': attribute type 2 has an invalid length. [ 233.693207][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.720972][ T7310] loop3: detected capacity change from 0 to 128 [ 233.728306][ T7310] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.331790][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.698492][ T7342] openvswitch: netlink: Message has 78 unknown bytes. [ 236.225643][ T7329] overlayfs: failed to clone upperpath [ 236.420799][ T7330] overlayfs: missing 'lowerdir' [ 236.891297][ T7352] loop3: detected capacity change from 0 to 256 [ 236.895130][ T7352] FAT-fs (loop3): Directory bread(block 1285) failed [ 236.896772][ T7352] FAT-fs (loop3): Directory bread(block 1286) failed [ 236.898416][ T7352] FAT-fs (loop3): Directory bread(block 1287) failed [ 236.900867][ T7352] FAT-fs (loop3): Directory bread(block 1288) failed [ 236.903458][ T7352] FAT-fs (loop3): Directory bread(block 1285) failed [ 236.905985][ T7352] FAT-fs (loop3): Directory bread(block 1286) failed [ 236.906037][ T7352] FAT-fs (loop3): Directory bread(block 1287) failed [ 236.906071][ T7352] FAT-fs (loop3): Directory bread(block 1288) failed [ 236.906127][ T7352] FAT-fs (loop3): Directory bread(block 1285) failed [ 236.906153][ T7352] FAT-fs (loop3): Directory bread(block 1286) failed [ 237.058350][ T7356] Injecting memory failure for pfn 0x142d0f at process virtual address 0x20001000 [ 237.067205][ T7356] Memory failure: 0x142d0f: Sending SIGBUS to syz.4.536:7356 due to hardware memory corruption [ 237.067256][ T7356] Memory failure: 0x142d0f: recovery action for dirty LRU page: Recovered [ 237.067270][ T7356] Injecting memory failure for pfn 0x13c079 at process virtual address 0x20002000 [ 237.067309][ T7356] Memory failure: 0x13c079: Sending SIGBUS to syz.4.536:7356 due to hardware memory corruption [ 237.067329][ T7356] Memory failure: 0x13c079: recovery action for dirty LRU page: Recovered [ 237.067337][ T7356] Injecting memory failure for pfn 0x13c07a at process virtual address 0x20003000 [ 237.067364][ T7356] Memory failure: 0x13c07a: Sending SIGBUS to syz.4.536:7356 due to hardware memory corruption [ 237.067381][ T7356] Memory failure: 0x13c07a: recovery action for dirty LRU page: Recovered [ 238.293205][ T50] Bluetooth: hci0: unexpected event for opcode 0x010e [ 238.647080][ T7381] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 239.122766][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 239.300419][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.300521][ T7387] batadv_slave_0: entered promiscuous mode [ 241.598558][ T30] audit: type=1326 audit(1048817.989:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7408 comm="syz.4.551" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c177fe8 code=0x0 [ 242.165496][ T7426] x_tables: duplicate underflow at hook 3 [ 242.606087][ T7433] veth1_macvtap: left promiscuous mode [ 242.885569][ T7438] loop3: detected capacity change from 0 to 2048 [ 242.927491][ T7438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.993954][ T7442] syz.1.556 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 243.117968][ T7444] ubi: mtd0 is already attached to ubi0 [ 243.153756][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 243.715677][ T7458] overlayfs: missing 'lowerdir' [ 243.794057][ T7459] geneve2: entered promiscuous mode [ 243.794129][ T7459] geneve2: entered allmulticast mode [ 243.868059][ T39] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 243.868692][ T39] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 243.868724][ T39] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 243.868740][ T39] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.554165][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.755915][ T7467] Injecting memory failure for pfn 0x14765e at process virtual address 0x20001000 [ 244.855138][ T7467] Memory failure: 0x14765e: Sending SIGBUS to syz.1.561:7467 due to hardware memory corruption [ 244.855208][ T7467] Memory failure: 0x14765e: recovery action for dirty LRU page: Recovered [ 244.855243][ T7467] Injecting memory failure for pfn 0x14765d at process virtual address 0x20002000 [ 244.855469][ T7467] Memory failure: 0x14765d: Sending SIGBUS to syz.1.561:7467 due to hardware memory corruption [ 244.855494][ T7467] Memory failure: 0x14765d: recovery action for dirty LRU page: Recovered [ 244.855507][ T7467] Injecting memory failure for pfn 0x14765c at process virtual address 0x20003000 [ 244.855538][ T7467] Memory failure: 0x14765c: Sending SIGBUS to syz.1.561:7467 due to hardware memory corruption [ 244.855560][ T7467] Memory failure: 0x14765c: recovery action for dirty LRU page: Recovered [ 247.354237][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 247.724612][ T7508] loop3: detected capacity change from 0 to 4096 [ 248.041930][ T1558] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.041984][ T1558] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.130382][ T7508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.130417][ T7508] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.229154][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.255574][ T7508] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 248.884544][ T7500] overlayfs: failed to clone upperpath [ 249.681617][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.202148][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 250.202583][ T7536] bridge_slave_1: left allmulticast mode [ 250.202678][ T7536] bridge_slave_1: left promiscuous mode [ 250.203385][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.297109][ T7536] bridge_slave_0: left allmulticast mode [ 250.297164][ T7536] bridge_slave_0: left promiscuous mode [ 250.297260][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.628780][ T7550] loop3: detected capacity change from 0 to 1024 [ 252.644075][ T7550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.022529][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.832993][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 255.041068][ T7575] bridge_slave_1: left allmulticast mode [ 255.041107][ T7575] bridge_slave_1: left promiscuous mode [ 255.041229][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.064532][ T7575] bridge_slave_0: left allmulticast mode [ 255.064563][ T7575] bridge_slave_0: left promiscuous mode [ 255.064652][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.092073][ T7573] veth1_macvtap: entered promiscuous mode [ 255.094221][ T7573] 8021q: adding VLAN 0 to HW filter on device eth0 [ 255.094872][ T7573] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.095509][ T7573] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.096126][ T7573] 8021q: adding VLAN 0 to HW filter on device eth3 [ 255.886921][ T7598] futex_wake_op: syz.4.592 tries to shift op by -65; fix this program [ 256.340490][ T50] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 256.544308][ T7609] trusted_key: syz.0.593 sent an empty control message without MSG_MORE. [ 256.695282][ T7616] siw: device registration error -23 [ 257.428379][ T7616] smc: removing ib device syz2 [ 257.801625][ T7616] ------------[ cut here ]------------ [ 257.801645][ T7616] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#1: syz.3.594/7616 [ 257.804489][ T7616] Modules linked in: [ 257.805165][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.3.594 Not tainted syzkaller #0 PREEMPT [ 257.806613][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 257.808269][ T7616] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 257.809566][ T7616] pc : rxe_pool_cleanup+0x58/0x60 [ 257.810425][ T7616] lr : rxe_pool_cleanup+0x58/0x60 [ 257.811279][ T7616] sp : ffff800095b76f40 [ 257.811944][ T7616] x29: ffff800095b76f40 x28: dfff800000000000 x27: ffff0000f49b2d86 [ 257.813311][ T7616] x26: dfff800000000000 x25: ffff0000dbf65108 x24: dfff800000000000 [ 257.814663][ T7616] x23: 1fffe0001b7ec9f1 x22: ffff0000dbf64f88 x21: dfff800000000000 [ 257.816038][ T7616] x20: ffff800084584760 x19: ffff0000dbf65428 x18: 00000000ffffffff [ 257.817518][ T7616] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bed32c [ 257.818848][ T7616] x14: 00000000868e0060 x13: 0000000000000001 x12: 0000000000000000 [ 257.820317][ T7616] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 257.821660][ T7616] x8 : ffff80009e173000 x7 : 0000000000000000 x6 : 0000000000000000 [ 257.823061][ T7616] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000844026d4 [ 257.824449][ T7616] x2 : 0000000000000002 x1 : ffff0000d50a1d40 x0 : 0000000000000001 [ 257.825875][ T7616] Call trace: [ 257.826448][ T7616] rxe_pool_cleanup+0x58/0x60 (P) [ 257.827326][ T7616] rxe_dealloc+0x30/0xd0 [ 257.828040][ T7616] ib_dealloc_device+0x50/0x1e0 [ 257.828866][ T7616] __ib_unregister_device+0x2bc/0x33c [ 257.829782][ T7616] ib_unregister_device_and_put+0x5c/0x80 [ 257.830755][ T7616] nldev_dellink+0x330/0x374 [ 257.831505][ T7616] rdma_nl_rcv+0x4f0/0x814 [ 257.832247][ T7616] netlink_unicast+0x600/0x7f8 [ 257.833003][ T7616] netlink_sendmsg+0x648/0x948 [ 257.833808][ T7616] __sock_sendmsg+0xc8/0x17c [ 257.834589][ T7616] ____sys_sendmsg+0x3d0/0x6c8 [ 257.835391][ T7616] ___sys_sendmsg+0x198/0x224 [ 257.836148][ T7616] __sys_sendmsg+0x158/0x204 [ 257.836903][ T7616] __arm64_sys_sendmsg+0x80/0x94 [ 257.837764][ T7616] invoke_syscall+0x98/0x244 [ 257.838587][ T7616] el0_svc_common+0xec/0x23c [ 257.839338][ T7616] do_el0_svc+0x4c/0x5c [ 257.840046][ T7616] el0_svc+0x64/0x260 [ 257.840744][ T7616] el0t_64_sync_handler+0x48/0x148 [ 257.841578][ T7616] el0t_64_sync+0x198/0x19c [ 257.842341][ T7616] irq event stamp: 162792 [ 257.843053][ T7616] hardirqs last enabled at (162791): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 257.844829][ T7616] hardirqs last disabled at (162792): [] el1_brk64+0x20/0x54 [ 257.846345][ T7616] softirqs last enabled at (162700): [] __alloc_skb+0x1c0/0x610 [ 257.847792][ T7616] softirqs last disabled at (162698): [] __alloc_skb+0x1a8/0x610 [ 257.849280][ T7616] ---[ end trace 0000000000000000 ]--- [ 258.422121][ T7639] Injecting memory failure for pfn 0x13a10a at process virtual address 0x20001000 [ 258.440452][ T7639] Memory failure: 0x13a10a: recovery action for clean LRU page: Recovered [ 258.440487][ T7639] Injecting memory failure for pfn 0x13a10b at process virtual address 0x20002000 [ 258.440947][ T7639] Memory failure: 0x13a10b: recovery action for clean LRU page: Recovered [ 258.440958][ T7639] Injecting memory failure for pfn 0x13a10c at process virtual address 0x20003000 [ 258.440993][ T7639] Memory failure: 0x13a10c: recovery action for clean LRU page: Recovered