last executing test programs: 1m17.936211823s ago: executing program 2 (id=826): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x5) (async) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) (async) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) recvmsg$can_bcm(r3, &(0x7f0000000a80)={&(0x7f00000004c0)=@nl, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000640)=""/96, 0x60}, {0x0}], 0x3}, 0x20) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/271, 0x10f}], 0x1}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000140)) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, &(0x7f0000003100)=[{&(0x7f0000000480)=""/89, 0x59}], 0x1, 0x18, 0x0, {0x0, 0x0, 0xfc, '\x00', 0x0}}) (async) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, &(0x7f0000003100)=[{&(0x7f0000000480)=""/89, 0x59}], 0x1, 0x18, 0x0, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r5, 0x708f, 0xfffffffd, 0x81, 0x0, 0x0) (async) io_uring_enter(r5, 0x708f, 0xfffffffd, 0x81, 0x0, 0x0) 1m17.098097828s ago: executing program 2 (id=843): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805"], 0x88) (fail_nth: 2) 1m16.391550479s ago: executing program 2 (id=859): socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000000002000000000000000001"], 0x0) 1m16.391354538s ago: executing program 2 (id=860): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)=ANY=[@ANYBLOB='nfs,shortname=mixed,time_offset=0x000000000,uni_xlate=0,utf8=1,utf8=1,utf8=1,shortname=winnt,sys_immutable,umask=00000000000000000000011,shortname=winnt,nonumtail=0,\x00'], 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000002440)=ANY=[@ANYBLOB="726f6469722c757466383d312c696f636861727365743d63703835322c747a3d5554432c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f0365722c757466383d302c696f636861727365743d6370313235312c696f636861727365743d6370313235352c696f636861727365743d69736f383835392d31332c73686f72746e616d653d6c6f7765722c756d61736b3d30303030303030303030303030303030303030303030312c757466383d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c00"], 0x3, 0x27b, &(0x7f0000000640)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/213, 0xd5) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m16.35131259s ago: executing program 2 (id=862): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x100, @empty, 0x100ff}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m15.300161104s ago: executing program 2 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x8002}, 0x20000011) 1m15.247524777s ago: executing program 32 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x8002}, 0x20000011) 1m0.207147958s ago: executing program 1 (id=1008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440ffffffff0800064017000001080007400000000108000240000024170900010073797a30000000000900020073797a32"], 0x8c}}, 0x40) 1m0.038204129s ago: executing program 1 (id=1013): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, &(0x7f0000004dc0)=[{0x0}], 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m0.035068559s ago: executing program 1 (id=1014): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf88100400086dd6a7abd6a00282901fe8000000000000000000000000000bbff0200000300000000000000000000012b000000000000000401090000000001b20004886800000073000000000000000105000000000000"], 0x0) 58.057541695s ago: executing program 1 (id=1022): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x8000, 0xa, 0x50, 0x6}]}) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x0, 0x3}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x2000, 0x8ef98fc165024b44) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r3, 0x12}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000480), 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x2e8201) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r7, @ANYBLOB="0100ffffff81000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000180"], 0x22c}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) 57.92471643s ago: executing program 1 (id=1025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 57.577931334s ago: executing program 1 (id=1031): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 57.476250227s ago: executing program 33 (id=1031): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 48.091529689s ago: executing program 4 (id=1188): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0xe4, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}}, 0x24040084) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0xc, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x1, 0x0, {0x0, r5, r0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 48.0564781s ago: executing program 4 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x58}}, 0x20048810) r1 = semget$private(0x0, 0x4000000009, 0x42a) sendto$inet(0xffffffffffffffff, &(0x7f0000000600)="436ef941538e2d8568d8d62d0dd5991050c1a3508174e6774515ecb4ab21afd5a224a77d4bf1c7fe287b3d8fd2df92ad46b44904906deb9a3aa8cb0fb9ad414424122929b67b2043afac064c0ebfbe62f1a18afe966ace1733d93a1c906b19ad1a9f7872965cfb903457326214ee3f30e1987515f3559bd91f11f9c6edcb1189bc87711ca4e668d7950c59624a396495a06047ce8e6d70c26cbde1228993f7ef725c4fca1f2111036afffd5754106b1e438cd6ee799830791f46684beee8f6fe254ce1ad89038ea0fe9e183dde18eb3dfc93e90ba225dbbe7ec7af2c9000d5839279613a11b34bfe5a652c0fead30d9e6bf972531648fe5995bf62cdad95dee9dd09718120ddb3c81a1e990d4b4f2c5fa99399e5e030712b19d63a7f8df1e1b417f73876cba5f8dde83e8c4d8551556a7471e57c8ba973caa49f5bddef56966271623221a387b0eb508c99439bd6636dc0803dab75faafc01144dc817d39464f543eda7d260f7e37b4ca013e0801211689a8e7f21b1e221f3dfa9593b8ac82f45303c3a2d5255e6e42eb637a631a634c8482df20adda4b64514450658db5f75e2a7b89ccb019940f547373dce8dade9e60021cb66e30cb42e21b08f248817c5ef8dac731157901dd4555573ab4cdd5dcd07e11823f22c3816d964b9afbaa8367689e8b9c6aec06dc4a089a03fcef4e1d2c25d1b83c7076bea6d7b69aa6add010c2a44e6578928d1be2ea80f97a43be736c8a117e532d0f508731d4bb469622f1bd503e376b83efd26dcaecb0f514c0596766f98ff470b70de6ac0185643cfa15fd4610b3042115b939d67784397b70cb19e665784c7d392e4b2b50accad5b8a6dcb9c29039a27f1799e771ea5716499611f78f5cf10d87c34da17fac5fb8d7c43b302532e3e21d4a9b7b8967724b59c9a89c075410c0bf99160dfa1d28a55f885fadab959cce1dfa1157915f244c18e800b4791f367f30c8e88e8f04470187f93ed975b2136ac1009a157e1de187b15ef66defbb87b15320ee3e1c4505c5569163419ab569a7fa588dc7f995d3603f23c7b06c190adaaf73992b2b2397f4dec07a7bf0f1d94e74e1bda32f0bab11cc139d9893c7fda90cac614a366fe27041e4bf4d389a81e1cd0eeea06eb2d332d41e84a75ce05c46416e991cf77db0ca9752d2c8a10b42406f117213bbec5972db660f6f9a27fb037aab789ba4241918654dd58a688556ff45534de5399cfbf635613a759ea2c0abce98edd467fedc39cb608e4a6d5a02eaea6f01d9ee05feb5224b3521acb1dc57adc1e9f65979be09adca2bdbbeabdbc0ac1025af5196f48c131f089c59218f4b8e2f3eedd90f986b9c6c27db31a02fb4b6e592e9cd9805681810a126cc91d03589fefb30a837c9637c0561ba10c4e0e51f960c51b980606912da1442624890b40c4b9dde2c874bcbbf699e517c1d339eea03e60d0713fe76933fc396325e21a59057fdc696788c286fc4ee64caa841ff865102b985ea3db74c1262d0d077bd44623aa53a3a6a5c56993cbd1043c7cd63238c773420f46cffe8c477a381dd7cb9ff15e929ae619929829d0b5dd412ba891f5d96f9951e68d78bd1d8e608bbb36650cc8521a180331ee8f2b279ac0926af7d3b63da845c139c9232c788da62cab9f7d11b025f5341f9cb209246d4b1d3f210e698607b92f52ed4c7b190530b2814eff83c765c1b6cac32efd9ca2c92c40f632816afd73126e102ae63b63822adb678048612952c50dd2d5341c759b074ee7f247a84971a82232c25a2690e2085a07f35a3076fe126bff17188bfd8fe16adae1da32e3d51d363b4bf1d1870b39c6466d39275114f15866fd118394945c8e2a62b6c7ce377ff3e866632dd20515a9420748f1ffe8bb09349b053fd86391fb79df0029ed00eca9b7961ec29294da27dd7bdb8a258b8e84ac0624068955b2cf09bbcb918345973653d1f359e25d2bbc63680a8cd69778eaabc4a1f1081899c80743e6cf3d474b2073d6d990f5a0950681e17575a583526abef65fa68931ca339cb6ae4d7eeb8c51d5fda902c6dd0b54d9e89823c8594aa5a7baa511a16a90a6d683cdd75125812a10e6d64776ded3d92a851fc7eadb36bf14290f8d1103a0c97257add741794e273286274ee78350721b0681bd3fe562330ee57006114eae131b1a4e5f49e636d39dffa0de2e1684aa5ddec0a7c3ed5bd6fcfdb9a4fb8a0685249f9bc600e16b82d9710f7e5ca1a7a51e1a15b14b3acda7c44e82042a20137792a2dc649a05ef4c26e5df2b64516ed2b033bcf2e251bda8a0518b269465cec8c81becac0b6562e7b8983f972c6b601bd4898834f90c181e32a2b84ff4666d2421739392db7a62fdbbc1e1aef883eceffbb1a79a75d31cb4b44fa7dddd6276d74f4954b784ec4340f6f67097c4610d6a24fb493923888e248bb6b38653f275ad4ab3483175aee6c352c54915ad5c9105a3aed5d7ef54577fb94c0e61181949cbbce0b2b81dac150fe230918d234dbf40468417d3dc8598dad93baa8499f4b27170748c99665f384f8f7a0e8536c3cfed029ed1b42100a10a029b8c53a74a577adcef39ce2ae64b7bf1d3391d2716556e056d00c528c5ef3e580d8d850953e08f9765b26f32f35d007a1e7512f6327a2b6afce35352ac61ee633f71dcbb55cc49c48a66a0c80f97f8e4a2231231ce2c0535f1434db0fcbdd9d4da2bd42b78e99a8e8b41566c6900008495c09a451a0fbf3b6a75838b8673a798b101ca129a8f66cf0bdb949b628cd45ac3124a72b78a54431ad37a330370ff571afcf9ed87201725f09cdc7ebaced2067f1095d37faed90555302ec8ee99929804c6412e3714a8499a6e132f3a74db4682dd0401ad2fcbad2256584b6016c40631e72acefd815bf6e4c186cf58d77ed8823e7161a5599c5a18a844f2b104e00a348bafefd76a9670c07622d9a23ac1e0e8d303327b23820ffca724a961955f94f1505a20d7efd7c5b344523e66ed21c48f5c650869c60b862922f25495365be5fa14865194559535b95c3d3999800fee141d9ff33ff01a1895323a8e23d684f6ae472e9c385350a4d1c7442f2c7f874ae4587875c32e07b4944c9c813a10c44f06a9faca6881a26217cf0f997ad29a8d67ec761b717d4f9a7bfecde6590b3d25e5e9a6a0318052602fc6deef95eb299796b229554d92f490be3585d896d8f184becf150c40a3d05c98e81b992bdc555479b3ced51b271059e124e3f63bff391afe60ba6688746f1501d9eb448eb10dba76c9bb8bdc57b657401df51f4d8d53258c088263e742945fa24a1df3d98467b5434a28fc80dd1e3546a865873111e40dff59eb2c7c46e062b2b4c4c0be618780368e83a7e018265bed8710d7d731c65d7f13f669cadb468002b299419ce4c5c5e47f5b4a11815834176d7d4dea93829b6a67b4ea4abadcf952535d20c99fc8683fbb7e44f1a668cda596f00a0e6ad784d86961cc6642b57d77037f9fde4a9ae2b429a03d4483ecaf556b21bbfb5935da0f4497cbe7bb31da011cb6dd8e51ffdf58f82b74dc46b653a37d77cb9d7fc003c36add924ee8118fe204a1fee8975d974559142f1c0fef3ac22c73921cc375066643c6596481f61c3575c056830049fc3d38d361f0ecc779e87c1ceeb58e0828b760a732abe38da6e41c9cafde2f83d23611ec0212c057e98fc1030c9d6c1c6c8b947860112926a8a369d7affc0c6876eaf36b984c37f402c91af034d78267b977515d71293c1f1b2d644679af460a489be0759bb357256f2857a54a568cfefa51846f32b4b7f228aa4a471f88bc847b6e7daa200dccbac9a076fccec61934c9c899ec5624c97c1c11f7c566f7303f56e13d71cb9261d8de90695814d63a2084f74a7b3482d9c9a5fb82a4cb3bfb4749e79f37c7bbf1d3c70c4b9adaa413489e26778453c83cfb881af79ca44b24bab45c4bd0a0c0469cb5cc8e85ec1fbcd6643140237cb0be61f709d1c5ee64b750dce2dc5f37c6a42c620b036c2961b0262fe5d3e914e2435cf740b76ba2c9ef159edad0c5f4d5a0843bec79e52378dfa442914b1e2cb5e31cf0d19b6a3ee8e2c096104a799397218317dd9750039f252756d7a569f41cab5cf5eca46f7ee5e54cee7322ed29d8df835f2912739407027b96412e445cee57b6d7a9364b8edebe3232448a80f01fd2fd48d11fc178216cca83c5599a1666fe2f7d8e6537bb204da96b484c31cc7e5b2559a332cfaca8bd9dae6ad7a73c96e8e1eb9129bae4f99c00150452949cb5eb0dd10368d08f5ece96a1b19c89828298fb262a696c647a7c7b885994bc85fa210a911f1b01ab0f12b9831dbe1846f375b403b94c1e6426aa9f9a8dd17d67f0ad6dc7622b8db147aa8150217aa836f3087e2d8ec1d0fa7b518f8f180158c55ba8970064c883091299e2d909b87304dce72066308e68ddbad666f9abb57a2a3ca52def1d453d87025de936d9e6a3de158d4dc89dadedd313d921549fab075ad0d4253571f983150cfe0df45f2a55890d5686776bc5c251c38ad4a1a82d30672d36413698bc42e8faeb2acdd6ccea9219368b90a2a8bfbd7489e3a57730f1e65e6af0e8887e9a1f3d97f720cc95cd5b088d6642bdf9ac7ef2b306299ed0635a93cc480a3346740171e896619973855954b803b81b4a88594be33a052f5bcc974f3d629bad1728228daf46341235fad14f764d1c98e471f8db3e699ac09f89aab8cc54447d1150f49e573f86e4f915f041ca43595a06e6c9bc8ee478ff69426438c6cf8a69299c850dc3ffa5f6ac6520f24720b1f7f16cce2ddd4e4f24ea69334b79acecf4b66a788a913a9839cf222ae8aeac27b0d333a23e533adc13291e7a8231ef48cc09c74f933a09173888bff99e2ddb65fcddac5cf4129ce8d5151f2b29818262e150e94b2167dd75fcc659f64a3a2712d202fb2bcbcb714b08505081c3ac5e5927f2bc5ee2abe0bb4ae1250e81ab50ed9ce7fd8ff47a767a43a9cf963a8bec8f65318da3716e494757d33d41b24a93e1408ed542cfb42aeaec2a63952c41f0e4d7ecb2b9c606670f5ec96233857ebae100e4d25860271a8e8043f2693c74cfe04f68911ab668ecc46267dc20839aa7f57e28064a80ae6c33d97995dbdb5f9b46c22a9645885330a60578ebc4fd23fce9f3c58e06f1794c494ab3326f51fce84fccf9ac7bd0d7506c0d3d216cb90f8d6629131a81231a2bb879b73722c846660e534e947b4ccfb35c46bb601173006f7e1a9cf4429112c92118814e1b92352e403e7fd6cee6e6fb96a14829fc1259f7c2e14a2ea4118851792b66e0869b682944681f89fd79b4f24b21bc2e660f0164ec0715d5c03803f08066523c05e2b6e0c2d7100cfa8e027ec594a932ccfcb10348552783413e461fe174984a5a87f3813cad9367c02dfa7201a7d6bc8cdba7e2939d87aa3743a9abee3040afc09e7667336faaf40ff05757d7244daefaf692c78dd9fbd783cdcc927b94d5c26fecdba4eb3bf2297833270005b76ec2ea83ef17b6915a83d238c2585ff1d2003b026fcf9a012bf80bb637bd6e8f359471d59f1981244ef277ba3a7220fb86d7da290d53fa777a07b8d852a100b18fa778ed0bafb0154a0850fa3138a2c5991fa8d8428ac897a711f20680c8bfdd7da23062c2e726419b3e049c352610711a8b7575bf36ec795bc2a9355c209b384d81d925378fea279bb1b840a48105744026b097fe5a20e5ce55690a312b2909265bda23be2cdda0837d011d2afb43eab3d46c5e8f23e4a93e72a4b90bbc0ca7c", 0x1000, 0x8000, &(0x7f0000001600)={0x2, 0x4e23, @multicast2}, 0x10) semop(r1, &(0x7f0000000200), 0x53) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f0000000180), &(0x7f00000001c0), 0x4, 0x2) 47.947066463s ago: executing program 4 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000fff50a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) 47.890250123s ago: executing program 4 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x48, 0xffff, 0x4, 0xffb, 0x1, 0x0, [{0x6, 0x8, 0x781, '\x00', 0x3f00}]}) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2b05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 47.292074769s ago: executing program 4 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x254}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4068c50}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}]}}}]}, 0x38}}, 0x0) 46.706897099s ago: executing program 4 (id=1211): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r2 = fanotify_init(0x2, 0x2) fanotify_mark(r2, 0x121, 0x4000103b, r1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4096, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)={0x101000, 0x195}, 0x18) execveat(r3, &(0x7f0000000100)='./file2\x00', &(0x7f0000000400)={[&(0x7f0000000140)='upperdir', &(0x7f0000000180)='workdir', &(0x7f0000000200)='workdir', &(0x7f0000000240)='$%(\x00', &(0x7f0000000280)='\\&\\\n%,\x00', &(0x7f00000002c0)='lowerdir', &(0x7f0000000300)='overlay\x00', &(0x7f0000000380)='overlay\x00']}, &(0x7f0000000540)={[&(0x7f0000000480)='}\x00', &(0x7f00000004c0)='workdir', &(0x7f0000000500)=':\x00']}, 0x100) 46.659100251s ago: executing program 34 (id=1211): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r2 = fanotify_init(0x2, 0x2) fanotify_mark(r2, 0x121, 0x4000103b, r1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4096, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)={0x101000, 0x195}, 0x18) execveat(r3, &(0x7f0000000100)='./file2\x00', &(0x7f0000000400)={[&(0x7f0000000140)='upperdir', &(0x7f0000000180)='workdir', &(0x7f0000000200)='workdir', &(0x7f0000000240)='$%(\x00', &(0x7f0000000280)='\\&\\\n%,\x00', &(0x7f00000002c0)='lowerdir', &(0x7f0000000300)='overlay\x00', &(0x7f0000000380)='overlay\x00']}, &(0x7f0000000540)={[&(0x7f0000000480)='}\x00', &(0x7f00000004c0)='workdir', &(0x7f0000000500)=':\x00']}, 0x100) 21.845435711s ago: executing program 7 (id=1560): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{}, {0x20, '\xcf\x9a\xb5\xc6\x9a\xa7\x19\x85\x1fDr.^9\xff\xe8\xb4\xb7\t}~\xf3\f/\x9e\xc57@\x10s*\xe3{\xed\xb9\xf7\x85\x19\xfc\x88\x18\xe9\xfe\xc2\xfe\xfay=\x83>\x87\xd9lB\x92D:\xec\xda\xffxtDN\\\n\xba\x02\xd1\xf1\xe9\xc4\x0f\xfe\xb6yxCu\x16\xcb\x9a9\xd5C\xf7\xc7d9\xf2eW)\xd8\xc5Fu\xef8\xae\xe5Dg\xe8 \"(e\xbc\x90;x\xd2\xf4t\x8c Z\xafjW\xa1\x82L\xacD^\xae\xeeg#\xb2\x12\x06\x861\x05QZ\xee0\x8c'}]}, 0x9b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e36, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}], 0x1c) clock_gettime(0xa, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='$ io\x00'], 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21.398167233s ago: executing program 7 (id=1562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 21.227805688s ago: executing program 7 (id=1567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000700000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 20.780452903s ago: executing program 7 (id=1570): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r3, 0xfffffffffffffff7, 0x1) 20.331990387s ago: executing program 7 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r6, @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 19.00041495s ago: executing program 7 (id=1578): syz_open_dev$loop(&(0x7f0000000040), 0xdcf, 0x105000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x7e}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x40}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0xdcf, 0x105000) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x7e}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x40}}, 0x0) (async) 18.849489566s ago: executing program 35 (id=1578): syz_open_dev$loop(&(0x7f0000000040), 0xdcf, 0x105000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x7e}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x40}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0xdcf, 0x105000) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x7e}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x40}}, 0x0) (async) 4.448298242s ago: executing program 3 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r3, 0x202000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000015c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00'}}}, 0x38) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 3.708359773s ago: executing program 0 (id=1711): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x1a3341) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x2) 3.128303322s ago: executing program 0 (id=1714): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000850000002a00000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="5bdbc48e6f5f03d238ff67ecbc0e", 0x0, 0x1cc2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.128105624s ago: executing program 3 (id=1715): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0xffffffb2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @initdev={0xac, 0x1e, 0x7f, 0x0}, 0x4ea2, 0x1, 'none\x00', 0x0, 0xffff, 0x6c}, 0x55) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) 2.850603687s ago: executing program 0 (id=1721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0x4, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}}, 0x4000081) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x6, 0x9, 0x2, 0x6, 0x10000, 0x8, 0x4, 0x5, 0x0}, &(0x7f0000000640)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000540)={r1, 0x400}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='ncpfs\x00', 0x0, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') read$FUSE(r4, &(0x7f0000004080)={0x2020}, 0x2020) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000a00)="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", 0x151}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd0227ea0f262c7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f76258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd28810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xab}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000740)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@utf8no}, {@rodir}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x2, 0x299, &(0x7f0000000cc0)="$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") (async, rerun: 64) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.472725248s ago: executing program 8 (id=1729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc400, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@errors_continue}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, r1, 0x91c6b000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0xc21c2, 0x9c37611dc13d0d3f) write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x1, 0x100, 0x70b3, 0x3, 0x2, 0x36, 0x0, 0x0, 0x100, 0x3}}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) 2.38029548s ago: executing program 5 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PAT]=]=\"/bin\"\n', 0x4c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000240)={'\x00', 0x3, 0x5, 0x1, 0x0, 0x3, "00000000020000000000002100", "00004702", "0052008f", "69da45f8", ["00e60000400000001000", "1bfaa444a1eed87212ff0bff", "0000efff17dc15b20d62aab5", "000003cefd70f14003556000"]}) 2.361273009s ago: executing program 6 (id=1734): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x2, 0x2) fanotify_mark(r1, 0x121, 0x4000103b, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) (fail_nth: 7) 2.30513923s ago: executing program 6 (id=1735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0x1, 0x0, @void}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x8000000}, 0x1c) 2.254930962s ago: executing program 3 (id=1736): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="0500000003000000000001000021060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 2.208471038s ago: executing program 8 (id=1737): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x1a3341) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x2) 2.208133959s ago: executing program 6 (id=1738): r0 = landlock_create_ruleset(&(0x7f0000000a00)={0x0, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000256c000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.087666827s ago: executing program 3 (id=1739): socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000400)) r3 = syz_open_dev$dvb_demux(0x0, 0x1b9, 0x101081) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, 0xee00, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071118a00000030008510000002000000850000007600000095000000000000009500a505000000009a6b4a3f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ppoll(&(0x7f0000000180)=[{r3, 0x2200}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 2.086774288s ago: executing program 8 (id=1740): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x9}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xeb3c}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 2.076955403s ago: executing program 6 (id=1741): socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000fdca00000000000000000001"], 0x0) 2.020353201s ago: executing program 5 (id=1742): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r4, 0x3b91, &(0x7f0000000000)='_') bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="2180c200000000000000000008"], 0x0) 2.020083947s ago: executing program 6 (id=1743): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00040004580900"], 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c1100001e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000301103803c000080080003400000000230000b802c0001800a00010071756f74610000001c0002800c00044000000000000000000c000140000000000000000010000080080003400000000104"], 0x11e0}}, 0x0) 1.687113595s ago: executing program 0 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x21) sendfile(0xffffffffffffffff, r4, 0x0, 0x40001) 1.672231035s ago: executing program 5 (id=1745): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fstat(r1, &(0x7f0000002a00)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x44010, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000323000/0x3000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r7, r6, 0x0, 0x1) 1.004216758s ago: executing program 3 (id=1746): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0xffffffb2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @initdev={0xac, 0x1e, 0x7f, 0x0}, 0x4ea2, 0x1, 'none\x00', 0x0, 0xffff, 0x6c}, 0x55) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) 1.003676967s ago: executing program 6 (id=1747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7, 0x2a6, &(0x7f0000000740)="$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") (async, rerun: 32) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) (rerun: 32) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='call_site.function == vf', 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000, 0x1a1, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1.00345077s ago: executing program 8 (id=1748): r0 = userfaultfd(0x801) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x0, 0x8d2c, 0x8, 0x4, 0x0, 0x5, "dd183cd7132be092051a04ad002000", 0x45, 0x1, 0xfe, 0x6e, 0x9, 0x5, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r2, 0xb8c93000) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x1}) 965.390926ms ago: executing program 8 (id=1749): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="61a903f9e4e435435454cea56c272ba4583eb1a2ff039264fa99c795c691b9bdb3afe73bc2e55fac9a74c1e79a49ddc7395e08cdfcb7fd3d59ee491e88b5b9ac0676", 0x42) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) (async) pread64(r1, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x6, 0x7}, &(0x7f0000000140)=0x10) write$smackfs_label(r0, 0x0, 0x0) (async) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000340)=r3, 0x38) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r4, 0x29, 0x2d, &(0x7f00000001c0)=""/172, &(0x7f0000000280)=0xac) 914.550789ms ago: executing program 8 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000c300000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 657.844192ms ago: executing program 0 (id=1751): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x1a3341) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x2) 654.203221ms ago: executing program 5 (id=1752): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000000)) 347.501563ms ago: executing program 5 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "8f3c5faf35dea56d41d14aed55cd22dc478a18406e14e021c159f6484eb0d22affb40e165dacf38c0b3fa2c5002849784173ffadb1cb2c70ea667ff3dea4192a6e2f2652c56f81bc8a6a1eedc52107f4bfcaf11118471e852452510563d09c2b39f5cb1111839cea179c76def7a7e3576bf54a35b80cf2dcbc26600141693800891067c83d691fe82033552942"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "fde87e4a77d03ff3601595bbba4fa05d997855272ccea538c9d51a5eed6a7a5220d8833e485b61efda1bae9658413ba95758142819d0a88d16270534ad07e0ba87ead479318919a7309a73fac77c2771fbec3a94635b4c831e19af9c9a2b38c32fdda288209e3983344ad514fe5aa3469af11bc8d3af4904f4fa819e5cc06fc605"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2f8}, 0x1, 0x0, 0x0, 0xc004}, 0x20000085) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (rerun: 64) write(r1, &(0x7f0000000500)='nb7vpq904m 0x1', 0xe) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4, 0x3}}, './file0\x00'}) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x6, 0x1, @rand_addr=0x4}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x111}]}]}, 0x38}}, 0x800) (rerun: 32) 304.392504ms ago: executing program 0 (id=1754): socket(0xa, 0x3, 0x87) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xe138, 0x198, 0x178, 0x198, 0x248, 0x358, 0x358, 0x248, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x4, 0x0, 0x1, 0x1, 0x4], 0x2, 0x5}, {0x3, [0x2, 0x0, 0x2, 0x0, 0x5, 0x2], 0x1, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000040)=0x6, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x12, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f016, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134014030d9"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18e2ffff000c000000000000000002d3aaabcc74b099c8d1c1e464470316079dac8eb91a62b14d6acefe4f73b4c49d7b7866cdedc9e4940d5e742d9aa0c1282baa4b"], 0x38}}, 0x24040080) 214.872791ms ago: executing program 5 (id=1755): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="bf12000000000000b7030000000000007b3ac0ff000000007b3ac8ff000000007b3ad0ff000000007b3ad8ff000000007b3ae0ff000000007b3ae8ff000000007b3af0ff000000007b3af8ff00000000bf21000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000800)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789ab", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1ff, r0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)=ANY=[], 0x30}}, 0x4040000) r6 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x100000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x1ff}}, {@allow_other}], [{@context={'context', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000340)="14a4cb30d20efbd9b26c9fa12ab586ea8b096395f59dfce48fa77568ed8ec74f569791c5f3e6b4d8a7394da0cc5557eef86b8f636f7ae8d9ba7430d94aa511051d9e666bf51d841dee003a5c39112caf11451858c8e22fbcf7a5a43febbb643f71") openat(r6, &(0x7f00000003c0)='./file0\x00', 0x10080, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b2f, 0x7fffffffffffffff) write(r1, &(0x7f0000000040)="3860338d66b0d5873a22629331d3fa15f1e7fdb99e57ebcafd107b2143d384c425e1c93c9e6663caab20be74829c33fdeae7401280e7cd19c831e93a7ccf8ef3e23ef2c463f3ba16ba443adb574ef577e0e92b8f", 0x54) 0s ago: executing program 3 (id=1756): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@barrier}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xe1}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/11, 0xb, 0x2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20) kernel console output (not intermixed with test programs): an up link [ 137.606010][ T30] kauditd_printk_skb: 393 callbacks suppressed [ 137.606046][ T30] audit: type=1326 audit(137.570:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.606068][ T30] audit: type=1326 audit(137.570:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.606086][ T30] audit: type=1326 audit(137.570:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.606101][ T30] audit: type=1326 audit(137.570:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.607533][ T30] audit: type=1326 audit(137.570:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.607555][ T30] audit: type=1326 audit(137.570:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.607574][ T30] audit: type=1326 audit(137.570:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.607770][ T30] audit: type=1326 audit(137.570:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.607843][ T30] audit: type=1326 audit(137.570:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.611702][ T30] audit: type=1326 audit(137.570:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.3.1295" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 137.685093][ T9311] loop6: detected capacity change from 0 to 512 [ 137.685695][ T9311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.687261][ T9311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 137.687290][ T9311] System zones: 0-2, 18-18, 34-34 [ 137.687383][ T9311] EXT4-fs (loop6): orphan cleanup on readonly fs [ 137.687404][ T9311] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.1297: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 137.687488][ T9311] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 137.687691][ T9311] EXT4-fs error (device loop6): ext4_quota_enable:7235: comm syz.6.1297: Bad quota inode: 4, type: 1 [ 137.687703][ T9311] loop6: lost filesystem error report for type 5 error -117 [ 137.687829][ T9311] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.688033][ T9311] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 137.688579][ T9311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.716298][ T9311] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 137.718494][ T9311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 137.718911][ T9311] EXT4-fs warning (device loop6): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 137.757394][ T8363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.972566][ T4403] 8021q: adding VLAN 0 to HW filter on device eth10 [ 138.161602][ T9371] bond1: (slave dummy0): Releasing backup interface [ 138.189090][ T9371] dummy0 (unregistering): left promiscuous mode [ 138.189131][ T9371] dummy0 (unregistering): left allmulticast mode [ 138.237495][ T9383] gretap0: entered promiscuous mode [ 138.327351][ T9392] X25: received unknown 00 with LCI 000 [ 138.353058][ T9397] __nla_validate_parse: 11 callbacks suppressed [ 138.353260][ T9397] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1316'. [ 138.440965][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'. [ 138.446350][ T9406] loop0: detected capacity change from 0 to 1024 [ 138.465582][ T9406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.495586][ T9404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.520335][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1318'. [ 138.525990][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.527708][ T9404] bond1: entered promiscuous mode [ 138.527746][ T9404] bond1: entered allmulticast mode [ 138.544796][ T4725] Bluetooth: hci2: command tx timeout [ 138.736977][ T9430] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.370178][ T9434] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 139.394839][ T9432] Bluetooth: hci0: unsupported parameter 5134 [ 139.394877][ T9432] Bluetooth: hci0: unsupported parameter 8192 [ 139.394899][ T9432] Bluetooth: hci0: unsupported parameter 5134 [ 139.394912][ T9432] Bluetooth: hci0: unsupported parameter 8192 [ 139.498301][ T9434] bond8: entered promiscuous mode [ 139.498492][ T9434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 139.516579][ T9445] loop5: detected capacity change from 0 to 7 [ 139.556086][ T9449] 9p: Bad value for 'rfdno' [ 139.557411][ T9436] bond8: (slave bridge5): making interface the new active one [ 139.557498][ T9436] bridge5: entered promiscuous mode [ 139.560215][ T9436] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 139.618485][ T9454] loop6: detected capacity change from 0 to 512 [ 139.618860][ T9454] ext2: Unknown parameter 'noacl' [ 139.674652][ T9461] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 140.080284][ T9508] loop5: detected capacity change from 0 to 256 [ 140.207999][ T9508] syz.5.1345: attempt to access beyond end of device [ 140.207999][ T9508] loop5: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 140.268021][ T9500] syz.5.1345: attempt to access beyond end of device [ 140.268021][ T9500] loop5: rw=2049, sector=1864, nr_sectors = 4 limit=256 [ 140.269516][ T9500] syz.5.1345: attempt to access beyond end of device [ 140.269516][ T9500] loop5: rw=2049, sector=1864, nr_sectors = 4 limit=256 [ 140.270193][ T9508] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 326) [ 140.270306][ T9508] FAT-fs (loop5): Filesystem has been set read-only [ 140.270856][ T9508] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 326) [ 140.604169][ T4725] Bluetooth: hci2: command tx timeout [ 140.860614][ T9543] loop5: detected capacity change from 0 to 512 [ 140.860983][ T9543] EXT4-fs: inline encryption not supported [ 140.871536][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1354'. [ 140.873596][ T9552] netlink: 'syz.6.1354': attribute type 7 has an invalid length. [ 140.875223][ T9552] netlink: 'syz.6.1354': attribute type 8 has an invalid length. [ 140.876718][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1354'. [ 140.878890][ T9543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.878928][ T9543] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.893796][ T9543] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1351: Failed to acquire dquot type 1 [ 140.893838][ T9543] loop5: lost filesystem error report for type 5 error -5 [ 140.898281][ T9543] EXT4-fs (loop5): Remounting filesystem read-only [ 140.898369][ T9543] EXT4-fs (loop5): 1 truncate cleaned up [ 140.918771][ T9543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0007-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.957443][ T9552] erspan0: entered promiscuous mode [ 140.961057][ T9552] gretap0: entered promiscuous mode [ 140.973377][ T9552] erspan0: left promiscuous mode [ 140.975893][ T9552] gretap0: left promiscuous mode [ 141.088430][ T9582] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1358'. [ 141.521522][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 141.530177][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 141.536127][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 141.538509][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 141.543749][ T40] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.543796][ T40] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.543820][ T40] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.543838][ T40] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.568613][ T9615] loop6: detected capacity change from 0 to 512 [ 141.573650][ T9615] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1363: bad orphan inode 15 [ 141.575996][ T9615] loop6: lost filesystem error report for type 5 error -117 [ 141.576273][ T9615] ext4_test_bit(bit=14, block=18) = 1 [ 141.583660][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 141.583705][ C0] EXT4-fs (loop6): initial error at time 141: ext4_orphan_get:1425 [ 141.583746][ C0] EXT4-fs (loop6): last error at time 141: ext4_orphan_get:1425 [ 141.586794][ T9615] is_bad_inode(inode)=0 [ 141.586808][ T9615] NEXT_ORPHAN(inode)=1023 [ 141.586813][ T9615] max_ino=32 [ 141.586818][ T9615] i_nlink=0 [ 141.592361][ T9615] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.1363: corrupted xattr block 19: invalid header [ 141.592422][ T9615] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.597464][ T9615] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 141.608093][ T9615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 141.619786][ T9615] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1363: bg 0: block 449: padding at end of block bitmap is not set [ 141.641389][ T8363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 141.778990][ T7712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0007-0000-000000000000. [ 141.940694][ T9657] netlink: 'syz.5.1374': attribute type 1 has an invalid length. [ 141.954740][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 141.957929][ T9660] loop7: detected capacity change from 0 to 512 [ 141.958315][ T9660] EXT4-fs: Ignoring removed bh option [ 141.966129][ T9660] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 141.970302][ T9660] EXT4-fs (loop7): 1 truncate cleaned up [ 141.972111][ T9660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.977319][ T9657] bond2: entered promiscuous mode [ 141.977523][ T9657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.007282][ T9657] bond2: (slave bridge1): making interface the new active one [ 142.007327][ T9657] bridge1: entered promiscuous mode [ 142.012690][ T9657] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 142.024169][ T8967] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.148762][ T9679] loop5: detected capacity change from 0 to 128 [ 142.180473][ T9679] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 142.181579][ T9679] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 142.566094][ T9683] loop3: detected capacity change from 0 to 4096 [ 142.598969][ T9683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.662304][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.049396][ T9694] X25: received unknown 00 with LCI 000 [ 143.262077][ T9705] loop5: detected capacity change from 0 to 256 [ 143.360724][ T9705] syz.5.1390: attempt to access beyond end of device [ 143.360724][ T9705] loop5: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 143.365667][ T9705] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 326) [ 143.365720][ T9705] FAT-fs (loop5): Filesystem has been set read-only [ 143.366030][ T9705] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 326) [ 143.461991][ T9708] loop3: detected capacity change from 0 to 512 [ 143.491707][ T9708] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 143.493945][ T9708] EXT4-fs (loop3): 1 truncate cleaned up [ 143.494409][ T9708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.607866][ T9712] X25: received unknown 00 with LCI 000 [ 143.645579][ T9716] __nla_validate_parse: 3 callbacks suppressed [ 143.645619][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1396'. [ 143.651844][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.861914][ T9731] xt_SECMARK: invalid mode: 2 [ 144.212110][ T30] kauditd_printk_skb: 411 callbacks suppressed [ 144.212149][ T30] audit: type=1326 audit(144.170:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.212184][ T30] audit: type=1326 audit(144.170:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.215043][ T9739] bridge0: port 3(syz_tun) entered disabled state [ 144.223784][ T30] audit: type=1326 audit(144.180:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.223827][ T30] audit: type=1326 audit(144.180:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.223852][ T30] audit: type=1326 audit(144.180:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.223872][ T30] audit: type=1326 audit(144.180:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.223892][ T30] audit: type=1326 audit(144.180:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.238740][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.241866][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.243957][ T30] audit: type=1326 audit(144.190:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.243984][ T30] audit: type=1326 audit(144.190:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.244010][ T30] audit: type=1326 audit(144.190:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbb5792a8 code=0x7ffc0000 [ 144.263831][ T9746] netlink: 'syz.3.1405': attribute type 16 has an invalid length. [ 144.265319][ T9746] netlink: 'syz.3.1405': attribute type 17 has an invalid length. [ 144.288977][ T9746] bridge0: port 3(syz_tun) entered blocking state [ 144.289062][ T9746] bridge0: port 3(syz_tun) entered forwarding state [ 144.294457][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.294529][ T9746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.295343][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.295377][ T9746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.313270][ T9746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.314448][ T9746] bond6: left promiscuous mode [ 144.314462][ T9746] bond6: left allmulticast mode [ 144.315695][ T9746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.320527][ T9744] syzkaller0: entered promiscuous mode [ 144.320573][ T9744] syzkaller0: entered allmulticast mode [ 144.410544][ T9749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1408'. [ 144.411224][ T9749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1408'. [ 144.495171][ T9751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1409'. [ 144.498938][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1409'. [ 144.624821][ T9760] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1413'. [ 144.774405][ T9774] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1419'. [ 144.786254][ T9774] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1419'. [ 144.788438][ T9774] 0ªî{X¹¦: renamed from gretap0 [ 144.792373][ T9774] 0ªî{X¹¦: entered allmulticast mode [ 144.795658][ T9774] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 144.803582][ T9773] loop3: detected capacity change from 0 to 512 [ 144.810410][ T9773] EXT4-fs: Ignoring removed oldalloc option [ 144.816477][ T9773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.823558][ T9773] EXT4-fs error (device loop3): ext4_readdir:225: inode #2: comm syz.3.1416: path /315/file0: directory fails checksum at offset 0 [ 144.867852][ T9772] FAULT_INJECTION: forcing a failure. [ 144.867852][ T9772] name fail_futex, interval 1, probability 0, space 0, times 1 [ 144.867898][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.6.1418 Tainted: G L syzkaller #0 PREEMPT [ 144.867916][ T9772] Tainted: [L]=SOFTLOCKUP [ 144.867920][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 144.867926][ T9772] Call trace: [ 144.867930][ T9772] show_stack+0x2c/0x3c (C) [ 144.867952][ T9772] __dump_stack+0x30/0x40 [ 144.867965][ T9772] dump_stack_lvl+0xd8/0x12c [ 144.867977][ T9772] dump_stack+0x1c/0x28 [ 144.867993][ T9772] should_fail_ex+0x41c/0x590 [ 144.868005][ T9772] should_fail+0x14/0x24 [ 144.868013][ T9772] get_futex_key+0x1ec/0x12b0 [ 144.868023][ T9772] futex_wake_op+0x1c4/0xfe8 [ 144.868034][ T9772] do_futex+0x200/0x378 [ 144.868043][ T9772] __arm64_sys_futex+0x2e4/0x418 [ 144.868053][ T9772] invoke_syscall+0x98/0x244 [ 144.868065][ T9772] el0_svc_common+0xec/0x23c [ 144.868077][ T9772] do_el0_svc+0x4c/0x5c [ 144.868089][ T9772] el0_svc+0x64/0x260 [ 144.868100][ T9772] el0t_64_sync_handler+0x44/0x104 [ 144.868110][ T9772] el0t_64_sync+0x198/0x19c [ 145.021427][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.595663][ T9784] loop6: detected capacity change from 0 to 1024 [ 145.596104][ T9784] ext4: Unknown parameter 'fsname' [ 145.637695][ T9784] Injecting memory failure for pfn 0x120909 at process virtual address 0x20ffd000 [ 145.648270][ T9787] loop5: detected capacity change from 0 to 2048 [ 145.660579][ T9784] Memory failure: 0x120909: Sending SIGBUS to syz.6.1421:9784 due to hardware memory corruption [ 145.662965][ T9784] Memory failure: 0x120909: recovery action for dirty LRU page: Recovered [ 145.666703][ T9787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.678181][ T9791] loop3: detected capacity change from 0 to 1024 [ 145.683404][ T9787] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 145.691144][ T9787] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 145.691185][ T9787] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.691185][ T9787] [ 145.691215][ T9787] EXT4-fs (loop5): Total free blocks count 0 [ 145.691229][ T9787] EXT4-fs (loop5): Free/Dirty block details [ 145.691243][ T9787] EXT4-fs (loop5): free_blocks=2415919504 [ 145.691326][ T9787] EXT4-fs (loop5): dirty_blocks=64 [ 145.691338][ T9787] EXT4-fs (loop5): Block reservation details [ 145.691349][ T9787] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 145.697499][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1426'. [ 145.782153][ T9802] loop3: detected capacity change from 0 to 2048 [ 145.805852][ T9802] overlay: ./file0 is not a directory [ 145.826273][ T1361] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 145.869341][ T9809] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1428'. [ 145.889552][ T7712] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 145.903245][ T9811] netlink: 'syz.7.1429': attribute type 2 has an invalid length. [ 146.271379][ T9820] loop7: detected capacity change from 0 to 512 [ 146.277654][ T9820] EXT4-fs (loop7): Test dummy encryption mode enabled [ 146.282322][ T9820] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1431: inode has both inline data and extents flags [ 146.287598][ T9820] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.287834][ T9820] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1431: couldn't read orphan inode 15 (err -117) [ 146.293645][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 146.293677][ C0] EXT4-fs (loop7): initial error at time 146: ext4_orphan_get:1399: inode 15 [ 146.293720][ C0] EXT4-fs (loop7): last error at time 146: ext4_orphan_get:1399: inode 15 [ 146.298840][ T9820] loop7: lost filesystem error report for type 5 error -117 [ 146.300901][ T9820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.322634][ T8967] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.370397][ T9827] loop7: detected capacity change from 0 to 256 [ 146.408462][ T8967] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 146.410304][ T8967] FAT-fs (loop7): Filesystem has been set read-only [ 146.412335][ T8967] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 146.560817][ T9833] mmap: syz.5.1437 (9833) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.576538][ T9835] netlink: 'syz.3.1439': attribute type 16 has an invalid length. [ 146.576576][ T9835] netlink: 'syz.3.1439': attribute type 17 has an invalid length. [ 146.719794][ T9840] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 146.725089][ T9839] FAULT_INJECTION: forcing a failure. [ 146.725089][ T9839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.725126][ T9839] CPU: 0 UID: 0 PID: 9839 Comm: syz.3.1440 Tainted: G L syzkaller #0 PREEMPT [ 146.725141][ T9839] Tainted: [L]=SOFTLOCKUP [ 146.725145][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 146.725151][ T9839] Call trace: [ 146.725153][ T9839] show_stack+0x2c/0x3c (C) [ 146.725175][ T9839] __dump_stack+0x30/0x40 [ 146.725188][ T9839] dump_stack_lvl+0xd8/0x12c [ 146.725200][ T9839] dump_stack+0x1c/0x28 [ 146.725212][ T9839] should_fail_ex+0x41c/0x590 [ 146.725221][ T9839] should_fail+0x14/0x24 [ 146.725228][ T9839] should_fail_usercopy+0x20/0x30 [ 146.725236][ T9839] _inline_copy_from_user+0x3c/0x174 [ 146.725246][ T9839] __sys_bpf+0x1b4/0x82c [ 146.725254][ T9839] __arm64_sys_bpf+0xd0/0xec [ 146.725262][ T9839] invoke_syscall+0x98/0x244 [ 146.725274][ T9839] el0_svc_common+0xec/0x23c [ 146.725286][ T9839] do_el0_svc+0x4c/0x5c [ 146.725298][ T9839] el0_svc+0x64/0x260 [ 146.725309][ T9839] el0t_64_sync_handler+0x44/0x104 [ 146.725319][ T9839] el0t_64_sync+0x198/0x19c [ 146.796266][ T9841] loop6: detected capacity change from 0 to 512 [ 146.796658][ T9841] EXT4-fs: Ignoring removed nobh option [ 146.799040][ T9841] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 146.808072][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.821682][ T9841] EXT4-fs (loop6): 1 truncate cleaned up [ 146.822181][ T9841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.900289][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.902733][ T8363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.930672][ T9848] netlink: 'syz.3.1442': attribute type 2 has an invalid length. [ 146.957459][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.960247][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.962731][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.967444][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.967666][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.000514][ T9855] ext4: Unknown parameter 'audit' [ 147.053166][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.152954][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.242736][ T9877] netlink: 'syz.3.1450': attribute type 7 has an invalid length. [ 147.245323][ T9877] netlink: 'syz.3.1450': attribute type 8 has an invalid length. [ 147.255242][ T9877] erspan0: entered promiscuous mode [ 147.257148][ T9877] gretap0: entered promiscuous mode [ 147.258737][ T9877] erspan0: left promiscuous mode [ 147.260236][ T9877] gretap0: left promiscuous mode [ 147.391500][ T12] dummy0: left allmulticast mode [ 147.391541][ T12] dummy0: left promiscuous mode [ 147.391637][ T12] bridge0: port 3(dummy0) entered disabled state [ 147.402932][ T12] bridge_slave_1: left allmulticast mode [ 147.402973][ T12] bridge_slave_1: left promiscuous mode [ 147.403073][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.411117][ T12] bridge_slave_0: left allmulticast mode [ 147.411156][ T12] bridge_slave_0: left promiscuous mode [ 147.411251][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.413581][ T9887] vfat: Unknown parameter 'noFÛa² H' [ 147.730129][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.065808][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.097796][ T12] bond0 (unregistering): Released all slaves [ 148.211168][ T9910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.243573][ T7712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.416778][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.416836][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.417009][ T9849] bridge_slave_0: entered allmulticast mode [ 148.417502][ T9849] bridge_slave_0: entered promiscuous mode [ 148.418302][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.418328][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.418381][ T9849] bridge_slave_1: entered allmulticast mode [ 148.418801][ T9849] bridge_slave_1: entered promiscuous mode [ 148.500694][ T9936] FAULT_INJECTION: forcing a failure. [ 148.500694][ T9936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.500742][ T9936] CPU: 1 UID: 0 PID: 9936 Comm: syz.3.1460 Tainted: G L syzkaller #0 PREEMPT [ 148.500757][ T9936] Tainted: [L]=SOFTLOCKUP [ 148.500761][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 148.500767][ T9936] Call trace: [ 148.500771][ T9936] show_stack+0x2c/0x3c (C) [ 148.500793][ T9936] __dump_stack+0x30/0x40 [ 148.500804][ T9936] dump_stack_lvl+0xd8/0x12c [ 148.500815][ T9936] dump_stack+0x1c/0x28 [ 148.500824][ T9936] should_fail_ex+0x41c/0x590 [ 148.500832][ T9936] should_fail+0x14/0x24 [ 148.500839][ T9936] should_fail_usercopy+0x20/0x30 [ 148.500846][ T9936] _inline_copy_from_user+0x3c/0x174 [ 148.500858][ T9936] cec_ioctl+0x8c4/0x2c60 [ 148.500867][ T9936] __arm64_sys_ioctl+0x154/0x1cc [ 148.500878][ T9936] invoke_syscall+0x98/0x244 [ 148.500889][ T9936] el0_svc_common+0xec/0x23c [ 148.500898][ T9936] do_el0_svc+0x4c/0x5c [ 148.500908][ T9936] el0_svc+0x64/0x260 [ 148.500917][ T9936] el0t_64_sync_handler+0x44/0x104 [ 148.500925][ T9936] el0t_64_sync+0x198/0x19c [ 148.547034][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.548142][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.560130][ T9849] team0: Port device team_slave_0 added [ 148.563729][ T9849] team0: Port device team_slave_1 added [ 148.610836][ T9952] overlay: ./file2 is not a directory [ 148.639156][ T12] hsr_slave_0: left promiscuous mode [ 148.640287][ T12] hsr_slave_1: left promiscuous mode [ 148.641013][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.641027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.642263][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.642276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.660341][ T9943] __nla_validate_parse: 3 callbacks suppressed [ 148.661558][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1462'. [ 148.664134][ T12] veth1_macvtap: left promiscuous mode [ 148.665374][ T12] veth0_macvtap: left promiscuous mode [ 148.666473][ T12] veth1_vlan: left promiscuous mode [ 148.666532][ T12] veth0_vlan: left promiscuous mode [ 148.761275][ T9961] overlay: ./file2 is not a directory [ 149.004719][ T4720] Bluetooth: hci2: command tx timeout [ 149.012014][ T9963] set_capacity_and_notify: 3 callbacks suppressed [ 149.012057][ T9963] loop6: detected capacity change from 0 to 4096 [ 149.039597][ T9963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.057143][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.065681][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.074398][ T9959] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 149.087489][ T9969] loop5: detected capacity change from 0 to 512 [ 149.092120][ T9969] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 149.092157][ T9969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 149.092198][ T9969] System zones: 1-12 [ 149.092300][ T9969] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 149.092316][ T9969] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 149.102889][ T9969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.106108][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.112481][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.116040][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.121473][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.121664][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.124983][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.125084][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.129878][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.130037][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.133316][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.133452][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.144090][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.144286][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.144722][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.144829][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.146093][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.146206][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.146368][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.146443][ T9969] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1467: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.146758][ T9969] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1467: error -EUCLEAN reading directory block [ 149.181663][ T7712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.202018][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.202057][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.202074][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.202679][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.202686][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.202720][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.214551][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 149.215863][ T9962] syzkaller0: entered promiscuous mode [ 149.215877][ T9962] syzkaller0: entered allmulticast mode [ 149.287019][ T9849] hsr_slave_0: entered promiscuous mode [ 149.291781][ T9849] hsr_slave_1: entered promiscuous mode [ 149.299518][ T9849] debugfs: 'hsr0' already exists in 'hsr' [ 149.299560][ T9849] Cannot create hsr debugfs directory [ 149.472709][T10000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.518231][ T8363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.842631][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 149.844484][T10013] overlay: ./file2 is not a directory [ 149.846164][T10016] netlink: 'syz.0.1477': attribute type 2 has an invalid length. [ 150.606670][ T9849] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.612387][ T9849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.615567][ T9849] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.622076][ T9849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.626126][ T9849] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.630169][ T9849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.632415][ T9849] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.639475][ T9849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.704082][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1488'. [ 150.771034][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.779672][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.785610][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.785656][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.794167][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.794212][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.973576][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.984016][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.006363][T10104] netlink: 'syz.6.1490': attribute type 16 has an invalid length. [ 151.006403][T10104] netlink: 'syz.6.1490': attribute type 17 has an invalid length. [ 151.073952][ T4720] Bluetooth: hci2: command tx timeout [ 151.110956][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.126545][T10115] netlink: 'syz.5.1493': attribute type 2 has an invalid length. [ 151.135151][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.135213][T10104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.139395][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.139442][T10104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.209482][T10118] loop0: detected capacity change from 0 to 256 [ 151.371808][T10112] syz.0.1491: attempt to access beyond end of device [ 151.371808][T10112] loop0: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 151.414425][T10112] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 326) [ 151.414562][T10112] FAT-fs (loop0): Filesystem has been set read-only [ 151.415052][T10112] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 326) [ 151.600442][T10104] bond1: left promiscuous mode [ 151.601672][T10104] bond1: left allmulticast mode [ 151.603137][T10104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.644376][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.679351][T10136] FAULT_INJECTION: forcing a failure. [ 151.679351][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 151.679395][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.6.1495 Tainted: G L syzkaller #0 PREEMPT [ 151.679412][T10136] Tainted: [L]=SOFTLOCKUP [ 151.679416][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 151.679422][T10136] Call trace: [ 151.679426][T10136] show_stack+0x2c/0x3c (C) [ 151.679447][T10136] __dump_stack+0x30/0x40 [ 151.679460][T10136] dump_stack_lvl+0xd8/0x12c [ 151.679472][T10136] dump_stack+0x1c/0x28 [ 151.679484][T10136] should_fail_ex+0x41c/0x590 [ 151.679493][T10136] should_failslab+0xc4/0x120 [ 151.679503][T10136] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 151.679513][T10136] __d_alloc+0x50/0x690 [ 151.679523][T10136] d_alloc_pseudo+0x2c/0xd8 [ 151.679532][T10136] alloc_path_pseudo+0xe8/0x1d4 [ 151.679541][T10136] alloc_file_pseudo+0xb0/0x198 [ 151.679550][T10136] sock_alloc_file+0xb4/0x1ac [ 151.679562][T10136] __sys_socketpair+0x348/0x528 [ 151.679573][T10136] __arm64_sys_socketpair+0xa8/0xc4 [ 151.679584][T10136] invoke_syscall+0x98/0x244 [ 151.679596][T10136] el0_svc_common+0xec/0x23c [ 151.679608][T10136] do_el0_svc+0x4c/0x5c [ 151.679619][T10136] el0_svc+0x64/0x260 [ 151.679630][T10136] el0t_64_sync_handler+0x44/0x104 [ 151.679640][T10136] el0t_64_sync+0x198/0x19c [ 151.806828][T10147] loop6: detected capacity change from 0 to 1024 [ 151.810915][T10147] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 151.820408][T10147] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.822792][T10147] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 151.825355][T10147] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.835400][T10147] EXT4-fs error (device loop6): ext4_get_journal_inode:5900: inode #17: comm syz.6.1497: iget: bad i_size value: 4398046511204 [ 151.835448][T10147] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 151.840472][T10147] EXT4-fs (loop6): no journal found [ 151.843654][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 151.843689][ C0] EXT4-fs (loop6): initial error at time 151: ext4_get_journal_inode:5900: inode 17 [ 151.843725][ C0] EXT4-fs (loop6): last error at time 151: ext4_get_journal_inode:5900: inode 17 [ 151.858438][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.860602][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.936514][ T9849] veth0_vlan: entered promiscuous mode [ 151.938257][ T9849] veth1_vlan: entered promiscuous mode [ 151.985764][ T9849] veth0_macvtap: entered promiscuous mode [ 151.988591][ T9849] veth1_macvtap: entered promiscuous mode [ 151.993375][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.997256][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.043995][ T5181] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.044102][ T5181] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.044142][ T5181] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.044181][ T5181] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.090578][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1503'. [ 152.096353][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'. [ 152.100237][T10178] FAULT_INJECTION: forcing a failure. [ 152.100237][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.102938][T10178] CPU: 1 UID: 0 PID: 10178 Comm: syz.3.1504 Tainted: G L syzkaller #0 PREEMPT [ 152.102959][T10178] Tainted: [L]=SOFTLOCKUP [ 152.102963][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.102970][T10178] Call trace: [ 152.102973][T10178] show_stack+0x2c/0x3c (C) [ 152.102997][T10178] __dump_stack+0x30/0x40 [ 152.103014][T10178] dump_stack_lvl+0xd8/0x12c [ 152.103025][T10178] dump_stack+0x1c/0x28 [ 152.103035][T10178] should_fail_ex+0x41c/0x590 [ 152.103044][T10178] should_fail+0x14/0x24 [ 152.103052][T10178] should_fail_usercopy+0x20/0x30 [ 152.103060][T10178] _inline_copy_from_user+0x3c/0x174 [ 152.103071][T10178] cec_ioctl+0x8c4/0x2c60 [ 152.103081][T10178] __arm64_sys_ioctl+0x154/0x1cc [ 152.103092][T10178] invoke_syscall+0x98/0x244 [ 152.103102][T10178] el0_svc_common+0xec/0x23c [ 152.103112][T10178] do_el0_svc+0x4c/0x5c [ 152.103121][T10178] el0_svc+0x64/0x260 [ 152.103131][T10178] el0t_64_sync_handler+0x44/0x104 [ 152.103139][T10178] el0t_64_sync+0x198/0x19c [ 152.109148][T10174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.112188][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 152.124173][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.124187][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.152946][T10174] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1503'. [ 152.159374][T10183] loop3: detected capacity change from 0 to 128 [ 152.160916][T10174] bond3: entered promiscuous mode [ 152.160952][T10174] bond3: entered allmulticast mode [ 152.166539][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.166576][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.207551][T10183] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.594850][ T4719] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.153775][ T4726] Bluetooth: hci2: command tx timeout [ 153.156677][T10247] bond0: option ad_select: unable to set because the bond device is up [ 153.159553][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 153.159588][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 153.167889][ T40] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.167915][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 153.168012][ T40] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.168040][ T40] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.168060][ T40] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.180157][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 153.713768][ T4726] Bluetooth: hci3: command 0x0406 tx timeout [ 153.713915][ T4726] Bluetooth: hci1: command 0x0406 tx timeout [ 154.311213][T10286] loop7: detected capacity change from 0 to 256 [ 154.356189][T10286] syzkaller0: entered promiscuous mode [ 154.357582][T10286] syzkaller0: entered allmulticast mode [ 155.233951][ T4720] Bluetooth: hci2: command tx timeout [ 155.709315][T10314] __nla_validate_parse: 1 callbacks suppressed [ 155.709361][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1538'. [ 155.815426][T10353] netlink: 'syz.6.1545': attribute type 1 has an invalid length. [ 155.822351][T10353] bond2: entered promiscuous mode [ 155.839266][T10353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.863115][T10353] bond2: (slave bridge1): making interface the new active one [ 155.869152][T10353] bridge1: entered promiscuous mode [ 155.869839][T10353] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 155.928755][T10361] bond0: no command found in arp_ip_targets file - use + or - [ 156.081511][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 156.342440][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1548'. [ 156.411910][T10382] netlink: 'syz.5.1550': attribute type 2 has an invalid length. [ 156.546301][T10396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1555'. [ 156.550785][T10396] loop5: detected capacity change from 0 to 512 [ 156.569804][T10396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.577962][T10396] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 156.582832][T10396] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 156.585435][T10396] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.585435][T10396] [ 156.587614][T10396] EXT4-fs (loop5): Total free blocks count 0 [ 156.588980][T10396] EXT4-fs (loop5): Free/Dirty block details [ 156.590362][T10396] EXT4-fs (loop5): free_blocks=65280 [ 156.591606][T10396] EXT4-fs (loop5): dirty_blocks=1 [ 156.592967][T10396] EXT4-fs (loop5): Block reservation details [ 156.594751][T10396] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 156.631381][ T7712] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 156.632242][ T7712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.707796][T10405] Injecting memory failure for pfn 0x142846 at process virtual address 0x20000000 [ 156.714448][T10405] Memory failure: 0x142846: Sending SIGBUS to syz.5.1557:10405 due to hardware memory corruption [ 156.716844][T10405] Memory failure: 0x142846: recovery action for dirty LRU page: Recovered [ 156.716864][T10405] Injecting memory failure for pfn 0x1428ee at process virtual address 0x20001000 [ 156.716988][T10405] Memory failure: 0x1428ee: recovery action for clean LRU page: Recovered [ 156.717078][T10405] Injecting memory failure for pfn 0x142904 at process virtual address 0x20002000 [ 156.717155][T10405] Memory failure: 0x142904: recovery action for clean LRU page: Recovered [ 156.717208][T10405] Injecting memory failure for pfn 0x141803 at process virtual address 0x20003000 [ 156.717282][T10405] Memory failure: 0x141803: recovery action for clean LRU page: Recovered [ 156.717290][T10405] Injecting memory failure for pfn 0x142845 at process virtual address 0x20004000 [ 156.717317][T10405] Memory failure: 0x142845: Sending SIGBUS to syz.5.1557:10405 due to hardware memory corruption [ 156.717335][T10405] Memory failure: 0x142845: recovery action for dirty LRU page: Recovered [ 156.717413][T10405] Injecting memory failure for pfn 0x13903b at process virtual address 0x20005000 [ 156.717520][T10405] Memory failure: 0x13903b: recovery action for clean LRU page: Recovered [ 156.717632][T10405] Injecting memory failure for pfn 0x13c2d8 at process virtual address 0x20006000 [ 156.726697][T10405] Memory failure: 0x13c2d8: recovery action for clean LRU page: Recovered [ 156.726785][T10405] Injecting memory failure for pfn 0x13b0ea at process virtual address 0x20007000 [ 156.726889][T10405] Memory failure: 0x13b0ea: recovery action for clean LRU page: Recovered [ 156.726946][T10405] Injecting memory failure for pfn 0x140639 at process virtual address 0x20008000 [ 156.727038][T10405] Memory failure: 0x140639: recovery action for clean LRU page: Recovered [ 156.727110][T10405] Injecting memory failure for pfn 0x13ab3d at process virtual address 0x20009000 [ 156.727223][T10405] Memory failure: 0x13ab3d: recovery action for clean LRU page: Recovered [ 156.727337][T10405] Injecting memory failure for pfn 0x13944b at process virtual address 0x2000a000 [ 156.729157][T10405] Memory failure: 0x13944b: recovery action for clean LRU page: Recovered [ 156.729369][T10405] Injecting memory failure for pfn 0x13c2d7 at process virtual address 0x2000b000 [ 156.729796][T10405] Memory failure: 0x13c2d7: recovery action for clean LRU page: Recovered [ 156.730192][T10405] Injecting memory failure for pfn 0x1366d8 at process virtual address 0x2000c000 [ 156.730853][T10405] Memory failure: 0x1366d8: recovery action for clean LRU page: Recovered [ 156.731218][T10405] Injecting memory failure for pfn 0x141ec2 at process virtual address 0x2000d000 [ 156.731864][T10405] Memory failure: 0x141ec2: recovery action for clean LRU page: Recovered [ 156.732226][T10405] Injecting memory failure for pfn 0x1418c2 at process virtual address 0x2000e000 [ 156.732852][T10405] Memory failure: 0x1418c2: recovery action for clean LRU page: Recovered [ 156.733212][T10405] Injecting memory failure for pfn 0x13c2da at process virtual address 0x2000f000 [ 156.734543][T10405] Memory failure: 0x13c2da: recovery action for clean LRU page: Recovered [ 156.735469][T10405] Injecting memory failure for pfn 0x141804 at process virtual address 0x20010000 [ 156.736120][T10405] Memory failure: 0x141804: recovery action for clean LRU page: Recovered [ 156.736474][T10405] Injecting memory failure for pfn 0x136962 at process virtual address 0x20011000 [ 156.737081][T10405] Memory failure: 0x136962: recovery action for clean LRU page: Recovered [ 156.737424][T10405] Injecting memory failure for pfn 0x13f4de at process virtual address 0x20012000 [ 156.737965][T10405] Memory failure: 0x13f4de: recovery action for clean LRU page: Recovered [ 156.738378][T10405] Injecting memory failure for pfn 0x13ab38 at process virtual address 0x20013000 [ 156.738926][T10405] Memory failure: 0x13ab38: recovery action for clean LRU page: Recovered [ 156.739273][T10405] Injecting memory failure for pfn 0x13f487 at process virtual address 0x20014000 [ 156.739953][T10405] Memory failure: 0x13f487: recovery action for clean LRU page: Recovered [ 156.740303][T10405] Injecting memory failure for pfn 0x140383 at process virtual address 0x20015000 [ 156.740909][T10405] Memory failure: 0x140383: recovery action for clean LRU page: Recovered [ 156.741255][T10405] Injecting memory failure for pfn 0x13cde4 at process virtual address 0x20016000 [ 156.741863][T10405] Memory failure: 0x13cde4: recovery action for clean LRU page: Recovered [ 156.742215][T10405] Injecting memory failure for pfn 0x13903c at process virtual address 0x20017000 [ 156.742804][T10405] Memory failure: 0x13903c: recovery action for clean LRU page: Recovered [ 156.743147][T10405] Injecting memory failure for pfn 0x13cde2 at process virtual address 0x20018000 [ 156.744524][T10405] Memory failure: 0x13cde2: recovery action for clean LRU page: Recovered [ 156.745420][T10405] Injecting memory failure for pfn 0x13cde6 at process virtual address 0x20019000 [ 156.746651][T10405] Memory failure: 0x13cde6: recovery action for clean LRU page: Recovered [ 156.747081][T10405] Injecting memory failure for pfn 0x135a19 at process virtual address 0x2001a000 [ 156.748035][T10405] Memory failure: 0x135a19: recovery action for clean LRU page: Recovered [ 156.748405][T10405] Injecting memory failure for pfn 0x1419f3 at process virtual address 0x2001b000 [ 156.750225][T10405] Memory failure: 0x1419f3: recovery action for clean LRU page: Recovered [ 156.750603][T10405] Injecting memory failure for pfn 0x1422d9 at process virtual address 0x2001c000 [ 156.751561][T10405] Memory failure: 0x1422d9: recovery action for clean LRU page: Recovered [ 156.751933][T10405] Injecting memory failure for pfn 0x11f29b at process virtual address 0x2001d000 [ 156.752574][T10405] Memory failure: 0x11f29b: recovery action for clean LRU page: Recovered [ 156.752928][T10405] Injecting memory failure for pfn 0x11f999 at process virtual address 0x2001e000 [ 156.753478][T10405] Memory failure: 0x11f999: recovery action for clean LRU page: Recovered [ 156.754932][T10405] Injecting memory failure for pfn 0x135bdc at process virtual address 0x2001f000 [ 156.755585][T10405] Memory failure: 0x135bdc: recovery action for clean LRU page: Recovered [ 156.755941][T10405] Injecting memory failure for pfn 0x1218e9 at process virtual address 0x20020000 [ 156.756569][T10405] Memory failure: 0x1218e9: recovery action for clean LRU page: Recovered [ 156.756916][T10405] Injecting memory failure for pfn 0x11f828 at process virtual address 0x20021000 [ 156.757531][T10405] Memory failure: 0x11f828: recovery action for clean LRU page: Recovered [ 156.758255][T10405] Injecting memory failure for pfn 0x11e3f4 at process virtual address 0x20022000 [ 156.758870][T10405] Memory failure: 0x11e3f4: recovery action for clean LRU page: Recovered [ 156.759220][T10405] Injecting memory failure for pfn 0x13494c at process virtual address 0x20023000 [ 156.759881][T10405] Memory failure: 0x13494c: recovery action for clean LRU page: Recovered [ 156.760298][T10405] Injecting memory failure for pfn 0x13e8fa at process virtual address 0x20024000 [ 156.760943][T10405] Memory failure: 0x13e8fa: recovery action for clean LRU page: Recovered [ 156.761290][T10405] Injecting memory failure for pfn 0x11d484 at process virtual address 0x20025000 [ 156.761934][T10405] Memory failure: 0x11d484: recovery action for clean LRU page: Recovered [ 156.762282][T10405] Injecting memory failure for pfn 0x136953 at process virtual address 0x20026000 [ 156.762916][T10405] Memory failure: 0x136953: recovery action for clean LRU page: Recovered [ 156.763261][T10405] Injecting memory failure for pfn 0x13f6d1 at process virtual address 0x20027000 [ 156.765433][T10405] Memory failure: 0x13f6d1: recovery action for clean LRU page: Recovered [ 156.765494][T10405] Injecting memory failure for pfn 0x11e721 at process virtual address 0x20028000 [ 156.765556][T10405] Memory failure: 0x11e721: recovery action for clean LRU page: Recovered [ 156.765607][T10405] Injecting memory failure for pfn 0x13b5d6 at process virtual address 0x20029000 [ 156.766536][T10405] Memory failure: 0x13b5d6: recovery action for clean LRU page: Recovered [ 156.766622][T10405] Injecting memory failure for pfn 0x11f503 at process virtual address 0x2002a000 [ 156.766822][T10405] Memory failure: 0x11f503: recovery action for clean LRU page: Recovered [ 156.766932][T10405] Injecting memory failure for pfn 0x134c6e at process virtual address 0x2002b000 [ 156.767104][T10405] Memory failure: 0x134c6e: recovery action for clean LRU page: Recovered [ 156.767283][T10405] Injecting memory failure for pfn 0x11f7cb at process virtual address 0x2002c000 [ 156.767601][T10405] Memory failure: 0x11f7cb: recovery action for clean LRU page: Recovered [ 156.768024][T10405] Injecting memory failure for pfn 0x13ef40 at process virtual address 0x2002d000 [ 156.768603][T10405] Memory failure: 0x13ef40: recovery action for clean LRU page: Recovered [ 156.768949][T10405] Injecting memory failure for pfn 0x13b0e8 at process virtual address 0x2002e000 [ 156.769587][T10405] Memory failure: 0x13b0e8: recovery action for clean LRU page: Recovered [ 156.769933][T10405] Injecting memory failure for pfn 0x11d918 at process virtual address 0x2002f000 [ 156.770671][T10405] Memory failure: 0x11d918: recovery action for clean LRU page: Recovered [ 156.771025][T10405] Injecting memory failure for pfn 0x13f850 at process virtual address 0x20030000 [ 156.771648][T10405] Memory failure: 0x13f850: recovery action for clean LRU page: Recovered [ 156.772027][T10405] Injecting memory failure for pfn 0x135633 at process virtual address 0x20031000 [ 156.772646][T10405] Memory failure: 0x135633: recovery action for clean LRU page: Recovered [ 156.772993][T10405] Injecting memory failure for pfn 0x141f27 at process virtual address 0x20032000 [ 156.775387][T10405] Memory failure: 0x141f27: recovery action for clean LRU page: Recovered [ 156.775826][T10405] Injecting memory failure for pfn 0x13f48c at process virtual address 0x20033000 [ 156.776492][T10405] Memory failure: 0x13f48c: recovery action for clean LRU page: Recovered [ 156.776843][T10405] Injecting memory failure for pfn 0x14180f at process virtual address 0x20034000 [ 156.777479][T10405] Memory failure: 0x14180f: recovery action for clean LRU page: Recovered [ 156.777829][T10405] Injecting memory failure for pfn 0x13c7ff at process virtual address 0x20035000 [ 156.778519][T10405] Memory failure: 0x13c7ff: recovery action for clean LRU page: Recovered [ 156.778867][T10405] Injecting memory failure for pfn 0x13b0e2 at process virtual address 0x20036000 [ 156.779518][T10405] Memory failure: 0x13b0e2: recovery action for clean LRU page: Recovered [ 156.779864][T10405] Injecting memory failure for pfn 0x13ab36 at process virtual address 0x20037000 [ 156.780606][T10405] Memory failure: 0x13ab36: recovery action for clean LRU page: Recovered [ 156.780955][T10405] Injecting memory failure for pfn 0x139038 at process virtual address 0x20038000 [ 156.781597][T10405] Memory failure: 0x139038: recovery action for clean LRU page: Recovered [ 156.781944][T10405] Injecting memory failure for pfn 0x13b0ef at process virtual address 0x20039000 [ 156.782617][T10405] Memory failure: 0x13b0ef: recovery action for clean LRU page: Recovered [ 156.782964][T10405] Injecting memory failure for pfn 0x13bf8b at process virtual address 0x2003a000 [ 156.783608][T10405] Memory failure: 0x13bf8b: recovery action for clean LRU page: Recovered [ 156.787910][T10405] Injecting memory failure for pfn 0x139e19 at process virtual address 0x2003b000 [ 156.790296][T10405] Memory failure: 0x139e19: recovery action for clean LRU page: Recovered [ 156.790371][T10405] Injecting memory failure for pfn 0x13694e at process virtual address 0x2003c000 [ 156.790480][T10405] Memory failure: 0x13694e: recovery action for clean LRU page: Recovered [ 156.791068][T10405] Injecting memory failure for pfn 0x134c63 at process virtual address 0x2003d000 [ 156.791205][T10405] Memory failure: 0x134c63: recovery action for clean LRU page: Recovered [ 156.791472][T10405] Injecting memory failure for pfn 0x13ae46 at process virtual address 0x2003e000 [ 156.791659][T10405] Memory failure: 0x13ae46: recovery action for clean LRU page: Recovered [ 156.791937][T10405] Injecting memory failure for pfn 0x11d3d7 at process virtual address 0x2003f000 [ 156.792249][T10405] Memory failure: 0x11d3d7: recovery action for clean LRU page: Recovered [ 156.792710][T10405] Injecting memory failure for pfn 0x13b618 at process virtual address 0x20040000 [ 156.793332][T10405] Memory failure: 0x13b618: recovery action for clean LRU page: Recovered [ 156.794453][T10405] Injecting memory failure for pfn 0x13f091 at process virtual address 0x20041000 [ 156.795134][T10405] Memory failure: 0x13f091: recovery action for clean LRU page: Recovered [ 156.795571][T10405] Injecting memory failure for pfn 0x13b0e1 at process virtual address 0x20042000 [ 156.796185][T10405] Memory failure: 0x13b0e1: recovery action for clean LRU page: Recovered [ 156.796536][T10405] Injecting memory failure for pfn 0x13b0e4 at process virtual address 0x20043000 [ 156.797236][T10405] Memory failure: 0x13b0e4: recovery action for clean LRU page: Recovered [ 156.797589][T10405] Injecting memory failure for pfn 0x140465 at process virtual address 0x20044000 [ 156.798291][T10405] Memory failure: 0x140465: recovery action for clean LRU page: Recovered [ 156.798640][T10405] Injecting memory failure for pfn 0x13b0e7 at process virtual address 0x20045000 [ 156.799355][T10405] Memory failure: 0x13b0e7: recovery action for clean LRU page: Recovered [ 156.799706][T10405] Injecting memory failure for pfn 0x13c7fc at process virtual address 0x20046000 [ 156.800406][T10405] Memory failure: 0x13c7fc: recovery action for clean LRU page: Recovered [ 156.800758][T10405] Injecting memory failure for pfn 0x134c6d at process virtual address 0x20047000 [ 156.801511][T10405] Memory failure: 0x134c6d: recovery action for clean LRU page: Recovered [ 156.801859][T10405] Injecting memory failure for pfn 0x13584d at process virtual address 0x20048000 [ 156.802570][T10405] Memory failure: 0x13584d: recovery action for clean LRU page: Recovered [ 156.802935][T10405] Injecting memory failure for pfn 0x14040c at process virtual address 0x20049000 [ 156.803973][T10405] Memory failure: 0x14040c: recovery action for clean LRU page: Recovered [ 156.804982][T10405] Injecting memory failure for pfn 0x135e37 at process virtual address 0x2004a000 [ 156.807024][T10405] Memory failure: 0x135e37: recovery action for clean LRU page: Recovered [ 156.807404][T10405] Injecting memory failure for pfn 0x121314 at process virtual address 0x2004b000 [ 156.808921][T10405] Memory failure: 0x121314: recovery action for clean LRU page: Recovered [ 156.809398][T10405] Injecting memory failure for pfn 0x13ad2e at process virtual address 0x2004c000 [ 156.810020][T10405] Memory failure: 0x13ad2e: recovery action for clean LRU page: Recovered [ 156.811076][T10405] Injecting memory failure for pfn 0x142169 at process virtual address 0x2004d000 [ 156.845792][T10405] Memory failure: 0x142169: recovery action for clean LRU page: Recovered [ 156.845876][T10405] Injecting memory failure for pfn 0x136777 at process virtual address 0x2004e000 [ 156.845962][T10405] Memory failure: 0x136777: recovery action for clean LRU page: Recovered [ 156.846025][T10405] Injecting memory failure for pfn 0x13cde5 at process virtual address 0x2004f000 [ 156.846106][T10405] Memory failure: 0x13cde5: recovery action for clean LRU page: Recovered [ 156.846171][T10405] Injecting memory failure for pfn 0x13694f at process virtual address 0x20050000 [ 156.846274][T10405] Memory failure: 0x13694f: recovery action for clean LRU page: Recovered [ 156.846368][T10405] Injecting memory failure for pfn 0x13f48e at process virtual address 0x20051000 [ 156.846531][T10405] Memory failure: 0x13f48e: recovery action for clean LRU page: Recovered [ 156.848058][T10405] Injecting memory failure for pfn 0x141f3b at process virtual address 0x20052000 [ 156.848469][T10405] Memory failure: 0x141f3b: recovery action for clean LRU page: Recovered [ 156.851701][T10405] Injecting memory failure for pfn 0x134e6c at process virtual address 0x20053000 [ 156.855029][T10405] Memory failure: 0x134e6c: recovery action for clean LRU page: Recovered [ 156.855104][T10405] Injecting memory failure for pfn 0x13b0a6 at process virtual address 0x20054000 [ 156.857415][T10405] Memory failure: 0x13b0a6: recovery action for clean LRU page: Recovered [ 156.857473][T10405] Injecting memory failure for pfn 0x136771 at process virtual address 0x20055000 [ 156.857820][T10405] Memory failure: 0x136771: recovery action for clean LRU page: Recovered [ 156.857876][T10405] Injecting memory failure for pfn 0x142873 at process virtual address 0x20056000 [ 156.857964][T10405] Memory failure: 0x142873: recovery action for clean LRU page: Recovered [ 156.858042][T10405] Injecting memory failure for pfn 0x121144 at process virtual address 0x20057000 [ 156.858149][T10405] Memory failure: 0x121144: recovery action for clean LRU page: Recovered [ 156.858244][T10405] Injecting memory failure for pfn 0x139032 at process virtual address 0x20058000 [ 156.860611][T10405] Memory failure: 0x139032: recovery action for clean LRU page: Recovered [ 156.860802][T10405] Injecting memory failure for pfn 0x13f4d5 at process virtual address 0x20059000 [ 156.862316][T10405] Memory failure: 0x13f4d5: recovery action for clean LRU page: Recovered [ 156.866577][T10405] Injecting memory failure for pfn 0x13ab37 at process virtual address 0x2005a000 [ 156.869573][T10405] Memory failure: 0x13ab37: recovery action for clean LRU page: Recovered [ 156.876675][T10405] Injecting memory failure for pfn 0x1219be at process virtual address 0x2005b000 [ 156.885052][T10405] Memory failure: 0x1219be: recovery action for clean LRU page: Recovered [ 156.885216][T10405] Injecting memory failure for pfn 0x13d64b at process virtual address 0x2005c000 [ 156.885358][T10405] Memory failure: 0x13d64b: recovery action for clean LRU page: Recovered [ 156.885415][T10405] Injecting memory failure for pfn 0x141202 at process virtual address 0x2005d000 [ 156.885501][T10405] Memory failure: 0x141202: recovery action for clean LRU page: Recovered [ 156.885565][T10405] Injecting memory failure for pfn 0x13f0c6 at process virtual address 0x2005e000 [ 156.886866][T10405] Memory failure: 0x13f0c6: recovery action for clean LRU page: Recovered [ 156.886924][T10405] Injecting memory failure for pfn 0x13aee8 at process virtual address 0x2005f000 [ 156.887007][T10405] Memory failure: 0x13aee8: recovery action for clean LRU page: Recovered [ 156.887056][T10405] Injecting memory failure for pfn 0x141676 at process virtual address 0x20060000 [ 156.887129][T10405] Memory failure: 0x141676: recovery action for clean LRU page: Recovered [ 156.888855][T10405] Injecting memory failure for pfn 0x13be10 at process virtual address 0x20061000 [ 156.889164][T10405] Memory failure: 0x13be10: recovery action for clean LRU page: Recovered [ 156.892134][T10405] Injecting memory failure for pfn 0x13f314 at process virtual address 0x20062000 [ 156.959474][T10405] Memory failure: 0x13f314: recovery action for clean LRU page: Recovered [ 156.959535][T10405] Injecting memory failure for pfn 0x135f43 at process virtual address 0x20063000 [ 156.962274][T10405] Memory failure: 0x135f43: recovery action for clean LRU page: Recovered [ 156.962347][T10405] Injecting memory failure for pfn 0x1204cc at process virtual address 0x20064000 [ 156.962443][T10405] Memory failure: 0x1204cc: recovery action for clean LRU page: Recovered [ 156.974410][T10405] Injecting memory failure for pfn 0x1204cd at process virtual address 0x20065000 [ 156.976322][T10405] Memory failure: 0x1204cd: recovery action for clean LRU page: Recovered [ 156.976470][T10405] Injecting memory failure for pfn 0x141089 at process virtual address 0x20066000 [ 156.976765][T10405] Memory failure: 0x141089: recovery action for clean LRU page: Recovered [ 156.976987][T10405] Injecting memory failure for pfn 0x13c3ea at process virtual address 0x20067000 [ 156.977880][T10405] Memory failure: 0x13c3ea: recovery action for clean LRU page: Recovered [ 156.977967][T10405] Injecting memory failure for pfn 0x13483e at process virtual address 0x20068000 [ 156.978088][T10405] Memory failure: 0x13483e: recovery action for clean LRU page: Recovered [ 156.978206][T10405] Injecting memory failure for pfn 0x13c3eb at process virtual address 0x20069000 [ 156.978375][T10405] Memory failure: 0x13c3eb: recovery action for clean LRU page: Recovered [ 156.978580][T10405] Injecting memory failure for pfn 0x14037c at process virtual address 0x2006a000 [ 156.979685][T10405] Memory failure: 0x14037c: recovery action for clean LRU page: Recovered [ 156.979771][T10405] Injecting memory failure for pfn 0x141088 at process virtual address 0x2006b000 [ 156.979894][T10405] Memory failure: 0x141088: recovery action for clean LRU page: Recovered [ 156.980020][T10405] Injecting memory failure for pfn 0x141048 at process virtual address 0x2006c000 [ 156.980186][T10405] Memory failure: 0x141048: recovery action for clean LRU page: Recovered [ 156.980393][T10405] Injecting memory failure for pfn 0x141049 at process virtual address 0x2006d000 [ 156.980793][T10405] Memory failure: 0x141049: recovery action for clean LRU page: Recovered [ 156.981210][T10405] Injecting memory failure for pfn 0x141108 at process virtual address 0x2006e000 [ 156.981877][T10405] Memory failure: 0x141108: recovery action for clean LRU page: Recovered [ 156.982281][T10405] Injecting memory failure for pfn 0x141109 at process virtual address 0x2006f000 [ 156.982936][T10405] Memory failure: 0x141109: recovery action for clean LRU page: Recovered [ 156.983334][T10405] Injecting memory failure for pfn 0x141148 at process virtual address 0x20070000 [ 156.985491][T10405] Memory failure: 0x141148: recovery action for clean LRU page: Recovered [ 156.985550][T10405] Injecting memory failure for pfn 0x141149 at process virtual address 0x20071000 [ 156.985611][T10405] Memory failure: 0x141149: recovery action for clean LRU page: Recovered [ 156.985662][T10405] Injecting memory failure for pfn 0x142178 at process virtual address 0x20072000 [ 156.985733][T10405] Memory failure: 0x142178: recovery action for clean LRU page: Recovered [ 156.985803][T10405] Injecting memory failure for pfn 0x142179 at process virtual address 0x20073000 [ 156.985900][T10405] Memory failure: 0x142179: recovery action for clean LRU page: Recovered [ 156.987123][T10405] Injecting memory failure for pfn 0x141188 at process virtual address 0x20074000 [ 156.987664][T10405] Memory failure: 0x141188: recovery action for clean LRU page: Recovered [ 156.988089][T10405] Injecting memory failure for pfn 0x141189 at process virtual address 0x20075000 [ 156.988762][T10405] Memory failure: 0x141189: recovery action for clean LRU page: Recovered [ 156.989166][T10405] Injecting memory failure for pfn 0x141b24 at process virtual address 0x20076000 [ 156.989812][T10405] Memory failure: 0x141b24: recovery action for clean LRU page: Recovered [ 156.990224][T10405] Injecting memory failure for pfn 0x141b25 at process virtual address 0x20077000 [ 156.990874][T10405] Memory failure: 0x141b25: recovery action for clean LRU page: Recovered [ 156.991280][T10405] Injecting memory failure for pfn 0x120c1c at process virtual address 0x20078000 [ 156.991926][T10405] Memory failure: 0x120c1c: recovery action for clean LRU page: Recovered [ 156.992331][T10405] Injecting memory failure for pfn 0x120c1d at process virtual address 0x20079000 [ 156.992998][T10405] Memory failure: 0x120c1d: recovery action for clean LRU page: Recovered [ 156.993402][T10405] Injecting memory failure for pfn 0x13af54 at process virtual address 0x2007a000 [ 156.995902][T10405] Memory failure: 0x13af54: recovery action for clean LRU page: Recovered [ 156.996491][T10405] Injecting memory failure for pfn 0x13af55 at process virtual address 0x2007b000 [ 156.997097][T10405] Memory failure: 0x13af55: recovery action for clean LRU page: Recovered [ 156.997588][T10405] Injecting memory failure for pfn 0x11f3dc at process virtual address 0x2007c000 [ 156.998154][T10405] Memory failure: 0x11f3dc: recovery action for clean LRU page: Recovered [ 156.998553][T10405] Injecting memory failure for pfn 0x11f3dd at process virtual address 0x2007d000 [ 156.999219][T10405] Memory failure: 0x11f3dd: recovery action for clean LRU page: Recovered [ 156.999620][T10405] Injecting memory failure for pfn 0x13f618 at process virtual address 0x2007e000 [ 157.000287][T10405] Memory failure: 0x13f618: recovery action for clean LRU page: Recovered [ 157.000684][T10405] Injecting memory failure for pfn 0x13f619 at process virtual address 0x2007f000 [ 157.001332][T10405] Memory failure: 0x13f619: recovery action for clean LRU page: Recovered [ 157.001730][T10405] Injecting memory failure for pfn 0x140848 at process virtual address 0x20080000 [ 157.002372][T10405] Memory failure: 0x140848: recovery action for clean LRU page: Recovered [ 157.002775][T10405] Injecting memory failure for pfn 0x140849 at process virtual address 0x20081000 [ 157.003422][T10405] Memory failure: 0x140849: recovery action for clean LRU page: Recovered [ 157.008401][T10405] Injecting memory failure for pfn 0x13ad4c at process virtual address 0x20082000 [ 157.011644][T10405] Memory failure: 0x13ad4c: recovery action for clean LRU page: Recovered [ 157.011708][T10405] Injecting memory failure for pfn 0x13ad4d at process virtual address 0x20083000 [ 157.011781][T10405] Memory failure: 0x13ad4d: recovery action for clean LRU page: Recovered [ 157.011835][T10405] Injecting memory failure for pfn 0x13fc50 at process virtual address 0x20084000 [ 157.011910][T10405] Memory failure: 0x13fc50: recovery action for clean LRU page: Recovered [ 157.011981][T10405] Injecting memory failure for pfn 0x13fc51 at process virtual address 0x20085000 [ 157.012092][T10405] Memory failure: 0x13fc51: recovery action for clean LRU page: Recovered [ 157.012206][T10405] Injecting memory failure for pfn 0x13aee2 at process virtual address 0x20086000 [ 157.014373][T10405] Memory failure: 0x13aee2: recovery action for clean LRU page: Recovered [ 157.014438][T10405] Injecting memory failure for pfn 0x13aee3 at process virtual address 0x20087000 [ 157.014516][T10405] Memory failure: 0x13aee3: recovery action for clean LRU page: Recovered [ 157.014591][T10405] Injecting memory failure for pfn 0x139242 at process virtual address 0x20088000 [ 157.014774][T10405] Memory failure: 0x139242: recovery action for clean LRU page: Recovered [ 157.016955][T10405] Injecting memory failure for pfn 0x139243 at process virtual address 0x20089000 [ 157.017431][T10405] Memory failure: 0x139243: recovery action for clean LRU page: Recovered [ 157.017479][T10405] Injecting memory failure for pfn 0x11d9a6 at process virtual address 0x2008a000 [ 157.017537][T10405] Memory failure: 0x11d9a6: recovery action for clean LRU page: Recovered [ 157.017587][T10405] Injecting memory failure for pfn 0x13b0e9 at process virtual address 0x2008b000 [ 157.017654][T10405] Memory failure: 0x13b0e9: recovery action for clean LRU page: Recovered [ 157.017725][T10405] Injecting memory failure for pfn 0x120db4 at process virtual address 0x2008c000 [ 157.017822][T10405] Memory failure: 0x120db4: recovery action for clean LRU page: Recovered [ 157.017936][T10405] Injecting memory failure for pfn 0x13ff1e at process virtual address 0x2008d000 [ 157.019270][T10405] Memory failure: 0x13ff1e: recovery action for clean LRU page: Recovered [ 157.019488][T10405] Injecting memory failure for pfn 0x13ff1f at process virtual address 0x2008e000 [ 157.019818][T10405] Memory failure: 0x13ff1f: recovery action for clean LRU page: Recovered [ 157.020909][T10405] Injecting memory failure for pfn 0x13f844 at process virtual address 0x2008f000 [ 157.023383][T10405] Memory failure: 0x13f844: recovery action for clean LRU page: Recovered [ 157.026303][T10405] Injecting memory failure for pfn 0x13f845 at process virtual address 0x20090000 [ 157.030153][T10405] Memory failure: 0x13f845: recovery action for clean LRU page: Recovered [ 157.030220][T10405] Injecting memory failure for pfn 0x13abee at process virtual address 0x20091000 [ 157.030301][T10405] Memory failure: 0x13abee: recovery action for clean LRU page: Recovered [ 157.030354][T10405] Injecting memory failure for pfn 0x139eda at process virtual address 0x20092000 [ 157.030428][T10405] Memory failure: 0x139eda: recovery action for clean LRU page: Recovered [ 157.030498][T10405] Injecting memory failure for pfn 0x139870 at process virtual address 0x20093000 [ 157.030599][T10405] Memory failure: 0x139870: recovery action for clean LRU page: Recovered [ 157.036138][T10405] Injecting memory failure for pfn 0x139d3b at process virtual address 0x20094000 [ 157.042067][T10405] Memory failure: 0x139d3b: recovery action for clean LRU page: Recovered [ 157.043386][T10405] Injecting memory failure for pfn 0x136a95 at process virtual address 0x20095000 [ 157.044464][T10405] Memory failure: 0x136a95: recovery action for clean LRU page: Recovered [ 157.044529][T10405] Injecting memory failure for pfn 0x141812 at process virtual address 0x20096000 [ 157.044625][T10405] Memory failure: 0x141812: recovery action for clean LRU page: Recovered [ 157.044678][T10405] Injecting memory failure for pfn 0x1419f0 at process virtual address 0x20097000 [ 157.044758][T10405] Memory failure: 0x1419f0: recovery action for clean LRU page: Recovered [ 157.044846][T10405] Injecting memory failure for pfn 0x13b75a at process virtual address 0x20098000 [ 157.044948][T10405] Memory failure: 0x13b75a: recovery action for clean LRU page: Recovered [ 157.045072][T10405] Injecting memory failure for pfn 0x1398f0 at process virtual address 0x20099000 [ 157.045239][T10405] Memory failure: 0x1398f0: recovery action for clean LRU page: Recovered [ 157.048300][T10405] Injecting memory failure for pfn 0x11d842 at process virtual address 0x2009a000 [ 157.050142][T10405] Memory failure: 0x11d842: recovery action for clean LRU page: Recovered [ 157.050207][T10405] Injecting memory failure for pfn 0x1397b0 at process virtual address 0x2009b000 [ 157.050280][T10405] Memory failure: 0x1397b0: recovery action for clean LRU page: Recovered [ 157.050332][T10405] Injecting memory failure for pfn 0x139970 at process virtual address 0x2009c000 [ 157.050421][T10405] Memory failure: 0x139970: recovery action for clean LRU page: Recovered [ 157.054409][T10405] Injecting memory failure for pfn 0x121b2c at process virtual address 0x2009d000 [ 157.054760][T10405] Memory failure: 0x121b2c: recovery action for clean LRU page: Recovered [ 157.055117][T10405] Injecting memory failure for pfn 0x1348b3 at process virtual address 0x2009e000 [ 157.055434][T10405] Memory failure: 0x1348b3: recovery action for clean LRU page: Recovered [ 157.061387][T10405] Injecting memory failure for pfn 0x13b843 at process virtual address 0x2009f000 [ 157.062656][T10405] Memory failure: 0x13b843: recovery action for clean LRU page: Recovered [ 157.062744][T10405] Injecting memory failure for pfn 0x139726 at process virtual address 0x200a0000 [ 157.062862][T10405] Memory failure: 0x139726: recovery action for clean LRU page: Recovered [ 157.068422][T10405] Injecting memory failure for pfn 0x1399f0 at process virtual address 0x200a1000 [ 157.068700][T10405] Memory failure: 0x1399f0: recovery action for clean LRU page: Recovered [ 157.068755][T10405] Injecting memory failure for pfn 0x134ba5 at process virtual address 0x200a2000 [ 157.068822][T10405] Memory failure: 0x134ba5: recovery action for clean LRU page: Recovered [ 157.068875][T10405] Injecting memory failure for pfn 0x1348b8 at process virtual address 0x200a3000 [ 157.068947][T10405] Memory failure: 0x1348b8: recovery action for clean LRU page: Recovered [ 157.069026][T10405] Injecting memory failure for pfn 0x11da5e at process virtual address 0x200a4000 [ 157.070067][T10405] Memory failure: 0x11da5e: recovery action for clean LRU page: Recovered [ 157.070120][T10405] Injecting memory failure for pfn 0x1396f0 at process virtual address 0x200a5000 [ 157.070649][T10405] Memory failure: 0x1396f0: recovery action for clean LRU page: Recovered [ 157.072666][T10405] Injecting memory failure for pfn 0x11fc10 at process virtual address 0x200a6000 [ 157.076549][T10405] Memory failure: 0x11fc10: recovery action for clean LRU page: Recovered [ 157.078180][T10405] Injecting memory failure for pfn 0x1355ca at process virtual address 0x200a7000 [ 157.080912][T10405] Memory failure: 0x1355ca: recovery action for clean LRU page: Recovered [ 157.104224][T10405] Injecting memory failure for pfn 0x136bc5 at process virtual address 0x200a8000 [ 157.111546][T10405] Memory failure: 0x136bc5: recovery action for clean LRU page: Recovered [ 157.111642][T10405] Injecting memory failure for pfn 0x141984 at process virtual address 0x200a9000 [ 157.111736][T10405] Memory failure: 0x141984: recovery action for clean LRU page: Recovered [ 157.111816][T10405] Injecting memory failure for pfn 0x1420dd at process virtual address 0x200aa000 [ 157.111918][T10405] Memory failure: 0x1420dd: recovery action for clean LRU page: Recovered [ 157.112047][T10405] Injecting memory failure for pfn 0x142352 at process virtual address 0x200ab000 [ 157.112211][T10405] Memory failure: 0x142352: recovery action for clean LRU page: Recovered [ 157.112424][T10405] Injecting memory failure for pfn 0x142353 at process virtual address 0x200ac000 [ 157.112726][T10405] Memory failure: 0x142353: recovery action for clean LRU page: Recovered [ 157.120984][T10405] Injecting memory failure for pfn 0x11e56c at process virtual address 0x200ad000 [ 157.128589][T10405] Memory failure: 0x11e56c: recovery action for clean LRU page: Recovered [ 157.129044][T10405] Injecting memory failure for pfn 0x11e56d at process virtual address 0x200ae000 [ 157.132411][T10405] Memory failure: 0x11e56d: recovery action for clean LRU page: Recovered [ 157.134066][T10405] Injecting memory failure for pfn 0x13f968 at process virtual address 0x200af000 [ 157.136231][T10405] Memory failure: 0x13f968: recovery action for clean LRU page: Recovered [ 157.136278][T10405] Injecting memory failure for pfn 0x141032 at process virtual address 0x200b0000 [ 157.137591][T10413] netlink: 'syz.7.1560': attribute type 2 has an invalid length. [ 157.139712][T10405] Memory failure: 0x141032: recovery action for clean LRU page: Recovered [ 157.142363][T10405] Injecting memory failure for pfn 0x141033 at process virtual address 0x200b1000 [ 157.145621][T10405] Memory failure: 0x141033: recovery action for clean LRU page: Recovered [ 157.145703][T10405] Injecting memory failure for pfn 0x139d98 at process virtual address 0x200b2000 [ 157.145788][T10405] Memory failure: 0x139d98: recovery action for clean LRU page: Recovered [ 157.145862][T10405] Injecting memory failure for pfn 0x139d99 at process virtual address 0x200b3000 [ 157.145961][T10405] Memory failure: 0x139d99: recovery action for clean LRU page: Recovered [ 157.146083][T10405] Injecting memory failure for pfn 0x120e90 at process virtual address 0x200b4000 [ 157.146245][T10405] Memory failure: 0x120e90: recovery action for clean LRU page: Recovered [ 157.148797][T10405] Injecting memory failure for pfn 0x120e91 at process virtual address 0x200b5000 [ 157.149968][T10405] Memory failure: 0x120e91: recovery action for clean LRU page: Recovered [ 157.151517][T10405] Injecting memory failure for pfn 0x13652c at process virtual address 0x200b6000 [ 157.152187][T10405] Memory failure: 0x13652c: recovery action for clean LRU page: Recovered [ 157.155037][T10405] Injecting memory failure for pfn 0x13652d at process virtual address 0x200b7000 [ 157.157190][T10405] Memory failure: 0x13652d: recovery action for clean LRU page: Recovered [ 157.158313][T10405] Injecting memory failure for pfn 0x11f07c at process virtual address 0x200b8000 [ 157.159181][T10405] Memory failure: 0x11f07c: recovery action for clean LRU page: Recovered [ 157.161266][T10405] Injecting memory failure for pfn 0x11f07d at process virtual address 0x200b9000 [ 157.165207][T10405] Memory failure: 0x11f07d: recovery action for clean LRU page: Recovered [ 157.165284][T10405] Injecting memory failure for pfn 0x13b786 at process virtual address 0x200ba000 [ 157.165360][T10405] Memory failure: 0x13b786: recovery action for clean LRU page: Recovered [ 157.165418][T10405] Injecting memory failure for pfn 0x13b787 at process virtual address 0x200bb000 [ 157.165489][T10405] Memory failure: 0x13b787: recovery action for clean LRU page: Recovered [ 157.165564][T10405] Injecting memory failure for pfn 0x13bf88 at process virtual address 0x200bc000 [ 157.168089][T10405] Memory failure: 0x13bf88: recovery action for clean LRU page: Recovered [ 157.169012][T10405] Injecting memory failure for pfn 0x13bf89 at process virtual address 0x200bd000 [ 157.169205][T10405] Memory failure: 0x13bf89: recovery action for clean LRU page: Recovered [ 157.169496][T10405] Injecting memory failure for pfn 0x13bd32 at process virtual address 0x200be000 [ 157.170236][T10405] Memory failure: 0x13bd32: recovery action for clean LRU page: Recovered [ 157.172650][T10405] Injecting memory failure for pfn 0x13bd33 at process virtual address 0x200bf000 [ 157.173260][T10405] Memory failure: 0x13bd33: recovery action for clean LRU page: Recovered [ 157.221645][T10405] Injecting memory failure for pfn 0x1367c4 at process virtual address 0x200c0000 [ 157.398586][T10405] Memory failure: 0x1367c4: recovery action for clean LRU page: Recovered [ 157.398788][T10405] Injecting memory failure for pfn 0x1367c5 at process virtual address 0x200c1000 [ 157.398874][T10405] Memory failure: 0x1367c5: recovery action for clean LRU page: Recovered [ 157.398929][T10405] Injecting memory failure for pfn 0x142844 at process virtual address 0x200c2000 [ 157.399032][T10405] Memory failure: 0x142844: recovery action for clean LRU page: Recovered [ 157.399100][T10405] Injecting memory failure for pfn 0x11f829 at process virtual address 0x200c3000 [ 157.399205][T10405] Memory failure: 0x11f829: recovery action for clean LRU page: Recovered [ 157.399317][T10405] Injecting memory failure for pfn 0x11e3f5 at process virtual address 0x200c4000 [ 157.399475][T10405] Memory failure: 0x11e3f5: recovery action for clean LRU page: Recovered [ 157.400862][T10405] Injecting memory failure for pfn 0x1218e8 at process virtual address 0x200c5000 [ 157.401722][T10405] Memory failure: 0x1218e8: recovery action for clean LRU page: Recovered [ 157.407810][T10405] Injecting memory failure for pfn 0x11f998 at process virtual address 0x200c6000 [ 157.410193][T10405] Memory failure: 0x11f998: recovery action for clean LRU page: Recovered [ 157.410256][T10405] Injecting memory failure for pfn 0x135bdd at process virtual address 0x200c7000 [ 157.413682][T10405] Memory failure: 0x135bdd: recovery action for clean LRU page: Recovered [ 157.413753][T10405] Injecting memory failure for pfn 0x136948 at process virtual address 0x200c8000 [ 157.413831][T10405] Memory failure: 0x136948: recovery action for clean LRU page: Recovered [ 157.413888][T10405] Injecting memory failure for pfn 0x120e3f at process virtual address 0x200c9000 [ 157.413966][T10405] Memory failure: 0x120e3f: recovery action for clean LRU page: Recovered [ 157.414042][T10405] Injecting memory failure for pfn 0x13feeb at process virtual address 0x200ca000 [ 157.414156][T10405] Memory failure: 0x13feeb: recovery action for clean LRU page: Recovered [ 157.414268][T10405] Injecting memory failure for pfn 0x13ac8d at process virtual address 0x200cb000 [ 157.414427][T10405] Memory failure: 0x13ac8d: recovery action for clean LRU page: Recovered [ 157.416893][T10405] Injecting memory failure for pfn 0x13903a at process virtual address 0x200cc000 [ 157.417795][T10405] Memory failure: 0x13903a: recovery action for clean LRU page: Recovered [ 157.419434][T10405] Injecting memory failure for pfn 0x1367c7 at process virtual address 0x200cd000 [ 157.421713][T10405] Memory failure: 0x1367c7: recovery action for clean LRU page: Recovered [ 157.432089][T10405] Injecting memory failure for pfn 0x136952 at process virtual address 0x200ce000 [ 157.435769][T10405] Memory failure: 0x136952: recovery action for clean LRU page: Recovered [ 157.435837][T10405] Injecting memory failure for pfn 0x13ab35 at process virtual address 0x200cf000 [ 157.435912][T10405] Memory failure: 0x13ab35: recovery action for clean LRU page: Recovered [ 157.435961][T10405] Injecting memory failure for pfn 0x1430fc at process virtual address 0x200d0000 [ 157.436046][T10405] Memory failure: 0x1430fc: recovery action for clean LRU page: Recovered [ 157.442628][T10405] Injecting memory failure for pfn 0x13f48a at process virtual address 0x200d1000 [ 157.452050][T10405] Memory failure: 0x13f48a: recovery action for clean LRU page: Recovered [ 157.452132][T10405] Injecting memory failure for pfn 0x13bf8a at process virtual address 0x200d2000 [ 157.476368][T10405] Memory failure: 0x13bf8a: recovery action for clean LRU page: Recovered [ 157.476447][T10405] Injecting memory failure for pfn 0x13f969 at process virtual address 0x200d3000 [ 157.476531][T10405] Memory failure: 0x13f969: recovery action for clean LRU page: Recovered [ 157.476583][T10405] Injecting memory failure for pfn 0x13f48d at process virtual address 0x200d4000 [ 157.476736][T10405] Memory failure: 0x13f48d: recovery action for clean LRU page: Recovered [ 157.476819][T10405] Injecting memory failure for pfn 0x1420de at process virtual address 0x200d5000 [ 157.476928][T10405] Memory failure: 0x1420de: recovery action for clean LRU page: Recovered [ 157.477053][T10405] Injecting memory failure for pfn 0x13ff72 at process virtual address 0x200d6000 [ 157.477216][T10405] Memory failure: 0x13ff72: recovery action for clean LRU page: Recovered [ 157.477420][T10405] Injecting memory failure for pfn 0x1355cb at process virtual address 0x200d7000 [ 157.477840][T10405] Memory failure: 0x1355cb: recovery action for clean LRU page: Recovered [ 157.478235][T10405] Injecting memory failure for pfn 0x1420dc at process virtual address 0x200d8000 [ 157.484963][T10405] Memory failure: 0x1420dc: recovery action for clean LRU page: Recovered [ 157.485046][T10405] Injecting memory failure for pfn 0x120e2a at process virtual address 0x200d9000 [ 157.485124][T10405] Memory failure: 0x120e2a: recovery action for clean LRU page: Recovered [ 157.485175][T10405] Injecting memory failure for pfn 0x136951 at process virtual address 0x200da000 [ 157.486156][T10405] Memory failure: 0x136951: recovery action for clean LRU page: Recovered [ 157.486240][T10405] Injecting memory failure for pfn 0x134c6f at process virtual address 0x200db000 [ 157.487067][T10405] Memory failure: 0x134c6f: recovery action for clean LRU page: Recovered [ 157.487196][T10405] Injecting memory failure for pfn 0x134c62 at process virtual address 0x200dc000 [ 157.489581][T10405] Memory failure: 0x134c62: recovery action for clean LRU page: Recovered [ 157.489810][T10405] Injecting memory failure for pfn 0x13f383 at process virtual address 0x200dd000 [ 157.490117][T10405] Memory failure: 0x13f383: recovery action for clean LRU page: Recovered [ 157.497196][T10405] Injecting memory failure for pfn 0x13c7fd at process virtual address 0x200de000 [ 157.500694][T10405] Memory failure: 0x13c7fd: recovery action for clean LRU page: Recovered [ 157.500767][T10405] Injecting memory failure for pfn 0x141985 at process virtual address 0x200df000 [ 157.500842][T10405] Memory failure: 0x141985: recovery action for clean LRU page: Recovered [ 157.500889][T10405] Injecting memory failure for pfn 0x139039 at process virtual address 0x200e0000 [ 157.500964][T10405] Memory failure: 0x139039: recovery action for clean LRU page: Recovered [ 157.508875][T10405] Injecting memory failure for pfn 0x13ef41 at process virtual address 0x200e1000 [ 157.509133][T10405] Memory failure: 0x13ef41: recovery action for clean LRU page: Recovered [ 157.509192][T10405] Injecting memory failure for pfn 0x141ec8 at process virtual address 0x200e2000 [ 157.509265][T10405] Memory failure: 0x141ec8: recovery action for clean LRU page: Recovered [ 157.509312][T10405] Injecting memory failure for pfn 0x13b142 at process virtual address 0x200e3000 [ 157.509383][T10405] Memory failure: 0x13b142: recovery action for clean LRU page: Recovered [ 157.509446][T10405] Injecting memory failure for pfn 0x134c65 at process virtual address 0x200e4000 [ 157.509545][T10405] Memory failure: 0x134c65: recovery action for clean LRU page: Recovered [ 157.511236][T10405] Injecting memory failure for pfn 0x13b0e5 at process virtual address 0x200e5000 [ 157.511451][T10405] Memory failure: 0x13b0e5: recovery action for clean LRU page: Recovered [ 157.511495][T10405] Injecting memory failure for pfn 0x1406bf at process virtual address 0x200e6000 [ 157.511552][T10405] Memory failure: 0x1406bf: recovery action for clean LRU page: Recovered [ 157.511599][T10405] Injecting memory failure for pfn 0x135684 at process virtual address 0x200e7000 [ 157.511666][T10405] Memory failure: 0x135684: recovery action for clean LRU page: Recovered [ 157.511729][T10405] Injecting memory failure for pfn 0x13cff3 at process virtual address 0x200e8000 [ 157.518212][T10405] Memory failure: 0x13cff3: recovery action for clean LRU page: Recovered [ 157.518279][T10405] Injecting memory failure for pfn 0x13fe35 at process virtual address 0x200e9000 [ 157.518351][T10405] Memory failure: 0x13fe35: recovery action for clean LRU page: Recovered [ 157.518402][T10405] Injecting memory failure for pfn 0x13cf72 at process virtual address 0x200ea000 [ 157.518476][T10405] Memory failure: 0x13cf72: recovery action for clean LRU page: Recovered [ 157.518544][T10405] Injecting memory failure for pfn 0x13ab32 at process virtual address 0x200eb000 [ 157.518642][T10405] Memory failure: 0x13ab32: recovery action for clean LRU page: Recovered [ 157.518751][T10405] Injecting memory failure for pfn 0x12050d at process virtual address 0x200ec000 [ 157.521020][T10405] Memory failure: 0x12050d: recovery action for clean LRU page: Recovered [ 157.522866][T10405] Injecting memory failure for pfn 0x141794 at process virtual address 0x200ed000 [ 157.523239][T10405] Memory failure: 0x141794: recovery action for clean LRU page: Recovered [ 157.531880][T10405] Injecting memory failure for pfn 0x13a164 at process virtual address 0x200ee000 [ 157.537144][T10405] Memory failure: 0x13a164: recovery action for clean LRU page: Recovered [ 157.537222][T10405] Injecting memory failure for pfn 0x13fa70 at process virtual address 0x200ef000 [ 157.537305][T10405] Memory failure: 0x13fa70: recovery action for clean LRU page: Recovered [ 157.537356][T10405] Injecting memory failure for pfn 0x140958 at process virtual address 0x200f0000 [ 157.537435][T10405] Memory failure: 0x140958: recovery action for clean LRU page: Recovered [ 157.537502][T10405] Injecting memory failure for pfn 0x136bc4 at process virtual address 0x200f1000 [ 157.537602][T10405] Memory failure: 0x136bc4: recovery action for clean LRU page: Recovered [ 157.537706][T10405] Injecting memory failure for pfn 0x140850 at process virtual address 0x200f2000 [ 157.537864][T10405] Memory failure: 0x140850: recovery action for clean LRU page: Recovered [ 157.549755][T10405] Injecting memory failure for pfn 0x11d486 at process virtual address 0x200f3000 [ 157.555623][T10405] Memory failure: 0x11d486: recovery action for clean LRU page: Recovered [ 157.555697][T10405] Injecting memory failure for pfn 0x13b0ee at process virtual address 0x200f4000 [ 157.555777][T10405] Memory failure: 0x13b0ee: recovery action for clean LRU page: Recovered [ 157.555829][T10405] Injecting memory failure for pfn 0x121b39 at process virtual address 0x200f5000 [ 157.555911][T10405] Memory failure: 0x121b39: recovery action for clean LRU page: Recovered [ 157.555978][T10405] Injecting memory failure for pfn 0x13d5d5 at process virtual address 0x200f6000 [ 157.556084][T10405] Memory failure: 0x13d5d5: recovery action for clean LRU page: Recovered [ 157.556203][T10405] Injecting memory failure for pfn 0x1419f6 at process virtual address 0x200f7000 [ 157.556370][T10405] Memory failure: 0x1419f6: recovery action for clean LRU page: Recovered [ 157.568443][T10405] Injecting memory failure for pfn 0x142607 at process virtual address 0x200f8000 [ 157.569017][T10405] Memory failure: 0x142607: recovery action for clean LRU page: Recovered [ 157.569079][T10405] Injecting memory failure for pfn 0x13fedb at process virtual address 0x200f9000 [ 157.569139][T10405] Memory failure: 0x13fedb: recovery action for clean LRU page: Recovered [ 157.569188][T10405] Injecting memory failure for pfn 0x11e6de at process virtual address 0x200fa000 [ 157.569254][T10405] Memory failure: 0x11e6de: recovery action for clean LRU page: Recovered [ 157.569318][T10405] Injecting memory failure for pfn 0x13b0ed at process virtual address 0x200fb000 [ 157.579116][T10405] Memory failure: 0x13b0ed: recovery action for clean LRU page: Recovered [ 157.775547][T10429] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1567'. [ 158.033379][T10432] WARNING! power/level is deprecated; use power/control instead [ 158.088576][T10437] loop7: detected capacity change from 0 to 512 [ 158.135731][T10437] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1570: iget: bad i_size value: 38620345925642 [ 158.135792][T10437] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.139065][T10437] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1570: couldn't read orphan inode 15 (err -117) [ 158.143880][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 158.143895][ C0] EXT4-fs (loop7): initial error at time 158: ext4_orphan_get:1399: inode 15 [ 158.143913][ C0] EXT4-fs (loop7): last error at time 158: ext4_orphan_get:1399: inode 15 [ 158.149907][T10437] loop7: lost filesystem error report for type 5 error -117 [ 158.151683][T10437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.152544][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 158.432672][T10437] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1570: bg 0: block 5: invalid block bitmap [ 158.438371][T10437] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 158.610011][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'. [ 158.630337][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1575'. [ 158.664907][T10472] loop6: detected capacity change from 0 to 512 [ 158.667071][T10472] EXT4-fs (loop6): Test dummy encryption mode enabled [ 158.669914][T10472] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1576: inode has both inline data and extents flags [ 158.670542][T10472] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.673662][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 158.673693][ C0] EXT4-fs (loop6): initial error at time 158: ext4_orphan_get:1399: inode 15 [ 158.673745][ C0] EXT4-fs (loop6): last error at time 158: ext4_orphan_get:1399: inode 15 [ 158.691452][T10472] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1576: couldn't read orphan inode 15 (err -117) [ 158.691499][T10472] loop6: lost filesystem error report for type 5 error -117 [ 158.694575][T10472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.707273][T10472] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 159.796278][T10475] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 159.815023][T10475] overlay: Unknown parameter 'obj_role' [ 159.822464][ T9849] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.026355][T10358] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.035218][ T8363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.101736][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.104955][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.106582][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.108783][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.110477][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.112930][T10358] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.196294][T10358] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.249774][T10358] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.309823][T10491] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.311274][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.311445][T10491] bridge_slave_0: entered allmulticast mode [ 160.311907][T10491] bridge_slave_0: entered promiscuous mode [ 160.312926][T10491] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.312984][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.313087][T10491] bridge_slave_1: entered allmulticast mode [ 160.313535][T10491] bridge_slave_1: entered promiscuous mode [ 160.321662][T10491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.322623][T10491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.330963][T10491] team0: Port device team_slave_0 added [ 160.331787][T10491] team0: Port device team_slave_1 added [ 160.339336][T10491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.339367][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.339381][T10491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.339925][T10491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.339933][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.339948][T10491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.352204][T10491] hsr_slave_0: entered promiscuous mode [ 160.352523][T10491] hsr_slave_1: entered promiscuous mode [ 160.352731][T10491] debugfs: 'hsr0' already exists in 'hsr' [ 160.352742][T10491] Cannot create hsr debugfs directory [ 160.416803][T10358] bridge_slave_1: left allmulticast mode [ 160.416849][T10358] bridge_slave_1: left promiscuous mode [ 160.416930][T10358] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.419723][T10358] bridge_slave_0: left allmulticast mode [ 160.419735][T10358] bridge_slave_0: left promiscuous mode [ 160.419793][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.488047][T10358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.517031][T10358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.554769][T10358] bond0 (unregistering): Released all slaves [ 160.869803][T10358] hsr_slave_0: left promiscuous mode [ 160.871027][T10358] hsr_slave_1: left promiscuous mode [ 160.871320][T10358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.871338][T10358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.877750][T10358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.877775][T10358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.884945][T10358] veth1_macvtap: left promiscuous mode [ 160.884987][T10358] veth0_macvtap: left promiscuous mode [ 160.885044][T10358] veth1_vlan: left promiscuous mode [ 160.885080][T10358] veth0_vlan: left promiscuous mode [ 161.022425][T10358] team0 (unregistering): Port device team_slave_1 removed [ 161.047629][T10358] team0 (unregistering): Port device team_slave_0 removed [ 161.156051][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1593'. [ 161.156755][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1593'. [ 161.163597][T10538] netlink: 'syz.3.1595': attribute type 2 has an invalid length. [ 161.346490][T10545] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1598'. [ 161.724375][T10457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.193701][ T4720] Bluetooth: hci2: command tx timeout [ 162.244095][T10491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 162.248100][ T30] kauditd_printk_skb: 386 callbacks suppressed [ 162.248127][ T30] audit: type=1326 audit(162.210:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10544 comm="syz.5.1598" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d792a8 code=0x0 [ 162.258913][T10491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.260845][T10491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 162.276217][T10491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.282712][T10491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 162.287461][T10491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.289631][T10491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 162.299618][T10491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.376281][T10560] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 162.448564][T10565] netdevsim netdevsim3: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 162.449221][T10491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.471696][T10491] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.477555][T10571] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1603'. [ 162.478505][T10358] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.478531][T10358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.733890][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.733937][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.786065][T10579] netlink: 'syz.0.1605': attribute type 2 has an invalid length. [ 162.983255][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 162.988264][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'. [ 163.021198][T10608] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.021242][T10608] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.107317][T10491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.262243][T10651] syzkaller0: entered promiscuous mode [ 163.262284][T10651] syzkaller0: entered allmulticast mode [ 163.264141][T10491] veth0_vlan: entered promiscuous mode [ 163.294419][T10491] veth1_vlan: entered promiscuous mode [ 163.307340][T10491] veth0_macvtap: entered promiscuous mode [ 163.310112][T10491] veth1_macvtap: entered promiscuous mode [ 163.326718][T10491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.329862][T10491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.348197][ T4285] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.348460][ T4285] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.349551][ T4285] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.412778][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.412804][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.433797][T10358] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.434574][T10358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.434707][T10358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.470241][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 163.523281][T10674] netlink: 'syz.5.1619': attribute type 2 has an invalid length. [ 164.323829][ T4720] Bluetooth: hci2: command tx timeout [ 164.490520][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 164.794580][T10704] overlayfs: failed lookup in lower (newroot/332, name='file2', err=-40): overlapping layers [ 164.797303][T10704] overlayfs: failed lookup in lower (newroot/332, name='file0', err=-40): overlapping layers [ 164.797636][T10704] overlayfs: failed lookup in lower (newroot/332, name='file0', err=-40): overlapping layers [ 164.799245][T10704] overlayfs: failed lookup in lower (newroot/332, name='file0', err=-40): overlapping layers [ 164.800759][T10704] overlayfs: failed lookup in lower (newroot/332, name='file0', err=-40): overlapping layers [ 165.107403][T10710] loop6: detected capacity change from 0 to 256 [ 165.134257][T10710] syz.6.1625: attempt to access beyond end of device [ 165.134257][T10710] loop6: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 165.138258][T10710] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 326) [ 165.138309][T10710] FAT-fs (loop6): Filesystem has been set read-only [ 165.138532][T10710] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 326) [ 165.279922][ T4403] 8021q: adding VLAN 0 to HW filter on device eth14 [ 166.311005][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 166.354874][ T4720] Bluetooth: hci2: command tx timeout [ 166.673926][T10778] loop3: detected capacity change from 0 to 256 [ 166.820267][ T4403] 8021q: adding VLAN 0 to HW filter on device eth15 [ 166.851639][T10772] syz.3.1636: attempt to access beyond end of device [ 166.851639][T10772] loop3: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 166.853178][T10772] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 326) [ 166.853208][T10772] FAT-fs (loop3): Filesystem has been set read-only [ 166.853265][T10772] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 326) [ 166.864400][T10785] loop8: detected capacity change from 0 to 512 [ 166.898287][T10785] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1643: bg 0: block 393: padding at end of block bitmap is not set [ 166.901626][T10785] loop8: lost filesystem error report for type 5 error -117 [ 166.903658][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 166.903693][ C0] EXT4-fs (loop8): initial error at time 166: ext4_validate_block_bitmap:441 [ 166.903725][ C0] EXT4-fs (loop8): last error at time 166: ext4_validate_block_bitmap:441 [ 166.913382][T10785] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 166.913420][T10785] loop8: lost filesystem error report for type 5 error -117 [ 166.918094][T10785] EXT4-fs (loop8): 2 truncates cleaned up [ 166.924730][T10785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.950631][T10491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.968983][ T30] audit: type=1326 audit(166.930:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10753 comm="syz.5.1638" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d792a8 code=0x0 [ 167.391135][T10794] netlink: 'syz.5.1645': attribute type 2 has an invalid length. [ 167.396397][T10796] loop3: detected capacity change from 0 to 2048 [ 167.399733][T10796] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 167.659345][T10801] netlink: 'syz.5.1647': attribute type 29 has an invalid length. [ 167.675068][T10801] netlink: 'syz.5.1647': attribute type 29 has an invalid length. [ 168.433847][ T4720] Bluetooth: hci2: command tx timeout [ 168.880780][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 169.482591][T10758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.561265][T10821] loop6: detected capacity change from 0 to 256 [ 169.574684][T10821] FAT-fs (loop6): data area starts beyond volume (274 > 64) [ 169.574722][T10821] FAT-fs (loop6): Can't find a valid FAT filesystem [ 169.628306][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1651'. [ 170.054225][T10843] netlink: 'syz.6.1657': attribute type 2 has an invalid length. [ 170.398504][ T4403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.637128][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1664'. [ 170.645442][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1664'. [ 170.803060][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 170.805311][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.885492][T10891] netlink: 'syz.3.1668': attribute type 2 has an invalid length. [ 170.957739][T10896] loop5: detected capacity change from 0 to 512 [ 170.958116][T10896] EXT4-fs: Ignoring removed nobh option [ 170.976847][T10896] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1670: inode #0: comm syz.5.1670: iget: illegal inode # [ 170.976884][T10896] loop5: lost filesystem error report for type 5 error -117 [ 170.979714][T10896] EXT4-fs (loop5): Remounting filesystem read-only [ 170.979731][T10896] EXT4-fs (loop5): get orphan inode failed [ 170.980017][T10896] EXT4-fs (loop5): mount failed [ 170.983290][T10900] bridge0: port 3(syz_tun) entered disabled state [ 170.986637][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 170.986654][ C0] EXT4-fs (loop5): initial error at time 170: ext4_init_orphan_info:583 [ 170.986667][ C0] EXT4-fs (loop5): last error at time 170: ext4_init_orphan_info:583 [ 170.990406][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.991316][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.057083][T10900] netlink: 'syz.3.1671': attribute type 16 has an invalid length. [ 171.057116][T10900] netlink: 'syz.3.1671': attribute type 17 has an invalid length. [ 171.078681][T10900] bridge0: port 3(syz_tun) entered blocking state [ 171.078739][T10900] bridge0: port 3(syz_tun) entered forwarding state [ 171.086437][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.086499][T10900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.090269][T10900] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.090326][T10900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.162068][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 171.201359][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 171.208293][T10912] 8021q: adding VLAN 0 to HW filter on device bond7 [ 171.211284][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1676'. [ 171.213592][T10912] bond7: entered promiscuous mode [ 171.216773][T10912] bond7: entered allmulticast mode [ 171.406123][T10919] loop3: detected capacity change from 0 to 4096 [ 171.417235][T10919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.461353][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.260264][T10941] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1685'. [ 172.314279][T10948] loop5: detected capacity change from 0 to 1024 [ 172.338431][T10948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.370335][ T7712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.491050][T10958] FAULT_INJECTION: forcing a failure. [ 172.491050][T10958] name failslab, interval 1, probability 0, space 0, times 0 [ 172.491111][T10958] CPU: 1 UID: 0 PID: 10958 Comm: syz.5.1691 Tainted: G L syzkaller #0 PREEMPT [ 172.491126][T10958] Tainted: [L]=SOFTLOCKUP [ 172.491130][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 172.491136][T10958] Call trace: [ 172.491139][T10958] show_stack+0x2c/0x3c (C) [ 172.491161][T10958] __dump_stack+0x30/0x40 [ 172.491174][T10958] dump_stack_lvl+0xd8/0x12c [ 172.491186][T10958] dump_stack+0x1c/0x28 [ 172.491198][T10958] should_fail_ex+0x41c/0x590 [ 172.491207][T10958] should_failslab+0xc4/0x120 [ 172.491217][T10958] __kmalloc_noprof+0x108/0x6b8 [ 172.491229][T10958] sock_kmalloc+0xec/0x1a0 [ 172.491240][T10958] hash_alloc_result+0xb0/0x134 [ 172.491250][T10958] hash_recvmsg+0x164/0x604 [ 172.491258][T10958] sock_recvmsg_nosec+0x94/0x130 [ 172.491269][T10958] ____sys_recvmsg+0x4fc/0x608 [ 172.491281][T10958] ___sys_recvmsg+0x16c/0x1f4 [ 172.491292][T10958] do_recvmmsg+0x288/0x7d4 [ 172.491303][T10958] __sys_recvmmsg+0x1e0/0x270 [ 172.491315][T10958] __arm64_sys_recvmmsg+0xe0/0x108 [ 172.491326][T10958] invoke_syscall+0x98/0x244 [ 172.491339][T10958] el0_svc_common+0xec/0x23c [ 172.491351][T10958] do_el0_svc+0x4c/0x5c [ 172.491362][T10958] el0_svc+0x64/0x260 [ 172.491373][T10958] el0t_64_sync_handler+0x44/0x104 [ 172.491383][T10958] el0t_64_sync+0x198/0x19c [ 173.568198][T10966] netlink: 'syz.5.1693': attribute type 4 has an invalid length. [ 173.570842][T10966] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 173.586328][T10871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.820540][T10972] FAULT_INJECTION: forcing a failure. [ 173.820540][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.820583][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.3.1696 Tainted: G L syzkaller #0 PREEMPT [ 173.820598][T10972] Tainted: [L]=SOFTLOCKUP [ 173.820602][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 173.820607][T10972] Call trace: [ 173.820611][T10972] show_stack+0x2c/0x3c (C) [ 173.820628][T10972] __dump_stack+0x30/0x40 [ 173.820639][T10972] dump_stack_lvl+0xd8/0x12c [ 173.820649][T10972] dump_stack+0x1c/0x28 [ 173.820658][T10972] should_fail_ex+0x41c/0x590 [ 173.820666][T10972] should_fail+0x14/0x24 [ 173.820673][T10972] should_fail_usercopy+0x20/0x30 [ 173.820680][T10972] simple_read_from_buffer+0xc4/0x238 [ 173.820690][T10972] proc_fail_nth_read+0x1a8/0x248 [ 173.820699][T10972] vfs_read+0x230/0x8c8 [ 173.820706][T10972] ksys_read+0x12c/0x228 [ 173.820712][T10972] __arm64_sys_read+0x84/0x98 [ 173.820719][T10972] invoke_syscall+0x98/0x244 [ 173.820730][T10972] el0_svc_common+0xec/0x23c [ 173.820739][T10972] do_el0_svc+0x4c/0x5c [ 173.820749][T10972] el0_svc+0x64/0x260 [ 173.820758][T10972] el0t_64_sync_handler+0x44/0x104 [ 173.820766][T10972] el0t_64_sync+0x198/0x19c [ 174.151541][T10987] loop6: detected capacity change from 0 to 256 [ 174.197704][T10987] syz.6.1700: attempt to access beyond end of device [ 174.197704][T10987] loop6: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 174.207983][T10987] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 326) [ 174.208051][T10987] FAT-fs (loop6): Filesystem has been set read-only [ 174.208516][T10987] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 326) [ 174.314555][T10991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1701'. [ 174.944911][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1707'. [ 174.947376][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 175.048667][T11013] overlayfs: failed lookup in lower (newroot/21, name='file0', err=-40): overlapping layers [ 175.370902][T11030] FAULT_INJECTION: forcing a failure. [ 175.370902][T11030] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.373449][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.0.1714 Tainted: G L syzkaller #0 PREEMPT [ 175.373476][T11030] Tainted: [L]=SOFTLOCKUP [ 175.373480][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 175.373487][T11030] Call trace: [ 175.373490][T11030] show_stack+0x2c/0x3c (C) [ 175.373514][T11030] __dump_stack+0x30/0x40 [ 175.373527][T11030] dump_stack_lvl+0xd8/0x12c [ 175.373540][T11030] dump_stack+0x1c/0x28 [ 175.373551][T11030] should_fail_ex+0x41c/0x590 [ 175.373560][T11030] should_fail+0x14/0x24 [ 175.373568][T11030] get_futex_key+0x1ec/0x12b0 [ 175.373579][T11030] futex_wake+0x10c/0x594 [ 175.373589][T11030] do_futex+0x2c4/0x378 [ 175.373599][T11030] __arm64_sys_futex+0x2e4/0x418 [ 175.373611][T11030] invoke_syscall+0x98/0x244 [ 175.373624][T11030] el0_svc_common+0xec/0x23c [ 175.373636][T11030] do_el0_svc+0x4c/0x5c [ 175.373648][T11030] el0_svc+0x64/0x260 [ 175.373659][T11030] el0t_64_sync_handler+0x44/0x104 [ 175.373669][T11030] el0t_64_sync+0x198/0x19c [ 175.393578][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 175.707104][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 175.889744][T11045] CUSE: unknown device info "" [ 175.889779][T11045] CUSE: unknown device info "" [ 175.889799][T11045] CUSE: unknown device info "ÿw" [ 175.889809][T11045] CUSE: zero length info key specified [ 176.007028][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1720'. [ 176.023222][T11055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.037196][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1720'. [ 176.040465][T11055] bond4: entered promiscuous mode [ 176.040519][T11055] bond4: entered allmulticast mode [ 176.129941][T11066] openvswitch: netlink: IP tunnel dst address not specified [ 176.186323][T11069] netlink: 'syz.8.1723': attribute type 22 has an invalid length. [ 176.188210][T11069] netlink: 'syz.8.1723': attribute type 22 has an invalid length. [ 176.189763][T11069] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1723'. [ 176.344377][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 176.461156][T11103] loop8: detected capacity change from 0 to 128 [ 176.487516][T11103] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.534738][T11117] FAULT_INJECTION: forcing a failure. [ 176.534738][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 176.534779][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.6.1734 Tainted: G L syzkaller #0 PREEMPT [ 176.534797][T11117] Tainted: [L]=SOFTLOCKUP [ 176.534801][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 176.534807][T11117] Call trace: [ 176.534811][T11117] show_stack+0x2c/0x3c (C) [ 176.534831][T11117] __dump_stack+0x30/0x40 [ 176.534842][T11117] dump_stack_lvl+0xd8/0x12c [ 176.534852][T11117] dump_stack+0x1c/0x28 [ 176.534861][T11117] should_fail_ex+0x41c/0x590 [ 176.534870][T11117] should_failslab+0xc4/0x120 [ 176.534878][T11117] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 176.534887][T11117] ovl_alloc_inode+0x2c/0x90 [ 176.534895][T11117] alloc_inode+0x68/0x198 [ 176.534904][T11117] iget5_locked+0x5c/0xc0 [ 176.534914][T11117] ovl_get_inode+0x504/0xc00 [ 176.534923][T11117] ovl_lookup+0x1384/0x162c [ 176.534930][T11117] lookup_one_qstr_excl+0xe8/0x200 [ 176.534940][T11117] __start_dirop+0xb8/0xf4 [ 176.534947][T11117] filename_rmdir+0x174/0x3d0 [ 176.534956][T11117] __arm64_sys_unlinkat+0xcc/0x108 [ 176.534965][T11117] invoke_syscall+0x98/0x244 [ 176.534975][T11117] el0_svc_common+0xec/0x23c [ 176.534994][T11117] do_el0_svc+0x4c/0x5c [ 176.535006][T11117] el0_svc+0x64/0x260 [ 176.535017][T11117] el0t_64_sync_handler+0x44/0x104 [ 176.535026][T11117] el0t_64_sync+0x198/0x19c [ 176.535587][T11117] overlayfs: failed to get inode (-12) [ 176.568516][T11103] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.891919][T11152] overlayfs: failed lookup in lower (newroot/26, name='bus', err=-40): overlapping layers [ 177.675077][T11167] loop0: detected capacity change from 0 to 256 [ 177.837378][T11163] syz.0.1744: attempt to access beyond end of device [ 177.837378][T11163] loop0: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 177.837471][T11163] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 326) [ 177.837497][T11163] FAT-fs (loop0): Filesystem has been set read-only [ 177.837532][T11163] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 326) [ 178.209381][T11181] Injecting memory failure for pfn 0x1451bc at process virtual address 0x20000000 [ 178.562669][T11194] Cannot find del_set index 3 as target [ 178.632599][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.638198][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.640754][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.642881][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.644996][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.647067][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.649240][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.651459][T11196] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 178.850024][T11181] Memory failure: 0x1451bc: recovery action for already truncated LRU page: Ignored [ 178.922785][T11205] loop3: detected capacity change from 0 to 512 [ 178.933577][T11205] [ 178.934051][T11205] ====================================================== [ 178.935288][T11205] WARNING: possible circular locking dependency detected [ 178.936535][T11205] syzkaller #0 Tainted: G L [ 178.937697][T11205] ------------------------------------------------------ [ 178.939066][T11205] syz.3.1756/11205 is trying to acquire lock: [ 178.940156][T11205] ffff0000f2a88c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 178.942080][T11205] [ 178.942080][T11205] but task is already holding lock: [ 178.943430][T11205] ffff0000da645e80 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 178.945201][T11205] [ 178.945201][T11205] which lock already depends on the new lock. [ 178.945201][T11205] [ 178.947026][T11205] [ 178.947026][T11205] the existing dependency chain (in reverse order) is: [ 178.948653][T11205] [ 178.948653][T11205] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 178.949999][T11205] down_write+0x50/0xc0 [ 178.950852][T11205] ext4_destroy_inline_data+0x30/0x114 [ 178.951954][T11205] ext4_do_writepages+0x3e4/0x3bc0 [ 178.952956][T11205] ext4_writepages+0x198/0x2dc [ 178.953857][T11205] do_writepages+0x284/0x47c [ 178.954795][T11205] filemap_writeback+0x230/0x2bc [ 178.955747][T11205] file_write_and_wait_range+0xb0/0x138 [ 178.956846][T11205] mmb_fsync_noflush+0x80/0x1bc [ 178.957818][T11205] ext4_sync_file+0x37c/0xf20 [ 178.958788][T11205] vfs_fsync_range+0x120/0x140 [ 178.959796][T11205] ext4_buffered_write_iter+0x24c/0x2ec [ 178.960917][T11205] ext4_file_write_iter+0x1dc/0x134c [ 178.962024][T11205] vfs_write+0x51c/0xa0c [ 178.962890][T11205] ksys_pwrite64+0x118/0x1ac [ 178.963882][T11205] __arm64_sys_pwrite64+0xa8/0xc0 [ 178.964850][T11205] invoke_syscall+0x98/0x244 [ 178.965793][T11205] el0_svc_common+0xec/0x23c [ 178.966764][T11205] do_el0_svc+0x4c/0x5c [ 178.967638][T11205] el0_svc+0x64/0x260 [ 178.968480][T11205] el0t_64_sync_handler+0x44/0x104 [ 178.969564][T11205] el0t_64_sync+0x198/0x19c [ 178.970531][T11205] [ 178.970531][T11205] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 178.972068][T11205] __lock_acquire+0x17c0/0x2ebc [ 178.973024][T11205] lock_acquire+0x140/0x364 [ 178.973913][T11205] percpu_down_read_internal+0x5c/0x294 [ 178.974990][T11205] ext4_writepages+0x170/0x2dc [ 178.975972][T11205] do_writepages+0x284/0x47c [ 178.976873][T11205] __writeback_single_inode+0x140/0x1880 [ 178.977935][T11205] writeback_single_inode+0x400/0xb20 [ 178.978997][T11205] write_inode_now+0x170/0x208 [ 178.979934][T11205] iput+0x7cc/0xc2c [ 178.980749][T11205] ext4_xattr_block_set+0x1460/0x21e8 [ 178.981770][T11205] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 178.982924][T11205] __ext4_expand_extra_isize+0x2a4/0x378 [ 178.984038][T11205] __ext4_mark_inode_dirty+0x394/0x828 [ 178.985074][T11205] ext4_evict_inode+0x798/0xfb8 [ 178.986007][T11205] evict+0x4c0/0x74c [ 178.986752][T11205] iput+0x8f0/0xc2c [ 178.987509][T11205] ext4_process_orphan+0x24c/0x2c0 [ 178.988500][T11205] ext4_orphan_cleanup+0x7d4/0xd20 [ 178.989494][T11205] ext4_fill_super+0x4628/0x4e14 [ 178.990465][T11205] get_tree_bdev_flags+0x388/0x43c [ 178.991487][T11205] get_tree_bdev+0x2c/0x3c [ 178.992340][T11205] ext4_get_tree+0x28/0x38 [ 178.993201][T11205] vfs_get_tree+0x90/0x28c [ 178.994081][T11205] fc_mount+0x24/0xac [ 178.994914][T11205] do_new_mount+0x2a4/0x538 [ 178.995819][T11205] path_mount+0x5f0/0xa88 [ 178.996699][T11205] do_mount+0xe8/0x148 [ 178.997526][T11205] __arm64_sys_mount+0x33c/0x388 [ 178.998490][T11205] invoke_syscall+0x98/0x244 [ 178.999443][T11205] el0_svc_common+0xec/0x23c [ 179.000384][T11205] do_el0_svc+0x4c/0x5c [ 179.001231][T11205] el0_svc+0x64/0x260 [ 179.002059][T11205] el0t_64_sync_handler+0x44/0x104 [ 179.003089][T11205] el0t_64_sync+0x198/0x19c [ 179.004033][T11205] [ 179.004033][T11205] other info that might help us debug this: [ 179.004033][T11205] [ 179.005873][T11205] Possible unsafe locking scenario: [ 179.005873][T11205] [ 179.007235][T11205] CPU0 CPU1 [ 179.008134][T11205] ---- ---- [ 179.009110][T11205] lock(&ei->xattr_sem); [ 179.009905][T11205] lock(&sbi->s_writepages_rwsem); [ 179.011229][T11205] lock(&ei->xattr_sem); [ 179.012456][T11205] rlock(&sbi->s_writepages_rwsem); [ 179.013405][T11205] [ 179.013405][T11205] *** DEADLOCK *** [ 179.013405][T11205] [ 179.014875][T11205] 3 locks held by syz.3.1756/11205: [ 179.015873][T11205] #0: ffff0000f2a8c0d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 179.017770][T11205] #1: ffff0000f2a8c640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 179.019504][T11205] #2: ffff0000da645e80 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 179.021376][T11205] [ 179.021376][T11205] stack backtrace: [ 179.022465][T11205] CPU: 1 UID: 0 PID: 11205 Comm: syz.3.1756 Tainted: G L syzkaller #0 PREEMPT [ 179.024237][T11205] Tainted: [L]=SOFTLOCKUP [ 179.024999][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 179.026786][T11205] Call trace: [ 179.027369][T11205] show_stack+0x2c/0x3c (C) [ 179.028234][T11205] __dump_stack+0x30/0x40 [ 179.029028][T11205] dump_stack_lvl+0xd8/0x12c [ 179.029866][T11205] dump_stack+0x1c/0x28 [ 179.030619][T11205] print_circular_bug+0x328/0x330 [ 179.031508][T11205] check_noncircular+0x158/0x174 [ 179.032355][T11205] __lock_acquire+0x17c0/0x2ebc [ 179.033220][T11205] lock_acquire+0x140/0x364 [ 179.033995][T11205] percpu_down_read_internal+0x5c/0x294 [ 179.034989][T11205] ext4_writepages+0x170/0x2dc [ 179.035820][T11205] do_writepages+0x284/0x47c [ 179.036676][T11205] __writeback_single_inode+0x140/0x1880 [ 179.037711][T11205] writeback_single_inode+0x400/0xb20 [ 179.038669][T11205] write_inode_now+0x170/0x208 [ 179.039485][T11205] iput+0x7cc/0xc2c [ 179.040185][T11205] ext4_xattr_block_set+0x1460/0x21e8 [ 179.041136][T11205] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 179.042196][T11205] __ext4_expand_extra_isize+0x2a4/0x378 [ 179.043206][T11205] __ext4_mark_inode_dirty+0x394/0x828 [ 179.044211][T11205] ext4_evict_inode+0x798/0xfb8 [ 179.045079][T11205] evict+0x4c0/0x74c [ 179.045741][T11205] iput+0x8f0/0xc2c [ 179.046428][T11205] ext4_process_orphan+0x24c/0x2c0 [ 179.047354][T11205] ext4_orphan_cleanup+0x7d4/0xd20 [ 179.048281][T11205] ext4_fill_super+0x4628/0x4e14 [ 179.049179][T11205] get_tree_bdev_flags+0x388/0x43c [ 179.050082][T11205] get_tree_bdev+0x2c/0x3c [ 179.050847][T11205] ext4_get_tree+0x28/0x38 [ 179.051668][T11205] vfs_get_tree+0x90/0x28c [ 179.052495][T11205] fc_mount+0x24/0xac [ 179.053214][T11205] do_new_mount+0x2a4/0x538 [ 179.054082][T11205] path_mount+0x5f0/0xa88 [ 179.054884][T11205] do_mount+0xe8/0x148 [ 179.055634][T11205] __arm64_sys_mount+0x33c/0x388 [ 179.056544][T11205] invoke_syscall+0x98/0x244 [ 179.057392][T11205] el0_svc_common+0xec/0x23c [ 179.058254][T11205] do_el0_svc+0x4c/0x5c [ 179.059053][T11205] el0_svc+0x64/0x260 [ 179.059796][T11205] el0t_64_sync_handler+0x44/0x104 [ 179.060747][T11205] el0t_64_sync+0x198/0x19c [ 179.099787][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1756: iget: bad extra_isize 90 (inode size 256) [ 179.099877][T11205] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.100313][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1756: error while reading EA inode 11 err=-117 [ 179.100328][T11205] loop3: lost filesystem error report for type 5 error -117 [ 179.100480][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1756: iget: bad extra_isize 90 (inode size 256) [ 179.100493][T11205] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.100613][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1756: error while reading EA inode 11 err=-117 [ 179.100627][T11205] loop3: lost filesystem error report for type 5 error -117 [ 179.100737][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1756: iget: bad extra_isize 90 (inode size 256) [ 179.100749][T11205] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 179.100856][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1756: error while reading EA inode 18 err=-117 [ 179.100867][T11205] loop3: lost filesystem error report for type 5 error -117 [ 179.100966][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1756: iget: bad extra_isize 90 (inode size 256) [ 179.100978][T11205] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 179.101089][T11205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1756: error while reading EA inode 18 err=-117 [ 179.101101][T11205] loop3: lost filesystem error report for type 5 error -117 [ 179.101254][T11205] EXT4-fs (loop3): 1 orphan inode deleted [ 179.101492][T11205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.133187][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.404371][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.404421][ T1595] ieee802154 phy1 wpan1: encryption failed: -22