last executing test programs: 1m3.167001225s ago: executing program 1 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001300), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdb7d, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c045}, 0x40080) 1m3.157656138s ago: executing program 1 (id=233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}}, 0x20048840) syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 1m2.59335129s ago: executing program 1 (id=234): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b7050000000000007910a000000000007d0a00000000000095ee00000080000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000004180)='./file0\x00', &(0x7f00000041c0), 0x80, &(0x7f0000004200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000062c0)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff900ce5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000008340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008400)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f8000000"], 0x200000) 1m2.592952881s ago: executing program 1 (id=235): dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000000)={0x801400, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e130100c8000001"], 0x16) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000940)="10") r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000980), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000009c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000a00)={0x8, r3}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\a', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250f0000001800078008000200010000000c0003009906000000000000"], 0x2c}}, 0x20044800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000580), 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000780)='\x00', 0x9801) move_mount(r7, &(0x7f00000007c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x80000, 0x0) r8 = open_tree(r7, &(0x7f0000000a40)='./file0\x00', 0x89901) mount_setattr(r7, &(0x7f0000000a80)='.\x00', 0x9000, &(0x7f0000000ac0)={0x0, 0x0, 0x80000, {r8}}, 0x20) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000005c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) 1m0.108895015s ago: executing program 1 (id=257): r0 = socket$inet(0x2, 0x2, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x76f3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x6e24, 0xf801}}}}}}, 0x0) 59.665602806s ago: executing program 1 (id=262): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@data_writeback}, {@nolazytime}, {@discard}, {@journal_async_commit}, {@data_err_ignore}, {@noblock_validity}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}]}, 0xff, 0x46d, &(0x7f0000002980)="$eJzs3c9vFFUcAPDvTH/w21bFHyBoFY3EH4WWnwcvGE08aGKiB4yn2haCLFRpTYQQrR7waEi8G48m/gWe9GLUk4lXvRsSYriAGs2YmZ0py7JbWLp00f18klnem3nLvO/MvN037+1uA+hbY/lDErExIn6JiJF69toCY/V/rlw6O/3HpbPTSWTZa78nRbnLl85OV0Wr522oZ7KszK9psd9zb0ZM1Wqzp8r8roUT7+yaP33m2WMnpo7OHp09OXnw4N4924f3T+7rSpx5XJe3fjC3bctLb5x/Zfrw+bd++Cqv78Zye2McXbJurH50W3qiyzvrtU0N6WSwhxWhIwMRkZ+uoaL9j8RArFvaNhIvftzTygG3VZZlWav359JiBvyPJdHrGgC9Ub3R5/e/1bJKXY87wsVDEe8eqMd/pVzqWwYjLcsMNd3fdtNYRBxe/PPzfInbMw4BAHCNbw5FxDOt+n9p3N9Q7q5yDmU0Iu6OiHsi4t6I2BwR90UUZR+IiAc73H/zDMn1/Z/0wi0FdpPy/t9z5dzWUv/v76yIvzQ6UOY2FfEPJUeO1WZ3l8dkZwytyfMTy+zj2xd+/rTdtsb+X77k+6/6gnXphcGmAbqZqYWpFYa95OJHEVsHm+IvJFFN4yQRsSUitnb0P2dZWjxGHHvqy23tSt04/mV0YZ4p+yLiyfr5X4ym+CtJ2/nJiQP7J/ftWhu12d1/ZVlWXBXX+/Gnc6+22/+K4u+C/Pyvb77+C0vxjyZrI+ZPnzlezNfOR/MM8Q2d+/WTtvc0t3r9DyevF+nhct37UwsLpyYihpOXG9b/03SXW5abvHrl5PHv3NEq/rR4jauifSgi8ot4e0Q8HBGPlHV/NCIei4gdy8T//fOPv915/MuMyndRHv/Mjc5/NJ7/zhMDx7/7uvP4K/n531ukdpZrbub172YruJJjBwAAAP8VafEZ+CQdX0qn6fh4/TP8m2N9WpubX3j6yNx7J2fqn5UfjaG0Gv8caRgPnSjHhqv85NWhmSK/pxw3/mxgXZEfn56rzfQ4duh3G9q0/9xvA72uHXDb+b4W9C/tH/qX9g/9S/uH/qX9Q/9q1f4/7EE9gNXn/R/6l/YP/Uv7h/6l/UNfavvd+HRFX/mXWIVE+QsNix08q/pRiS7sPdLOnzUYPT1iSQc/DHHnJAa7XufyT3REuWZNy8K9e00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopn8DAAD//7kl5Go=") openat(0xffffffffffffff9c, &(0x7f0000002e00)='./file1\x00', 0x42, 0x80) prlimit64(0x0, 0xe, &(0x7f0000002e40)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002e80)=0x7) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002ec0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r0, 0xb, 0x0, &(0x7f0000003540)) sched_setscheduler(0x0, 0x2, &(0x7f0000003580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000036c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003700)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000003740)={0x4, 0xe, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], &(0x7f0000003e80)='syzkaller\x00'}, 0x48) 59.55123436s ago: executing program 32 (id=262): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@data_writeback}, {@nolazytime}, {@discard}, {@journal_async_commit}, {@data_err_ignore}, {@noblock_validity}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}]}, 0xff, 0x46d, &(0x7f0000002980)="$eJzs3c9vFFUcAPDvTH/w21bFHyBoFY3EH4WWnwcvGE08aGKiB4yn2haCLFRpTYQQrR7waEi8G48m/gWe9GLUk4lXvRsSYriAGs2YmZ0py7JbWLp00f18klnem3nLvO/MvN037+1uA+hbY/lDErExIn6JiJF69toCY/V/rlw6O/3HpbPTSWTZa78nRbnLl85OV0Wr522oZ7KszK9psd9zb0ZM1Wqzp8r8roUT7+yaP33m2WMnpo7OHp09OXnw4N4924f3T+7rSpx5XJe3fjC3bctLb5x/Zfrw+bd++Cqv78Zye2McXbJurH50W3qiyzvrtU0N6WSwhxWhIwMRkZ+uoaL9j8RArFvaNhIvftzTygG3VZZlWav359JiBvyPJdHrGgC9Ub3R5/e/1bJKXY87wsVDEe8eqMd/pVzqWwYjLcsMNd3fdtNYRBxe/PPzfInbMw4BAHCNbw5FxDOt+n9p3N9Q7q5yDmU0Iu6OiHsi4t6I2BwR90UUZR+IiAc73H/zDMn1/Z/0wi0FdpPy/t9z5dzWUv/v76yIvzQ6UOY2FfEPJUeO1WZ3l8dkZwytyfMTy+zj2xd+/rTdtsb+X77k+6/6gnXphcGmAbqZqYWpFYa95OJHEVsHm+IvJFFN4yQRsSUitnb0P2dZWjxGHHvqy23tSt04/mV0YZ4p+yLiyfr5X4ym+CtJ2/nJiQP7J/ftWhu12d1/ZVlWXBXX+/Gnc6+22/+K4u+C/Pyvb77+C0vxjyZrI+ZPnzlezNfOR/MM8Q2d+/WTtvc0t3r9DyevF+nhct37UwsLpyYihpOXG9b/03SXW5abvHrl5PHv3NEq/rR4jauifSgi8ot4e0Q8HBGPlHV/NCIei4gdy8T//fOPv915/MuMyndRHv/Mjc5/NJ7/zhMDx7/7uvP4K/n531ukdpZrbub172YruJJjBwAAAP8VafEZ+CQdX0qn6fh4/TP8m2N9WpubX3j6yNx7J2fqn5UfjaG0Gv8caRgPnSjHhqv85NWhmSK/pxw3/mxgXZEfn56rzfQ4duh3G9q0/9xvA72uHXDb+b4W9C/tH/qX9g/9S/uH/qX9Q/9q1f4/7EE9gNXn/R/6l/YP/Uv7h/6l/UNfavvd+HRFX/mXWIVE+QsNix08q/pRiS7sPdLOnzUYPT1iSQc/DHHnJAa7XufyT3REuWZNy8K9e00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopn8DAAD//7kl5Go=") openat(0xffffffffffffff9c, &(0x7f0000002e00)='./file1\x00', 0x42, 0x80) prlimit64(0x0, 0xe, &(0x7f0000002e40)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002e80)=0x7) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002ec0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r0, 0xb, 0x0, &(0x7f0000003540)) sched_setscheduler(0x0, 0x2, &(0x7f0000003580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000036c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003700)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000003740)={0x4, 0xe, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], &(0x7f0000003e80)='syzkaller\x00'}, 0x48) 8.308551268s ago: executing program 0 (id=925): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000002e80)='1', 0x1) 8.258043154s ago: executing program 0 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r4, 0x401) close_range(r3, 0xffffffffffffffff, 0x0) 7.052665014s ago: executing program 0 (id=935): r0 = add_key$fscrypt_v1(&(0x7f0000000240), 0x0, &(0x7f0000000440)={0x0, "dec557407795bb6fb33ff8685215d03bb3c57615baa8f98df3165e56695e5fdfec39f4eac81f7fdf77d881d13cbf4bfe44bcb0222522c867dfa97ba205b0f762", 0x22}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800a000100726564697200000014000280080003400000000008000140000000170900010073797a30000000000900020073797a32000000471400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080) 6.621485155s ago: executing program 4 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r3, 0x0, 0x0, 0x80800) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) unshare(0x6020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0xffffffffffffffb5, &(0x7f00000006c0)}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r4, 0x0, 0x0) 3.197164758s ago: executing program 0 (id=951): socket(0x2, 0xa, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffff7, 0x20, 0x8002}, 0x48) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xc41a, &(0x7f0000000240)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(0xc9, 0x0) syz_emit_vhci(&(0x7f00000009c0)=ANY=[@ANYBLOB="04030b00c8000000000000000100b9"], 0xe) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 3.1374743s ago: executing program 4 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, 0x0, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x24}}, 0x90) 3.137183063s ago: executing program 3 (id=954): syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000240)}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x33f2844, 0x2, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='\x00', 0x174) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.883022308s ago: executing program 4 (id=956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003440)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003500)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000003580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.786903145s ago: executing program 5 (id=959): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000002e80)='1', 0x1) 1.354942153s ago: executing program 4 (id=961): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x13c4, @loopback}, 0x10) 1.35417785s ago: executing program 5 (id=962): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f737069"], 0x0, 0x8e}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.342742482s ago: executing program 4 (id=963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001700), &(0x7f0000001740)=0x4) socket(0x28, 0x5, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) syz_clone(0x20111, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000440)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='dummy_udc.0', 0xb) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000600)=0xa, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000640)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/ttyGS0\x00', 0x2, 0x0) 1.252609525s ago: executing program 3 (id=964): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.227707737s ago: executing program 2 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x8011) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 1.161505869s ago: executing program 5 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r4, 0x401) close_range(r3, 0xffffffffffffffff, 0x0) 1.154644285s ago: executing program 3 (id=967): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000c40)=0x520) 909.044769ms ago: executing program 0 (id=968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x80, 0x2c, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0xfdef) 843.35936ms ago: executing program 5 (id=969): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) 831.993615ms ago: executing program 3 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='ipv4', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='4420', 0x4) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='+p', 0x2) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f00000007c0)='transport=tcp,traddr=127.0.0.', 0x1d) 799.131443ms ago: executing program 2 (id=971): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000001c0), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000340)=0x9, 0x4) 700.885599ms ago: executing program 5 (id=972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a) 686.752024ms ago: executing program 2 (id=973): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000002e80)='1', 0x1) 680.049385ms ago: executing program 4 (id=974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) write(r1, &(0x7f0000002840), 0xffffff4a) pselect6(0x40, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000028c0)={0x1f}, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 647.232502ms ago: executing program 3 (id=975): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_setup(0x66a9, &(0x7f0000002ec0)={0x0, 0xaeff, 0x20, 0x0, 0x87}) mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002f80)='./proc\x00', &(0x7f0000002fc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000003040)='27', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003080)={0x1, &(0x7f00000030c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 581.388567ms ago: executing program 2 (id=976): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f737069"], 0x0, 0x8e}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 482.760184ms ago: executing program 0 (id=977): dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000001c80)={[{@nobh}, {@quota}, {@lazytime}, {@resgid}, {@grpid}]}, 0x2, 0x799, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flock(0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x6, 0x7fff0000}]}) getcwd(0x0, 0x0) 422.733349ms ago: executing program 3 (id=978): socket(0x2, 0xa, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffff7, 0x20, 0x8002}, 0x48) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xc41a, &(0x7f0000000240)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(0xc9, 0x0) syz_emit_vhci(&(0x7f00000009c0)=ANY=[@ANYBLOB="04030b00c8000000000000000100b9"], 0xe) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 422.282389ms ago: executing program 5 (id=979): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x200000, &(0x7f0000000780), 0xfd, 0x573, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000f00)='./proc\x00', &(0x7f0000000f40)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f0000000fc0)=0x8, 0x12) pwrite64(r0, &(0x7f0000001000)='\"', 0x1, 0xe7c) 409.597062ms ago: executing program 2 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x401) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=981): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)=0x520) kernel console output (not intermixed with test programs): ess 0x209f6000 [ 65.974392][ T6462] Memory failure: 0x13d17b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.974408][ T6462] Memory failure: 0x13d17b: recovery action for dirty LRU page: Recovered [ 65.974415][ T6462] Injecting memory failure for pfn 0x13da0c at process virtual address 0x209f7000 [ 65.974438][ T6462] Memory failure: 0x13da0c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.974453][ T6462] Memory failure: 0x13da0c: recovery action for dirty LRU page: Recovered [ 65.974460][ T6462] Injecting memory failure for pfn 0x13da0d at process virtual address 0x209f8000 [ 65.974481][ T6462] Memory failure: 0x13da0d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.974495][ T6462] Memory failure: 0x13da0d: recovery action for dirty LRU page: Recovered [ 65.974503][ T6462] Injecting memory failure for pfn 0x13da0e at process virtual address 0x209f9000 [ 65.974523][ T6462] Memory failure: 0x13da0e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.974537][ T6462] Memory failure: 0x13da0e: recovery action for dirty LRU page: Recovered [ 65.974544][ T6462] Injecting memory failure for pfn 0x13da0f at process virtual address 0x209fa000 [ 65.974564][ T6462] Memory failure: 0x13da0f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.974578][ T6462] Memory failure: 0x13da0f: recovery action for dirty LRU page: Recovered [ 65.974585][ T6462] Injecting memory failure for pfn 0x121c18 at process virtual address 0x209fb000 [ 65.974605][ T6462] Memory failure: 0x121c18: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.974619][ T6462] Memory failure: 0x121c18: recovery action for dirty LRU page: Recovered [ 65.974626][ T6462] Injecting memory failure for pfn 0x121c19 at process virtual address 0x209fc000 [ 65.975631][ T6462] Memory failure: 0x121c19: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.975652][ T6462] Memory failure: 0x121c19: recovery action for dirty LRU page: Recovered [ 65.975664][ T6462] Injecting memory failure for pfn 0x121c1a at process virtual address 0x209fd000 [ 65.975697][ T6462] Memory failure: 0x121c1a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.975714][ T6462] Memory failure: 0x121c1a: recovery action for dirty LRU page: Recovered [ 65.975722][ T6462] Injecting memory failure for pfn 0x121c1b at process virtual address 0x209fe000 [ 65.975743][ T6462] Memory failure: 0x121c1b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976396][ T6462] Memory failure: 0x121c1b: recovery action for dirty LRU page: Recovered [ 65.976413][ T6462] Injecting memory failure for pfn 0x121fa8 at process virtual address 0x209ff000 [ 65.976443][ T6462] Memory failure: 0x121fa8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976460][ T6462] Memory failure: 0x121fa8: recovery action for dirty LRU page: Recovered [ 65.976468][ T6462] Injecting memory failure for pfn 0x121fa9 at process virtual address 0x20a00000 [ 65.976492][ T6462] Memory failure: 0x121fa9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976507][ T6462] Memory failure: 0x121fa9: recovery action for dirty LRU page: Recovered [ 65.976515][ T6462] Injecting memory failure for pfn 0x121faa at process virtual address 0x20a01000 [ 65.976536][ T6462] Memory failure: 0x121faa: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976551][ T6462] Memory failure: 0x121faa: recovery action for dirty LRU page: Recovered [ 65.976558][ T6462] Injecting memory failure for pfn 0x121fab at process virtual address 0x20a02000 [ 65.976579][ T6462] Memory failure: 0x121fab: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976593][ T6462] Memory failure: 0x121fab: recovery action for dirty LRU page: Recovered [ 65.976600][ T6462] Injecting memory failure for pfn 0x122e50 at process virtual address 0x20a03000 [ 65.976620][ T6462] Memory failure: 0x122e50: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976635][ T6462] Memory failure: 0x122e50: recovery action for dirty LRU page: Recovered [ 65.976642][ T6462] Injecting memory failure for pfn 0x122e51 at process virtual address 0x20a04000 [ 65.976662][ T6462] Memory failure: 0x122e51: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976676][ T6462] Memory failure: 0x122e51: recovery action for dirty LRU page: Recovered [ 65.976683][ T6462] Injecting memory failure for pfn 0x122e52 at process virtual address 0x20a05000 [ 65.976703][ T6462] Memory failure: 0x122e52: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976717][ T6462] Memory failure: 0x122e52: recovery action for dirty LRU page: Recovered [ 65.976724][ T6462] Injecting memory failure for pfn 0x122e53 at process virtual address 0x20a06000 [ 65.976744][ T6462] Memory failure: 0x122e53: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976758][ T6462] Memory failure: 0x122e53: recovery action for dirty LRU page: Recovered [ 65.976765][ T6462] Injecting memory failure for pfn 0x143b60 at process virtual address 0x20a07000 [ 65.976785][ T6462] Memory failure: 0x143b60: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976800][ T6462] Memory failure: 0x143b60: recovery action for dirty LRU page: Recovered [ 65.976807][ T6462] Injecting memory failure for pfn 0x143b61 at process virtual address 0x20a08000 [ 65.976826][ T6462] Memory failure: 0x143b61: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.976840][ T6462] Memory failure: 0x143b61: recovery action for dirty LRU page: Recovered [ 65.976847][ T6462] Injecting memory failure for pfn 0x143b62 at process virtual address 0x20a09000 [ 65.980484][ T6462] Memory failure: 0x143b62: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980505][ T6462] Memory failure: 0x143b62: recovery action for dirty LRU page: Recovered [ 65.980513][ T6462] Injecting memory failure for pfn 0x143b63 at process virtual address 0x20a0a000 [ 65.980539][ T6462] Memory failure: 0x143b63: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980555][ T6462] Memory failure: 0x143b63: recovery action for dirty LRU page: Recovered [ 65.980563][ T6462] Injecting memory failure for pfn 0x140248 at process virtual address 0x20a0b000 [ 65.980585][ T6462] Memory failure: 0x140248: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980600][ T6462] Memory failure: 0x140248: recovery action for dirty LRU page: Recovered [ 65.980607][ T6462] Injecting memory failure for pfn 0x140249 at process virtual address 0x20a0c000 [ 65.980628][ T6462] Memory failure: 0x140249: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980658][ T6462] Memory failure: 0x140249: recovery action for dirty LRU page: Recovered [ 65.980666][ T6462] Injecting memory failure for pfn 0x14024a at process virtual address 0x20a0d000 [ 65.980688][ T6462] Memory failure: 0x14024a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980714][ T6462] Memory failure: 0x14024a: recovery action for dirty LRU page: Recovered [ 65.980721][ T6462] Injecting memory failure for pfn 0x14024b at process virtual address 0x20a0e000 [ 65.980741][ T6462] Memory failure: 0x14024b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980756][ T6462] Memory failure: 0x14024b: recovery action for dirty LRU page: Recovered [ 65.980763][ T6462] Injecting memory failure for pfn 0x13da80 at process virtual address 0x20a0f000 [ 65.980783][ T6462] Memory failure: 0x13da80: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980808][ T6462] Memory failure: 0x13da80: recovery action for dirty LRU page: Recovered [ 65.980817][ T6462] Injecting memory failure for pfn 0x13da81 at process virtual address 0x20a10000 [ 65.980842][ T6462] Memory failure: 0x13da81: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980856][ T6462] Memory failure: 0x13da81: recovery action for dirty LRU page: Recovered [ 65.980863][ T6462] Injecting memory failure for pfn 0x13da82 at process virtual address 0x20a11000 [ 65.980883][ T6462] Memory failure: 0x13da82: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980897][ T6462] Memory failure: 0x13da82: recovery action for dirty LRU page: Recovered [ 65.980904][ T6462] Injecting memory failure for pfn 0x13da83 at process virtual address 0x20a12000 [ 65.980923][ T6462] Memory failure: 0x13da83: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980938][ T6462] Memory failure: 0x13da83: recovery action for dirty LRU page: Recovered [ 65.980945][ T6462] Injecting memory failure for pfn 0x13da58 at process virtual address 0x20a13000 [ 65.980968][ T6462] Memory failure: 0x13da58: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.980983][ T6462] Memory failure: 0x13da58: recovery action for dirty LRU page: Recovered [ 65.980989][ T6462] Injecting memory failure for pfn 0x13da59 at process virtual address 0x20a14000 [ 65.981009][ T6462] Memory failure: 0x13da59: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption ** 87 printk messages dropped ** [ 65.984715][ T6462] Memory failure: 0x142e6a: recovery action for dirty LRU page: Recovered [ 65.984722][ T6462] Injecting memory failure for pfn 0x142e6b at process virtual address 0x20a32000 [ 65.984742][ T6462] Memory failure: 0x142e6b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.984756][ T6462] Memory failure: 0x142e6b: recovery action for dirty LRU page: Recovered [ 65.984763][ T6462] Injecting memory failure for pfn 0x142e78 at process virtual address 0x20a33000 ** 56 printk messages dropped ** [ 65.991282][ T6462] Injecting memory failure for pfn 0x13d867 at process virtual address 0x20a46000 ** 112 printk messages dropped ** [ 65.998402][ T6462] Memory failure: 0x13d490: recovery action for dirty LRU page: Recovered [ 65.998408][ T6462] Injecting memory failure for pfn 0x13d491 at process virtual address 0x20a6c000 [ 65.998428][ T6462] Memory failure: 0x13d491: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998442][ T6462] Memory failure: 0x13d491: recovery action for dirty LRU page: Recovered [ 65.998449][ T6462] Injecting memory failure for pfn 0x13d492 at process virtual address 0x20a6d000 [ 65.998468][ T6462] Memory failure: 0x13d492: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998482][ T6462] Memory failure: 0x13d492: recovery action for dirty LRU page: Recovered [ 65.998489][ T6462] Injecting memory failure for pfn 0x13d493 at process virtual address 0x20a6e000 [ 65.998508][ T6462] Memory failure: 0x13d493: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998522][ T6462] Memory failure: 0x13d493: recovery action for dirty LRU page: Recovered [ 65.998529][ T6462] Injecting memory failure for pfn 0x13d494 at process virtual address 0x20a6f000 [ 65.998548][ T6462] Memory failure: 0x13d494: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998562][ T6462] Memory failure: 0x13d494: recovery action for dirty LRU page: Recovered [ 65.998569][ T6462] Injecting memory failure for pfn 0x13d495 at process virtual address 0x20a70000 [ 65.998588][ T6462] Memory failure: 0x13d495: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998602][ T6462] Memory failure: 0x13d495: recovery action for dirty LRU page: Recovered [ 65.998609][ T6462] Injecting memory failure for pfn 0x13d496 at process virtual address 0x20a71000 [ 65.998629][ T6462] Memory failure: 0x13d496: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998643][ T6462] Memory failure: 0x13d496: recovery action for dirty LRU page: Recovered [ 65.998650][ T6462] Injecting memory failure for pfn 0x13d497 at process virtual address 0x20a72000 [ 65.998669][ T6462] Memory failure: 0x13d497: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 65.998683][ T6462] Memory failure: 0x13d497: recovery action for dirty LRU page: Recovered [ 66.001421][ T6462] Injecting memory failure for pfn 0x13d838 at process virtual address 0x20a73000 [ 66.001607][ T6462] Memory failure: 0x13d838: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001627][ T6462] Memory failure: 0x13d838: recovery action for dirty LRU page: Recovered [ 66.001637][ T6462] Injecting memory failure for pfn 0x13d839 at process virtual address 0x20a74000 [ 66.001663][ T6462] Memory failure: 0x13d839: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001680][ T6462] Memory failure: 0x13d839: recovery action for dirty LRU page: Recovered [ 66.001688][ T6462] Injecting memory failure for pfn 0x13d83a at process virtual address 0x20a75000 [ 66.001710][ T6462] Memory failure: 0x13d83a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001725][ T6462] Memory failure: 0x13d83a: recovery action for dirty LRU page: Recovered [ 66.001733][ T6462] Injecting memory failure for pfn 0x13d83b at process virtual address 0x20a76000 [ 66.001754][ T6462] Memory failure: 0x13d83b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001769][ T6462] Memory failure: 0x13d83b: recovery action for dirty LRU page: Recovered [ 66.001776][ T6462] Injecting memory failure for pfn 0x13d83c at process virtual address 0x20a77000 [ 66.001796][ T6462] Memory failure: 0x13d83c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001810][ T6462] Memory failure: 0x13d83c: recovery action for dirty LRU page: Recovered [ 66.001817][ T6462] Injecting memory failure for pfn 0x13d83d at process virtual address 0x20a78000 [ 66.001837][ T6462] Memory failure: 0x13d83d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001851][ T6462] Memory failure: 0x13d83d: recovery action for dirty LRU page: Recovered [ 66.001858][ T6462] Injecting memory failure for pfn 0x13d83e at process virtual address 0x20a79000 [ 66.001878][ T6462] Memory failure: 0x13d83e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001892][ T6462] Memory failure: 0x13d83e: recovery action for dirty LRU page: Recovered [ 66.001899][ T6462] Injecting memory failure for pfn 0x13d83f at process virtual address 0x20a7a000 [ 66.001918][ T6462] Memory failure: 0x13d83f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.001956][ T6462] Memory failure: 0x13d83f: recovery action for dirty LRU page: Recovered [ 66.001968][ T6462] Injecting memory failure for pfn 0x1415f8 at process virtual address 0x20a7b000 [ 66.001992][ T6462] Memory failure: 0x1415f8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.002007][ T6462] Memory failure: 0x1415f8: recovery action for dirty LRU page: Recovered [ 66.002014][ T6462] Injecting memory failure for pfn 0x1415f9 at process virtual address 0x20a7c000 [ 66.002033][ T6462] Memory failure: 0x1415f9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.002047][ T6462] Memory failure: 0x1415f9: recovery action for dirty LRU page: Recovered ** 9 printk messages dropped ** [ 66.003907][ T6462] Injecting memory failure for pfn 0x1415fd at process virtual address 0x20a80000 [ 66.003930][ T6462] Memory failure: 0x1415fd: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.003945][ T6462] Memory failure: 0x1415fd: recovery action for dirty LRU page: Recovered [ 66.003952][ T6462] Injecting memory failure for pfn 0x1415fe at process virtual address 0x20a81000 [ 66.003980][ T6462] Memory failure: 0x1415fe: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.003997][ T6462] Memory failure: 0x1415fe: recovery action for dirty LRU page: Recovered [ 66.004005][ T6462] Injecting memory failure for pfn 0x1415ff at process virtual address 0x20a82000 [ 66.004030][ T6462] Memory failure: 0x1415ff: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004045][ T6462] Memory failure: 0x1415ff: recovery action for dirty LRU page: Recovered ** 44 printk messages dropped ** [ 66.004652][ T6462] Memory failure: 0x12079e: recovery action for dirty LRU page: Recovered [ 66.004659][ T6462] Injecting memory failure for pfn 0x12079f at process virtual address 0x20a92000 [ 66.004678][ T6462] Memory failure: 0x12079f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004692][ T6462] Memory failure: 0x12079f: recovery action for dirty LRU page: Recovered [ 66.004699][ T6462] Injecting memory failure for pfn 0x120408 at process virtual address 0x20a93000 [ 66.004718][ T6462] Memory failure: 0x120408: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004732][ T6462] Memory failure: 0x120408: recovery action for dirty LRU page: Recovered [ 66.004739][ T6462] Injecting memory failure for pfn 0x120409 at process virtual address 0x20a94000 [ 66.004758][ T6462] Memory failure: 0x120409: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004772][ T6462] Memory failure: 0x120409: recovery action for dirty LRU page: Recovered [ 66.004778][ T6462] Injecting memory failure for pfn 0x12040a at process virtual address 0x20a95000 [ 66.004798][ T6462] Memory failure: 0x12040a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004812][ T6462] Memory failure: 0x12040a: recovery action for dirty LRU page: Recovered [ 66.004818][ T6462] Injecting memory failure for pfn 0x12040b at process virtual address 0x20a96000 [ 66.004839][ T6462] Memory failure: 0x12040b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004852][ T6462] Memory failure: 0x12040b: recovery action for dirty LRU page: Recovered [ 66.004859][ T6462] Injecting memory failure for pfn 0x12040c at process virtual address 0x20a97000 [ 66.004879][ T6462] Memory failure: 0x12040c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004892][ T6462] Memory failure: 0x12040c: recovery action for dirty LRU page: Recovered [ 66.004899][ T6462] Injecting memory failure for pfn 0x12040d at process virtual address 0x20a98000 [ 66.004919][ T6462] Memory failure: 0x12040d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004933][ T6462] Memory failure: 0x12040d: recovery action for dirty LRU page: Recovered [ 66.004939][ T6462] Injecting memory failure for pfn 0x12040e at process virtual address 0x20a99000 [ 66.004958][ T6462] Memory failure: 0x12040e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.004976][ T6462] Memory failure: 0x12040e: recovery action for dirty LRU page: Recovered [ 66.004983][ T6462] Injecting memory failure for pfn 0x12040f at process virtual address 0x20a9a000 [ 66.005003][ T6462] Memory failure: 0x12040f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005016][ T6462] Memory failure: 0x12040f: recovery action for dirty LRU page: Recovered [ 66.005023][ T6462] Injecting memory failure for pfn 0x121fd8 at process virtual address 0x20a9b000 [ 66.005043][ T6462] Memory failure: 0x121fd8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005057][ T6462] Memory failure: 0x121fd8: recovery action for dirty LRU page: Recovered [ 66.005063][ T6462] Injecting memory failure for pfn 0x121fd9 at process virtual address 0x20a9c000 [ 66.005083][ T6462] Memory failure: 0x121fd9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005097][ T6462] Memory failure: 0x121fd9: recovery action for dirty LRU page: Recovered [ 66.005104][ T6462] Injecting memory failure for pfn 0x121fda at process virtual address 0x20a9d000 [ 66.005123][ T6462] Memory failure: 0x121fda: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005137][ T6462] Memory failure: 0x121fda: recovery action for dirty LRU page: Recovered [ 66.005144][ T6462] Injecting memory failure for pfn 0x121fdb at process virtual address 0x20a9e000 [ 66.005163][ T6462] Memory failure: 0x121fdb: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005177][ T6462] Memory failure: 0x121fdb: recovery action for dirty LRU page: Recovered [ 66.005184][ T6462] Injecting memory failure for pfn 0x121fdc at process virtual address 0x20a9f000 [ 66.005203][ T6462] Memory failure: 0x121fdc: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005217][ T6462] Memory failure: 0x121fdc: recovery action for dirty LRU page: Recovered [ 66.005223][ T6462] Injecting memory failure for pfn 0x121fdd at process virtual address 0x20aa0000 [ 66.005243][ T6462] Memory failure: 0x121fdd: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005257][ T6462] Memory failure: 0x121fdd: recovery action for dirty LRU page: Recovered [ 66.005263][ T6462] Injecting memory failure for pfn 0x121fde at process virtual address 0x20aa1000 [ 66.005283][ T6462] Memory failure: 0x121fde: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005297][ T6462] Memory failure: 0x121fde: recovery action for dirty LRU page: Recovered [ 66.005304][ T6462] Injecting memory failure for pfn 0x121fdf at process virtual address 0x20aa2000 [ 66.005323][ T6462] Memory failure: 0x121fdf: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005337][ T6462] Memory failure: 0x121fdf: recovery action for dirty LRU page: Recovered [ 66.005344][ T6462] Injecting memory failure for pfn 0x13dce0 at process virtual address 0x20aa3000 [ 66.005363][ T6462] Memory failure: 0x13dce0: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005377][ T6462] Memory failure: 0x13dce0: recovery action for dirty LRU page: Recovered [ 66.005384][ T6462] Injecting memory failure for pfn 0x13dce1 at process virtual address 0x20aa4000 [ 66.005403][ T6462] Memory failure: 0x13dce1: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005417][ T6462] Memory failure: 0x13dce1: recovery action for dirty LRU page: Recovered [ 66.005424][ T6462] Injecting memory failure for pfn 0x13dce2 at process virtual address 0x20aa5000 [ 66.005451][ T6462] Memory failure: 0x13dce2: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005465][ T6462] Memory failure: 0x13dce2: recovery action for dirty LRU page: Recovered [ 66.005472][ T6462] Injecting memory failure for pfn 0x13dce3 at process virtual address 0x20aa6000 [ 66.005491][ T6462] Memory failure: 0x13dce3: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005505][ T6462] Memory failure: 0x13dce3: recovery action for dirty LRU page: Recovered [ 66.005512][ T6462] Injecting memory failure for pfn 0x13dce4 at process virtual address 0x20aa7000 [ 66.005531][ T6462] Memory failure: 0x13dce4: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005545][ T6462] Memory failure: 0x13dce4: recovery action for dirty LRU page: Recovered [ 66.005552][ T6462] Injecting memory failure for pfn 0x13dce5 at process virtual address 0x20aa8000 [ 66.005571][ T6462] Memory failure: 0x13dce5: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005585][ T6462] Memory failure: 0x13dce5: recovery action for dirty LRU page: Recovered [ 66.005592][ T6462] Injecting memory failure for pfn 0x13dce6 at process virtual address 0x20aa9000 [ 66.005611][ T6462] Memory failure: 0x13dce6: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005625][ T6462] Memory failure: 0x13dce6: recovery action for dirty LRU page: Recovered [ 66.005632][ T6462] Injecting memory failure for pfn 0x13dce7 at process virtual address 0x20aaa000 [ 66.005651][ T6462] Memory failure: 0x13dce7: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005665][ T6462] Memory failure: 0x13dce7: recovery action for dirty LRU page: Recovered [ 66.005672][ T6462] Injecting memory failure for pfn 0x13bd58 at process virtual address 0x20aab000 [ 66.005691][ T6462] Memory failure: 0x13bd58: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005705][ T6462] Memory failure: 0x13bd58: recovery action for dirty LRU page: Recovered [ 66.005712][ T6462] Injecting memory failure for pfn 0x13bd59 at process virtual address 0x20aac000 [ 66.005731][ T6462] Memory failure: 0x13bd59: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005745][ T6462] Memory failure: 0x13bd59: recovery action for dirty LRU page: Recovered [ 66.005752][ T6462] Injecting memory failure for pfn 0x13bd5a at process virtual address 0x20aad000 [ 66.005771][ T6462] Memory failure: 0x13bd5a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005785][ T6462] Memory failure: 0x13bd5a: recovery action for dirty LRU page: Recovered [ 66.005792][ T6462] Injecting memory failure for pfn 0x13bd5b at process virtual address 0x20aae000 [ 66.005811][ T6462] Memory failure: 0x13bd5b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005825][ T6462] Memory failure: 0x13bd5b: recovery action for dirty LRU page: Recovered [ 66.005832][ T6462] Injecting memory failure for pfn 0x13bd5c at process virtual address 0x20aaf000 [ 66.005852][ T6462] Memory failure: 0x13bd5c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005865][ T6462] Memory failure: 0x13bd5c: recovery action for dirty LRU page: Recovered [ 66.005872][ T6462] Injecting memory failure for pfn 0x13bd5d at process virtual address 0x20ab0000 [ 66.005891][ T6462] Memory failure: 0x13bd5d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005905][ T6462] Memory failure: 0x13bd5d: recovery action for dirty LRU page: Recovered [ 66.005912][ T6462] Injecting memory failure for pfn 0x13bd5e at process virtual address 0x20ab1000 [ 66.005931][ T6462] Memory failure: 0x13bd5e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005945][ T6462] Memory failure: 0x13bd5e: recovery action for dirty LRU page: Recovered [ 66.005952][ T6462] Injecting memory failure for pfn 0x13bd5f at process virtual address 0x20ab2000 [ 66.005974][ T6462] Memory failure: 0x13bd5f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.005988][ T6462] Memory failure: 0x13bd5f: recovery action for dirty LRU page: Recovered [ 66.005995][ T6462] Injecting memory failure for pfn 0x13f218 at process virtual address 0x20ab3000 [ 66.006014][ T6462] Memory failure: 0x13f218: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006028][ T6462] Memory failure: 0x13f218: recovery action for dirty LRU page: Recovered [ 66.006035][ T6462] Injecting memory failure for pfn 0x13f219 at process virtual address 0x20ab4000 [ 66.006054][ T6462] Memory failure: 0x13f219: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006068][ T6462] Memory failure: 0x13f219: recovery action for dirty LRU page: Recovered [ 66.006075][ T6462] Injecting memory failure for pfn 0x13f21a at process virtual address 0x20ab5000 [ 66.006094][ T6462] Memory failure: 0x13f21a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006108][ T6462] Memory failure: 0x13f21a: recovery action for dirty LRU page: Recovered [ 66.006115][ T6462] Injecting memory failure for pfn 0x13f21b at process virtual address 0x20ab6000 [ 66.006135][ T6462] Memory failure: 0x13f21b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006149][ T6462] Memory failure: 0x13f21b: recovery action for dirty LRU page: Recovered [ 66.006156][ T6462] Injecting memory failure for pfn 0x13f21c at process virtual address 0x20ab7000 [ 66.006175][ T6462] Memory failure: 0x13f21c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006189][ T6462] Memory failure: 0x13f21c: recovery action for dirty LRU page: Recovered [ 66.006196][ T6462] Injecting memory failure for pfn 0x13f21d at process virtual address 0x20ab8000 [ 66.006215][ T6462] Memory failure: 0x13f21d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006229][ T6462] Memory failure: 0x13f21d: recovery action for dirty LRU page: Recovered [ 66.006236][ T6462] Injecting memory failure for pfn 0x13f21e at process virtual address 0x20ab9000 [ 66.006255][ T6462] Memory failure: 0x13f21e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.006269][ T6462] Memory failure: 0x13f21e: recovery action for dirty LRU page: Recovered [ 66.006275][ T6462] Injecting memory failure for pfn 0x13f21f at process virtual address 0x20aba000 [ 66.006295][ T6462] Memory failure: 0x13f21f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.014073][ T6462] Memory failure: 0x13f21f: recovery action for dirty LRU page: Recovered [ 66.014089][ T6462] Injecting memory failure for pfn 0x140dc8 at process virtual address 0x20abb000 [ 66.015620][ T6462] Memory failure: 0x140dc8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.015642][ T6462] Memory failure: 0x140dc8: recovery action for dirty LRU page: Recovered [ 66.015653][ T6462] Injecting memory failure for pfn 0x140dc9 at process virtual address 0x20abc000 [ 66.015682][ T6462] Memory failure: 0x140dc9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.015699][ T6462] Memory failure: 0x140dc9: recovery action for dirty LRU page: Recovered [ 66.015707][ T6462] Injecting memory failure for pfn 0x140dca at process virtual address 0x20abd000 [ 66.015732][ T6462] Memory failure: 0x140dca: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.015749][ T6462] Memory failure: 0x140dca: recovery action for dirty LRU page: Recovered [ 66.015757][ T6462] Injecting memory failure for pfn 0x140dcb at process virtual address 0x20abe000 [ 66.015778][ T6462] Memory failure: 0x140dcb: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.015793][ T6462] Memory failure: 0x140dcb: recovery action for dirty LRU page: Recovered [ 66.015800][ T6462] Injecting memory failure for pfn 0x140dcc at process virtual address 0x20abf000 [ 66.015821][ T6462] Memory failure: 0x140dcc: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.015836][ T6462] Memory failure: 0x140dcc: recovery action for dirty LRU page: Recovered [ 66.015843][ T6462] Injecting memory failure for pfn 0x140dcd at process virtual address 0x20ac0000 [ 66.015863][ T6462] Memory failure: 0x140dcd: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018056][ T6462] Memory failure: 0x140dcd: recovery action for dirty LRU page: Recovered [ 66.018121][ T6462] Injecting memory failure for pfn 0x140dce at process virtual address 0x20ac1000 [ 66.018172][ T6462] Memory failure: 0x140dce: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018191][ T6462] Memory failure: 0x140dce: recovery action for dirty LRU page: Recovered [ 66.018316][ T6462] Injecting memory failure for pfn 0x140dcf at process virtual address 0x20ac2000 [ 66.018354][ T6462] Memory failure: 0x140dcf: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018522][ T6462] Memory failure: 0x140dcf: recovery action for dirty LRU page: Recovered [ 66.018534][ T6462] Injecting memory failure for pfn 0x143790 at process virtual address 0x20ac3000 [ 66.018561][ T6462] Memory failure: 0x143790: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018579][ T6462] Memory failure: 0x143790: recovery action for dirty LRU page: Recovered [ 66.018587][ T6462] Injecting memory failure for pfn 0x143791 at process virtual address 0x20ac4000 [ 66.018609][ T6462] Memory failure: 0x143791: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018624][ T6462] Memory failure: 0x143791: recovery action for dirty LRU page: Recovered [ 66.018632][ T6462] Injecting memory failure for pfn 0x143792 at process virtual address 0x20ac5000 [ 66.018653][ T6462] Memory failure: 0x143792: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018668][ T6462] Memory failure: 0x143792: recovery action for dirty LRU page: Recovered [ 66.018675][ T6462] Injecting memory failure for pfn 0x143793 at process virtual address 0x20ac6000 [ 66.018695][ T6462] Memory failure: 0x143793: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018710][ T6462] Memory failure: 0x143793: recovery action for dirty LRU page: Recovered [ 66.018717][ T6462] Injecting memory failure for pfn 0x143794 at process virtual address 0x20ac7000 [ 66.018737][ T6462] Memory failure: 0x143794: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018751][ T6462] Memory failure: 0x143794: recovery action for dirty LRU page: Recovered [ 66.018758][ T6462] Injecting memory failure for pfn 0x143795 at process virtual address 0x20ac8000 [ 66.018778][ T6462] Memory failure: 0x143795: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018792][ T6462] Memory failure: 0x143795: recovery action for dirty LRU page: Recovered [ 66.018799][ T6462] Injecting memory failure for pfn 0x143796 at process virtual address 0x20ac9000 [ 66.018819][ T6462] Memory failure: 0x143796: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018833][ T6462] Memory failure: 0x143796: recovery action for dirty LRU page: Recovered [ 66.018840][ T6462] Injecting memory failure for pfn 0x143797 at process virtual address 0x20aca000 [ 66.018860][ T6462] Memory failure: 0x143797: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018874][ T6462] Memory failure: 0x143797: recovery action for dirty LRU page: Recovered [ 66.018881][ T6462] Injecting memory failure for pfn 0x143808 at process virtual address 0x20acb000 [ 66.018900][ T6462] Memory failure: 0x143808: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018915][ T6462] Memory failure: 0x143808: recovery action for dirty LRU page: Recovered [ 66.018922][ T6462] Injecting memory failure for pfn 0x143809 at process virtual address 0x20acc000 [ 66.018941][ T6462] Memory failure: 0x143809: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.018955][ T6462] Memory failure: 0x143809: recovery action for dirty LRU page: Recovered [ 66.018967][ T6462] Injecting memory failure for pfn 0x14380a at process virtual address 0x20acd000 [ 66.018992][ T6462] Memory failure: 0x14380a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.019006][ T6462] Memory failure: 0x14380a: recovery action for dirty LRU page: Recovered [ 66.019013][ T6462] Injecting memory failure for pfn 0x14380b at process virtual address 0x20ace000 [ 66.019032][ T6462] Memory failure: 0x14380b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.019047][ T6462] Memory failure: 0x14380b: recovery action for dirty LRU page: Recovered [ 66.019054][ T6462] Injecting memory failure for pfn 0x14380c at process virtual address 0x20acf000 [ 66.019073][ T6462] Memory failure: 0x14380c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.020729][ T6462] Memory failure: 0x14380c: recovery action for dirty LRU page: Recovered [ 66.020743][ T6462] Injecting memory failure for pfn 0x14380d at process virtual address 0x20ad0000 [ 66.020773][ T6462] Memory failure: 0x14380d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.020790][ T6462] Memory failure: 0x14380d: recovery action for dirty LRU page: Recovered [ 66.020798][ T6462] Injecting memory failure for pfn 0x14380e at process virtual address 0x20ad1000 [ 66.020823][ T6462] Memory failure: 0x14380e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.020839][ T6462] Memory failure: 0x14380e: recovery action for dirty LRU page: Recovered [ 66.020847][ T6462] Injecting memory failure for pfn 0x14380f at process virtual address 0x20ad2000 [ 66.020869][ T6462] Memory failure: 0x14380f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.020884][ T6462] Memory failure: 0x14380f: recovery action for dirty LRU page: Recovered [ 66.020891][ T6462] Injecting memory failure for pfn 0x122c08 at process virtual address 0x20ad3000 [ 66.020912][ T6462] Memory failure: 0x122c08: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.020926][ T6462] Memory failure: 0x122c08: recovery action for dirty LRU page: Recovered [ 66.020933][ T6462] Injecting memory failure for pfn 0x122c09 at process virtual address 0x20ad4000 [ 66.020953][ T6462] Memory failure: 0x122c09: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.020973][ T6462] Memory failure: 0x122c09: recovery action for dirty LRU page: Recovered [ 66.020981][ T6462] Injecting memory failure for pfn 0x122c0a at process virtual address 0x20ad5000 [ 66.021005][ T6462] Memory failure: 0x122c0a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021019][ T6462] Memory failure: 0x122c0a: recovery action for dirty LRU page: Recovered [ 66.021026][ T6462] Injecting memory failure for pfn 0x122c0b at process virtual address 0x20ad6000 [ 66.021047][ T6462] Memory failure: 0x122c0b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021061][ T6462] Memory failure: 0x122c0b: recovery action for dirty LRU page: Recovered [ 66.021068][ T6462] Injecting memory failure for pfn 0x122c0c at process virtual address 0x20ad7000 [ 66.021087][ T6462] Memory failure: 0x122c0c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021101][ T6462] Memory failure: 0x122c0c: recovery action for dirty LRU page: Recovered [ 66.021109][ T6462] Injecting memory failure for pfn 0x122c0d at process virtual address 0x20ad8000 [ 66.021128][ T6462] Memory failure: 0x122c0d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021142][ T6462] Memory failure: 0x122c0d: recovery action for dirty LRU page: Recovered [ 66.021149][ T6462] Injecting memory failure for pfn 0x122c0e at process virtual address 0x20ad9000 [ 66.021169][ T6462] Memory failure: 0x122c0e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021183][ T6462] Memory failure: 0x122c0e: recovery action for dirty LRU page: Recovered [ 66.021190][ T6462] Injecting memory failure for pfn 0x122c0f at process virtual address 0x20ada000 [ 66.021210][ T6462] Memory failure: 0x122c0f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021223][ T6462] Memory failure: 0x122c0f: recovery action for dirty LRU page: Recovered [ 66.021230][ T6462] Injecting memory failure for pfn 0x121fb8 at process virtual address 0x20adb000 [ 66.021250][ T6462] Memory failure: 0x121fb8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021264][ T6462] Memory failure: 0x121fb8: recovery action for dirty LRU page: Recovered [ 66.021271][ T6462] Injecting memory failure for pfn 0x121fb9 at process virtual address 0x20adc000 [ 66.021291][ T6462] Memory failure: 0x121fb9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.021305][ T6462] Memory failure: 0x121fb9: recovery action for dirty LRU page: Recovered [ 66.022406][ T6462] Injecting memory failure for pfn 0x121fba at process virtual address 0x20add000 [ 66.022642][ T6462] Memory failure: 0x121fba: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.022665][ T6462] Memory failure: 0x121fba: recovery action for dirty LRU page: Recovered [ 66.022676][ T6462] Injecting memory failure for pfn 0x121fbb at process virtual address 0x20ade000 [ 66.022701][ T6462] Memory failure: 0x121fbb: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023155][ T6462] Memory failure: 0x121fbb: recovery action for dirty LRU page: Recovered [ 66.023169][ T6462] Injecting memory failure for pfn 0x121fbc at process virtual address 0x20adf000 [ 66.023207][ T6462] Memory failure: 0x121fbc: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023230][ T6462] Memory failure: 0x121fbc: recovery action for dirty LRU page: Recovered [ 66.023244][ T6462] Injecting memory failure for pfn 0x121fbd at process virtual address 0x20ae0000 [ 66.023271][ T6462] Memory failure: 0x121fbd: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023288][ T6462] Memory failure: 0x121fbd: recovery action for dirty LRU page: Recovered [ 66.023296][ T6462] Injecting memory failure for pfn 0x121fbe at process virtual address 0x20ae1000 [ 66.023326][ T6462] Memory failure: 0x121fbe: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023342][ T6462] Memory failure: 0x121fbe: recovery action for dirty LRU page: Recovered [ 66.023349][ T6462] Injecting memory failure for pfn 0x121fbf at process virtual address 0x20ae2000 [ 66.023370][ T6462] Memory failure: 0x121fbf: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023384][ T6462] Memory failure: 0x121fbf: recovery action for dirty LRU page: Recovered [ 66.023391][ T6462] Injecting memory failure for pfn 0x13d910 at process virtual address 0x20ae3000 [ 66.023411][ T6462] Memory failure: 0x13d910: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023426][ T6462] Memory failure: 0x13d910: recovery action for dirty LRU page: Recovered [ 66.023433][ T6462] Injecting memory failure for pfn 0x13d911 at process virtual address 0x20ae4000 [ 66.023453][ T6462] Memory failure: 0x13d911: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023467][ T6462] Memory failure: 0x13d911: recovery action for dirty LRU page: Recovered [ 66.023474][ T6462] Injecting memory failure for pfn 0x13d912 at process virtual address 0x20ae5000 [ 66.023493][ T6462] Memory failure: 0x13d912: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.023508][ T6462] Memory failure: 0x13d912: recovery action for dirty LRU page: Recovered [ 66.023515][ T6462] Injecting memory failure for pfn 0x13d913 at process virtual address 0x20ae6000 [ 66.024775][ T6462] Memory failure: 0x13d913: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.024797][ T6462] Memory failure: 0x13d913: recovery action for dirty LRU page: Recovered [ 66.024806][ T6462] Injecting memory failure for pfn 0x13d914 at process virtual address 0x20ae7000 [ 66.024839][ T6462] Memory failure: 0x13d914: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.024855][ T6462] Memory failure: 0x13d914: recovery action for dirty LRU page: Recovered [ 66.024864][ T6462] Injecting memory failure for pfn 0x13d915 at process virtual address 0x20ae8000 [ 66.024886][ T6462] Memory failure: 0x13d915: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.024901][ T6462] Memory failure: 0x13d915: recovery action for dirty LRU page: Recovered [ 66.024908][ T6462] Injecting memory failure for pfn 0x13d916 at process virtual address 0x20ae9000 [ 66.024929][ T6462] Memory failure: 0x13d916: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.025900][ T6462] Memory failure: 0x13d916: recovery action for dirty LRU page: Recovered [ 66.025912][ T6462] Injecting memory failure for pfn 0x13d917 at process virtual address 0x20aea000 [ 66.025947][ T6462] Memory failure: 0x13d917: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.025969][ T6462] Memory failure: 0x13d917: recovery action for dirty LRU page: Recovered [ 66.025978][ T6462] Injecting memory failure for pfn 0x13d7d0 at process virtual address 0x20aeb000 [ 66.026003][ T6462] Memory failure: 0x13d7d0: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.026019][ T6462] Memory failure: 0x13d7d0: recovery action for dirty LRU page: Recovered ** 3 printk messages dropped ** [ 66.027951][ T6462] Injecting memory failure for pfn 0x13d7d2 at process virtual address 0x20aed000 [ 66.028005][ T6462] Memory failure: 0x13d7d2: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028024][ T6462] Memory failure: 0x13d7d2: recovery action for dirty LRU page: Recovered [ 66.028033][ T6462] Injecting memory failure for pfn 0x13d7d3 at process virtual address 0x20aee000 [ 66.028060][ T6462] Memory failure: 0x13d7d3: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028076][ T6462] Memory failure: 0x13d7d3: recovery action for dirty LRU page: Recovered [ 66.028084][ T6462] Injecting memory failure for pfn 0x13d7d4 at process virtual address 0x20aef000 [ 66.028106][ T6462] Memory failure: 0x13d7d4: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028122][ T6462] Memory failure: 0x13d7d4: recovery action for dirty LRU page: Recovered [ 66.028129][ T6462] Injecting memory failure for pfn 0x13d7d5 at process virtual address 0x20af0000 [ 66.028150][ T6462] Memory failure: 0x13d7d5: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028164][ T6462] Memory failure: 0x13d7d5: recovery action for dirty LRU page: Recovered [ 66.028172][ T6462] Injecting memory failure for pfn 0x13d7d6 at process virtual address 0x20af1000 [ 66.028192][ T6462] Memory failure: 0x13d7d6: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028206][ T6462] Memory failure: 0x13d7d6: recovery action for dirty LRU page: Recovered [ 66.028213][ T6462] Injecting memory failure for pfn 0x13d7d7 at process virtual address 0x20af2000 [ 66.028233][ T6462] Memory failure: 0x13d7d7: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028248][ T6462] Memory failure: 0x13d7d7: recovery action for dirty LRU page: Recovered [ 66.028255][ T6462] Injecting memory failure for pfn 0x13bfa8 at process virtual address 0x20af3000 [ 66.028275][ T6462] Memory failure: 0x13bfa8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.028303][ T6462] Memory failure: 0x13bfa8: recovery action for dirty LRU page: Recovered [ 66.028311][ T6462] Injecting memory failure for pfn 0x13bfa9 at process virtual address 0x20af4000 [ 66.028334][ T6462] Memory failure: 0x13bfa9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.029247][ T6462] Memory failure: 0x13bfa9: recovery action for dirty LRU page: Recovered [ 66.029258][ T6462] Injecting memory failure for pfn 0x13bfaa at process virtual address 0x20af5000 [ 66.029290][ T6462] Memory failure: 0x13bfaa: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.029306][ T6462] Memory failure: 0x13bfaa: recovery action for dirty LRU page: Recovered [ 66.029313][ T6462] Injecting memory failure for pfn 0x13bfab at process virtual address 0x20af6000 [ 66.029337][ T6462] Memory failure: 0x13bfab: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.029352][ T6462] Memory failure: 0x13bfab: recovery action for dirty LRU page: Recovered [ 66.029359][ T6462] Injecting memory failure for pfn 0x13bfac at process virtual address 0x20af7000 [ 66.029380][ T6462] Memory failure: 0x13bfac: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.029394][ T6462] Memory failure: 0x13bfac: recovery action for dirty LRU page: Recovered [ 66.029401][ T6462] Injecting memory failure for pfn 0x13bfad at process virtual address 0x20af8000 [ 66.029422][ T6462] Memory failure: 0x13bfad: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.029436][ T6462] Memory failure: 0x13bfad: recovery action for dirty LRU page: Recovered [ 66.030287][ T6462] Injecting memory failure for pfn 0x13bfae at process virtual address 0x20af9000 [ 66.030330][ T6462] Memory failure: 0x13bfae: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.030349][ T6462] Memory failure: 0x13bfae: recovery action for dirty LRU page: Recovered [ 66.030358][ T6462] Injecting memory failure for pfn 0x13bfaf at process virtual address 0x20afa000 [ 66.030383][ T6462] Memory failure: 0x13bfaf: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.030399][ T6462] Memory failure: 0x13bfaf: recovery action for dirty LRU page: Recovered [ 66.030407][ T6462] Injecting memory failure for pfn 0x13b060 at process virtual address 0x20afb000 [ 66.030429][ T6462] Memory failure: 0x13b060: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.030446][ T6462] Memory failure: 0x13b060: recovery action for dirty LRU page: Recovered [ 66.030454][ T6462] Injecting memory failure for pfn 0x13b061 at process virtual address 0x20afc000 [ 66.030475][ T6462] Memory failure: 0x13b061: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.030490][ T6462] Memory failure: 0x13b061: recovery action for dirty LRU page: Recovered [ 66.030497][ T6462] Injecting memory failure for pfn 0x13b062 at process virtual address 0x20afd000 [ 66.030518][ T6462] Memory failure: 0x13b062: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.030532][ T6462] Memory failure: 0x13b062: recovery action for dirty LRU page: Recovered [ 66.030540][ T6462] Injecting memory failure for pfn 0x13b063 at process virtual address 0x20afe000 [ 66.030559][ T6462] Memory failure: 0x13b063: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.030574][ T6462] Memory failure: 0x13b063: recovery action for dirty LRU page: Recovered [ 66.030581][ T6462] Injecting memory failure for pfn 0x13b064 at process virtual address 0x20aff000 [ 66.030601][ T6462] Memory failure: 0x13b064: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.031575][ T6462] Memory failure: 0x13b064: recovery action for dirty LRU page: Recovered [ 66.031592][ T6462] Injecting memory failure for pfn 0x13b065 at process virtual address 0x20b00000 [ 66.031633][ T6462] Memory failure: 0x13b065: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.031650][ T6462] Memory failure: 0x13b065: recovery action for dirty LRU page: Recovered [ 66.031658][ T6462] Injecting memory failure for pfn 0x13b066 at process virtual address 0x20b01000 [ 66.031680][ T6462] Memory failure: 0x13b066: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.031696][ T6462] Memory failure: 0x13b066: recovery action for dirty LRU page: Recovered [ 66.031703][ T6462] Injecting memory failure for pfn 0x13b067 at process virtual address 0x20b02000 [ 66.032372][ T6462] Memory failure: 0x13b067: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032397][ T6462] Memory failure: 0x13b067: recovery action for dirty LRU page: Recovered [ 66.032411][ T6462] Injecting memory failure for pfn 0x140dd8 at process virtual address 0x20b03000 [ 66.032440][ T6462] Memory failure: 0x140dd8: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032458][ T6462] Memory failure: 0x140dd8: recovery action for dirty LRU page: Recovered [ 66.032466][ T6462] Injecting memory failure for pfn 0x140dd9 at process virtual address 0x20b04000 [ 66.032490][ T6462] Memory failure: 0x140dd9: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032506][ T6462] Memory failure: 0x140dd9: recovery action for dirty LRU page: Recovered [ 66.032513][ T6462] Injecting memory failure for pfn 0x140dda at process virtual address 0x20b05000 [ 66.032535][ T6462] Memory failure: 0x140dda: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032550][ T6462] Memory failure: 0x140dda: recovery action for dirty LRU page: Recovered [ 66.032557][ T6462] Injecting memory failure for pfn 0x140ddb at process virtual address 0x20b06000 [ 66.032600][ T6462] Memory failure: 0x140ddb: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032615][ T6462] Memory failure: 0x140ddb: recovery action for dirty LRU page: Recovered [ 66.032622][ T6462] Injecting memory failure for pfn 0x140ddc at process virtual address 0x20b07000 [ 66.032643][ T6462] Memory failure: 0x140ddc: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032657][ T6462] Memory failure: 0x140ddc: recovery action for dirty LRU page: Recovered [ 66.032664][ T6462] Injecting memory failure for pfn 0x140ddd at process virtual address 0x20b08000 [ 66.032684][ T6462] Memory failure: 0x140ddd: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032698][ T6462] Memory failure: 0x140ddd: recovery action for dirty LRU page: Recovered [ 66.032705][ T6462] Injecting memory failure for pfn 0x140dde at process virtual address 0x20b09000 [ 66.032725][ T6462] Memory failure: 0x140dde: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032739][ T6462] Memory failure: 0x140dde: recovery action for dirty LRU page: Recovered [ 66.032746][ T6462] Injecting memory failure for pfn 0x140ddf at process virtual address 0x20b0a000 [ 66.032765][ T6462] Memory failure: 0x140ddf: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032780][ T6462] Memory failure: 0x140ddf: recovery action for dirty LRU page: Recovered [ 66.032787][ T6462] Injecting memory failure for pfn 0x120698 at process virtual address 0x20b0b000 [ 66.032806][ T6462] Memory failure: 0x120698: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032820][ T6462] Memory failure: 0x120698: recovery action for dirty LRU page: Recovered [ 66.032839][ T6462] Injecting memory failure for pfn 0x120699 at process virtual address 0x20b0c000 [ 66.032858][ T6462] Memory failure: 0x120699: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032873][ T6462] Memory failure: 0x120699: recovery action for dirty LRU page: Recovered [ 66.032880][ T6462] Injecting memory failure for pfn 0x12069a at process virtual address 0x20b0d000 [ 66.032899][ T6462] Memory failure: 0x12069a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032913][ T6462] Memory failure: 0x12069a: recovery action for dirty LRU page: Recovered [ 66.032920][ T6462] Injecting memory failure for pfn 0x12069b at process virtual address 0x20b0e000 [ 66.032939][ T6462] Memory failure: 0x12069b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.032953][ T6462] Memory failure: 0x12069b: recovery action for dirty LRU page: Recovered [ 66.032964][ T6462] Injecting memory failure for pfn 0x12069c at process virtual address 0x20b0f000 [ 66.032987][ T6462] Memory failure: 0x12069c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.033001][ T6462] Memory failure: 0x12069c: recovery action for dirty LRU page: Recovered [ 66.033008][ T6462] Injecting memory failure for pfn 0x12069d at process virtual address 0x20b10000 [ 66.033027][ T6462] Memory failure: 0x12069d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.033059][ T6462] Memory failure: 0x12069d: recovery action for dirty LRU page: Recovered [ 66.033067][ T6462] Injecting memory failure for pfn 0x12069e at process virtual address 0x20b11000 [ 66.033089][ T6462] Memory failure: 0x12069e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.033103][ T6462] Memory failure: 0x12069e: recovery action for dirty LRU page: Recovered [ 66.033110][ T6462] Injecting memory failure for pfn 0x12069f at process virtual address 0x20b12000 [ 66.033129][ T6462] Memory failure: 0x12069f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.033143][ T6462] Memory failure: 0x12069f: recovery action for dirty LRU page: Recovered [ 66.033150][ T6462] Injecting memory failure for pfn 0x13a030 at process virtual address 0x20b13000 [ 66.033169][ T6462] Memory failure: 0x13a030: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.034848][ T6462] Memory failure: 0x13a030: recovery action for dirty LRU page: Recovered [ 66.034860][ T6462] Injecting memory failure for pfn 0x13a031 at process virtual address 0x20b14000 [ 66.034896][ T6462] Memory failure: 0x13a031: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.034913][ T6462] Memory failure: 0x13a031: recovery action for dirty LRU page: Recovered [ 66.034921][ T6462] Injecting memory failure for pfn 0x13a032 at process virtual address 0x20b15000 [ 66.034944][ T6462] Memory failure: 0x13a032: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.034960][ T6462] Memory failure: 0x13a032: recovery action for dirty LRU page: Recovered [ 66.034972][ T6462] Injecting memory failure for pfn 0x13a033 at process virtual address 0x20b16000 [ 66.034997][ T6462] Memory failure: 0x13a033: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035013][ T6462] Memory failure: 0x13a033: recovery action for dirty LRU page: Recovered [ 66.035021][ T6462] Injecting memory failure for pfn 0x13a034 at process virtual address 0x20b17000 [ 66.035041][ T6462] Memory failure: 0x13a034: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035056][ T6462] Memory failure: 0x13a034: recovery action for dirty LRU page: Recovered [ 66.035063][ T6462] Injecting memory failure for pfn 0x13a035 at process virtual address 0x20b18000 [ 66.035084][ T6462] Memory failure: 0x13a035: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035098][ T6462] Memory failure: 0x13a035: recovery action for dirty LRU page: Recovered [ 66.035106][ T6462] Injecting memory failure for pfn 0x13a036 at process virtual address 0x20b19000 [ 66.035126][ T6462] Memory failure: 0x13a036: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035140][ T6462] Memory failure: 0x13a036: recovery action for dirty LRU page: Recovered [ 66.035147][ T6462] Injecting memory failure for pfn 0x13a037 at process virtual address 0x20b1a000 [ 66.035167][ T6462] Memory failure: 0x13a037: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035181][ T6462] Memory failure: 0x13a037: recovery action for dirty LRU page: Recovered [ 66.035188][ T6462] Injecting memory failure for pfn 0x140188 at process virtual address 0x20b1b000 [ 66.035208][ T6462] Memory failure: 0x140188: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035222][ T6462] Memory failure: 0x140188: recovery action for dirty LRU page: Recovered [ 66.035229][ T6462] Injecting memory failure for pfn 0x140189 at process virtual address 0x20b1c000 [ 66.035249][ T6462] Memory failure: 0x140189: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035263][ T6462] Memory failure: 0x140189: recovery action for dirty LRU page: Recovered [ 66.035270][ T6462] Injecting memory failure for pfn 0x14018a at process virtual address 0x20b1d000 [ 66.035298][ T6462] Memory failure: 0x14018a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035312][ T6462] Memory failure: 0x14018a: recovery action for dirty LRU page: Recovered [ 66.035319][ T6462] Injecting memory failure for pfn 0x14018b at process virtual address 0x20b1e000 [ 66.035339][ T6462] Memory failure: 0x14018b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035353][ T6462] Memory failure: 0x14018b: recovery action for dirty LRU page: Recovered [ 66.035360][ T6462] Injecting memory failure for pfn 0x14018c at process virtual address 0x20b1f000 [ 66.035379][ T6462] Memory failure: 0x14018c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.035393][ T6462] Memory failure: 0x14018c: recovery action for dirty LRU page: Recovered [ 66.035400][ T6462] Injecting memory failure for pfn 0x14018d at process virtual address 0x20b20000 [ 66.035419][ T6462] Memory failure: 0x14018d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038077][ T6462] Memory failure: 0x14018d: recovery action for dirty LRU page: Recovered [ 66.038097][ T6462] Injecting memory failure for pfn 0x14018e at process virtual address 0x20b21000 [ 66.038147][ T6462] Memory failure: 0x14018e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038168][ T6462] Memory failure: 0x14018e: recovery action for dirty LRU page: Recovered [ 66.038177][ T6462] Injecting memory failure for pfn 0x14018f at process virtual address 0x20b22000 [ 66.038225][ T6462] Memory failure: 0x14018f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038242][ T6462] Memory failure: 0x14018f: recovery action for dirty LRU page: Recovered [ 66.038759][ T6462] Injecting memory failure for pfn 0x13dca0 at process virtual address 0x20b23000 [ 66.038807][ T6462] Memory failure: 0x13dca0: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038828][ T6462] Memory failure: 0x13dca0: recovery action for dirty LRU page: Recovered [ 66.038837][ T6462] Injecting memory failure for pfn 0x13dca1 at process virtual address 0x20b24000 [ 66.038861][ T6462] Memory failure: 0x13dca1: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038877][ T6462] Memory failure: 0x13dca1: recovery action for dirty LRU page: Recovered [ 66.038885][ T6462] Injecting memory failure for pfn 0x13dca2 at process virtual address 0x20b25000 [ 66.038907][ T6462] Memory failure: 0x13dca2: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038922][ T6462] Memory failure: 0x13dca2: recovery action for dirty LRU page: Recovered [ 66.038929][ T6462] Injecting memory failure for pfn 0x13dca3 at process virtual address 0x20b26000 [ 66.038950][ T6462] Memory failure: 0x13dca3: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.038972][ T6462] Memory failure: 0x13dca3: recovery action for dirty LRU page: Recovered [ 66.038982][ T6462] Injecting memory failure for pfn 0x13dca4 at process virtual address 0x20b27000 [ 66.039005][ T6462] Memory failure: 0x13dca4: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039019][ T6462] Memory failure: 0x13dca4: recovery action for dirty LRU page: Recovered [ 66.039027][ T6462] Injecting memory failure for pfn 0x13dca5 at process virtual address 0x20b28000 [ 66.039047][ T6462] Memory failure: 0x13dca5: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039061][ T6462] Memory failure: 0x13dca5: recovery action for dirty LRU page: Recovered [ 66.039068][ T6462] Injecting memory failure for pfn 0x13dca6 at process virtual address 0x20b29000 [ 66.039088][ T6462] Memory failure: 0x13dca6: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039102][ T6462] Memory failure: 0x13dca6: recovery action for dirty LRU page: Recovered [ 66.039110][ T6462] Injecting memory failure for pfn 0x13dca7 at process virtual address 0x20b2a000 [ 66.039131][ T6462] Memory failure: 0x13dca7: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039146][ T6462] Memory failure: 0x13dca7: recovery action for dirty LRU page: Recovered [ 66.039153][ T6462] Injecting memory failure for pfn 0x120648 at process virtual address 0x20b2b000 [ 66.039172][ T6462] Memory failure: 0x120648: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039187][ T6462] Memory failure: 0x120648: recovery action for dirty LRU page: Recovered [ 66.039194][ T6462] Injecting memory failure for pfn 0x120649 at process virtual address 0x20b2c000 [ 66.039213][ T6462] Memory failure: 0x120649: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039227][ T6462] Memory failure: 0x120649: recovery action for dirty LRU page: Recovered [ 66.039234][ T6462] Injecting memory failure for pfn 0x12064a at process virtual address 0x20b2d000 [ 66.039254][ T6462] Memory failure: 0x12064a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039268][ T6462] Memory failure: 0x12064a: recovery action for dirty LRU page: Recovered [ 66.039275][ T6462] Injecting memory failure for pfn 0x12064b at process virtual address 0x20b2e000 [ 66.039294][ T6462] Memory failure: 0x12064b: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039308][ T6462] Memory failure: 0x12064b: recovery action for dirty LRU page: Recovered [ 66.039315][ T6462] Injecting memory failure for pfn 0x12064c at process virtual address 0x20b2f000 [ 66.039334][ T6462] Memory failure: 0x12064c: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039348][ T6462] Memory failure: 0x12064c: recovery action for dirty LRU page: Recovered [ 66.039355][ T6462] Injecting memory failure for pfn 0x12064d at process virtual address 0x20b30000 [ 66.039389][ T6462] Memory failure: 0x12064d: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039408][ T6462] Memory failure: 0x12064d: recovery action for dirty LRU page: Recovered [ 66.039416][ T6462] Injecting memory failure for pfn 0x12064e at process virtual address 0x20b31000 [ 66.039435][ T6462] Memory failure: 0x12064e: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039449][ T6462] Memory failure: 0x12064e: recovery action for dirty LRU page: Recovered [ 66.039456][ T6462] Injecting memory failure for pfn 0x12064f at process virtual address 0x20b32000 [ 66.039499][ T6462] Memory failure: 0x12064f: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039514][ T6462] Memory failure: 0x12064f: recovery action for dirty LRU page: Recovered [ 66.039521][ T6462] Injecting memory failure for pfn 0x13d928 at process virtual address 0x20b33000 [ 66.039540][ T6462] Memory failure: 0x13d928: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039572][ T6462] Memory failure: 0x13d928: recovery action for dirty LRU page: Recovered [ 66.039579][ T6462] Injecting memory failure for pfn 0x13d929 at process virtual address 0x20b34000 [ 66.039598][ T6462] Memory failure: 0x13d929: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039612][ T6462] Memory failure: 0x13d929: recovery action for dirty LRU page: Recovered [ 66.039619][ T6462] Injecting memory failure for pfn 0x13d92a at process virtual address 0x20b35000 [ 66.039638][ T6462] Memory failure: 0x13d92a: Sending SIGBUS to syz.0.446:6462 due to hardware memory corruption [ 66.039652][ T6462] Memory failure: 0x13d92a: recovery action for dirty LRU page: Recovered [ 66.039674][ T6462] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20b36000 [ 66.039682][ T6462] Memory failure: 0x216bf1: unhandlable page. [ 66.039687][ T6462] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 66.104911][ T6481] FAULT_INJECTION: forcing a failure. [ 66.104911][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 66.105336][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.0.449 Tainted: G L syzkaller #0 PREEMPT [ 66.105355][ T6481] Tainted: [L]=SOFTLOCKUP [ 66.105359][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.105371][ T6481] Call trace: [ 66.105374][ T6481] show_stack+0x2c/0x3c (C) [ 66.105391][ T6481] __dump_stack+0x30/0x40 [ 66.105401][ T6481] dump_stack_lvl+0xd8/0x12c [ 66.105411][ T6481] dump_stack+0x1c/0x28 [ 66.105421][ T6481] should_fail_ex+0x418/0x58c [ 66.105429][ T6481] should_failslab+0xc4/0x120 [ 66.105437][ T6481] __kmalloc_noprof+0x108/0x6c8 [ 66.105446][ T6481] tomoyo_realpath_from_path+0xbc/0x4dc [ 66.105457][ T6481] tomoyo_path_number_perm+0x1f0/0x500 [ 66.105466][ T6481] tomoyo_file_ioctl+0x2c/0x3c [ 66.105476][ T6481] security_file_ioctl+0xdc/0x2b0 [ 66.105489][ T6481] __arm64_sys_ioctl+0xb0/0x1cc [ 66.105497][ T6481] invoke_syscall+0x98/0x244 [ 66.105508][ T6481] el0_svc_common+0xec/0x23c [ 66.105518][ T6481] do_el0_svc+0x4c/0x5c [ 66.105528][ T6481] el0_svc+0x60/0x1d8 [ 66.105536][ T6481] el0t_64_sync_handler+0x44/0x104 [ 66.105543][ T6481] el0t_64_sync+0x198/0x19c [ 66.108228][ T6481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.164475][ T6483] loop0: detected capacity change from 0 to 512 [ 66.170924][ T6483] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 66.170943][ T6483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.182275][ T6483] EXT4-fs (loop0): 1 truncate cleaned up [ 66.182754][ T6483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.387751][ T4714] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 66.515770][ T6492] can0: slcan on ttyS3. [ 67.207268][ T6489] can0 (unregistered): slcan off ttyS3. [ 67.495189][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.316863][ T6455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.766934][ T6530] Cannot find set identified by id 0 to match [ 68.936068][ T6541] FAULT_INJECTION: forcing a failure. [ 68.936068][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 68.936087][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.4.470 Tainted: G L syzkaller #0 PREEMPT [ 68.936100][ T6541] Tainted: [L]=SOFTLOCKUP [ 68.936104][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.936117][ T6541] Call trace: [ 68.936120][ T6541] show_stack+0x2c/0x3c (C) [ 68.936141][ T6541] __dump_stack+0x30/0x40 [ 68.936154][ T6541] dump_stack_lvl+0xd8/0x12c [ 68.936165][ T6541] dump_stack+0x1c/0x28 [ 68.936176][ T6541] should_fail_ex+0x418/0x58c [ 68.936186][ T6541] should_failslab+0xc4/0x120 [ 68.936195][ T6541] __kmalloc_noprof+0x108/0x6c8 [ 68.936205][ T6541] vb2_core_allocated_buffers_storage+0x70/0x188 [ 68.936215][ T6541] vb2_core_reqbufs+0x580/0xe0c [ 68.936224][ T6541] vb2_reqbufs+0x108/0x1d8 [ 68.936234][ T6541] v4l2_m2m_reqbufs+0xb0/0x178 [ 68.936246][ T6541] v4l2_m2m_ioctl_reqbufs+0x6c/0x80 [ 68.936258][ T6541] v4l_reqbufs+0x110/0x188 [ 68.936267][ T6541] __video_do_ioctl+0x768/0xaa8 [ 68.936277][ T6541] video_usercopy+0x74c/0xe88 [ 68.936286][ T6541] video_ioctl2+0x3c/0x50 [ 68.936295][ T6541] v4l2_ioctl+0x148/0x18c [ 68.936307][ T6541] __arm64_sys_ioctl+0x154/0x1cc [ 68.936316][ T6541] invoke_syscall+0x98/0x244 [ 68.936329][ T6541] el0_svc_common+0xec/0x23c [ 68.936341][ T6541] do_el0_svc+0x4c/0x5c [ 68.936353][ T6541] el0_svc+0x60/0x1d8 [ 68.936362][ T6541] el0t_64_sync_handler+0x44/0x104 [ 68.936370][ T6541] el0t_64_sync+0x198/0x19c [ 69.272926][ T6561] FAULT_INJECTION: forcing a failure. [ 69.272926][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 69.272942][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.4.476 Tainted: G L syzkaller #0 PREEMPT [ 69.272961][ T6561] Tainted: [L]=SOFTLOCKUP [ 69.272965][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 69.272980][ T6561] Call trace: [ 69.272983][ T6561] show_stack+0x2c/0x3c (C) [ 69.273009][ T6561] __dump_stack+0x30/0x40 [ 69.273022][ T6561] dump_stack_lvl+0xd8/0x12c [ 69.273035][ T6561] dump_stack+0x1c/0x28 [ 69.273046][ T6561] should_fail_ex+0x418/0x58c [ 69.273055][ T6561] should_failslab+0xc4/0x120 [ 69.273065][ T6561] __kmalloc_noprof+0x108/0x6c8 [ 69.273074][ T6561] tomoyo_realpath_from_path+0xbc/0x4dc [ 69.273088][ T6561] tomoyo_check_open_permission+0x1c4/0x394 [ 69.273099][ T6561] tomoyo_file_open+0x78/0xcc [ 69.273111][ T6561] security_file_open+0xbc/0x258 [ 69.273122][ T6561] do_dentry_open+0x2a8/0xfbc [ 69.273135][ T6561] vfs_open+0x44/0x2dc [ 69.273146][ T6561] path_openat+0x1084/0x18f0 [ 69.273157][ T6561] do_file_open+0x1c8/0x2e8 [ 69.273168][ T6561] do_sys_openat2+0x114/0x1e8 [ 69.273180][ T6561] do_sys_open+0xb0/0xe0 [ 69.273191][ T6561] __arm64_sys_openat+0xa8/0xc4 [ 69.273204][ T6561] invoke_syscall+0x98/0x244 [ 69.273216][ T6561] el0_svc_common+0xec/0x23c [ 69.273228][ T6561] do_el0_svc+0x4c/0x5c [ 69.273240][ T6561] el0_svc+0x60/0x1d8 [ 69.273249][ T6561] el0t_64_sync_handler+0x44/0x104 [ 69.273257][ T6561] el0t_64_sync+0x198/0x19c [ 69.273268][ T6561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.266327][ C1] net_ratelimit: 91 callbacks suppressed [ 71.465320][ T6639] binder: 6638:6639 tried to acquire reference to desc 0, got 1 instead [ 71.465442][ T6639] binder: 6638:6639 got transaction with fd, 3, but target does not allow fds [ 71.465453][ T6639] binder: 6639:6638 translate fd failed [ 71.472002][ T6639] binder: 6638:6639 transaction async to 6638:0 failed 54/29201/-1, code 0 size 88-24 line 3594 [ 71.472405][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.524634][ T6641] FAULT_INJECTION: forcing a failure. [ 71.524634][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.524657][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.4.502 Tainted: G L syzkaller #0 PREEMPT [ 71.524670][ T6641] Tainted: [L]=SOFTLOCKUP [ 71.524674][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.524688][ T6641] Call trace: [ 71.524691][ T6641] show_stack+0x2c/0x3c (C) [ 71.524709][ T6641] __dump_stack+0x30/0x40 [ 71.524722][ T6641] dump_stack_lvl+0xd8/0x12c [ 71.524733][ T6641] dump_stack+0x1c/0x28 [ 71.524744][ T6641] should_fail_ex+0x418/0x58c [ 71.524753][ T6641] should_fail+0x14/0x24 [ 71.524761][ T6641] should_fail_usercopy+0x20/0x30 [ 71.524769][ T6641] _inline_copy_from_user+0x3c/0x174 [ 71.524780][ T6641] copy_from_sockptr_offset+0x7c/0xc0 [ 71.524789][ T6641] do_arpt_set_ctl+0x730/0x94c [ 71.524798][ T6641] nf_setsockopt+0xa0/0xe4 [ 71.524808][ T6641] ip_setsockopt+0x118/0x128 [ 71.524816][ T6641] tcp_setsockopt+0xcc/0xe8 [ 71.524827][ T6641] sock_common_setsockopt+0xb0/0xcc [ 71.524838][ T6641] do_sock_setsockopt+0x1f0/0x330 [ 71.524850][ T6641] __sys_setsockopt+0x104/0x170 [ 71.524862][ T6641] __arm64_sys_setsockopt+0xc8/0xe4 [ 71.524873][ T6641] invoke_syscall+0x98/0x244 [ 71.524886][ T6641] el0_svc_common+0xec/0x23c [ 71.524897][ T6641] do_el0_svc+0x4c/0x5c [ 71.524908][ T6641] el0_svc+0x60/0x1d8 [ 71.524917][ T6641] el0t_64_sync_handler+0x44/0x104 [ 71.524926][ T6641] el0t_64_sync+0x198/0x19c [ 71.617537][ T6646] binder: 6645:6646 ioctl 4018620d 0 returned -22 [ 71.721499][ T6651] binder: 6645:6651 ioctl c018620b 0 returned -14 [ 71.744634][ T6653] Cannot find set identified by id 0 to match [ 71.957526][ T6660] netlink: 44 bytes leftover after parsing attributes in process `syz.4.508'. [ 72.175450][ T6664] FAULT_INJECTION: forcing a failure. [ 72.175450][ T6664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.175917][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.2.510 Tainted: G L syzkaller #0 PREEMPT [ 72.175933][ T6664] Tainted: [L]=SOFTLOCKUP [ 72.175936][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.175950][ T6664] Call trace: [ 72.175953][ T6664] show_stack+0x2c/0x3c (C) [ 72.175981][ T6664] __dump_stack+0x30/0x40 [ 72.175995][ T6664] dump_stack_lvl+0xd8/0x12c [ 72.176007][ T6664] dump_stack+0x1c/0x28 [ 72.176018][ T6664] should_fail_ex+0x418/0x58c [ 72.176027][ T6664] should_fail_alloc_page+0xec/0x10c [ 72.176035][ T6664] prepare_alloc_pages+0x194/0x484 [ 72.176043][ T6664] __alloc_frozen_pages_noprof+0x180/0x578 [ 72.176052][ T6664] alloc_pages_mpol+0x1fc/0x3d0 [ 72.176061][ T6664] folio_alloc_mpol_noprof+0x4c/0x248 [ 72.176070][ T6664] shmem_alloc_folio+0xa0/0x150 [ 72.176081][ T6664] shmem_alloc_and_add_folio+0x28c/0xb30 [ 72.176091][ T6664] shmem_get_folio_gfp+0x4d8/0x1378 [ 72.176102][ T6664] shmem_fault+0x15c/0x32c [ 72.176112][ T6664] __do_fault+0xf4/0x4a8 [ 72.176120][ T6664] do_pte_missing+0x1764/0x28bc [ 72.176128][ T6664] handle_mm_fault+0x14d0/0x2b58 [ 72.176138][ T6664] __get_user_pages+0x82c/0x13b0 [ 72.176147][ T6664] populate_vma_page_range+0x260/0x358 [ 72.176155][ T6664] __mm_populate+0x204/0x328 [ 72.176164][ T6664] vm_mmap_pgoff+0x358/0x46c [ 72.176172][ T6664] ksys_mmap_pgoff+0xd0/0x5b4 [ 72.176180][ T6664] __arm64_sys_mmap+0x110/0x12c [ 72.176190][ T6664] invoke_syscall+0x98/0x244 [ 72.176201][ T6664] el0_svc_common+0xec/0x23c [ 72.176211][ T6664] do_el0_svc+0x4c/0x5c [ 72.176221][ T6664] el0_svc+0x60/0x1d8 [ 72.176229][ T6664] el0t_64_sync_handler+0x44/0x104 [ 72.176237][ T6664] el0t_64_sync+0x198/0x19c [ 72.659077][ T4715] Bluetooth: hci2: ACL packet too small [ 72.699820][ T6688] Cannot find set identified by id 0 to match [ 72.776639][ T6692] Illegal XDP return value 4294967274 on prog (id 47) dev syz_tun, expect packet loss! [ 72.824518][ T6699] kernel profiling enabled (shift: 0) [ 72.937583][ T6701] process 'syz.0.525' launched './file1' with NULL argv: empty string added [ 73.003849][ T6707] binder: 6706:6707 tried to acquire reference to desc 0, got 1 instead [ 73.004853][ T6707] binder: 6706:6707 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.004867][ T6707] binder: 6707 RLIMIT_NICE not set [ 73.004878][ T6707] binder: 6707 RLIMIT_NICE not set [ 73.005202][ T6707] binder: 6707 RLIMIT_NICE not set [ 73.005234][ T6707] binder: 6706:6707 got transaction with invalid data ptr [ 73.005257][ T6707] binder: 6706:6707 transaction reply to 6706:6707 failed 60/29201/-14, code 4294967295 size 0-24 line 3512 [ 73.005278][ T6707] binder: send failed reply for transaction 59 to 6706:6707 [ 73.014208][ T4813] binder: undelivered TRANSACTION_COMPLETE [ 73.014222][ T4813] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.014768][ T4813] binder: undelivered TRANSACTION_ERROR: 29190 [ 73.289624][ T6725] evm: overlay not supported [ 73.359652][ T6735] binder: 6734:6735 tried to acquire reference to desc 0, got 1 instead [ 73.361346][ T6735] binder: 6734:6735 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.361698][ T6735] binder: 6734:6735 transaction reply to 6734:6735 failed 66/29201/-14, code 4294967295 size 0-24 line 3512 [ 73.361724][ T6735] binder: send failed reply for transaction 65 to 6734:6735 [ 74.039945][ T4715] Bluetooth: hci0: command 0x0406 tx timeout [ 74.040720][ T4714] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 74.162658][ T6765] loop4: detected capacity change from 0 to 128 [ 74.417285][ T6782] FAULT_INJECTION: forcing a failure. [ 74.417285][ T6782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.417306][ T6782] CPU: 1 UID: 0 PID: 6782 Comm: syz.3.557 Tainted: G L syzkaller #0 PREEMPT [ 74.417320][ T6782] Tainted: [L]=SOFTLOCKUP [ 74.417325][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.417338][ T6782] Call trace: [ 74.417342][ T6782] show_stack+0x2c/0x3c (C) [ 74.417363][ T6782] __dump_stack+0x30/0x40 [ 74.417376][ T6782] dump_stack_lvl+0xd8/0x12c [ 74.417388][ T6782] dump_stack+0x1c/0x28 [ 74.417399][ T6782] should_fail_ex+0x418/0x58c [ 74.417408][ T6782] should_fail+0x14/0x24 [ 74.417416][ T6782] should_fail_usercopy+0x20/0x30 [ 74.417425][ T6782] _inline_copy_from_user+0x3c/0x174 [ 74.417435][ T6782] copy_from_sockptr_offset+0x7c/0xc0 [ 74.417443][ T6782] do_ipt_set_ctl+0x874/0xc38 [ 74.417451][ T6782] nf_setsockopt+0xa0/0xe4 [ 74.417461][ T6782] ip_setsockopt+0x118/0x128 [ 74.417470][ T6782] udp_setsockopt+0xa8/0xc0 [ 74.417482][ T6782] sock_common_setsockopt+0xb0/0xcc [ 74.417494][ T6782] do_sock_setsockopt+0x1f0/0x330 [ 74.417505][ T6782] __sys_setsockopt+0x104/0x170 [ 74.417517][ T6782] __arm64_sys_setsockopt+0xc8/0xe4 [ 74.417529][ T6782] invoke_syscall+0x98/0x244 [ 74.417542][ T6782] el0_svc_common+0xec/0x23c [ 74.417554][ T6782] do_el0_svc+0x4c/0x5c [ 74.417566][ T6782] el0_svc+0x60/0x1d8 [ 74.417575][ T6782] el0t_64_sync_handler+0x44/0x104 [ 74.417583][ T6782] el0t_64_sync+0x198/0x19c [ 74.481734][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 74.481754][ T6787] bond_slave_0: entered promiscuous mode [ 74.481763][ T6787] bond_slave_0: entered allmulticast mode [ 74.680406][ T6812] x_tables: unsorted entry at hook 1 [ 74.751037][ T6823] loop4: detected capacity change from 0 to 8 [ 74.754578][ T6823] Page size > filesystem block size (512). This is currently not supported! [ 75.241564][ T6846] FAULT_INJECTION: forcing a failure. [ 75.241564][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 75.241584][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.0.569 Tainted: G L syzkaller #0 PREEMPT [ 75.241599][ T6846] Tainted: [L]=SOFTLOCKUP [ 75.241603][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.241617][ T6846] Call trace: [ 75.241620][ T6846] show_stack+0x2c/0x3c (C) [ 75.241638][ T6846] __dump_stack+0x30/0x40 [ 75.241651][ T6846] dump_stack_lvl+0xd8/0x12c [ 75.241663][ T6846] dump_stack+0x1c/0x28 [ 75.241674][ T6846] should_fail_ex+0x418/0x58c [ 75.241683][ T6846] should_failslab+0xc4/0x120 [ 75.241693][ T6846] __kvmalloc_node_noprof+0x160/0x7fc [ 75.241703][ T6846] xt_alloc_entry_offsets+0x54/0x64 [ 75.241716][ T6846] translate_table+0x14c/0x17f8 [ 75.241725][ T6846] do_ipt_set_ctl+0x908/0xc38 [ 75.241733][ T6846] nf_setsockopt+0xa0/0xe4 [ 75.241743][ T6846] ip_setsockopt+0x118/0x128 [ 75.241751][ T6846] udp_setsockopt+0xa8/0xc0 [ 75.241763][ T6846] sock_common_setsockopt+0xb0/0xcc [ 75.241775][ T6846] do_sock_setsockopt+0x1f0/0x330 [ 75.241787][ T6846] __sys_setsockopt+0x104/0x170 [ 75.241799][ T6846] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.241811][ T6846] invoke_syscall+0x98/0x244 [ 75.241823][ T6846] el0_svc_common+0xec/0x23c [ 75.241836][ T6846] do_el0_svc+0x4c/0x5c [ 75.241847][ T6846] el0_svc+0x60/0x1d8 [ 75.241857][ T6846] el0t_64_sync_handler+0x44/0x104 [ 75.241865][ T6846] el0t_64_sync+0x198/0x19c [ 75.740337][ T6870] x_tables: unsorted entry at hook 1 [ 75.796344][ C0] net_ratelimit: 58 callbacks suppressed [ 75.844292][ T6886] FAULT_INJECTION: forcing a failure. [ 75.844292][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.844313][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.5.582 Tainted: G L syzkaller #0 PREEMPT [ 75.844327][ T6886] Tainted: [L]=SOFTLOCKUP [ 75.844331][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.844345][ T6886] Call trace: [ 75.844348][ T6886] show_stack+0x2c/0x3c (C) [ 75.844369][ T6886] __dump_stack+0x30/0x40 [ 75.844382][ T6886] dump_stack_lvl+0xd8/0x12c [ 75.844393][ T6886] dump_stack+0x1c/0x28 [ 75.844405][ T6886] should_fail_ex+0x418/0x58c [ 75.844414][ T6886] should_fail+0x14/0x24 [ 75.844422][ T6886] should_fail_usercopy+0x20/0x30 [ 75.844431][ T6886] _inline_copy_from_user+0x3c/0x174 [ 75.844440][ T6886] copy_from_sockptr_offset+0x7c/0xc0 [ 75.844449][ T6886] do_ipt_set_ctl+0x874/0xc38 [ 75.844458][ T6886] nf_setsockopt+0xa0/0xe4 [ 75.844467][ T6886] ip_setsockopt+0x118/0x128 [ 75.844476][ T6886] udp_setsockopt+0xa8/0xc0 [ 75.844488][ T6886] sock_common_setsockopt+0xb0/0xcc [ 75.844500][ T6886] do_sock_setsockopt+0x1f0/0x330 [ 75.844512][ T6886] __sys_setsockopt+0x104/0x170 [ 75.844523][ T6886] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.844535][ T6886] invoke_syscall+0x98/0x244 [ 75.844548][ T6886] el0_svc_common+0xec/0x23c [ 75.844560][ T6886] do_el0_svc+0x4c/0x5c [ 75.844572][ T6886] el0_svc+0x60/0x1d8 [ 75.844581][ T6886] el0t_64_sync_handler+0x44/0x104 [ 75.844589][ T6886] el0t_64_sync+0x198/0x19c [ 75.915002][ T6897] x_tables: unsorted entry at hook 1 [ 75.931863][ T6899] loop5: detected capacity change from 0 to 512 [ 75.935714][ T6899] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.960591][ T6899] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.590: Allocating blocks 41-42 which overlap fs metadata [ 75.960610][ T6899] loop5: lost filesystem error report for type 5 error -117 [ 75.961662][ T6899] EXT4-fs (loop5): Remounting filesystem read-only [ 75.961755][ T6899] Quota error (device loop5): write_blk: dquota write failed [ 75.961764][ T6899] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 75.961822][ T6899] Quota error (device loop5): write_blk: dquota write failed [ 75.961862][ T6899] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 75.961920][ T6899] EXT4-fs (loop5): 1 truncate cleaned up [ 75.962371][ T6899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.650669][ T11] binder_debug: 6 callbacks suppressed [ 76.650680][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.037249][ T5742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.084651][ T6927] x_tables: unsorted entry at hook 1 [ 77.084673][ T6927] FAULT_INJECTION: forcing a failure. [ 77.084673][ T6927] name fail_futex, interval 1, probability 0, space 0, times 0 [ 77.084692][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.5.600 Tainted: G L syzkaller #0 PREEMPT [ 77.084706][ T6927] Tainted: [L]=SOFTLOCKUP [ 77.084710][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.084724][ T6927] Call trace: [ 77.084727][ T6927] show_stack+0x2c/0x3c (C) [ 77.084749][ T6927] __dump_stack+0x30/0x40 [ 77.084762][ T6927] dump_stack_lvl+0xd8/0x12c [ 77.084774][ T6927] dump_stack+0x1c/0x28 [ 77.084786][ T6927] should_fail_ex+0x418/0x58c [ 77.084795][ T6927] should_fail+0x14/0x24 [ 77.084802][ T6927] get_futex_key+0x1ec/0x12b0 [ 77.084814][ T6927] futex_wake+0x10c/0x594 [ 77.084825][ T6927] do_futex+0x2c4/0x378 [ 77.084836][ T6927] __arm64_sys_futex+0x2e4/0x418 [ 77.084847][ T6927] invoke_syscall+0x98/0x244 [ 77.084859][ T6927] el0_svc_common+0xec/0x23c [ 77.084871][ T6927] do_el0_svc+0x4c/0x5c [ 77.084882][ T6927] el0_svc+0x60/0x1d8 [ 77.084892][ T6927] el0t_64_sync_handler+0x44/0x104 [ 77.084900][ T6927] el0t_64_sync+0x198/0x19c [ 77.128139][ T6931] loop3: detected capacity change from 0 to 1024 [ 77.129751][ T6931] EXT4-fs (loop3): filesystem is read-only [ 77.135722][ T6931] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c019, mo2=0002] [ 77.135761][ T6931] System zones: 0-1, 3-36 [ 77.144911][ T6931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.185333][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.254158][ T6940] binder_user_error: 10 callbacks suppressed [ 77.254166][ T6940] binder: 6939:6940 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.254179][ T6940] binder: 6940 RLIMIT_NICE not set [ 77.304734][ T6946] binder: 6939:6946 got reply transaction with no transaction stack [ 77.304749][ T6946] binder: 6939:6946 transaction reply to 0:0 failed 72/29201/-71, code 4294967295 size 0-24 line 3156 [ 77.338921][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 77.348132][ T6948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.379420][ T6951] FAULT_INJECTION: forcing a failure. [ 77.379420][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 77.379435][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.0.609 Tainted: G L syzkaller #0 PREEMPT [ 77.379447][ T6951] Tainted: [L]=SOFTLOCKUP [ 77.379451][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.379464][ T6951] Call trace: [ 77.379468][ T6951] show_stack+0x2c/0x3c (C) [ 77.379485][ T6951] __dump_stack+0x30/0x40 [ 77.379498][ T6951] dump_stack_lvl+0xd8/0x12c [ 77.379510][ T6951] dump_stack+0x1c/0x28 [ 77.379521][ T6951] should_fail_ex+0x418/0x58c [ 77.379531][ T6951] should_failslab+0xc4/0x120 [ 77.379539][ T6951] __kmalloc_cache_noprof+0x94/0x5fc [ 77.379550][ T6951] alloc_netdev_mqs+0x9dc/0xf34 [ 77.379559][ T6951] register_vlan_device+0x1d4/0x3f8 [ 77.379570][ T6951] vlan_ioctl_handler+0x2fc/0x66c [ 77.379580][ T6951] sock_ioctl+0x5a8/0x7ec [ 77.379593][ T6951] __arm64_sys_ioctl+0x154/0x1cc [ 77.379601][ T6951] invoke_syscall+0x98/0x244 [ 77.379615][ T6951] el0_svc_common+0xec/0x23c [ 77.379627][ T6951] do_el0_svc+0x4c/0x5c [ 77.379638][ T6951] el0_svc+0x60/0x1d8 [ 77.379647][ T6951] el0t_64_sync_handler+0x44/0x104 [ 77.379655][ T6951] el0t_64_sync+0x198/0x19c [ 77.801808][ T6963] x_tables: unsorted entry at hook 1 [ 77.801841][ T6963] FAULT_INJECTION: forcing a failure. [ 77.801841][ T6963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 77.801861][ T6963] CPU: 0 UID: 0 PID: 6963 Comm: syz.4.614 Tainted: G L syzkaller #0 PREEMPT [ 77.801876][ T6963] Tainted: [L]=SOFTLOCKUP [ 77.801880][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.801894][ T6963] Call trace: [ 77.801898][ T6963] show_stack+0x2c/0x3c (C) [ 77.801919][ T6963] __dump_stack+0x30/0x40 [ 77.801932][ T6963] dump_stack_lvl+0xd8/0x12c [ 77.801944][ T6963] dump_stack+0x1c/0x28 [ 77.801960][ T6963] should_fail_ex+0x418/0x58c [ 77.801969][ T6963] should_fail+0x14/0x24 [ 77.801977][ T6963] get_futex_key+0x1ec/0x12b0 [ 77.801988][ T6963] futex_wake+0x10c/0x594 [ 77.802002][ T6963] do_futex+0x2c4/0x378 [ 77.802012][ T6963] __arm64_sys_futex+0x2e4/0x418 [ 77.802023][ T6963] invoke_syscall+0x98/0x244 [ 77.802036][ T6963] el0_svc_common+0xec/0x23c [ 77.802048][ T6963] do_el0_svc+0x4c/0x5c [ 77.802059][ T6963] el0_svc+0x60/0x1d8 [ 77.802068][ T6963] el0t_64_sync_handler+0x44/0x104 [ 77.802076][ T6963] el0t_64_sync+0x198/0x19c [ 77.820115][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.615'. [ 77.820135][ T6965] bond_slave_0: entered promiscuous mode [ 77.820145][ T6965] bond_slave_0: entered allmulticast mode [ 78.095265][ T4797] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.124456][ T6972] FAULT_INJECTION: forcing a failure. [ 78.124456][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 78.124475][ T6972] CPU: 0 UID: 0 PID: 6972 Comm: syz.3.618 Tainted: G L syzkaller #0 PREEMPT [ 78.124487][ T6972] Tainted: [L]=SOFTLOCKUP [ 78.124491][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.124503][ T6972] Call trace: [ 78.124507][ T6972] show_stack+0x2c/0x3c (C) [ 78.124525][ T6972] __dump_stack+0x30/0x40 [ 78.124538][ T6972] dump_stack_lvl+0xd8/0x12c [ 78.124550][ T6972] dump_stack+0x1c/0x28 [ 78.124561][ T6972] should_fail_ex+0x418/0x58c [ 78.124570][ T6972] should_failslab+0xc4/0x120 [ 78.124579][ T6972] __kvmalloc_node_noprof+0x160/0x7fc [ 78.124590][ T6972] p9_fcall_init+0x140/0x3e0 [ 78.124601][ T6972] p9_client_prepare_req+0x28c/0x9e8 [ 78.124610][ T6972] p9_client_rpc+0x164/0x9d0 [ 78.124619][ T6972] p9_client_create+0x434/0xa40 [ 78.124628][ T6972] v9fs_session_init+0x58/0xa7c [ 78.124637][ T6972] v9fs_get_tree+0xc4/0x8e8 [ 78.124648][ T6972] vfs_get_tree+0x90/0x28c [ 78.124662][ T6972] fc_mount+0x24/0xac [ 78.124673][ T6972] do_new_mount+0x2a4/0x538 [ 78.124684][ T6972] path_mount+0x5f0/0xa88 [ 78.124695][ T6972] do_mount+0xe8/0x148 [ 78.124706][ T6972] __arm64_sys_mount+0x33c/0x388 [ 78.124718][ T6972] invoke_syscall+0x98/0x244 [ 78.124730][ T6972] el0_svc_common+0xec/0x23c [ 78.124742][ T6972] do_el0_svc+0x4c/0x5c [ 78.124753][ T6972] el0_svc+0x60/0x1d8 [ 78.124762][ T6972] el0t_64_sync_handler+0x44/0x104 [ 78.124770][ T6972] el0t_64_sync+0x198/0x19c [ 78.183989][ T6976] FAULT_INJECTION: forcing a failure. [ 78.183989][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 78.184010][ T6976] CPU: 0 UID: 0 PID: 6976 Comm: syz.3.620 Tainted: G L syzkaller #0 PREEMPT [ 78.184023][ T6976] Tainted: [L]=SOFTLOCKUP [ 78.184027][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.184039][ T6976] Call trace: [ 78.184043][ T6976] show_stack+0x2c/0x3c (C) [ 78.184062][ T6976] __dump_stack+0x30/0x40 [ 78.184074][ T6976] dump_stack_lvl+0xd8/0x12c [ 78.184086][ T6976] dump_stack+0x1c/0x28 [ 78.184097][ T6976] should_fail_ex+0x418/0x58c [ 78.184106][ T6976] should_failslab+0xc4/0x120 [ 78.184115][ T6976] __kmalloc_cache_noprof+0x94/0x5fc [ 78.184124][ T6976] fanotify_alloc_overflow_event+0x58/0x148 [ 78.184137][ T6976] __arm64_sys_fanotify_init+0x474/0x89c [ 78.184149][ T6976] invoke_syscall+0x98/0x244 [ 78.184161][ T6976] el0_svc_common+0xec/0x23c [ 78.184173][ T6976] do_el0_svc+0x4c/0x5c [ 78.184184][ T6976] el0_svc+0x60/0x1d8 [ 78.184193][ T6976] el0t_64_sync_handler+0x44/0x104 [ 78.184201][ T6976] el0t_64_sync+0x198/0x19c [ 78.241261][ T6984] loop3: detected capacity change from 0 to 512 [ 78.241673][ T6984] EXT4-fs: Ignoring removed nobh option [ 78.264457][ T6984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.281049][ T6984] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.624: corrupted inode contents [ 78.282436][ T6984] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #2: comm syz.3.624: mark_inode_dirty error [ 78.283867][ T6984] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.624: corrupted inode contents [ 78.300976][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.339988][ T6993] nvme_fabrics: unknown parameter or missing value 'transpNÊJåst¤eÁ>íF¥ËoRt=r' in ctrl creation request [ 78.341602][ T6993] netlink: 'syz.3.627': attribute type 4 has an invalid length. [ 78.355706][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.628'. [ 78.452670][ T7004] UDC core: g1: couldn't find an available UDC or it's busy [ 78.520018][ T7016] FAULT_INJECTION: forcing a failure. [ 78.520018][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 78.520036][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.5.634 Tainted: G L syzkaller #0 PREEMPT [ 78.520051][ T7016] Tainted: [L]=SOFTLOCKUP [ 78.520056][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.520070][ T7016] Call trace: [ 78.520073][ T7016] show_stack+0x2c/0x3c (C) [ 78.520093][ T7016] __dump_stack+0x30/0x40 [ 78.520106][ T7016] dump_stack_lvl+0xd8/0x12c [ 78.520117][ T7016] dump_stack+0x1c/0x28 [ 78.520129][ T7016] should_fail_ex+0x418/0x58c [ 78.520138][ T7016] should_failslab+0xc4/0x120 [ 78.520147][ T7016] __kmalloc_noprof+0x108/0x6c8 [ 78.520156][ T7016] sock_kmalloc+0xec/0x1a0 [ 78.520167][ T7016] ipv6_sock_ac_join+0x260/0x6d0 [ 78.520179][ T7016] do_ipv6_setsockopt+0x17a4/0x2ba8 [ 78.520190][ T7016] ipv6_setsockopt+0x68/0x16c [ 78.520200][ T7016] tcp_setsockopt+0xcc/0xe8 [ 78.520212][ T7016] sock_common_setsockopt+0xb0/0xcc [ 78.520223][ T7016] do_sock_setsockopt+0x1f0/0x330 [ 78.520235][ T7016] __sys_setsockopt+0x104/0x170 [ 78.520246][ T7016] __arm64_sys_setsockopt+0xc8/0xe4 [ 78.520258][ T7016] invoke_syscall+0x98/0x244 [ 78.520270][ T7016] el0_svc_common+0xec/0x23c [ 78.520285][ T7016] do_el0_svc+0x4c/0x5c [ 78.520297][ T7016] el0_svc+0x60/0x1d8 [ 78.520306][ T7016] el0t_64_sync_handler+0x44/0x104 [ 78.520314][ T7016] el0t_64_sync+0x198/0x19c [ 78.799919][ T7025] netlink: 6428 bytes leftover after parsing attributes in process `syz.5.635'. [ 78.799932][ T7025] netlink: 10740 bytes leftover after parsing attributes in process `syz.5.635'. [ 78.817376][ T7029] netlink: 64 bytes leftover after parsing attributes in process `syz.4.637'. [ 78.903856][ T7038] loop5: detected capacity change from 0 to 8192 [ 78.904275][ T7038] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 79.051507][ T7052] FAULT_INJECTION: forcing a failure. [ 79.051507][ T7052] name fail_futex, interval 1, probability 0, space 0, times 0 [ 79.051524][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.4.644 Tainted: G L syzkaller #0 PREEMPT [ 79.051537][ T7052] Tainted: [L]=SOFTLOCKUP [ 79.051541][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.051554][ T7052] Call trace: [ 79.051557][ T7052] show_stack+0x2c/0x3c (C) [ 79.051577][ T7052] __dump_stack+0x30/0x40 [ 79.051591][ T7052] dump_stack_lvl+0xd8/0x12c [ 79.051603][ T7052] dump_stack+0x1c/0x28 [ 79.051618][ T7052] should_fail_ex+0x418/0x58c [ 79.051627][ T7052] should_fail+0x14/0x24 [ 79.051635][ T7052] get_futex_key+0x1ec/0x12b0 [ 79.051650][ T7052] futex_wake+0x10c/0x594 [ 79.051661][ T7052] do_futex+0x2c4/0x378 [ 79.051672][ T7052] __arm64_sys_futex+0x2e4/0x418 [ 79.051683][ T7052] invoke_syscall+0x98/0x244 [ 79.051698][ T7052] el0_svc_common+0xec/0x23c [ 79.051710][ T7052] do_el0_svc+0x4c/0x5c [ 79.051721][ T7052] el0_svc+0x60/0x1d8 [ 79.051730][ T7052] el0t_64_sync_handler+0x44/0x104 [ 79.051739][ T7052] el0t_64_sync+0x198/0x19c [ 79.120773][ T7058] binder: 7057:7058 tried to acquire reference to desc 0, got 1 instead [ 79.121183][ T7058] binder: 7057:7058 got reply transaction with no transaction stack [ 79.121198][ T7058] binder: 7057:7058 transaction reply to 0:0 failed 78/29201/-71, code 4294967295 size 0-24 line 3156 [ 79.126701][ T4891] binder: release 7057:7058 transaction 77 out, still active [ 79.126717][ T4891] binder: undelivered TRANSACTION_COMPLETE [ 79.126834][ T4891] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.126852][ T4891] binder: send failed reply for transaction 77, target dead [ 79.153844][ T7061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.254743][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'. [ 79.268138][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 79.295664][ T7068] bond_slave_0: left promiscuous mode [ 79.345923][ T7068] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 79.408566][ T7079] loop0: detected capacity change from 0 to 512 [ 79.425828][ T7079] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.433940][ T7082] FAULT_INJECTION: forcing a failure. [ 79.433940][ T7082] name fail_futex, interval 1, probability 0, space 0, times 0 [ 79.433964][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.4.657 Tainted: G L syzkaller #0 PREEMPT [ 79.433978][ T7082] Tainted: [L]=SOFTLOCKUP [ 79.433983][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.433999][ T7082] Call trace: [ 79.434002][ T7082] show_stack+0x2c/0x3c (C) [ 79.434024][ T7082] __dump_stack+0x30/0x40 [ 79.434037][ T7082] dump_stack_lvl+0xd8/0x12c [ 79.434049][ T7082] dump_stack+0x1c/0x28 [ 79.434061][ T7082] should_fail_ex+0x418/0x58c [ 79.434070][ T7082] should_fail+0x14/0x24 [ 79.434078][ T7082] get_futex_key+0x1ec/0x12b0 [ 79.434091][ T7082] futex_wake+0x10c/0x594 [ 79.434102][ T7082] do_futex+0x2c4/0x378 [ 79.434113][ T7082] __arm64_sys_futex+0x2e4/0x418 [ 79.434124][ T7082] invoke_syscall+0x98/0x244 [ 79.434137][ T7082] el0_svc_common+0xec/0x23c [ 79.434148][ T7082] do_el0_svc+0x4c/0x5c [ 79.434160][ T7082] el0_svc+0x60/0x1d8 [ 79.434169][ T7082] el0t_64_sync_handler+0x44/0x104 [ 79.434177][ T7082] el0t_64_sync+0x198/0x19c [ 79.451035][ T7079] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.655: Allocating blocks 41-42 which overlap fs metadata [ 79.451052][ T7079] loop0: lost filesystem error report for type 5 error -117 [ 79.451846][ T7079] EXT4-fs (loop0): Remounting filesystem read-only [ 79.451909][ T7079] Quota error (device loop0): write_blk: dquota write failed [ 79.451917][ T7079] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 79.451969][ T7079] Quota error (device loop0): write_blk: dquota write failed [ 79.452007][ T7079] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 79.452061][ T7079] EXT4-fs (loop0): 1 truncate cleaned up [ 79.453494][ T7079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.750829][ T7097] loop4: detected capacity change from 0 to 512 [ 79.751654][ T7097] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.766548][ T7097] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.892268][ T4707] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 80.119876][ T7134] x_tables: unsorted entry at hook 1 [ 80.234741][ T7149] loop4: detected capacity change from 0 to 128 [ 80.413245][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.511381][ T7163] x_tables: unsorted entry at hook 1 [ 80.544594][ T4714] Bluetooth: hci1: unexpected event for opcode 0x202d [ 80.562177][ T7173] loop0: detected capacity change from 0 to 1024 [ 80.564360][ T7173] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 80.564400][ T7173] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.600303][ T7173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.615034][ T7173] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.698: corrupted in-inode xattr: bad e_name length [ 80.616510][ T7173] EXT4-fs (loop0): Remounting filesystem read-only [ 80.630942][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.652785][ T7180] loop4: detected capacity change from 0 to 512 [ 80.653663][ T7180] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.662866][ T7180] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.701: Allocating blocks 41-42 which overlap fs metadata [ 80.662883][ T7180] loop4: lost filesystem error report for type 5 error -117 [ 80.663108][ T7180] EXT4-fs (loop4): Remounting filesystem read-only [ 80.663146][ T7180] Quota error (device loop4): write_blk: dquota write failed [ 80.663154][ T7180] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 80.663265][ T7180] EXT4-fs (loop4): 1 truncate cleaned up [ 80.688901][ T7180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.016402][ T4397] net_ratelimit: 91 callbacks suppressed [ 81.139507][ T7199] x_tables: unsorted entry at hook 1 [ 81.161193][ T7196] loop2: detected capacity change from 0 to 1024 [ 81.581424][ T7196] EXT4-fs (loop2): filesystem is read-only [ 81.716530][ T7196] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c019, mo2=0002] [ 81.716569][ T7196] System zones: 0-1, 3-36 [ 81.720546][ T7196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.803766][ T7212] loop5: detected capacity change from 0 to 128 [ 81.819726][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.935452][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.435559][ T7239] x_tables: unsorted entry at hook 1 [ 82.785504][ T7268] x_tables: unsorted entry at hook 1 [ 82.785648][ T7268] FAULT_INJECTION: forcing a failure. [ 82.785648][ T7268] name fail_futex, interval 1, probability 0, space 0, times 0 [ 82.785668][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.2.735 Tainted: G L syzkaller #0 PREEMPT [ 82.785680][ T7268] Tainted: [L]=SOFTLOCKUP [ 82.785684][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 82.785697][ T7268] Call trace: [ 82.785700][ T7268] show_stack+0x2c/0x3c (C) [ 82.785718][ T7268] __dump_stack+0x30/0x40 [ 82.785730][ T7268] dump_stack_lvl+0xd8/0x12c [ 82.785742][ T7268] dump_stack+0x1c/0x28 [ 82.785753][ T7268] should_fail_ex+0x418/0x58c [ 82.785762][ T7268] should_fail+0x14/0x24 [ 82.785769][ T7268] get_futex_key+0x1ec/0x12b0 [ 82.785781][ T7268] futex_wait_setup+0x58/0x674 [ 82.785792][ T7268] __futex_wait+0x108/0x25c [ 82.785804][ T7268] futex_wait+0x108/0x2c0 [ 82.785815][ T7268] do_futex+0x320/0x378 [ 82.785825][ T7268] __arm64_sys_futex+0x2e4/0x418 [ 82.785837][ T7268] invoke_syscall+0x98/0x244 [ 82.785849][ T7268] el0_svc_common+0xec/0x23c [ 82.785861][ T7268] do_el0_svc+0x4c/0x5c [ 82.785872][ T7268] el0_svc+0x60/0x1d8 [ 82.785881][ T7268] el0t_64_sync_handler+0x44/0x104 [ 82.785889][ T7268] el0t_64_sync+0x198/0x19c [ 83.059164][ T4714] Bluetooth: Wrong link type (-71) [ 83.565913][ T7298] x_tables: unsorted entry at hook 1 [ 83.565933][ T7298] FAULT_INJECTION: forcing a failure. [ 83.565933][ T7298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 83.565947][ T7298] CPU: 1 UID: 0 PID: 7298 Comm: syz.4.748 Tainted: G L syzkaller #0 PREEMPT [ 83.565965][ T7298] Tainted: [L]=SOFTLOCKUP [ 83.565969][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 83.565982][ T7298] Call trace: [ 83.565986][ T7298] show_stack+0x2c/0x3c (C) [ 83.566006][ T7298] __dump_stack+0x30/0x40 [ 83.566020][ T7298] dump_stack_lvl+0xd8/0x12c [ 83.566032][ T7298] dump_stack+0x1c/0x28 [ 83.566044][ T7298] should_fail_ex+0x418/0x58c [ 83.566053][ T7298] should_fail+0x14/0x24 [ 83.566060][ T7298] get_futex_key+0x1ec/0x12b0 [ 83.566074][ T7298] futex_wake+0x10c/0x594 [ 83.566085][ T7298] do_futex+0x2c4/0x378 [ 83.566096][ T7298] __arm64_sys_futex+0x2e4/0x418 [ 83.566107][ T7298] invoke_syscall+0x98/0x244 [ 83.566120][ T7298] el0_svc_common+0xec/0x23c [ 83.566132][ T7298] do_el0_svc+0x4c/0x5c [ 83.566143][ T7298] el0_svc+0x60/0x1d8 [ 83.566152][ T7298] el0t_64_sync_handler+0x44/0x104 [ 83.566160][ T7298] el0t_64_sync+0x198/0x19c [ 83.569917][ T7296] rxe_eth0 speed is unknown, defaulting to 1000 ** 2170 printk messages dropped ** ** 138 printk messages dropped ** ** 103 printk messages dropped ** ** 62 printk messages dropped ** [ 84.424437][ T7335] binder: 7334:7335 ioctl c018620c 200000c0 returned -1 [ 84.429091][ T4715] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 84.477048][ T7335] loop4: detected capacity change from 0 to 512 ** 1894 printk messages dropped ** [ 84.527552][ T7335] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 84.527837][ T7335] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 84.527849][ T7335] loop4: lost filesystem error report for type 5 error -12 [ 84.536331][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 84.536342][ C0] EXT4-fs (loop4): initial error at time 84: ext4_process_orphan:346 [ 84.536357][ C0] EXT4-fs (loop4): last error at time 84: ext4_process_orphan:346 [ 84.548570][ T7335] EXT4-fs (loop4): 1 truncate cleaned up [ 84.549495][ T7335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. ** 877 printk messages dropped ** ** 125 printk messages dropped ** ** 94 printk messages dropped ** ** 101 printk messages dropped ** ** 97 printk messages dropped ** ** 6666 printk messages dropped ** ** 1 printk messages dropped ** [ 85.067210][ T4715] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 85.067222][ T4715] CPU: 1 UID: 0 PID: 4715 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT [ 85.067236][ T4715] Tainted: [L]=SOFTLOCKUP [ 85.067240][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 85.067246][ T4715] Workqueue: hci0 hci_rx_work [ 85.067268][ T4715] Call trace: [ 85.067271][ T4715] show_stack+0x2c/0x3c (C) [ 85.067288][ T4715] __dump_stack+0x30/0x40 [ 85.067300][ T4715] dump_stack_lvl+0xd8/0x12c [ 85.067312][ T4715] dump_stack+0x1c/0x28 [ 85.067324][ T4715] sysfs_warn_dup+0x9c/0xb8 [ 85.067333][ T4715] sysfs_create_dir_ns+0x190/0x1f4 [ 85.067341][ T4715] kobject_add_internal+0x290/0x6f0 [ 85.067352][ T4715] kobject_add_varg+0x9c/0xe8 [ 85.067361][ T4715] kobject_add+0x110/0x1c8 [ 85.067370][ T4715] device_add+0x394/0x9e0 [ 85.067381][ T4715] hci_conn_add_sysfs+0xbc/0x1e8 [ 85.067392][ T4715] hci_conn_complete_evt+0x6ec/0xe04 [ 85.067403][ T4715] hci_event_packet+0x4e0/0x9c8 [ 85.067414][ T4715] hci_rx_work+0x2f4/0xd78 [ 85.067421][ T4715] process_scheduled_works+0x91c/0x1250 [ 85.067433][ T4715] worker_thread+0x798/0xbd0 [ 85.067443][ T4715] kthread+0x304/0x3d4 [ 85.067452][ T4715] ret_from_fork+0x10/0x20 [ 85.067569][ T4715] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.067640][ T4715] Bluetooth: hci0: failed to register connection device ** 1677 printk messages dropped ** [ 85.338657][ T7365] x_tables: unsorted entry at hook 1 [ 85.338678][ T7365] FAULT_INJECTION: forcing a failure. [ 85.338678][ T7365] name fail_futex, interval 1, probability 0, space 0, times 0 [ 85.338694][ T7365] CPU: 0 UID: 0 PID: 7365 Comm: syz.2.762 Tainted: G L syzkaller #0 PREEMPT [ 85.338707][ T7365] Tainted: [L]=SOFTLOCKUP [ 85.338711][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 85.338725][ T7365] Call trace: [ 85.338728][ T7365] show_stack+0x2c/0x3c (C) [ 85.338751][ T7365] __dump_stack+0x30/0x40 [ 85.338764][ T7365] dump_stack_lvl+0xd8/0x12c [ 85.338776][ T7365] dump_stack+0x1c/0x28 [ 85.338788][ T7365] should_fail_ex+0x418/0x58c [ 85.338798][ T7365] should_fail+0x14/0x24 [ 85.338806][ T7365] get_futex_key+0x1ec/0x12b0 [ 85.338819][ T7365] futex_wake+0x10c/0x594 [ 85.338831][ T7365] do_futex+0x2c4/0x378 [ 85.338842][ T7365] __arm64_sys_futex+0x2e4/0x418 [ 85.338854][ T7365] invoke_syscall+0x98/0x244 [ 85.338871][ T7365] el0_svc_common+0xec/0x23c [ 85.338883][ T7365] do_el0_svc+0x4c/0x5c [ 85.338896][ T7365] el0_svc+0x60/0x1d8 [ 85.338906][ T7365] el0t_64_sync_handler+0x44/0x104 [ 85.338916][ T7365] el0t_64_sync+0x198/0x19c ** 2184 printk messages dropped ** ** 1816 printk messages dropped ** ** 173 printk messages dropped ** ** 126 printk messages dropped ** ** 588 printk messages dropped ** ** 4990 printk messages dropped ** [ 85.709121][ T4715] Bluetooth: hci0: command 0x0406 tx timeout [ 85.734862][ T4714] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 85.854771][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. ** 3004 printk messages dropped ** ** 2279 printk messages dropped ** [ 86.196323][ C0] net_ratelimit: 94 callbacks suppressed ** 2892 printk messages dropped ** ** 2904 printk messages dropped ** ** 116 printk messages dropped ** ** 634 printk messages dropped ** [ 87.589490][ T7451] loop0: detected capacity change from 0 to 128 ** 884 printk messages dropped ** [ 87.786568][ T4715] Bluetooth: hci0: command 0x0406 tx timeout [ 87.790130][ T4714] Bluetooth: hci0: Opcode 0x0c1a failed: -110 ** 1968 printk messages dropped ** ** 1317 printk messages dropped ** ** 1 printk messages dropped ** ** 2622 printk messages dropped ** [ 87.958209][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. ** 2918 printk messages dropped ** ** 3 printk messages dropped ** [ 88.803414][ T4714] Bluetooth: hci2: unexpected event for opcode 0x202d ** 2889 printk messages dropped ** ** 1631 printk messages dropped ** ** 130 printk messages dropped ** ** 127 printk messages dropped ** ** 126 printk messages dropped ** ** 119 printk messages dropped ** ** 664 printk messages dropped ** ** 154 printk messages dropped ** ** 117 printk messages dropped ** ** 133 printk messages dropped ** ** 113 printk messages dropped ** ** 131 printk messages dropped ** ** 97 printk messages dropped ** ** 134 printk messages dropped ** ** 120 printk messages dropped ** ** 141 printk messages dropped ** ** 147 printk messages dropped ** ** 139 printk messages dropped ** ** 121 printk messages dropped ** ** 133 printk messages dropped ** ** 108 printk messages dropped ** ** 149 printk messages dropped ** ** 118 printk messages dropped ** ** 136 printk messages dropped ** ** 116 printk messages dropped ** ** 112 printk messages dropped ** ** 108 printk messages dropped ** ** 110 printk messages dropped ** ** 86 printk messages dropped ** ** 124 printk messages dropped ** ** 111 printk messages dropped ** ** 147 printk messages dropped ** ** 130 printk messages dropped ** ** 153 printk messages dropped ** ** 123 printk messages dropped ** ** 133 printk messages dropped ** ** 171 printk messages dropped ** ** 157 printk messages dropped ** ** 128 printk messages dropped ** ** 130 printk messages dropped ** ** 120 printk messages dropped ** ** 132 printk messages dropped ** ** 125 printk messages dropped ** ** 139 printk messages dropped ** ** 131 printk messages dropped ** ** 168 printk messages dropped ** ** 115 printk messages dropped ** ** 134 printk messages dropped ** ** 123 printk messages dropped ** ** 151 printk messages dropped ** ** 159 printk messages dropped ** ** 157 printk messages dropped ** ** 136 printk messages dropped ** ** 125 printk messages dropped ** ** 117 printk messages dropped ** ** 131 printk messages dropped ** ** 116 printk messages dropped ** ** 187 printk messages dropped ** ** 113 printk messages dropped ** ** 174 printk messages dropped ** ** 111 printk messages dropped ** ** 137 printk messages dropped ** ** 30 printk messages dropped ** ** 2847 printk messages dropped ** ** 429 printk messages dropped ** ** 116 printk messages dropped ** ** 108 printk messages dropped ** ** 122 printk messages dropped ** ** 105 printk messages dropped ** ** 127 printk messages dropped ** ** 65 printk messages dropped ** [ 89.873046][ T4714] Bluetooth: hci0: command 0x0406 tx timeout [ 89.942031][ T7500] x_tables: unsorted entry at hook 1 ** 2609 printk messages dropped ** ** 2590 printk messages dropped ** ** 2757 printk messages dropped ** ** 2229 printk messages dropped ** ** 2910 printk messages dropped ** ** 1356 printk messages dropped ** [ 90.865605][ T7527] loop3: detected capacity change from 0 to 512 [ 90.878154][ T7510] udc dummy_udc.0: failed to start g1: -4 [ 90.878164][ T7510] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 90.878511][ T7510] UDC core: g1: couldn't find an available UDC or it's busy [ 90.914001][ T7527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.940651][ T7527] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.809: Allocating blocks 64-65 which overlap fs metadata [ 90.995206][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.113332][ T7509] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.176294][ T7540] x_tables: unsorted entry at hook 1 [ 91.226347][ C0] net_ratelimit: 110 callbacks suppressed [ 91.274631][ T7545] binder: 7544:7545 got transaction to invalid handle, 1 [ 91.274646][ T7545] binder: 7544:7545 cannot find target node [ 91.274662][ T7545] binder: 7544:7545 transaction call to 0:0 failed 83/29201/-22, code 0 size 0-0 line 3253 [ 91.282878][ T7545] binder: 7544:7545 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.282896][ T7545] binder: 7545 RLIMIT_NICE not set [ 91.327892][ T7558] binder: 7544:7558 got reply transaction with no transaction stack [ 91.327907][ T7558] binder: 7544:7558 transaction reply to 0:0 failed 84/29201/-71, code 4294967295 size 0-24 line 3156 [ 91.393277][ T7568] FAULT_INJECTION: forcing a failure. [ 91.393277][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 91.393292][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.0.821 Tainted: G L syzkaller #0 PREEMPT [ 91.393304][ T7568] Tainted: [L]=SOFTLOCKUP [ 91.393307][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 91.393319][ T7568] Call trace: [ 91.393321][ T7568] show_stack+0x2c/0x3c (C) [ 91.393338][ T7568] __dump_stack+0x30/0x40 [ 91.393348][ T7568] dump_stack_lvl+0xd8/0x12c [ 91.393358][ T7568] dump_stack+0x1c/0x28 [ 91.393367][ T7568] should_fail_ex+0x418/0x58c [ 91.393375][ T7568] should_failslab+0xc4/0x120 [ 91.393383][ T7568] kmem_cache_alloc_noprof+0x94/0x5d4 [ 91.393392][ T7568] taskstats_exit+0x30c/0x89c [ 91.393402][ T7568] do_exit+0x50c/0x1a74 [ 91.393413][ T7568] do_group_exit+0x198/0x238 [ 91.393420][ T7568] get_signal+0xfb0/0x1094 [ 91.393427][ T7568] arch_do_signal_or_restart+0x288/0x444c [ 91.393437][ T7568] exit_to_user_mode_loop+0x70/0x17c [ 91.393447][ T7568] el0_svc+0x12c/0x1d8 [ 91.393455][ T7568] el0t_64_sync_handler+0x44/0x104 [ 91.393463][ T7568] el0t_64_sync+0x198/0x19c [ 91.873993][ T7591] x_tables: unsorted entry at hook 1 [ 91.945785][ T4715] Bluetooth: hci2: unexpected event for opcode 0x043d [ 91.946628][ T4715] Bluetooth: hci0: command 0x0406 tx timeout [ 91.951285][ T7603] overlayfs: failed to resolve './bus': -2 [ 92.050264][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.050362][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.107525][ T7621] x_tables: unsorted entry at hook 1 [ 92.960546][ T14] IPVS: starting estimator thread 0... [ 93.046423][ T7627] IPVS: using max 60 ests per chain, 144000 per kthread [ 93.096091][ T7637] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 93.162612][ T7647] FAULT_INJECTION: forcing a failure. [ 93.162612][ T7647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.162629][ T7647] CPU: 1 UID: 0 PID: 7647 Comm: syz.5.848 Tainted: G L syzkaller #0 PREEMPT [ 93.162641][ T7647] Tainted: [L]=SOFTLOCKUP [ 93.162645][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.162657][ T7647] Call trace: [ 93.162661][ T7647] show_stack+0x2c/0x3c (C) [ 93.162680][ T7647] __dump_stack+0x30/0x40 [ 93.162693][ T7647] dump_stack_lvl+0xd8/0x12c [ 93.162704][ T7647] dump_stack+0x1c/0x28 [ 93.162716][ T7647] should_fail_ex+0x418/0x58c [ 93.162725][ T7647] should_fail_alloc_page+0xec/0x10c [ 93.162735][ T7647] prepare_alloc_pages+0x194/0x484 [ 93.162744][ T7647] __alloc_frozen_pages_noprof+0x180/0x578 [ 93.162754][ T7647] alloc_pages_mpol+0x1fc/0x3d0 [ 93.162764][ T7647] alloc_frozen_pages_noprof+0xc4/0x10c [ 93.162774][ T7647] alloc_pages_noprof+0x30/0x148 [ 93.162784][ T7647] __pte_alloc+0x40/0x1c4 [ 93.162796][ T7647] do_pte_missing+0x2434/0x28bc [ 93.162805][ T7647] handle_mm_fault+0x14d0/0x2b58 [ 93.162817][ T7647] __get_user_pages+0x82c/0x13b0 [ 93.162827][ T7647] get_user_pages_remote+0x278/0x83c [ 93.162837][ T7647] get_arg_page+0x100/0x1f8 [ 93.162849][ T7647] copy_string_kernel+0x13c/0x1f4 [ 93.162862][ T7647] do_execveat_common+0x258/0x52c [ 93.162870][ T7647] __arm64_sys_execveat+0xe4/0x10c [ 93.162878][ T7647] invoke_syscall+0x98/0x244 [ 93.162891][ T7647] el0_svc_common+0xec/0x23c [ 93.162902][ T7647] do_el0_svc+0x4c/0x5c [ 93.162914][ T7647] el0_svc+0x60/0x1d8 [ 93.162923][ T7647] el0t_64_sync_handler+0x44/0x104 [ 93.162931][ T7647] el0t_64_sync+0x198/0x19c [ 93.198648][ T7651] syzkaller0: entered promiscuous mode [ 93.198659][ T7651] syzkaller0: entered allmulticast mode [ 93.688425][ T7687] batman_adv: batadv0: Adding interface: dummy0 [ 93.688432][ T7687] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.688447][ T7687] batman_adv: batadv0: Interface activated: dummy0 [ 93.773655][ T4714] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 93.807357][ T7709] Bluetooth: ISO socket layer initialized [ 94.205666][ T4714] Bluetooth: hci0: command 0x0406 tx timeout [ 94.832435][ T7738] loop5: detected capacity change from 0 to 512 [ 94.843985][ T7738] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.862176][ T7738] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.889: bad orphan inode 13 [ 94.862192][ T7738] loop5: lost filesystem error report for type 5 error -117 [ 94.862326][ T7738] ext4_test_bit(bit=12, block=18) = 1 [ 94.862334][ T7738] is_bad_inode(inode)=0 [ 94.862338][ T7738] NEXT_ORPHAN(inode)=0 [ 94.862341][ T7738] max_ino=32 [ 94.862345][ T7738] i_nlink=1 [ 94.862803][ T7738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 95.175820][ T7760] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 95.843208][ T7760] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.889: bg 0: block 248: padding at end of block bitmap is not set [ 95.857275][ T7760] __quota_error: 2 callbacks suppressed [ 95.857286][ T7760] Quota error (device loop5): write_blk: dquota write failed [ 95.857316][ T7760] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 95.857342][ T7760] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.889: Failed to acquire dquot type 1 [ 95.993030][ T5742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 96.333680][ T4834] net_ratelimit: 98 callbacks suppressed [ 96.355438][ T7767] syzkaller0: entered promiscuous mode [ 96.355450][ T7767] syzkaller0: entered allmulticast mode [ 96.896419][ T4714] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 97.035853][ T7793] ip_tables: iptables: counters copy to user failed while replacing table ** 2691 printk messages dropped ** [ 97.787937][ T4714] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 97.787988][ T4714] Bluetooth: hci2: Injecting HCI hardware error event [ 97.788741][ T4715] Bluetooth: hci2: hardware error 0x00 [ 97.806219][ T7823] x_tables: unsorted entry at hook 1 [ 97.849630][ T4714] Bluetooth: hci1: unexpected event for opcode 0x043d [ 99.011971][ T7856] x_tables: unsorted entry at hook 1 [ 99.032179][ T7859] loop5: detected capacity change from 0 to 512 [ 99.035310][ T7859] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 99.093660][ T7859] EXT4-fs (loop5): 1 truncate cleaned up [ 99.094276][ T7859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.472256][ T7875] loop2: detected capacity change from 0 to 256 [ 99.473273][ T7875] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 99.473285][ T7875] FAT-fs (loop2): Can't find a valid FAT filesystem [ 100.542930][ T4715] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 101.546336][ C1] net_ratelimit: 148 callbacks suppressed [ 102.822054][ T5742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.005332][ T7909] binder: 7906:7909 ioctl c018620c 200000c0 returned -1 [ 103.007492][ T7909] loop0: detected capacity change from 0 to 512 [ 103.289167][ T7909] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 103.289501][ T7909] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 103.289512][ T7909] loop0: lost filesystem error report for type 5 error -12 [ 103.289777][ T7909] EXT4-fs (loop0): 1 truncate cleaned up [ 103.290238][ T7909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.989533][ T7948] FAULT_INJECTION: forcing a failure. [ 104.989533][ T7948] name fail_futex, interval 1, probability 0, space 0, times 0 [ 104.989551][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.2.965 Tainted: G L syzkaller #0 PREEMPT [ 104.989563][ T7948] Tainted: [L]=SOFTLOCKUP [ 104.989566][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.989579][ T7948] Call trace: [ 104.989582][ T7948] show_stack+0x2c/0x3c (C) [ 104.989601][ T7948] __dump_stack+0x30/0x40 [ 104.989614][ T7948] dump_stack_lvl+0xd8/0x12c [ 104.989625][ T7948] dump_stack+0x1c/0x28 [ 104.989637][ T7948] should_fail_ex+0x418/0x58c [ 104.989646][ T7948] should_fail+0x14/0x24 [ 104.989653][ T7948] get_futex_key+0x1ec/0x12b0 [ 104.989665][ T7948] futex_wake+0x10c/0x594 [ 104.989676][ T7948] do_futex+0x2c4/0x378 [ 104.989687][ T7948] __arm64_sys_futex+0x2e4/0x418 [ 104.989698][ T7948] invoke_syscall+0x98/0x244 [ 104.989710][ T7948] el0_svc_common+0xec/0x23c [ 104.989722][ T7948] do_el0_svc+0x4c/0x5c [ 104.989734][ T7948] el0_svc+0x60/0x1d8 [ 104.989743][ T7948] el0t_64_sync_handler+0x44/0x104 [ 104.989751][ T7948] el0t_64_sync+0x198/0x19c [ 104.993371][ T7941] configfs-gadget.g1 gadget.0: HOST MAC 7e:31:b8:6a:a5:05 [ 104.993384][ T7941] configfs-gadget.g1 gadget.0: MAC 56:0c:2b:ea:aa:1f [ 105.041125][ T7941] configfs-gadget.g1 gadget.0: HOST MAC 06:70:af:e3:9b:d6 [ 105.041140][ T7941] configfs-gadget.g1 gadget.0: MAC da:af:83:d7:53:5d [ 105.041329][ T7941] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 105.041381][ T7941] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 105.333387][ T7941] udc dummy_udc.0: failed to start g1: -22 [ 105.344917][ T7941] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 105.345293][ T7941] UDC core: g1: couldn't find an available UDC or it's busy [ 105.356098][ T7948] x_tables: unsorted entry at hook 1 [ 105.359248][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.466300][ T7961] nvmet_tcp: failed to bind port socket -99 [ 105.502780][ T7961] nvme_fabrics: missing parameter 'nqn=%s' [ 105.562908][ T7980] binder: 7979:7980 ioctl 4018620d 0 returned -22 [ 105.670294][ T7990] binder: 7979:7990 ioctl c018620b 0 returned -14 [ 105.791073][ T7994] loop0: detected capacity change from 0 to 2048 [ 105.799010][ T7994] EXT4-fs: Ignoring removed nobh option [ 105.815741][ T7998] loop5: detected capacity change from 0 to 1024 [ 105.839017][ T7994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.185044][ T4715] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 106.189425][ T8012] loop3: detected capacity change from 0 to 512 [ 106.197391][ T8012] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 106.198506][ T8012] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 106.198520][ T8012] loop3: lost filesystem error report for type 5 error -12 [ 106.200048][ T8012] EXT4-fs (loop3): 1 truncate cleaned up [ 106.201752][ T8012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.203177][ T7998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.220293][ T4397] usb0: bond_netdev_event received NETDEV_PRE_UP [ 106.220322][ T4397] net usb0: siw: event 14 [ 106.220387][ T4397] Unable to handle kernel paging request at virtual address dfff800000000028 [ 106.220399][ T4397] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 106.220409][ T4397] Mem abort info: [ 106.220412][ T4397] ESR = 0x0000000096000005 [ 106.220417][ T4397] EC = 0x25: DABT (current EL), IL = 32 bits [ 106.220423][ T4397] SET = 0, FnV = 0 [ 106.220427][ T4397] EA = 0, S1PTW = 0 [ 106.220431][ T4397] FSC = 0x05: level 1 translation fault [ 106.220435][ T4397] Data abort info: [ 106.220438][ T4397] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 106.220443][ T4397] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 106.220448][ T4397] GCS = 0, Overlay = 0, DirtyBit = 0 [ 106.220453][ T4397] [dfff800000000028] address between user and kernel address ranges [ 106.220573][ T4397] Internal error: Oops: 0000000096000005 [#1] SMP [ 106.241260][ T4397] Modules linked in: [ 106.242172][ T4397] CPU: 0 UID: 0 PID: 4397 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT [ 106.244616][ T4397] Tainted: [L]=SOFTLOCKUP [ 106.245660][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.248100][ T4397] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 106.249894][ T4397] pc : dev_driver_string+0x2c/0xd4 [ 106.251133][ T4397] lr : dev_driver_string+0x24/0xd4 [ 106.252354][ T4397] sp : ffff8000947773d0 [ 106.253362][ T4397] x29: ffff8000947773d0 x28: 1fffe000186f49c2 x27: ffff8000872f1260 [ 106.253718][ T8016] kcov: kcov_start: t = ffff0000cedb3b00, size = 524288, area = ffff80009c85b000 [ 106.257151][ T4397] x26: ffff800094777480 x25: dfff800000000000 x24: ffff800094777440 [ 106.258092][ T7952] inotify_handle_inode_event: group=000000005535d2f7 mark=000000001ffd5afc mask=8000 [ 106.258107][ T7952] fsnotify_insert_event: group=000000005535d2f7 event=00000000a79f9d71 [ 106.262864][ T4397] x23: ffff7000128eee88 x22: ffff80008aea5df8 x21: dfff800000000000 [ 106.264650][ T4397] x20: 00000000000000d8 x19: 0000000000000140 x18: 0000000000000000 [ 106.265617][ T4341] get_one_event: group=000000005535d2f7 event=00000000a79f9d71 [ 106.265648][ T4341] fsnotify_remove_first_event: group=000000005535d2f7 event=00000000a79f9d71 [ 106.268156][ T4341] inotify_read: group=000000005535d2f7 kevent=00000000a79f9d71 [ 106.268184][ T4341] copy_event_to_user: group=000000005535d2f7 event=00000000a79f9d71 [ 106.268196][ T4341] inotify_read: group=000000005535d2f7 kevent=0000000000000000 [ 106.269724][ T7947] inotify_handle_inode_event: group=000000005535d2f7 mark=00000000addc2fa4 mask=8000 [ 106.269737][ T7947] fsnotify_insert_event: group=000000005535d2f7 event=00000000aa461d5a [ 106.270993][ T4341] get_one_event: group=000000005535d2f7 event=00000000aa461d5a [ 106.271006][ T4341] fsnotify_remove_first_event: group=000000005535d2f7 event=00000000aa461d5a [ 106.271014][ T4341] inotify_read: group=000000005535d2f7 kevent=00000000aa461d5a [ 106.271021][ T4341] copy_event_to_user: group=000000005535d2f7 event=00000000aa461d5a [ 106.271031][ T4341] inotify_read: group=000000005535d2f7 kevent=0000000000000000 [ 106.271909][ T8016] kcov: kcov_task_exit: t = ffff0000cedb3b00, kcov->t = ffff0000cedb3b00 [ 106.288882][ T4397] x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffffd183ddc8 [ 106.290143][ T7998] FAULT_INJECTION: forcing a failure. [ 106.290143][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 106.290160][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.5.979 Tainted: G L syzkaller #0 PREEMPT [ 106.290172][ T7998] Tainted: [L]=SOFTLOCKUP [ 106.290176][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.290181][ T7998] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 106.290189][ T7998] Call trace: [ 106.290192][ T7998] show_stack+0x2c/0x3c (C) [ 106.290211][ T7998] __dump_stack+0x30/0x40 [ 106.290224][ T7998] dump_stack_lvl+0xd8/0x12c [ 106.290236][ T7998] dump_stack+0x1c/0x28 [ 106.290247][ T7998] should_fail_ex+0x418/0x58c [ 106.290256][ T7998] should_failslab+0xc4/0x120 [ 106.290266][ T7998] __kmalloc_noprof+0x108/0x6c8 [ 106.290275][ T7998] ext4_find_extent+0x134/0x74c [ 106.290287][ T7998] ext4_ext_map_blocks+0x244/0x42fc [ 106.290298][ T7998] ext4_map_create_blocks+0x100/0x4a0 [ 106.290309][ T7998] ext4_map_blocks+0x520/0xc88 [ 106.290319][ T7998] _ext4_get_block+0x194/0x3e8 [ 106.290329][ T7998] ext4_get_block_unwritten+0x3c/0x110 [ 106.290340][ T7998] ext4_block_write_begin+0x680/0xd1c [ 106.290350][ T7998] ext4_convert_inline_data_to_extent+0x50c/0xc34 [ 106.290360][ T7998] ext4_try_to_write_inline_data+0x68/0xa8 [ 106.290370][ T7998] ext4_write_begin+0x2f8/0x1370 [ 106.290382][ T7998] ext4_da_write_begin+0x27c/0x9fc [ 106.290394][ T7998] generic_perform_write+0x23c/0x7a4 [ 106.290407][ T7998] ext4_buffered_write_iter+0xd8/0x2f4 [ 106.290420][ T7998] ext4_file_write_iter+0x1f4/0x1478 [ 106.290433][ T7998] vfs_write+0x51c/0xa0c [ 106.290442][ T7998] ksys_pwrite64+0x118/0x1ac [ 106.290450][ T7998] __arm64_sys_pwrite64+0xa8/0xc0 [ 106.290458][ T7998] invoke_syscall+0x98/0x244 [ 106.290470][ T7998] el0_svc_common+0xec/0x23c [ 106.290482][ T7998] do_el0_svc+0x4c/0x5c [ 106.290494][ T7998] el0_svc+0x60/0x1d8 [ 106.290502][ T7998] el0t_64_sync_handler+0x44/0x104 [ 106.290511][ T7998] el0t_64_sync+0x198/0x19c [ 106.294177][ T7998] kcov: kcov_task_exit: t = ffff0000f6c48000, kcov->t = ffff0000f6c48000 [ 106.323787][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.333456][ T4397] x14: 00000000004d2c59 x13: 0000000000000010 x12: 0000000000000000 [ 106.335141][ T4397] x11: 0000000000000000 x10: ffff7000128eeea8 x9 : 0000000000000000 [ 106.336793][ T4397] x8 : 0000000000000028 x7 : 0000000000000000 x6 : 000000000000003f [ 106.338394][ T4397] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 106.340124][ T4397] x2 : 0000000000000000 x1 : ffff0000c80abb00 x0 : 0000000000000000 [ 106.341608][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.345055][ T4397] dump_backtrace(regs = 00000000b9dbfe9a tsk = 0000000000000000) [ 106.346632][ T4397] Call trace: [ 106.347319][ T4397] dev_driver_string+0x2c/0xd4 (P) [ 106.348281][ T4397] __dynamic_dev_dbg+0x158/0x254 [ 106.349294][ T4397] eth_open+0x150/0x178 [ 106.350055][ T4397] __dev_open+0x370/0x76c [ 106.350842][ T4397] __dev_change_flags+0x294/0x698 [ 106.351870][ T4397] netif_change_flags+0x80/0x15c [ 106.352908][ T4397] dev_change_flags+0x10c/0x204 [ 106.353920][ T4397] devinet_ioctl+0x87c/0x1788 [ 106.354946][ T4397] inet_ioctl+0x304/0x42c [ 106.355890][ T4397] sock_do_ioctl+0x100/0x254 [ 106.356930][ T4397] sock_ioctl+0x55c/0x7ec [ 106.357911][ T4397] __arm64_sys_ioctl+0x154/0x1cc [ 106.358973][ T4397] invoke_syscall+0x98/0x244 [ 106.359914][ T4397] el0_svc_common+0xec/0x23c [ 106.360834][ T4397] do_el0_svc+0x4c/0x5c [ 106.361703][ T4397] el0_svc+0x60/0x1d8 [ 106.362209][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.366213][ T4397] el0t_64_sync_handler+0x44/0x104 [ 106.367270][ T4397] el0t_64_sync+0x198/0x19c [ 106.368257][ T4397] Code: f2fbfff5 9785fbd3 9101a293 d343fe68 (38756908) [ 106.369642][ T4397] ---[ end trace 0000000000000000 ]--- [ 106.379659][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.396437][ T7990] kcov: kcov_task_exit: t = ffff0000f6c4bb00, kcov->t = ffff0000f6c4bb00 [ 106.396662][ T7984] kcov: kcov_task_exit: t = ffff0000db3b9d80, kcov->t = ffff0000db3b9d80 [ 106.396890][ T7980] kcov: kcov_task_exit: t = ffff0000d5e8d880, kcov->t = ffff0000d5e8d880 [ 106.400485][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.420107][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.436404][ T8004] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 106.438123][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.455131][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.471510][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.487992][ T5742] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 106.746410][ C1] gtp0: no PDP ctx found for ff02:0000:0000:0000:0000:0000:0000:0002, skip [ 106.872725][ T4397] Kernel panic - not syncing: Oops: Fatal exception [ 106.905028][ T4397] SMP: stopping secondary CPUs [ 106.905926][ T4397] Kernel Offset: disabled [ 106.906791][ T4397] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 106.908091][ T4397] Memory Limit: none [ 107.391017][ T4397] Rebooting in 86400 seconds..