last executing test programs: 32.619559394s ago: executing program 3 (id=179): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8) sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000800) fallocate(0xffffffffffffffff, 0x80, 0x3, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000680001002bbd7000fbdbdf250200000000000000150004"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) 31.670547675s ago: executing program 3 (id=191): unshare(0x26020400) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x101000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0xf0b}}}, 0x118) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001300)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000014) 31.629792236s ago: executing program 3 (id=192): sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@bridge_getneigh={0x58, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x38, 0x16, 0x0, 0x1, [{0x4}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x400, 0xd37d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000001, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x5}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000800) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004890) (rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) sigaltstack(&(0x7f0000000440)={0x0, 0x2}, &(0x7f0000000600)={0x0}) (async) sigaltstack(&(0x7f0000000040)={&(0x7f0000000000)=""/14, 0x1, 0xe}, 0x0) 31.557756441s ago: executing program 3 (id=196): socket$inet6(0xa, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x86) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x402, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000000)={0x7f, {{0x29, 0x0, 0x2000000, @mcast2, 0x5}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './proc_mnt'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@measure}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\\\\-'}}]}) 30.44121288s ago: executing program 3 (id=211): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x51, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x43}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 30.091816373s ago: executing program 3 (id=214): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000200)={{0x1008, 0xfffffffa}, {0x1008, 0x1ff}, 0xfffffffa, 0x7}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000040)={&(0x7f0000000000)=""/23, 0x17}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000440)={0x9}) 29.911823521s ago: executing program 32 (id=214): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000200)={{0x1008, 0xfffffffa}, {0x1008, 0x1ff}, 0xfffffffa, 0x7}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000040)={&(0x7f0000000000)=""/23, 0x17}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000440)={0x9}) 9.708602227s ago: executing program 2 (id=438): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x4, [{0x0, 0x4}, {0x0, 0x1}]}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x62}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fcntl$setstatus(r2, 0x4, 0x62000) sendmmsg$inet(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="80f6b0cd17", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)='Ta', 0x2}], 0x1, &(0x7f0000000bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x2, 0x8058) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9.629585675s ago: executing program 2 (id=441): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x4, 0x4e, &(0x7f00000003c0)=""/78, 0x41100, 0x40, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x8, 0x3}, 0x10, 0x225f0, r1, 0x0, &(0x7f0000000480)=[0x1, r0, 0x1], 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async, rerun: 32) openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="90cbe7024ec959b103000000000000009500516a54c80100008018ae77bb38eb000000000000a318d87872447da4b5d8054e9ac431c471dbcc0e94c2a56f2315"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x200000}, 0x90) 9.523725904s ago: executing program 2 (id=444): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000940)=""/4096, 0x33, 0x1000, 0x1, 0x1ff}, 0x28) r1 = signalfd4(r0, &(0x7f0000000140)={[0x100000001]}, 0x8, 0x80800) r2 = signalfd4(r1, &(0x7f00000002c0)={[0x30000000000000]}, 0x8, 0x80000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2}, 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 9.51875492s ago: executing program 2 (id=445): r0 = userfaultfd(0x801) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100ffffefff95"], &(0x7f00000002c0)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@noblock_validity}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyHb8I1nshWV3czMsZAMhcpz1JrvQQ0oPpdBAoD03MbJiUstWsOQQG0MTSqGXQlt6KLSXnPsjvfXaH9BT+1/0UBLSxglN6aG4jDSyFVtybMe23PrzgfG892bk977zZjRPmkETwIE1nP7JRRyNiLeTiMGsPImInlqqO+Jcfb1HS4t9EVFIYnn5pZ+S2joPlxYL0fSa1OEs88+I+OqNiBO59fVW5hemxkul4myWH6lOXx2pzC+cvDI9PlmcLM6cGR0bO332v2fP7FysP3+3cOTuO8//+9Nzv77+j9tvfZ3EuTiSLWuOY6cMx3C2TXrSTfiY53a6sg5LOt0AtiU9NLvqR3kcjcHoqqXa6N/LlgEAu+W1iFgGAA6YxPkfAA6YxvcAD5cWC42ps99I7K17z0ZEXz3+R9lUX9KdXbPrq10HHXiYPHZlJImIoR2ofzgiPvz8lWNdWT5th2tpwF64cTMiLg0Nr3//T9bds7BVpzZauNxbmw2vKT5o5x/opC/S8c//Wo3/civjn2gx/umtH7t/f9r62x7/K4Or3J2nrWMj6fjvmfq9bWvGfys3rQ11Zbm/1JrVk1y+UiqeyrZBKs2P1lKtR27HH/z2oF392fjv43S6/+6rH6X1p/PVNXJ3unsff83EeLX7m6cJusm9mzGQJdfEn6z0f9Jm/Hthk3W88P83P2i3LI0/jbcxrY9/dy3fijjWsv9X+zLZ8P7EkdruMNLYKVr47Pv3B9rV39z/6ZTWn853PtLW7t2MGLg/GEmyug3qS1biH0qa79esbL2Ob28Nftlu2ZPjb7n/jx9KXq6lD2Vl18er1dnRiEPJi+vLT6++tpFvrJ/Gf/xfrY//erWt9//0M+GlTcbffffHT7Yf/+5K45/YeP9f0/99WfFqyZMStx9NdbWrf3P9P1ZLHc9K0v5/Ulybadf29mYAAAAAAAAAAAAAAAAAAAAAAAAA2LpcRByJJJdfSedy+Xz9Gd5/i4FcqVypnrhcnpuZiNqzsoeiJ9f4qcvBpt9DHc1+srWRP70m/5+I+GtEvNfbX8vnC+XSRKeDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM4TbP/0/90Nvp1gEAu6av0w0AAPac8z8AHDxbO//371o7AIC94/M/ABw8mz7/X9rddgAAe8fnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZhfPn02n5l6XFQpqfuDY/N1W+dnKiWJnKT88V8oXy7NX8ZLk8WSrmC+Xptv/oRn1WKpevjsXM3PWRarFSHanML1ycLs/NVC9emR6fLF4s9uxZZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACweZX5hanxUqk4+6dI3FgNbIf/c39H4xrYH5u3KdEd+6IZ+zrRG/uiGdtMNL9L9HfgnQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgj+H3AAAA//+0Bxg2") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r6, 0x401820c8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_elf64(r7, &(0x7f0000000a40)=ANY=[], 0x278) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) fallocate(r5, 0x11, 0x0, 0x5345) close(r4) 8.614288463s ago: executing program 2 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) write(r1, &(0x7f0000000000)="ea", 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) (async, rerun: 64) write(r1, &(0x7f00000002c0)="04", 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) (rerun: 64) write(r2, &(0x7f00000001c0)="312034329e", 0x5) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040001000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0000000100020000000800040001000000", 0x58) 7.701349608s ago: executing program 2 (id=471): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xd87, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x7, 0x5, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000300)={r1, r2, 0xa, 0x0, 0x80}) 7.700606538s ago: executing program 33 (id=471): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xd87, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x7, 0x5, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000300)={r1, r2, 0xa, 0x0, 0x80}) 2.477041913s ago: executing program 5 (id=549): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@bsdgroups}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4d, 0x0, 0x1}, {0x7c, 0x3, 0x0, 0x100000}, {0x6, 0x0, 0x0, 0x1ff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x34325241, 0x6, 0xf7fffffe, 0x9, 0xa, 0x1, 0x0, 0x7, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000440)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x100, 0x10, 0x2, 0x7}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x8000, 0x8000, 0x0, r6}, 0x10) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x40430a) 1.937376712s ago: executing program 0 (id=558): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000004f99b4ed41fbabb8e6cb015823ee7857f4ad51f18af5958a4663a81f4cb08dc1d03990b8acaaa58db5892273637b7d3ff5c4e3b2066f0390041462f4470c9eb3ae041be9bfb69f4a1ead27b24d27dc36ae4d7d3d4fe1ff1000327cba260879ef6e216a4b201ea95665b2d5a6a194e2c57fcd628bffc5030163f3b66b226bfb1518ba897bd8570f4f", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x80001, 0x80000004}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000280)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r6 = accept$inet(r4, 0x0, 0x0) close(r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r7, 0x1, r2, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r7, 0x5, 0x4000003}) 1.775525583s ago: executing program 6 (id=559): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffbffffffffff, 0x180f81) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x2, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000002000)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000002000)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) read(r1, &(0x7f0000000040)=""/8, 0x8) open$dir(&(0x7f0000000080)='./file0\x00', 0x441, 0x10) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x441, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='sys/bus/pci/drivers/vfio-pci/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='1af4 1', 0x6) linkat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x400) (async) linkat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x400) 1.736454061s ago: executing program 6 (id=560): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x23041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS2(r0, 0x402c542b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x1, 0x3, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @remote, {[@end, @timestamp_prespec={0x44, 0x1c, 0x3c, 0x3, 0x7, [{@local, 0x9}, {@local}, {@remote, 0xfffff975}]}, @ssrr={0x89, 0x1f, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0x13, 0x81, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0xf, 0x77, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}, 0x14) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000080000000000000a2c000000060a010400000000000000000a0000020900010073797a31000000000900020073797a320000000048000000080a010200000000000000000a0000060900010073797a31000000000900010073797a3100000000080009400000000308000a40000000010900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044040) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xcd6, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) 1.660146207s ago: executing program 6 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) 1.624103417s ago: executing program 6 (id=562): syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @cipso={0x86, 0x3f, 0x2, [{0x6, 0xf, "8361371585463cb98ad5e19ea2"}, {0x6, 0x2}, {0x1, 0x4, "f448"}, {0x0, 0x2}, {0x7, 0x8, "f9b51b4fa9e1"}, {0x5, 0x11, "8ff1eb4f8fe11eca3fd1b10e950273"}, {0x2, 0x4, "71e3"}, {0x6, 0x5, "ce42f2"}]}]}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'macsec0\x00', 0x3}, 0x18) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000009740), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000009780)=@base={0x0, 0x4, 0x7ebe71a5, 0x7, 0x1204, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r4 = inotify_init1(0x800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3", 0xa3, 0x12, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0xc9100120, 0x0, 0x0) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c"], 0x428}}, 0x40088) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = open_tree(0xffffffffffffffff, &(0x7f0000009800)='./file0\x00', 0x9000) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = getpgid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_open_dev$ptys(0xc, 0x3, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bb40)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000080)="ff7daadec2c427835820fb500b75f1d289f9c1ed477a651988230caa18705f109ca97af2e4cb563cc69e1e6d74d6ec81c97c154d6c1d3de4af164b1f8e3dd33d695c38e85e59f7185f46443fb750e9db441c44aff1bfcc01c66ae0336b", 0x5d}, {&(0x7f0000000200)="bbd195ee12d9fa7834f1dacc7e44f717f3272816aad6385f0e47bd2d76a4d82f757884c1c971563585cf7de457572aa49cd9d6eb97f0ff06976d699ff28f0bf600dce66f7408e20285dcd42221449d452f3f97dbd386513c6fe860fdaaf3912cba72617312e0ae4c29f5f374f879d66643bdf465cfdc2304a96581fe2787d9cd15e017509a084e8cacdd7e20dcca298db189773a445987036e222755bb3f159487272b80f547e19917569e93ffaea82b5f50731674fce188056dd3909f219f8d7992114a7ca0481939d441a1c5a00e1c96c1", 0xd2}, {&(0x7f0000000300)="9361c6dcb14bb25c9f1896476f162a2f2f9408b3c93c555d5c0f1dcd88c10921aec2a4750d71a5d3ee57f1ee2cf3fbc0bc46c0ad72ca164c7cfab61f6bcf24525b1f2becec20192803b185fe814b9d5ba3711a7c58b6b94617485d4f556f0a53bb24ce0bd609e484ba504b9b3d682e49c02752aa608a8725622e8a1887ed9600d822d803b9f05fde171dc7f17b2a228973bef7ee8134609e3bfb69957e210402c0ac80a03842", 0xa6}, {&(0x7f00000003c0)="a997aa1c44bcf3d07186667df70db20a72c6ceb894779afc22dc4604809bced4f3a3e25a360689ffb4b02e0b88e76db02c88678d59e9b552fc33c4482b61e112357e7ed69779ff303601f958ef93388b1fde13c874d2438c8fdaf274f23fe848f48b3e47d202ff4385d6ab383872da175964d4", 0x73}, {&(0x7f0000000440)="a21389dfb3e32eb890fab90f9a776684ce49311ac5705d7c1ac4c1e1eab0193b7525d6cfe3ba1ce287ac8d965f9a5db3efa897e5c90b5a94ef14847b0114ceb7ba99882131c87744f71a55b2b9873dce634bd383155016c1346d969467dfed59ed15c1eebd8b94f61ca635ea5cae760070fb5057", 0x74}, {&(0x7f00000004c0)="6fa4d52f11ee1a92d5f9c2d3cd3eacafaa05766a70e21940ea7559f532501d1c9afaf11745718107dbadf2d609f3d01de99cbd0072a3b428087f7cfea8b91b26a1df6b1923e37936098cdb3b23988e0933dbfedde6fbc9006cc9649e2528b8bd24dab878783c723c67552335e0667a57161b115835bf2a190edb91193cb87194ce0911d6a515", 0x86}, {&(0x7f0000000580)="5b8747f4f8d38df3b1efabe08cff70bbbc83aca13551", 0x16}, {&(0x7f00000005c0)="3825185f0d8edb81b0d136889801fd9eba523b73fcfb96dbbe3f0fa4255ce28395c923582a1e0347516e749715beb73308abcbea183efde74fa13beb6e1dd5a00737223a7b915f7c25ef489187f5e9b08c5e84c05bdaae1634d66f6088a2e073165c54552bd2", 0x66}], 0x8, &(0x7f0000002940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x4801}}, {{&(0x7f0000002a00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="2d1e47cd271aaccf8798ce8d6d7fbcb08de111712e551e1926adcf5916d29aa10060a8ad40b4b9ee0410", 0x2a}], 0x1, 0x0, 0x10, 0x4000001}}, {{&(0x7f0000002b00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002b80)="489e7ee7c2f7d05c4261f17187008d0e179c395d0f17008d41031f87df781e3d511f1b360eeadfa49270339d665dc3020cfe7474e981b5a3c86f90bb2330f81edfe8191edae80e212531e395824f1711d65477f41dd8474a8ca507435c22a9355d7a065675aec8c1a59c5cdd210ed19d6b7b4825c622ff7bdc165c21300aa6277b67dbebcebd209832365448e65134cf0409b496f980c574db6e52b38aacdee029a6848c10b914f3162b5edcb141981845e78f464be2f358901df7aad03ca951a218656e57011d37bded4189a58ec220ed3ac23888796df97f2d6b4a64be1263a695478de6f57276e0287c811079e4", 0xef}, {&(0x7f0000002c80)="eca2cb01ace1452f70720e13fda8df8560eebf562406e60eb62613df670c050655b2ef6dc2ba75815fd9c0293c787c3572da6447393b08d3629cadcfc1afc44609cbc36c6fa0ff6c1e4ad23dcd248bafdee88b45d60bcf9a38ec4b496d3c08d7968c733516a15bdc1f5b015f9f3d063c4a3942f1920d9caf39acdd8423b28f5f1a5aa1b2614b9b54edf8b2678f3b1bc3be95f00e3bf90c283f3cc3850c08d1f56d94e801c8bfa6cef5d193b97bd99cf3b0226c61f22a91a9727e", 0xba}, {&(0x7f0000002d40)="3c4c842a1c1061dda973455a96a45bdcf777cef1b0d4240ae2ac32d102a83f9ce98aaf7b086b0cba1d8279f85799dc03c2a1a8356517018cdbdf685378021c2ffcc459ee87299d98616d67b68839c145744179f475606467b0c9146e93dea645813f44cb8b66e15d8f31142cfef43afa14db8c9f243f5ded7f6a0362704bee7e5a92a3e241347b19d3dc09330b49ee837a9dc857b73c31b6a47a96bcf237d6f7f6a1f6d96be83901c5beae5da9dfc039b5db87be5883439258024d4da75c8e6db7da40995a51437ed411bc371925fbc274d2aa9628458157f3bccff25456756a9c3a9038a716a6b103699d", 0xeb}, {&(0x7f0000002e40)="bba4ecf0eb13477df723eef08a647721aaca522e14e7cefbb4ac7ed098edcea0d3a549b652dba0cbd8238246cf237ca475f84873bff3b7d2d39fe7f80853020c4f661750659a49c58ca5ec53d7c1dea9ceac07cc553e2ee6dc76684a311bde24e1fc59a249e6ff403d90af8dcc", 0x6d}], 0x4, 0x0, 0x0, 0x4c002}}, {{&(0x7f0000002f00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002f80)="c5289dad566cacd54dc72e5d5225f0d930c937a6f1f9fc588a43842eb8d1358a6b22b9e913fcd4eb09ca06347fd67c02e598c10d3fe8d374d5708847cc3ebc3039aec646fe08d961270ed09806eaec4c1bfea18a7e87a77458e5e8e7aa86bbdb755995b5215660db19c4912399f54b1878c3ededb1809ea1892faddaf8acc38677867d93987fca10e566d7c0e8d18e794d2ac08ec1482e0945cb53c38534", 0x9e}, {&(0x7f0000003040)="7c532c24bed734c7d5e434b1140c3154e3c50dccac0f384516881957380cbdfa834b8e4b4cbb49a8549725a749fa7d77ab90d8060711bcaf454e101d49decd65f6601de703f5e862e8c3a6c951584c8194636236692a9fc3687d6b6f829614ad1f2e47a29b9375ca36af8f79fc908403dc29298835d5ff4e50e35e59167edf605966d0085f60b2e1c305caa2fa4a2900cb862099dc11427ee7714bb6be1b478d4c7a1f9c71fc0073c9ab835ba7", 0xad}, {&(0x7f0000003100)="790bb3c5690c3cd172fd4ef3988dcf8e4f79bb5e5a90db7fa2d46b62484f1293b28a4c599ced1cce519b881a3beb248461fdefb36f2ffb4a68efe690d43482dffaca10ec9bcc18b742f44478c21227d39e6d3e62d3", 0x55}, {&(0x7f0000003180)="6bc7153857df3ffaf2feaa20e08ec9881e4b4ed1eba444d96b8a77113549f39bb2d2", 0x22}, {&(0x7f00000031c0)="231f05777b6f7c3bd620c1caff6277d65de24b735f3c57d6a0ff8b5018f35ad49bb96d30ce83a02ed31864075ebcee3d104c04536803492f727da2d0b7e483c0e7315e73abd434", 0x47}], 0x5, &(0x7f0000005940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x814}}, {{&(0x7f0000005a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006a80)=[{&(0x7f0000005a80)="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", 0x1000}], 0x1, &(0x7f0000007540), 0x138, 0x44011}}, {{0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000007680)="54bef982be8fec9a8c7c668d8ba235896d390f638672891de600115ea8da8423afc55cd1f88916f83142c216a72f654e6f76184bc995b8d2068295f629ed", 0x3e}, {&(0x7f00000076c0)="2554ccda7b09471958464d260ae48da97fb58a4c55bc0160890b3bc238ab046f9ca8afbf6923cd5a3ad09ca1f1a0ed29e449b633ae95fd5ecbc6cb2aa26ff45f51b6c60f41745dd0f791f9eb645854efa42e", 0x52}, {&(0x7f0000007740)="c0eec07cc799bacde7871c25b979ef4da201e430c0b8c01313604e41346f21d10130268a31a05027e6d00b2229c8d99da84beeec1af0f313e5cc5d8fcfe2cf2bff843f8c4e7fd38c1056d81e8ca8059c040a444c", 0x54}, {&(0x7f00000077c0)="11f7280cca0de7140acd46d6e944895cc33976d3143bcfbe317016ae4a826e805e0e403fb897b816589f4f843d248186ba0434b6c94228128ab4983f361626810fc1b16a30d9829ea04f448bce91a5aeb83b96f49cc92220e228c9a2c4d5db8add80975f57354c4a6f80ea78fbf7dd79083b7b1ff11a9a86e5765bf40c133e6b76aad8cf34ae252cdd6654e6c9264d237589d3ba3dab494911db8f48d0ff89643486f1d602c1e6f9fe344a4892d896b4e7a0db8a1862fee27cbd7dae3c078bdc99ef230e1ce9fbe5228c19bc4296a33837882ffdadc65e334c3208b3b27962fc8e6001fbc8967ed696b62ed40682ac8d74226779a0547f2d06dcf93252701dc8ef5dc095eaf6f7170a428db1b36bc7a80efbf3ac35295f4c39d6e97f205b3ff3312ccee376c938e28cb4ba4f3a27cf4e33d36e78aac5b54618c88bde5e7570f49fa7ce78f02d73b271583a8c61772698d9f8c80fbe9524e53b5f6acedb875eca5ed59155a2f3c835b23eff8e34896f8e141cd45658daf3dc370a0c67df88837faf91a9b42e55a10d10025d5b056abb19f09a599e2b05a6ae42d59896a9dfcd7d88c3f94ad38974df02e3e212dec728768efcd8172ace9c6102464da38edfffa198754a5a3fa2af549f7e1d07ba78cac3889d5fbfb7cca86509efe6538ddf3794d925b2144763fa0dc94991d47a7ea3056c83c052b18ea6bf4bf3872665006e11e6c9120ba7f200d3edf59c76faeb2beab07779e54e63e545b90b27bd716c2bdbbc6e4935e0a44a314e69fc73b0c1ac66d90137f10c3fa2d68bd7a2a76a2b1be233ff31fe488d94e1459c07182dde48fc05f580ed0498320fb77c9c86ca19e8388f0205931ca5aa2fb38236531264e42104d5a8a59071b2f9a6c9ed4a11a209cd9c555b8ded11f04c7c868f4a8b600e3d84e44872f657682bc1a84293722cebcbdba1048977aea447fe876166274e8e85b91eb79513f5aa5708cc85a6e7ba5205f7265b2f4c77190be1edbe499a6c5907dd14943c75d92994cbfa72291af8e4406d616d936edcf885cc5dd5b07ada02ad1eacdfefbf90ad0be8599261d303e2d88b5d59c2149888a4f4953c1afffcb456b2c2532a6ea6d47d916aa3d97e85c8c5dad48696ce4a4907d1d3c8695414a56263ec6cf6fc3fd89763561daeec13bd3ac6dbfd00888a16388db9aca92916b990049a79d152c8ba9abe3fce5a884aa7385ac58b6ae4fcb03c52442d50f192c1f63483ae3abc7cf2e3069d0156af5257154dd3b81f6ec9533eae60192771e0f03ca00bce0552a35708140865eebffc55aee5535c389f6a0ad984fb35a30a99c4c5c3a3b0c21f9c94dfa768563cee8619ed5b4a745a89db2b5c96085aba3056486621cc7cb40a3f535016ee549ed21deb099986c8c39116e6399729567894d612d4dbc7ff9999148b3b5b64f37f9047588b7117f6b3793470afeecb6b7129fb7a71d463748491b1f98aea4239cbfafe9e4dcbfd1c93cd1efb74fcae725d524849506239943d6277b052f7b72656498ca87e881500b35af64ca1e1f42b972d901829bd872daf8f2e4a612c15e011aa98289f5917a620c3539ba78f5bb6c946b43557afd4aadaceca4169487a029ebc1c6d7e647eb88fde06ad404d0210b2185bb8311785c4c55e10a0de16500883528cc2243bd1091793e7859da41b2092cc08f95aa3654160d1d27ac156208200bdf2d254c7c937cd68cacc4861ddbc69a1d2a71dc203ef05cb3cd5d12684526c5c3924e5bb7d596ac5fa8ccfd7a539dffee15b70ede1f9bf1af942a8e2dabdc8a47fa2ed75e05177483d5b8ac2bdcb1bcd1ecd11aa28ad0aa9238c787c7471522b7b0171983093c1fbaabcdb77a98cd33753057b615f39916cf6b2c76e6fd88d563789b7b1d0cd021a5bfd7db0cd68a1314b39c72b6805c044070135fb7456fe9b1069a4871749424717d33ff7682fdf0e5feeda62ad4215c798d12c123334344f0e79102c356a792518d2123d11e357b2617fd06ad174b5ceb79e11976bb1fdc5d5957f0c14854c5075492d98c2fa319a0b1cc7bfb5a35cdf4e8143dc7375a9dd7340531f2fd0255c810fcd06837073927ee906d77603f3495aaed2e563346bbbf8e7f5f07b235ecf1f7b83323fabc34c4d76c4f08a83ac0d1d03a0d73c93f8dc548f40c44a1a992a25d3c6a3187dc8626944659126a27113dc1c02f319f9b9a1e70c285b1f8337e6d4802281d62ea2a974e1233e15e59d004ffad3cacc475ef1235d9f022a23caa853304af1c4e76d63690b647fb1696616a59658e1a34cf8e989d6aade211b7ff5b5b7f00066e57ff916813d08fc9bdaf340a1be82303329ddacadb9d77e400f33c30ccddb8491877c995fdc4ac072cdf0d66bc9ca64672ce35bdf08e66b85cfab1b597f06c203de8edeff53063ac3147b9bd6754278d4a5c9c2ab76de66d566b07af5119e923dbb5d13cbef27ca0a9ef09eeb584709222d90fffd4e848f05e2faf79bfcd5f5154cc7742aff7ab541826f6ffe91d43ac3fe500e71b296faa1169392baa8bcf8cf6001d5ae33a605aaeb6ba4e629e725183abb34bd0c2ec8f30b3be0257ee0af829a8b4804ce2c4b244e73bca5a6a6d3428adbcd599da0977fab988c1fd17803ac463f4d934a81fbea3ec4eafb1224ae8d8cec05578144d028b1a3722f5916adbf1a16b69a81d38c2cc4a2812e346472b910fbfb881a6e9cbd9784b01c19670e036b7de3270e191010ad06e68a7b3cb412e8be055011ac17c28c28ed531b96320598781c220a70eb2ccad7ad5154f35cc09eeff783866a507c0a2b4fdbcede7258e204b79d0d24207b9dff82a70845d3c78ccad723f72492442fb7c2b028692b60d58e10d0681ff944d4999808326787f3db215cf43613ff0291f7b89d9653cf6b5e0a6dd531673956806415d6971b32a1acd34128ce62762b076d7b71edad5799aab9a43b948232bb3c66eab30ae1141b3d93733ef5494faaf46dee3fd7e552978fd852924a2723448cc89c2df70e0cfb889ace8d58949b94146397b09f2ba277eff5316be8a8e7413c8ec07523720f66600122dff6a056c3129823a3af0b92146285dd1ec62f543abde67f83e6e5af6cf58eda8329393cdbb80136307b4024217652ca6acfc2167dd932be4635bfe32aee214fc7012c8b6b217f8e9e51bad8dcbab470358b82062a704bcd0d5dfe129c368eb171748c6530af600b50838dd75a432529b36db7975f3406228b7b8cd15843306d18b6d3a4c8f0f0f2180ef56a6681ba20b0fa71d7137d2dce2edf0f28743521b6e4b4973da007fb5a27742a58edfebf9f3150996d151ca558d3b8f6cf842aa9b7f2bf248814b63301e68900f760e2b1be72b8ab8ad219636c7f1411a951e89d4a042944c83ad81f8344e9efdd6cfc5d4801335e3f8700b849c197c543dd3223b33e9ab19bf27d1db33e55d2f4aaf2a906f10b42c5a436ce3dc94a834e1df030de7bbf5daeffd24a0651fce992f5ac4222250425247ba0a2fc49552acdb00e7ba94baea0ebc8214b62175ce27efe41a5bcd09a8d584f0da3adc302c373e9d7b63d8aa4283f9daf2068e7756b027d191ab6c08b859c123695ea878c379fc01849763a60847a248822593d22ad926ad060537888a2006e9f9e41460b6bb60955783da71a4beee23fcc089c0c52680a79edbec408d412da9f89a2636d48f1e5b8d5e39756e2dd9cccde56803de356a4133b7a1f12b9695cad4e3c344d10f3d2823fa5f486b7ad1cc9d20003d3e37d075c55737b6c639b499fedf51b601b908a403e861764aa8946f47b29376eef5fee96d65e47c0cc6dd85867d0be2069ee313e66e7fc3b5becb912250e14af9d1addf642c228a2e2a23ac86f77fd5f09e51a8f7bd07abaa0b938de37529c74f7a1bca640e792f496e12756e2c1858a6c48dfff6484b271f1516be831475dce95d8d66eb5d403baf862fd832ea44ecd24d8f70bf49de0fac86055146cc666c7b1591512e3b445fd7602535646698ffd05d8808c202755a4140d22ee2e3c9201e44771bec6adc92a20765e2e0cda659a1fee9e992a5f33516d04c23aabd925f044a2350ae189504fed4212a3ee6ad10d0f3b9ad5805330f3b681594ca0664a29b877758da2f0a0665ecb2b4a9801e012fb58b228123a2713a903a244f9156a46b9098f4ae06fd6b1d1bfa5ec4d4fe22d3e7489984ec91e6b49e1230c5a4d59bf17cad1e3fcd89fa7c62d051d7ea5232658ee027b4047eb6c6b1d7a5a4cb360ec3d75e278d87d04d8fa28baf128f9ea61b7d4d3e0597e82438f895f440a2116587e173b89065690f43696883a25fa91e01cb3c8064d30946168f83548897fa1385f1a843a2d19a1051e4301f711b51c9094626791bb2f63e6e83f249eb95ec6717c031a2548f0c2e3fd641bc59cf13e5675ce1f27fb5151f269be257f96f44fd19d9c07b850ebeab8ed803a582532665d9005bb7f801ce9d5c911ca35fc2c8c7f9f790cfa29f9dcd3f32521f78ee772b5e0c1ccedcb4a0beb54410af752340e327b06d1a0e7d742fc2684a32ce65d82b2389ec1652d77c5b98e6e8b8442ce8dc584e387c4126ddbd8d5a58e72488e9b6ab2ea4c1189f15f5754e2f7d81e817806a3604a58efbcb44e08b5bc684f68147c7dc8b620fef0e1ae62401d361b5f67dac0a56baa3fa13f4eb168e2c615c9418047b056a1710391ece1f0a9ad493aaa2efaf9a90bc976d37703a3c0a4bf87dfaa1d79aaff0aa8d442bf5721384aad2913315108a7794d23f9c7109607603fe833ba5b037faafb62b434694c4c0cf9bfd42e4c3dd4fcfe0b4a5467425324e4c173aa95a7fb5630e5b2194294a71e8cfa18b6a6179e33c61a60d81d68119e8c29925820052c227e9ef1e01513503320e857fd517f929b95742b61b26f16d2b8cf2d20199ffbff1a28b001e8bf4f050c4ec7546ea9a3ee7dc7b3fba11179ee14db9c011eb808184261925a2ef22fd893b853e12877ef012a57be227f2d8fd9fe94745f56895d9216d05d52aaf9b67eb9aecd850c129690d5a1b36d082d6a85fd8ca64e4a3db9745e0d8830d4743c146f88584a1894527a11ab571ae60d28526c61031dfd74ea52b5e33e947dfd0d5720731c20fff1827c0e81ce6a7a484931350ee1e805316226fb91b3832755a0287697674af5e50ad53bf0984abda472479ed9db87f6538a04905f734289afccd3c51c208d2ecfd515f83603f51a3aa65c3b1c8e7a1d38d3cd96ac029ffcbc216f64fda59673454e1de4619b55fcdbaf4172775d251c787ae4ed87deea8732060a218a6cc928d2efe7e9d316303c40e5816c6adecc10ed2ac0d85390c4c6d70ea57b937b150d18e101f51555b77b2680164b489814ae1542390c16acff2c777fc4e731107a30f77035d513f6e2f6d6e013006ce66c47713f0d558f3022f88c6f3913c31089d60e4f274f36e22ebe46bccbafda3b4396291d44da68ff3a11bf2caacb730463675663a70704ebf450e64d756c9df1e4d620f0735ebce30f88b063a9990fcf8754b07103654a421b65ed6a6969f7de18a096560e6727d189f36aedacf2ccd4d531021c00d7076216032d6f53b2703a9a372eda7ee93af65a17538553864f4edf83c5b121f190741335031c605898b7019af2f04a7f989505a148e7a90146a5a962f07478ef37db452cdb56eacc94340170232820cc9bec59c5e35f717b842085e4af21f1da392bad2dd7759acf0dec9b1b3a3b5f9fe6f66bcbcc5aa1fea245e99341b1d7ad38785e6f434938931451291a2cf68b5d8514", 0x1000}, {&(0x7f00000087c0)="dcec61c8c05516eb60bdd5088ad134717a8414afc52f41de279288e1901121ee1f508302bc63ba852b489b988a7f67a1982a3f40d25bedc5e87a77655695ed076406243923", 0x45}], 0x5, &(0x7f0000008b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x20000001}}, {{&(0x7f0000008c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008d40)=[{&(0x7f0000008c80)="1078d1555bcfbb384da69b9ad038d344fd813512873c3c76835791999d1e7f75fc1575cd2d8d79d1d8c11ff7f44695174f0a291a41a9f94da9b7644916a1bbce00f272776c9fe7ec7da2376e774bd2affe89b865e2fd07c6a68f858a89498104c48f2ec193c6c5d3dbd86863b01bb65b404779f573c1c62f627fbf4e49fd48b38b8c8b08b5fb6ddb8d2234f7f8cdeb84385a855c5b5be5be118e070236ef80b5d7c46addece5e15cd262574381", 0xad}], 0x1, &(0x7f0000008f40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008fc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009440)=[{&(0x7f0000009040)="c6b8c952bfdbafd89b19dc6d352f68f8b6ab67200b614659d5f2749f7f4b49fb223fa8aa7344decdd0cc599f9c8d4c37f7817c42284436577f4ce45a15c5d189d5a5f92455ca07ecb4260cfe30d4b2156d7c5d575105113cca208d", 0x5b}, {&(0x7f00000090c0)="2223dea06880372febd459010a5c17abe22d92ef007d29598697127a8b4b9c2b5ed3368345bc0223d9a1380a4e8faeb3aec21f2c566a591d32d1be9a75263a0f0fce73a02ad18bed1bc2a998995294dada95e788f47d3b56bfb838d186573e843f431662d34683a52bc50d9320632a6006c92c65aa2d48073f68ed760cef9dd0ca0fcf48adf5d69e8c16e1738a627b097e742b2cda8bfa3f5a055a7a042303d3b037b262125231a9e7742077b7626012d3529ba34b09cc9809a77a4e1bd20f8ab4aec7", 0xc3}, {&(0x7f00000091c0)="39ec808a63537d2b5f7803da5a9dd05189177efe0495cb90e828e2e5497a9bf578307da24e822b5dd30490c44c43b5e4a877067ffcdd6b179b9d16d00c075ba3c761b41b8625eeb845a7b3b3e9a7e0dc170b539f140c69cf808e4c5d82673ad48f5a68dade6685b0ed6ea02bbf7c3c8449dbc85752c5c6ca06c8057080d7eaae6bf010948805882f25dc64", 0x8b}, {&(0x7f0000009280)="00910dd3821331c04cec452faf8ca76a277f63d295f6f8606879fade84bf11849234f5658f75e1294049ea21a36ece5a736e095164866ef00e6f60fac9bae7e11ba594062fb082233d97eb0e3aab123721073ca9c3b36226abd74081c1d55856756fa66fe4e6e47ed9051081decdd90bcfddc03a66be273fb7482f7c361d68c30ac88d", 0x83}, {&(0x7f0000009340)="18cbd02433c09faac742bfc5d2947f6a9575d01371589946626dffca087d91526c87445a9bd75f567c159674bf574fa199d94aa1460395cd7c732866050dba8a0efbc56d048fa2d5f392515321f6d9236b6dac065dccc643defea96219c6b2e727c3c09a75", 0x65}, {&(0x7f00000093c0)="d1b9a0924e51c87d7e5ec3f69fb8de73eddd2f3cb37d2ddab41509f2f3480043bf740338c1f9a7dc153c1d6397275d427ba8e751d9ea69a87183ab05a558b1ba4356409557ce07c88030b9effd98e3c39b24c5cd8c3c232321e316497e6fc83c5a11b3a793afc9d9491c76d172c6a4213306b55c5efb", 0x76}], 0x6, &(0x7f000000b880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r12}}}], 0xc8, 0x24000000}}, {{&(0x7f000000b980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000ba00), 0x0, &(0x7f000000ba40)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18, 0x200000c0}}, {{0x0, 0x0, &(0x7f000000bac0)=[{&(0x7f000000ba80)="dce1f8ed261a081af8f8268b2bdd", 0xe}], 0x1, &(0x7f000000bb00)=[@rights={{0x24, 0x1, 0x1, [r14, r15, r16, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x8081}}], 0xa, 0x40) 1.574782374s ago: executing program 5 (id=563): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x80045440, 0xffffffffffffffff) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="48efff00", @ANYRES16, @ANYRES8=r0, @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000500d8"], 0x48}}, 0x48890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xfffffffffffffd7a, 0x2, {0x1}}]}, 0x20}}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x63) (async, rerun: 32) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x14) (rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.534481583s ago: executing program 6 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r0, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x42) write(r2, &(0x7f0000000100)="1800000016005f021dfffffffffffff8070000002d000000", 0x18) listen(r1, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x50, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.122959215s ago: executing program 5 (id=567): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0xce1d, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x0, 0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@txtime={{0x18, 0x1, 0x3d, 0x3fd}}], 0x18}}], 0x1, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000104020000000300000000000000", @ANYRES32=0x0, @ANYBLOB="eab0817dbdb1f31a2c001280110001006272696467655f736c617665000000001400058005001d000000000005000c00e7000000140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44010}, 0x4050) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x10}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x97}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x14}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x440f0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x3, 0xfffffffffffffffe, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) getxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@random={'btrfs.', '!\r.N\x00'}, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8, 0x6, 0x7, 0x400, 0x1000, 0x100, r6}) 1.108428705s ago: executing program 4 (id=568): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x31a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000002c0)) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x31a, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async) socket(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000002c0)) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) 1.070427441s ago: executing program 0 (id=569): r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800128008000100736974001c00028006000e0000000000060011004e23000008000100", @ANYRES32=0x0, @ANYBLOB="0200000000000000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.069332763s ago: executing program 5 (id=570): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000140)={[{@nombcache}, {@debug}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nodelalloc}]}, 0x9, 0x624, &(0x7f0000001340)="$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") write(r2, &(0x7f0000000000)="01", 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @rand_addr=0x64010101}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd700004000000050000000600010005000000080009000200000008000b000000000008000c00a82a0000050005001c"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) io_uring_enter(r0, 0x3ae5, 0x9dd5, 0x88, &(0x7f0000000180)={[0x2]}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.040260348s ago: executing program 4 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000010400000000000000000000711213000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500000000060015000200000014001680100008800c000380040003"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x401, 0x7, 0x1, 0x2190632a}, 0x9, 0x0, 0xea, 0x0, 0xfffffff9, 0x1f, 0xa, 0x13, 0x2, 0x9, {0x4, 0xc1, 0xb03, 0x8, 0x4, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000003e0007010000000005000000047c0000040049800c000180060006003b00000118000280140006800e"], 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000480)={r3, r3, 0x5, 0xa2, &(0x7f00000003c0)="a8c7ea6c7e96ffcad2aa5fab0f7c346dcd8be46141695c17e37a68111bee70dd9e1fb442e6cdd5a6d9586c7715245d0d23004d90a88d84f0e778cdccde232c7b463f85108c13ea3687bb5c0170bbc77183a5fe7b7c5c82c1ec0e5366fde12eb2baf6370b40d4b08f2b814610e18fbbc5c4351f53cdffbc9b011e05c714cf79dbec0ca46f98142278ab2a9af401a099c9bf846637e22faeca43905da7728d8324cd56", 0x8, 0x5, 0x8001, 0x5, 0xc6a, 0x1, 0x80000000, 'syz1\x00'}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c8e4) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[]) 1.036121045s ago: executing program 0 (id=572): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_netlabel(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='00000'], 0xd0) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000000)={'veth0\x00', 0x0}) 1.019989637s ago: executing program 0 (id=573): setns(0xc9, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x108031, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x80, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x2a3}}], 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 984.819008ms ago: executing program 4 (id=574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000cc4fc358a9fdd1da2893e65f67f275c7ac666d803f1ee9d73ee849ff2f08f65c0f065f32641b6504223784d78e2c602bde37a9efb5ffa165a05647ccc5f9a31bf709f84c62bd8888dcdf1c0ef0", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="00000052872225149402abf4ad7bb0ef75e7be9f730c398d35af6f2b", 0x1c, 0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 915.557616ms ago: executing program 4 (id=575): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000001680)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x88}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = signalfd4(r0, &(0x7f0000000340)={[0x26b4]}, 0x8, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000900)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_read_part_table(0x1073, &(0x7f0000000000)="$eJzs0EFKAzEUBuB/cNKZoGC33sath5JW8ARuXXhMFZEnNhV7Ae3m+zZJXvL+hISz6tNhqN11eh+l9TPJPkuSp5OTF8lbJR+1VNVrprRDY9KTqqrv1ZxUG9Nkm/uXuW1z81DzMjbzXrXrp5mb/bRmvbq8/Sk9b5LH6Xhh2t2xcQSOt9ZvQPubXwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA//UVAAD//3g5HrI=") sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x10000) getresgid(&(0x7f0000000340)=0x0, 0x0, 0x0) fchownat(r7, 0x0, 0x0, r8, 0x400) sendmsg$nl_xfrm(r2, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000001080)=ANY=[@ANYBLOB="c8030000180020002cbd7000fbdbdf2500000000000000000000000000000001ff0200000000000000000000000000014e2200074e2400000200202021000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="ac1e0101000000000000000000000000000004d932000000000000000000000000000000000000006c3d00000000000000000000000000000800000000000000ff010000000000000500000000000000caa10000000000000001000000000000030000000000000021ea0000000000000002000000000000aee800000000000007000000000000001209000004000000030000002cbd7000063500000a00040c480000000000000004000000000000000800180001000080e4000600ac141423000000000000000000000000640101000000000000000000000000004e2000024e2000030a00002016000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="20010000000000000000000000000001000004d6e6000000fe8000000000000000000000000000aa0000000010000000460000000000000000000000000000000000000000000000d2000000000000000008000000000000010000000000000004000000000000000100000000000000000800000000000007000000000000004800000000000000002e00000e0000000001000223bd7000ff340000020001070000000000000000050021000100000014000d00fc020000000000000000000000000001e4000600000000640101010000000000000000000000004e2200314e220005020080201d00"/248, @ANYRES32=r3, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000004d30f000000ac141414000000000000000000000000308a0000000000002d0000000000000005000000000000007c140000000000000200000000000000ff0700000000000009000000000000005506000000000000030000000000000003000000000000000400000000000000030000000000000006000000ff7f00000080000027bd7000033500000a0000050100000000000000c8000800c40008000100bc00259c18541547d4875982ce678c3db140b0a3a7ab2a59596231c9f828a30b4da76de8c17b6873c673b762d893fc6e1cff0e792af4211f24c58bc228dd4c58136b9fe9ebd101413fd159cbfbbbc6a9dc713df4c1c60a04bbf5c72b3191423ed2185237b307eb9f44f8ba21d329b444c7b06f7c721e507c74f0c5e845bd5e5e44c4a9a7bacd0bc53c1d802df9e465ae320f459b0be5667b45e9b38777326b112547dc98bfb185b57edf264f8e49f43e5474dd5e855f9b1e440afe438b981c00040002004e244e220000fe8000000000000000000000000000aa"], 0x3c8}, 0x1, 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f00000003c0)="b6", 0x1, 0x24000081, &(0x7f00000001c0)={0xa, 0xfffe, 0x80, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) shutdown(r9, 0x1) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0x157, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 854.446135ms ago: executing program 5 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000340)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$key(0xf, 0x3, 0x2) unshare(0x2c020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) fanotify_mark(r4, 0x1, 0x1033, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209060002ec2e"], 0x33fe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@deltaction={0x218, 0x31, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3b34}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x218}}, 0x0) r6 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f00000003c0)={0x1, 'veth0_virt_wifi\x00', {}, 0x6}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="1076c0420285621b71629ba3f1", 0xd}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x4) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000000)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900"}) r10 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x138, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)="1cec79fb03d79bdf247a2434e8ef6d88d2502d65427becc365d18e27f2b3f8325c8b24d0fbb51e21b261d865482987c78605b06e6557dc876a6d657cfcf83e33933852277afc18b62daed607ddd06f85ebaedab3f9fde2c2a8bff8e0be62dbbd1aca94c520feafec65c2abb8d9c1caeff5fe7be7a611600a5c284cc575279925b178750b671f904f1c0ac080c30c10", 0x8f, 0xfffffffffffffffd) 752.069169ms ago: executing program 5 (id=577): r0 = socket(0x2, 0x3, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r0, 0x0, 0x12, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61109f000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0xfffffed7, &(0x7f0000000080)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x2, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) r4 = socket$kcm(0xa, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000340)=r4, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_to_bridge\x00'}) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x62}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x4040884) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cgroup.stat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf25020000000c000200b3030000000000000c00080005000000000000000c00040000000000000000000c000600000000000000000008000100000000000c00030075000000000000000c000300ff0f000000000000080001000000000009000a00766c616e00000000"], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)={0x88, r8, 0x500, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x8}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0xc084) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8b47}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40048d1) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000005304000429bd7000ffdbdf25cd385b9c32802a523930b4266099bf26e2000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8895) listen(r7, 0xec) shutdown(0xffffffffffffffff, 0x0) accept(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000010000104010000000180000000000000", @ANYRES32=0x0, @ANYBLOB="02c50000080300005000128009000100766c616e000600010004000000340003800c0001002f850001030000000c000100bfb3ffff070000000c000100ff030000080000000c000100ff0f00000001000008000500d860eed27deb0339e0", @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 655.553449ms ago: executing program 6 (id=579): r0 = socket(0x2b, 0x80801, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'batadv_slave_0\x00', 0x10}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r2, &(0x7f00000014c0)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff, 0x3}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x1000}], 0x1, &(0x7f0000001400)=[@mark={{0x14}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x48}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14}}], 0xc0}, 0x4000080) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'caif0\x00', @local}) lsetxattr(&(0x7f0000001500)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000280)='syzkaller1\x00', 0xb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0xb, 0x9, 0x1, 0x8, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b71200000000fe8000000000000000000000000000aafc8e0000000000000000000000000000edac99e59c7b644049a4"], 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x6, 0x7}, 0x8) 549.261039ms ago: executing program 1 (id=580): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 235.343722ms ago: executing program 1 (id=581): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x5, 0x80010, 0xffffffc0, 0x80000e, 0x7, "0d00f0ff936109cb180e00", 0x2000006, 0x5}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x6, 0x10, 0x5, 0x4, 0x10, "682c90c419b5f58a32b471a45b006a68203ba7", 0x4, 0x80000001}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f600000000000000000000000000000000000000000000000000000000000000000300080002000000e0000002"], 0x1008c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 181.50806ms ago: executing program 1 (id=582): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) lseek(r0, 0x4692bd86, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000415, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffffb]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8010}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x411}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x300, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x19, 0x0, &(0x7f00000017c0)="b8"}, 0x3a) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x25, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000001000000002199a400000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 163.301393ms ago: executing program 0 (id=583): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20801) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000500)={0x11}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001940)={0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, @in={0x2, 0x4e22, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x4, 0x7ff, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r4, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000001780)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x2c, 0x11, 0x111, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x74, r6, {0x6, 0xc}, {0xb, 0x10}, {0xd, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x3b}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000540)="ceea591e99778723fd2c40e655194d86837828196d77954a7a231beaa2c2bd57ff9857600d90988492390a82b5dc76fb195a1e4c8b423722b09a1d314b9f708281a8afed338b4292130e8238f2a8d7a2b2dbf24b735f6ca78213edf7c80f4ea10b7b7a0aefd1e74ac10cb4bb6ef7b38c24aa90acf2ece00aba5e9063f7c2e33ffa03b2bbd5ee6338474abbe7da23e592946d7560fce5302094529e40bb1a49f1b299c680f933c5e8acf4a740f0a522fc38ac36b758e2c3a31f7e02483601c320cec0370a681cf052b03095a2b1d3cf30a79d6f46ddb8e655a8016515809b2844827d2e2c", &(0x7f0000000640)="2d39f1202880ad909b434c6ec17e7a"}}, &(0x7f0000000300)) r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x515001, 0x408) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f00000001c0), 0x4) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000002800)=[{&(0x7f0000000040)="27031c00160014000000002f39afacf706e105000000655800050003ae0b80558ddbfa05145c331beb4934dcba9b37786fd80825", 0x34}, {&(0x7f00000017c0)="fa", 0x1}], 0x2}, 0x4801) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0xa}, {0x6, 0x2}, {0xc}}, ["", "", "", ""]}, 0x24}}, 0x0) 117.74099ms ago: executing program 1 (id=584): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0xffffffffffffffff) 101.107313ms ago: executing program 1 (id=585): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)=ANY=[]) 77.987755ms ago: executing program 1 (id=586): getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x9400002f) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000400)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@mblk_io_submit}, {@quota}, {@init_itable}, {@noauto_da_alloc}, {@orlov}, {@noquota}]}, 0x1, 0x608, &(0x7f0000000c40)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}}], 0x2, 0x40000040) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000000000000000000000611224000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r6, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @local, 0x5}, 0x1c) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) ppoll(&(0x7f00000002c0)=[{r1, 0x104}, {r0, 0x28}, {r1, 0x8000}, {r2, 0x200}, {r2, 0x510}, {r7, 0x2a0}, {r0, 0x100}, {r7, 0x60809067948cc1bd}], 0x8, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0x8]}, 0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf252b0000000a00010077ca8d6e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008002) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0xa00008, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 60.204378ms ago: executing program 4 (id=587): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x16, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x98ca}, @sack_perm={0x4, 0x2}, @mptcp=@remove_addr={0x1e, 0x6, 0xa, 0x0, "25cfde"}, @fastopen={0x22, 0x12, "8f02ae5e182f886a0f7a726fe76f4fa6"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec81432bcfdfea9"}, @sack={0x5, 0x6, [0x8]}]}}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[{@noinit_itable}, {@noblock_validity}, {@max_batch_time}, {@errors_remount}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x8, @mcast2, 0x7}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x5}, @in6={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x80}, @in6={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in6={0xa, 0x4e21, 0x5, @empty}, @in={0x2, 0x4e23, @loopback}], 0xb8) 28.11254ms ago: executing program 0 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x100, 0x1, 0x0, 0x0, 0xc, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x141203) close(0x3) fcntl$setstatus(r3, 0x4, 0x182400) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xfff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r5, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000066006bab9a3fe3d86ea04b31106b876c1d0000007ea60864160af36504001aff3800d7004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e45fcc5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8090) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r8, 0x2b, 0x1, 0x50d6, 0x0, 0xffd2, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2, 0x3}, {}]}, @struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4077, 0x52, 0xfed, 0x2}, 0x28) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="ac14143701000000000000000000000034bb70ecfe2eacc2342ae38d59113484e634f332188e262e157607b653407b5a4cc2627c2a9ef5f7e899ca744fdb01c86d38a190e169af2c57615a35342f5031fe634109f55c13fee9d52b5e21b503a22e5b36ae22616fb72ae6930c4a4f5a2b8091bfddb00ed561d001890fe5e42d82a5e6767cbd618140afdd60df0b5af3b55b64be3be6423e10060000007a000000000000000000"], 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000}, @CTA_SEQ_ADJ_ORIG={0xfe59, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x48041) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f00000001c0)={0x80fd, 0x2}) 0s ago: executing program 4 (id=589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xc8, 0x9, 0xa00}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x3c}}, 0x20004090) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (rerun: 32) r4 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01004cbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r8, 0x0, 0x0, 0x5}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r10, 0x58}, 0x10) (async, rerun: 64) close(0x4) (async, rerun: 64) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000780)={{r0, &(0x7f0000000000)='$^@+-$(^/]@\']/\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x3]}, {0x9f, 0x2, 0x76, 0x8fc}}, 0x9027, &(0x7f00000000c0), &(0x7f0000000100)=0x7783eb84}, 0x3, &(0x7f00000005c0)=[{0x2, 0xffffffff, &(0x7f0000000140)=':.@![!,\x00', &(0x7f0000000240)="7a3763ae98dbf3adc8c0c53ca17cccb57eb9b6d766882f47af88ef120859af9f68ab88787907833a595bd407aeb253f1f916f4c5cfc78c9e6523b2b53f105d567a2e9a1c1c0782f180d3cdfc088fe798d5e66df35c", 0x55, 0x20}, {0x1, 0x6, &(0x7f0000000400)='#}{-[\x00', &(0x7f0000000440)="6c431e0cbc2b04bb1363060557e978b578d7ce35ba5b8ac4083ae5b09cb4d25ee025f4825a1c96dc60ce6e12537322e5bacd80360e6ed2a81077fe3d13c426eb71bff942eb18e221131a2397e99b1394433fbeb3fa03172db7894701b482105331216043edf6a922c96361499d6e870f96e6a2930ebebe92e0953000381da429a29956176024c46e4c6ba55888ef1227ef3bd58f4f088a812bf2", 0x9a}, {0x1, 0x3, &(0x7f0000000500)='(*!*+\xc5\x1e+\x00', &(0x7f0000000640)="979cecc1b557a41be0d43dd5340e4c6b04fa9d73d422bb2f7fba6de85fa13ee621e44235f920a0d8a0ffcb5033ef18d34196454170531bfbf367014c44382ffa2ac3b1cc", 0x44}]}) kernel console output (not intermixed with test programs): an LRU page: Recovered [ 34.423802][ T5056] Injecting memory failure for pfn 0x136a5e at process virtual address 0x2002d000 [ 34.423830][ T5056] Memory failure: 0x136a5e: recovery action for clean LRU page: Recovered [ 34.423837][ T5056] Injecting memory failure for pfn 0x136a5f at process virtual address 0x2002e000 [ 34.423866][ T5056] Memory failure: 0x136a5f: recovery action for clean LRU page: Recovered [ 34.423873][ T5056] Injecting memory failure for pfn 0x136a60 at process virtual address 0x2002f000 [ 34.423902][ T5056] Memory failure: 0x136a60: recovery action for clean LRU page: Recovered [ 34.423909][ T5056] Injecting memory failure for pfn 0x136a61 at process virtual address 0x20030000 [ 34.423938][ T5056] Memory failure: 0x136a61: recovery action for clean LRU page: Recovered [ 34.423945][ T5056] Injecting memory failure for pfn 0x136a62 at process virtual address 0x20031000 [ 34.423974][ T5056] Memory failure: 0x136a62: recovery action for clean LRU page: Recovered [ 34.423981][ T5056] Injecting memory failure for pfn 0x136a63 at process virtual address 0x20032000 [ 34.424010][ T5056] Memory failure: 0x136a63: recovery action for clean LRU page: Recovered [ 34.424018][ T5056] Injecting memory failure for pfn 0x136a64 at process virtual address 0x20033000 [ 34.424046][ T5056] Memory failure: 0x136a64: recovery action for clean LRU page: Recovered [ 34.424053][ T5056] Injecting memory failure for pfn 0x136a65 at process virtual address 0x20034000 [ 34.424081][ T5056] Memory failure: 0x136a65: recovery action for clean LRU page: Recovered [ 34.424088][ T5056] Injecting memory failure for pfn 0x136a66 at process virtual address 0x20035000 [ 34.424116][ T5056] Memory failure: 0x136a66: recovery action for clean LRU page: Recovered [ 34.424123][ T5056] Injecting memory failure for pfn 0x136a67 at process virtual address 0x20036000 [ 34.424151][ T5056] Memory failure: 0x136a67: recovery action for clean LRU page: Recovered [ 34.424159][ T5056] Injecting memory failure for pfn 0x136a68 at process virtual address 0x20037000 [ 34.424186][ T5056] Memory failure: 0x136a68: recovery action for clean LRU page: Recovered [ 34.424194][ T5056] Injecting memory failure for pfn 0x136a69 at process virtual address 0x20038000 [ 34.424222][ T5056] Memory failure: 0x136a69: recovery action for clean LRU page: Recovered [ 34.424229][ T5056] Injecting memory failure for pfn 0x136a6a at process virtual address 0x20039000 [ 34.424258][ T5056] Memory failure: 0x136a6a: recovery action for clean LRU page: Recovered [ 34.424265][ T5056] Injecting memory failure for pfn 0x136a6b at process virtual address 0x2003a000 [ 34.424295][ T5056] Memory failure: 0x136a6b: recovery action for clean LRU page: Recovered [ 34.424302][ T5056] Injecting memory failure for pfn 0x136a6c at process virtual address 0x2003b000 [ 34.424331][ T5056] Memory failure: 0x136a6c: recovery action for clean LRU page: Recovered [ 34.424338][ T5056] Injecting memory failure for pfn 0x136a6d at process virtual address 0x2003c000 [ 34.424367][ T5056] Memory failure: 0x136a6d: recovery action for clean LRU page: Recovered [ 34.424374][ T5056] Injecting memory failure for pfn 0x136a6e at process virtual address 0x2003d000 [ 34.424402][ T5056] Memory failure: 0x136a6e: recovery action for clean LRU page: Recovered [ 34.424409][ T5056] Injecting memory failure for pfn 0x136a6f at process virtual address 0x2003e000 [ 34.424438][ T5056] Memory failure: 0x136a6f: recovery action for clean LRU page: Recovered [ 34.424445][ T5056] Injecting memory failure for pfn 0x1212d2 at process virtual address 0x2003f000 [ 34.424474][ T5056] Memory failure: 0x1212d2: recovery action for clean LRU page: Recovered [ 34.424481][ T5056] Injecting memory failure for pfn 0x136a72 at process virtual address 0x20040000 [ 34.424513][ T5056] Memory failure: 0x136a72: recovery action for clean LRU page: Recovered [ 34.424521][ T5056] Injecting memory failure for pfn 0x136a73 at process virtual address 0x20041000 [ 34.424551][ T5056] Memory failure: 0x136a73: recovery action for clean LRU page: Recovered [ 34.424559][ T5056] Injecting memory failure for pfn 0x136a74 at process virtual address 0x20042000 [ 34.424700][ T5056] Memory failure: 0x136a74: recovery action for clean LRU page: Recovered [ 34.424707][ T5056] Injecting memory failure for pfn 0x136a75 at process virtual address 0x20043000 [ 34.424736][ T5056] Memory failure: 0x136a75: recovery action for clean LRU page: Recovered [ 34.424743][ T5056] Injecting memory failure for pfn 0x136a76 at process virtual address 0x20044000 [ 34.424771][ T5056] Memory failure: 0x136a76: recovery action for clean LRU page: Recovered [ 34.424778][ T5056] Injecting memory failure for pfn 0x136a77 at process virtual address 0x20045000 [ 34.424807][ T5056] Memory failure: 0x136a77: recovery action for clean LRU page: Recovered [ 34.424814][ T5056] Injecting memory failure for pfn 0x136a78 at process virtual address 0x20046000 [ 34.424843][ T5056] Memory failure: 0x136a78: recovery action for clean LRU page: Recovered [ 34.424850][ T5056] Injecting memory failure for pfn 0x136a79 at process virtual address 0x20047000 [ 34.424878][ T5056] Memory failure: 0x136a79: recovery action for clean LRU page: Recovered [ 34.424885][ T5056] Injecting memory failure for pfn 0x136a7a at process virtual address 0x20048000 [ 34.424913][ T5056] Memory failure: 0x136a7a: recovery action for clean LRU page: Recovered [ 34.424920][ T5056] Injecting memory failure for pfn 0x136a7b at process virtual address 0x20049000 [ 34.424950][ T5056] Memory failure: 0x136a7b: recovery action for clean LRU page: Recovered [ 34.424957][ T5056] Injecting memory failure for pfn 0x136a7c at process virtual address 0x2004a000 [ 34.424986][ T5056] Memory failure: 0x136a7c: recovery action for clean LRU page: Recovered [ 34.424993][ T5056] Injecting memory failure for pfn 0x136a7d at process virtual address 0x2004b000 [ 34.425021][ T5056] Memory failure: 0x136a7d: recovery action for clean LRU page: Recovered [ 34.425028][ T5056] Injecting memory failure for pfn 0x136a7e at process virtual address 0x2004c000 [ 34.425057][ T5056] Memory failure: 0x136a7e: recovery action for clean LRU page: Recovered [ 34.425065][ T5056] Injecting memory failure for pfn 0x136a7f at process virtual address 0x2004d000 [ 34.425092][ T5056] Memory failure: 0x136a7f: recovery action for clean LRU page: Recovered [ 34.425099][ T5056] Injecting memory failure for pfn 0x136a80 at process virtual address 0x2004e000 [ 34.425124][ T5056] Memory failure: 0x136a80: recovery action for clean LRU page: Recovered [ 34.425131][ T5056] Injecting memory failure for pfn 0x136a81 at process virtual address 0x2004f000 [ 34.425156][ T5056] Memory failure: 0x136a81: recovery action for clean LRU page: Recovered [ 34.425162][ T5056] Injecting memory failure for pfn 0x136a82 at process virtual address 0x20050000 [ 34.425188][ T5056] Memory failure: 0x136a82: recovery action for clean LRU page: Recovered [ 34.425195][ T5056] Injecting memory failure for pfn 0x136a83 at process virtual address 0x20051000 [ 34.425223][ T5056] Memory failure: 0x136a83: recovery action for clean LRU page: Recovered [ 34.425230][ T5056] Injecting memory failure for pfn 0x136a84 at process virtual address 0x20052000 [ 34.425254][ T5056] Memory failure: 0x136a84: recovery action for clean LRU page: Recovered [ 34.425261][ T5056] Injecting memory failure for pfn 0x136a85 at process virtual address 0x20053000 [ 34.425285][ T5056] Memory failure: 0x136a85: recovery action for clean LRU page: Recovered [ 34.425292][ T5056] Injecting memory failure for pfn 0x136a86 at process virtual address 0x20054000 [ 34.425316][ T5056] Memory failure: 0x136a86: recovery action for clean LRU page: Recovered [ 34.425322][ T5056] Injecting memory failure for pfn 0x136a87 at process virtual address 0x20055000 [ 34.425347][ T5056] Memory failure: 0x136a87: recovery action for clean LRU page: Recovered [ 34.425353][ T5056] Injecting memory failure for pfn 0x136a88 at process virtual address 0x20056000 [ 34.425378][ T5056] Memory failure: 0x136a88: recovery action for clean LRU page: Recovered [ 34.425384][ T5056] Injecting memory failure for pfn 0x136a89 at process virtual address 0x20057000 [ 34.425408][ T5056] Memory failure: 0x136a89: recovery action for clean LRU page: Recovered [ 34.425415][ T5056] Injecting memory failure for pfn 0x136a8a at process virtual address 0x20058000 [ 34.425439][ T5056] Memory failure: 0x136a8a: recovery action for clean LRU page: Recovered [ 34.425446][ T5056] Injecting memory failure for pfn 0x136a8b at process virtual address 0x20059000 [ 34.425470][ T5056] Memory failure: 0x136a8b: recovery action for clean LRU page: Recovered [ 34.425477][ T5056] Injecting memory failure for pfn 0x136a8c at process virtual address 0x2005a000 [ 34.425501][ T5056] Memory failure: 0x136a8c: recovery action for clean LRU page: Recovered [ 34.425507][ T5056] Injecting memory failure for pfn 0x136a8d at process virtual address 0x2005b000 [ 34.425536][ T5056] Memory failure: 0x136a8d: recovery action for clean LRU page: Recovered [ 34.425542][ T5056] Injecting memory failure for pfn 0x136a8e at process virtual address 0x2005c000 [ 34.425578][ T5056] Memory failure: 0x136a8e: recovery action for clean LRU page: Recovered [ 34.425585][ T5056] Injecting memory failure for pfn 0x136a8f at process virtual address 0x2005d000 [ 34.425609][ T5056] Memory failure: 0x136a8f: recovery action for clean LRU page: Recovered [ 34.425615][ T5056] Injecting memory failure for pfn 0x136a90 at process virtual address 0x2005e000 [ 34.425640][ T5056] Memory failure: 0x136a90: recovery action for clean LRU page: Recovered [ 34.425646][ T5056] Injecting memory failure for pfn 0x136a91 at process virtual address 0x2005f000 [ 34.425670][ T5056] Memory failure: 0x136a91: recovery action for clean LRU page: Recovered [ 34.425677][ T5056] Injecting memory failure for pfn 0x136a92 at process virtual address 0x20060000 [ 34.425701][ T5056] Memory failure: 0x136a92: recovery action for clean LRU page: Recovered [ 34.425708][ T5056] Injecting memory failure for pfn 0x136a93 at process virtual address 0x20061000 [ 34.425731][ T5056] Memory failure: 0x136a93: recovery action for clean LRU page: Recovered [ 34.425738][ T5056] Injecting memory failure for pfn 0x136a94 at process virtual address 0x20062000 [ 34.425763][ T5056] Memory failure: 0x136a94: recovery action for clean LRU page: Recovered [ 34.425770][ T5056] Injecting memory failure for pfn 0x136a95 at process virtual address 0x20063000 [ 34.425794][ T5056] Memory failure: 0x136a95: recovery action for clean LRU page: Recovered [ 34.425800][ T5056] Injecting memory failure for pfn 0x136a97 at process virtual address 0x20064000 [ 34.425825][ T5056] Memory failure: 0x136a97: recovery action for clean LRU page: Recovered [ 34.425832][ T5056] Injecting memory failure for pfn 0x136a98 at process virtual address 0x20065000 [ 34.425856][ T5056] Memory failure: 0x136a98: recovery action for clean LRU page: Recovered [ 34.425863][ T5056] Injecting memory failure for pfn 0x136a99 at process virtual address 0x20066000 [ 34.425886][ T5056] Memory failure: 0x136a99: recovery action for clean LRU page: Recovered [ 34.425893][ T5056] Injecting memory failure for pfn 0x136a9a at process virtual address 0x20067000 [ 34.425917][ T5056] Memory failure: 0x136a9a: recovery action for clean LRU page: Recovered [ 34.425924][ T5056] Injecting memory failure for pfn 0x136a9b at process virtual address 0x20068000 [ 34.425948][ T5056] Memory failure: 0x136a9b: recovery action for clean LRU page: Recovered [ 34.425955][ T5056] Injecting memory failure for pfn 0x136a9c at process virtual address 0x20069000 [ 34.425979][ T5056] Memory failure: 0x136a9c: recovery action for clean LRU page: Recovered [ 34.425985][ T5056] Injecting memory failure for pfn 0x136a9d at process virtual address 0x2006a000 [ 34.426009][ T5056] Memory failure: 0x136a9d: recovery action for clean LRU page: Recovered [ 34.426016][ T5056] Injecting memory failure for pfn 0x136a9e at process virtual address 0x2006b000 [ 34.426040][ T5056] Memory failure: 0x136a9e: recovery action for clean LRU page: Recovered [ 34.426046][ T5056] Injecting memory failure for pfn 0x136a9f at process virtual address 0x2006c000 [ 34.426070][ T5056] Memory failure: 0x136a9f: recovery action for clean LRU page: Recovered [ 34.426077][ T5056] Injecting memory failure for pfn 0x136aa0 at process virtual address 0x2006d000 [ 34.426101][ T5056] Memory failure: 0x136aa0: recovery action for clean LRU page: Recovered [ 34.426108][ T5056] Injecting memory failure for pfn 0x136aa1 at process virtual address 0x2006e000 [ 34.426134][ T5056] Memory failure: 0x136aa1: recovery action for clean LRU page: Recovered [ 34.426140][ T5056] Injecting memory failure for pfn 0x136aa2 at process virtual address 0x2006f000 [ 34.426165][ T5056] Memory failure: 0x136aa2: recovery action for clean LRU page: Recovered [ 34.426172][ T5056] Injecting memory failure for pfn 0x136aa3 at process virtual address 0x20070000 [ 34.426196][ T5056] Memory failure: 0x136aa3: recovery action for clean LRU page: Recovered [ 34.426203][ T5056] Injecting memory failure for pfn 0x136aa4 at process virtual address 0x20071000 [ 34.426227][ T5056] Memory failure: 0x136aa4: recovery action for clean LRU page: Recovered [ 34.426233][ T5056] Injecting memory failure for pfn 0x136aa5 at process virtual address 0x20072000 [ 34.426260][ T5056] Memory failure: 0x136aa5: recovery action for clean LRU page: Recovered [ 34.426266][ T5056] Injecting memory failure for pfn 0x136aa6 at process virtual address 0x20073000 [ 34.426291][ T5056] Memory failure: 0x136aa6: recovery action for clean LRU page: Recovered [ 34.426297][ T5056] Injecting memory failure for pfn 0x136aa7 at process virtual address 0x20074000 [ 34.426321][ T5056] Memory failure: 0x136aa7: recovery action for clean LRU page: Recovered [ 34.426328][ T5056] Injecting memory failure for pfn 0x136aa8 at process virtual address 0x20075000 [ 34.426352][ T5056] Memory failure: 0x136aa8: recovery action for clean LRU page: Recovered [ 34.426358][ T5056] Injecting memory failure for pfn 0x136aa9 at process virtual address 0x20076000 [ 34.426382][ T5056] Memory failure: 0x136aa9: recovery action for clean LRU page: Recovered [ 34.426389][ T5056] Injecting memory failure for pfn 0x136aaa at process virtual address 0x20077000 [ 34.426412][ T5056] Memory failure: 0x136aaa: recovery action for clean LRU page: Recovered [ 34.426419][ T5056] Injecting memory failure for pfn 0x136aab at process virtual address 0x20078000 [ 34.426443][ T5056] Memory failure: 0x136aab: recovery action for clean LRU page: Recovered [ 34.426450][ T5056] Injecting memory failure for pfn 0x136aac at process virtual address 0x20079000 [ 34.426474][ T5056] Memory failure: 0x136aac: recovery action for clean LRU page: Recovered [ 34.426480][ T5056] Injecting memory failure for pfn 0x136aad at process virtual address 0x2007a000 [ 34.426504][ T5056] Memory failure: 0x136aad: recovery action for clean LRU page: Recovered [ 34.426514][ T5056] Injecting memory failure for pfn 0x136aae at process virtual address 0x2007b000 [ 34.426538][ T5056] Memory failure: 0x136aae: recovery action for clean LRU page: Recovered [ 34.442419][ T5056] Injecting memory failure for pfn 0x136aaf at process virtual address 0x2007c000 [ 34.442641][ T5056] Memory failure: 0x136aaf: recovery action for clean LRU page: Recovered [ 34.442654][ T5056] Injecting memory failure for pfn 0x136ab0 at process virtual address 0x2007d000 [ 34.442693][ T5056] Memory failure: 0x136ab0: recovery action for clean LRU page: Recovered [ 34.442702][ T5056] Injecting memory failure for pfn 0x136ab1 at process virtual address 0x2007e000 [ 34.442733][ T5056] Memory failure: 0x136ab1: recovery action for clean LRU page: Recovered [ 34.442741][ T5056] Injecting memory failure for pfn 0x136ab2 at process virtual address 0x2007f000 [ 34.442768][ T5056] Memory failure: 0x136ab2: recovery action for clean LRU page: Recovered [ 34.442776][ T5056] Injecting memory failure for pfn 0x136ab3 at process virtual address 0x20080000 [ 34.442813][ T5056] Memory failure: 0x136ab3: recovery action for clean LRU page: Recovered [ 34.442821][ T5056] Injecting memory failure for pfn 0x136ab4 at process virtual address 0x20081000 [ 34.443858][ T5056] Memory failure: 0x136ab4: recovery action for clean LRU page: Recovered [ 34.443870][ T5056] Injecting memory failure for pfn 0x136ab5 at process virtual address 0x20082000 [ 34.443907][ T5056] Memory failure: 0x136ab5: recovery action for clean LRU page: Recovered [ 34.443917][ T5056] Injecting memory failure for pfn 0x136ab6 at process virtual address 0x20083000 [ 34.444019][ T5056] Memory failure: 0x136ab6: recovery action for clean LRU page: Recovered [ 34.444030][ T5056] Injecting memory failure for pfn 0x136ab7 at process virtual address 0x20084000 [ 34.444062][ T5056] Memory failure: 0x136ab7: recovery action for clean LRU page: Recovered [ 34.444071][ T5056] Injecting memory failure for pfn 0x136ab8 at process virtual address 0x20085000 [ 34.444099][ T5056] Memory failure: 0x136ab8: recovery action for clean LRU page: Recovered [ 34.444106][ T5056] Injecting memory failure for pfn 0x136ab9 at process virtual address 0x20086000 [ 34.444133][ T5056] Memory failure: 0x136ab9: recovery action for clean LRU page: Recovered [ 34.444140][ T5056] Injecting memory failure for pfn 0x136aba at process virtual address 0x20087000 [ 34.444165][ T5056] Memory failure: 0x136aba: recovery action for clean LRU page: Recovered [ 34.444172][ T5056] Injecting memory failure for pfn 0x136abb at process virtual address 0x20088000 [ 34.444197][ T5056] Memory failure: 0x136abb: recovery action for clean LRU page: Recovered [ 34.444204][ T5056] Injecting memory failure for pfn 0x136abc at process virtual address 0x20089000 [ 34.444229][ T5056] Memory failure: 0x136abc: recovery action for clean LRU page: Recovered [ 34.444236][ T5056] Injecting memory failure for pfn 0x136abd at process virtual address 0x2008a000 [ 34.444260][ T5056] Memory failure: 0x136abd: recovery action for clean LRU page: Recovered [ 34.444267][ T5056] Injecting memory failure for pfn 0x136abe at process virtual address 0x2008b000 [ 34.444292][ T5056] Memory failure: 0x136abe: recovery action for clean LRU page: Recovered [ 34.444299][ T5056] Injecting memory failure for pfn 0x136abf at process virtual address 0x2008c000 [ 34.444323][ T5056] Memory failure: 0x136abf: recovery action for clean LRU page: Recovered [ 34.444330][ T5056] Injecting memory failure for pfn 0x136ac0 at process virtual address 0x2008d000 [ 34.444354][ T5056] Memory failure: 0x136ac0: recovery action for clean LRU page: Recovered [ 34.444361][ T5056] Injecting memory failure for pfn 0x136ac1 at process virtual address 0x2008e000 [ 34.444385][ T5056] Memory failure: 0x136ac1: recovery action for clean LRU page: Recovered [ 34.444392][ T5056] Injecting memory failure for pfn 0x136ac2 at process virtual address 0x2008f000 [ 34.444416][ T5056] Memory failure: 0x136ac2: recovery action for clean LRU page: Recovered [ 34.444423][ T5056] Injecting memory failure for pfn 0x136ac3 at process virtual address 0x20090000 [ 34.444447][ T5056] Memory failure: 0x136ac3: recovery action for clean LRU page: Recovered [ 34.444453][ T5056] Injecting memory failure for pfn 0x136ac4 at process virtual address 0x20091000 [ 34.444478][ T5056] Memory failure: 0x136ac4: recovery action for clean LRU page: Recovered [ 34.444484][ T5056] Injecting memory failure for pfn 0x136ac5 at process virtual address 0x20092000 [ 34.444508][ T5056] Memory failure: 0x136ac5: recovery action for clean LRU page: Recovered [ 34.444520][ T5056] Injecting memory failure for pfn 0x136ac6 at process virtual address 0x20093000 [ 34.444554][ T5056] Memory failure: 0x136ac6: recovery action for clean LRU page: Recovered [ 34.444561][ T5056] Injecting memory failure for pfn 0x136ac7 at process virtual address 0x20094000 [ 34.444585][ T5056] Memory failure: 0x136ac7: recovery action for clean LRU page: Recovered [ 34.444592][ T5056] Injecting memory failure for pfn 0x136ac8 at process virtual address 0x20095000 [ 34.444616][ T5056] Memory failure: 0x136ac8: recovery action for clean LRU page: Recovered [ 34.444623][ T5056] Injecting memory failure for pfn 0x136ac9 at process virtual address 0x20096000 [ 34.444648][ T5056] Memory failure: 0x136ac9: recovery action for clean LRU page: Recovered [ 34.444655][ T5056] Injecting memory failure for pfn 0x136aca at process virtual address 0x20097000 [ 34.444679][ T5056] Memory failure: 0x136aca: recovery action for clean LRU page: Recovered [ 34.444685][ T5056] Injecting memory failure for pfn 0x136acb at process virtual address 0x20098000 [ 34.444709][ T5056] Memory failure: 0x136acb: recovery action for clean LRU page: Recovered [ 34.444716][ T5056] Injecting memory failure for pfn 0x136acc at process virtual address 0x20099000 [ 34.444741][ T5056] Memory failure: 0x136acc: recovery action for clean LRU page: Recovered [ 34.444748][ T5056] Injecting memory failure for pfn 0x136a71 at process virtual address 0x2009a000 [ 34.444772][ T5056] Memory failure: 0x136a71: recovery action for clean LRU page: Recovered [ 34.444779][ T5056] Injecting memory failure for pfn 0x136ace at process virtual address 0x2009b000 [ 34.444803][ T5056] Memory failure: 0x136ace: recovery action for clean LRU page: Recovered [ 34.444809][ T5056] Injecting memory failure for pfn 0x136acf at process virtual address 0x2009c000 [ 34.444833][ T5056] Memory failure: 0x136acf: recovery action for clean LRU page: Recovered [ 34.444840][ T5056] Injecting memory failure for pfn 0x136ad0 at process virtual address 0x2009d000 [ 34.444864][ T5056] Memory failure: 0x136ad0: recovery action for clean LRU page: Recovered [ 34.444871][ T5056] Injecting memory failure for pfn 0x136ad1 at process virtual address 0x2009e000 [ 34.444895][ T5056] Memory failure: 0x136ad1: recovery action for clean LRU page: Recovered [ 34.444901][ T5056] Injecting memory failure for pfn 0x136ad2 at process virtual address 0x2009f000 [ 34.444925][ T5056] Memory failure: 0x136ad2: recovery action for clean LRU page: Recovered [ 34.444932][ T5056] Injecting memory failure for pfn 0x136ad3 at process virtual address 0x200a0000 [ 34.444956][ T5056] Memory failure: 0x136ad3: recovery action for clean LRU page: Recovered [ 34.444963][ T5056] Injecting memory failure for pfn 0x136ad4 at process virtual address 0x200a1000 [ 34.444987][ T5056] Memory failure: 0x136ad4: recovery action for clean LRU page: Recovered [ 34.444993][ T5056] Injecting memory failure for pfn 0x136ad5 at process virtual address 0x200a2000 [ 34.445019][ T5056] Memory failure: 0x136ad5: recovery action for clean LRU page: Recovered [ 34.448343][ T5056] Injecting memory failure for pfn 0x136ad6 at process virtual address 0x200a3000 [ 34.448534][ T5056] Memory failure: 0x136ad6: recovery action for clean LRU page: Recovered [ 34.448545][ T5056] Injecting memory failure for pfn 0x136ad7 at process virtual address 0x200a4000 [ 34.448581][ T5056] Memory failure: 0x136ad7: recovery action for clean LRU page: Recovered [ 34.448591][ T5056] Injecting memory failure for pfn 0x136ad8 at process virtual address 0x200a5000 [ 34.448623][ T5056] Memory failure: 0x136ad8: recovery action for clean LRU page: Recovered [ 34.448632][ T5056] Injecting memory failure for pfn 0x136ad9 at process virtual address 0x200a6000 [ 34.448660][ T5056] Memory failure: 0x136ad9: recovery action for clean LRU page: Recovered [ 34.448667][ T5056] Injecting memory failure for pfn 0x136ada at process virtual address 0x200a7000 [ 34.448694][ T5056] Memory failure: 0x136ada: recovery action for clean LRU page: Recovered [ 34.448701][ T5056] Injecting memory failure for pfn 0x136adb at process virtual address 0x200a8000 [ 34.448727][ T5056] Memory failure: 0x136adb: recovery action for clean LRU page: Recovered [ 34.448734][ T5056] Injecting memory failure for pfn 0x136adc at process virtual address 0x200a9000 [ 34.448759][ T5056] Memory failure: 0x136adc: recovery action for clean LRU page: Recovered [ 34.448766][ T5056] Injecting memory failure for pfn 0x136add at process virtual address 0x200aa000 [ 34.448790][ T5056] Memory failure: 0x136add: recovery action for clean LRU page: Recovered [ 34.448797][ T5056] Injecting memory failure for pfn 0x136ade at process virtual address 0x200ab000 [ 34.448822][ T5056] Memory failure: 0x136ade: recovery action for clean LRU page: Recovered [ 34.448829][ T5056] Injecting memory failure for pfn 0x136adf at process virtual address 0x200ac000 [ 34.448853][ T5056] Memory failure: 0x136adf: recovery action for clean LRU page: Recovered [ 34.448860][ T5056] Injecting memory failure for pfn 0x136ae0 at process virtual address 0x200ad000 [ 34.448884][ T5056] Memory failure: 0x136ae0: recovery action for clean LRU page: Recovered [ 34.448891][ T5056] Injecting memory failure for pfn 0x136ae1 at process virtual address 0x200ae000 [ 34.448915][ T5056] Memory failure: 0x136ae1: recovery action for clean LRU page: Recovered [ 34.448922][ T5056] Injecting memory failure for pfn 0x136ae2 at process virtual address 0x200af000 [ 34.448946][ T5056] Memory failure: 0x136ae2: recovery action for clean LRU page: Recovered [ 34.448953][ T5056] Injecting memory failure for pfn 0x136ae3 at process virtual address 0x200b0000 [ 34.448977][ T5056] Memory failure: 0x136ae3: recovery action for clean LRU page: Recovered [ 34.448984][ T5056] Injecting memory failure for pfn 0x136ae4 at process virtual address 0x200b1000 [ 34.449008][ T5056] Memory failure: 0x136ae4: recovery action for clean LRU page: Recovered [ 34.449015][ T5056] Injecting memory failure for pfn 0x136ae5 at process virtual address 0x200b2000 [ 34.449048][ T5056] Memory failure: 0x136ae5: recovery action for clean LRU page: Recovered [ 34.449055][ T5056] Injecting memory failure for pfn 0x136ae6 at process virtual address 0x200b3000 [ 34.449079][ T5056] Memory failure: 0x136ae6: recovery action for clean LRU page: Recovered [ 34.449086][ T5056] Injecting memory failure for pfn 0x136ae7 at process virtual address 0x200b4000 [ 34.449110][ T5056] Memory failure: 0x136ae7: recovery action for clean LRU page: Recovered [ 34.449116][ T5056] Injecting memory failure for pfn 0x136ae8 at process virtual address 0x200b5000 [ 34.449141][ T5056] Memory failure: 0x136ae8: recovery action for clean LRU page: Recovered [ 34.449148][ T5056] Injecting memory failure for pfn 0x136ae9 at process virtual address 0x200b6000 [ 34.449172][ T5056] Memory failure: 0x136ae9: recovery action for clean LRU page: Recovered [ 34.449178][ T5056] Injecting memory failure for pfn 0x136aea at process virtual address 0x200b7000 [ 34.449202][ T5056] Memory failure: 0x136aea: recovery action for clean LRU page: Recovered [ 34.449209][ T5056] Injecting memory failure for pfn 0x136aeb at process virtual address 0x200b8000 [ 34.449233][ T5056] Memory failure: 0x136aeb: recovery action for clean LRU page: Recovered [ 34.449240][ T5056] Injecting memory failure for pfn 0x136aec at process virtual address 0x200b9000 [ 34.449264][ T5056] Memory failure: 0x136aec: recovery action for clean LRU page: Recovered [ 34.449271][ T5056] Injecting memory failure for pfn 0x136aed at process virtual address 0x200ba000 [ 34.449295][ T5056] Memory failure: 0x136aed: recovery action for clean LRU page: Recovered [ 34.449301][ T5056] Injecting memory failure for pfn 0x136aee at process virtual address 0x200bb000 [ 34.449326][ T5056] Memory failure: 0x136aee: recovery action for clean LRU page: Recovered [ 34.449332][ T5056] Injecting memory failure for pfn 0x136aef at process virtual address 0x200bc000 [ 34.449356][ T5056] Memory failure: 0x136aef: recovery action for clean LRU page: Recovered [ 34.449363][ T5056] Injecting memory failure for pfn 0x136af0 at process virtual address 0x200bd000 [ 34.449387][ T5056] Memory failure: 0x136af0: recovery action for clean LRU page: Recovered [ 34.449394][ T5056] Injecting memory failure for pfn 0x136af1 at process virtual address 0x200be000 [ 34.449417][ T5056] Memory failure: 0x136af1: recovery action for clean LRU page: Recovered [ 34.449424][ T5056] Injecting memory failure for pfn 0x136af2 at process virtual address 0x200bf000 [ 34.449448][ T5056] Memory failure: 0x136af2: recovery action for clean LRU page: Recovered [ 34.449454][ T5056] Injecting memory failure for pfn 0x136af3 at process virtual address 0x200c0000 [ 34.451442][ T5056] Memory failure: 0x136af3: recovery action for clean LRU page: Recovered [ 34.451454][ T5056] Injecting memory failure for pfn 0x136af4 at process virtual address 0x200c1000 [ 34.451490][ T5056] Memory failure: 0x136af4: recovery action for clean LRU page: Recovered [ 34.451499][ T5056] Injecting memory failure for pfn 0x136af5 at process virtual address 0x200c2000 [ 34.451537][ T5056] Memory failure: 0x136af5: recovery action for clean LRU page: Recovered [ 34.451546][ T5056] Injecting memory failure for pfn 0x136af6 at process virtual address 0x200c3000 [ 34.451579][ T5056] Memory failure: 0x136af6: recovery action for clean LRU page: Recovered [ 34.451587][ T5056] Injecting memory failure for pfn 0x136af7 at process virtual address 0x200c4000 [ 34.451615][ T5056] Memory failure: 0x136af7: recovery action for clean LRU page: Recovered [ 34.451623][ T5056] Injecting memory failure for pfn 0x136af8 at process virtual address 0x200c5000 [ 34.451649][ T5056] Memory failure: 0x136af8: recovery action for clean LRU page: Recovered [ 34.451657][ T5056] Injecting memory failure for pfn 0x136af9 at process virtual address 0x200c6000 [ 34.451683][ T5056] Memory failure: 0x136af9: recovery action for clean LRU page: Recovered [ 34.451690][ T5056] Injecting memory failure for pfn 0x136afa at process virtual address 0x200c7000 [ 34.451717][ T5056] Memory failure: 0x136afa: recovery action for clean LRU page: Recovered [ 34.451725][ T5056] Injecting memory failure for pfn 0x136afb at process virtual address 0x200c8000 [ 34.451749][ T5056] Memory failure: 0x136afb: recovery action for clean LRU page: Recovered [ 34.451756][ T5056] Injecting memory failure for pfn 0x136afc at process virtual address 0x200c9000 [ 34.451781][ T5056] Memory failure: 0x136afc: recovery action for clean LRU page: Recovered [ 34.451788][ T5056] Injecting memory failure for pfn 0x136afd at process virtual address 0x200ca000 [ 34.451815][ T5056] Memory failure: 0x136afd: recovery action for clean LRU page: Recovered [ 34.451822][ T5056] Injecting memory failure for pfn 0x136afe at process virtual address 0x200cb000 [ 34.451846][ T5056] Memory failure: 0x136afe: recovery action for clean LRU page: Recovered [ 34.451854][ T5056] Injecting memory failure for pfn 0x136aff at process virtual address 0x200cc000 [ 34.451880][ T5056] Memory failure: 0x136aff: recovery action for clean LRU page: Recovered [ 34.451887][ T5056] Injecting memory failure for pfn 0x136b00 at process virtual address 0x200cd000 [ 34.451911][ T5056] Memory failure: 0x136b00: recovery action for clean LRU page: Recovered [ 34.451918][ T5056] Injecting memory failure for pfn 0x136b01 at process virtual address 0x200ce000 [ 34.451944][ T5056] Memory failure: 0x136b01: recovery action for clean LRU page: Recovered [ 34.451951][ T5056] Injecting memory failure for pfn 0x136b02 at process virtual address 0x200cf000 [ 34.458892][ T5056] Memory failure: 0x136b02: recovery action for clean LRU page: Recovered [ 34.458907][ T5056] Injecting memory failure for pfn 0x136b03 at process virtual address 0x200d0000 [ 34.458948][ T5056] Memory failure: 0x136b03: recovery action for clean LRU page: Recovered [ 34.458957][ T5056] Injecting memory failure for pfn 0x136b04 at process virtual address 0x200d1000 [ 34.458989][ T5056] Memory failure: 0x136b04: recovery action for clean LRU page: Recovered [ 34.458997][ T5056] Injecting memory failure for pfn 0x136b05 at process virtual address 0x200d2000 [ 34.459024][ T5056] Memory failure: 0x136b05: recovery action for clean LRU page: Recovered [ 34.459032][ T5056] Injecting memory failure for pfn 0x136b06 at process virtual address 0x200d3000 [ 34.459058][ T5056] Memory failure: 0x136b06: recovery action for clean LRU page: Recovered [ 34.459066][ T5056] Injecting memory failure for pfn 0x136b07 at process virtual address 0x200d4000 [ 34.459091][ T5056] Memory failure: 0x136b07: recovery action for clean LRU page: Recovered [ 34.459099][ T5056] Injecting memory failure for pfn 0x136b08 at process virtual address 0x200d5000 [ 34.459191][ T5056] Memory failure: 0x136b08: recovery action for clean LRU page: Recovered [ 34.459198][ T5056] Injecting memory failure for pfn 0x136b09 at process virtual address 0x200d6000 [ 34.459223][ T5056] Memory failure: 0x136b09: recovery action for clean LRU page: Recovered [ 34.459230][ T5056] Injecting memory failure for pfn 0x136b0a at process virtual address 0x200d7000 [ 34.459257][ T5056] Memory failure: 0x136b0a: recovery action for clean LRU page: Recovered [ 34.459264][ T5056] Injecting memory failure for pfn 0x136b0b at process virtual address 0x200d8000 [ 34.459291][ T5056] Memory failure: 0x136b0b: recovery action for clean LRU page: Recovered [ 34.459298][ T5056] Injecting memory failure for pfn 0x136b0c at process virtual address 0x200d9000 [ 34.459332][ T5056] Memory failure: 0x136b0c: recovery action for clean LRU page: Recovered [ 34.459339][ T5056] Injecting memory failure for pfn 0x136b0d at process virtual address 0x200da000 [ 34.459365][ T5056] Memory failure: 0x136b0d: recovery action for clean LRU page: Recovered [ 34.459372][ T5056] Injecting memory failure for pfn 0x136b0e at process virtual address 0x200db000 [ 34.459397][ T5056] Memory failure: 0x136b0e: recovery action for clean LRU page: Recovered [ 34.459404][ T5056] Injecting memory failure for pfn 0x136b0f at process virtual address 0x200dc000 [ 34.459431][ T5056] Memory failure: 0x136b0f: recovery action for clean LRU page: Recovered [ 34.459438][ T5056] Injecting memory failure for pfn 0x136b10 at process virtual address 0x200dd000 [ 34.459465][ T5056] Memory failure: 0x136b10: recovery action for clean LRU page: Recovered [ 34.459472][ T5056] Injecting memory failure for pfn 0x136b11 at process virtual address 0x200de000 [ 34.459989][ T5056] Memory failure: 0x136b11: recovery action for clean LRU page: Recovered [ 34.460000][ T5056] Injecting memory failure for pfn 0x136b12 at process virtual address 0x200df000 [ 34.460028][ T5056] Memory failure: 0x136b12: recovery action for clean LRU page: Recovered [ 34.460035][ T5056] Injecting memory failure for pfn 0x136b13 at process virtual address 0x200e0000 [ 34.460060][ T5056] Memory failure: 0x136b13: recovery action for clean LRU page: Recovered [ 34.460067][ T5056] Injecting memory failure for pfn 0x136625 at process virtual address 0x200e1000 [ 34.460092][ T5056] Memory failure: 0x136625: recovery action for clean LRU page: Recovered [ 34.460098][ T5056] Injecting memory failure for pfn 0x13780d at process virtual address 0x200e2000 [ 34.460124][ T5056] Memory failure: 0x13780d: recovery action for clean LRU page: Recovered [ 34.460131][ T5056] Injecting memory failure for pfn 0x137823 at process virtual address 0x200e3000 [ 34.460155][ T5056] Memory failure: 0x137823: recovery action for clean LRU page: Recovered [ 34.460162][ T5056] Injecting memory failure for pfn 0x137818 at process virtual address 0x200e4000 [ 34.460187][ T5056] Memory failure: 0x137818: recovery action for clean LRU page: Recovered [ 34.460194][ T5056] Injecting memory failure for pfn 0x136b21 at process virtual address 0x200e5000 [ 34.486742][ T5056] Memory failure: 0x136b21: recovery action for clean LRU page: Recovered [ 34.548292][ T5061] loop4: detected capacity change from 0 to 1024 [ 34.594740][ T5061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.645150][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.758203][ T5073] loop3: detected capacity change from 0 to 2048 [ 34.780366][ T5073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.783551][ T5074] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 34.785609][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.786388][ T5074] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 34.791736][ T5073] syz.3.41 (5073): /proc/5072/oom_adj is deprecated, please use /proc/5072/oom_score_adj instead. [ 34.792604][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 34.852694][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.882051][ T5081] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 34.882067][ T5081] nvme nvme0: syz.1.43: nsid (0) in cmd does not match nsid (1) of namespace [ 35.109079][ T5070] sctp: [Deprecated]: syz.4.40 (pid 5070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 35.109079][ T5070] Use struct sctp_sack_info instead [ 35.132630][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 35.137434][ T5088] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 35.187161][ T5093] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 35.200259][ T5093] EXT4-fs (loop1): 1 truncate cleaned up [ 35.200862][ T5093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.617941][ T5111] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 35.649000][ T5111] syzkaller1: entered promiscuous mode [ 35.649035][ T5111] syzkaller1: entered allmulticast mode [ 35.690102][ T5109] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.706437][ T5109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.964809][ T5131] tmpfs: Bad value for 'mpol' [ 36.006506][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.026140][ T5137] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.55: iget: bad extra_isize 90 (inode size 256) [ 36.026222][ T5137] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.026573][ T5137] EXT4-fs (loop0): Remounting filesystem read-only [ 36.026627][ T5137] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.026638][ T5137] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 36.026669][ T5137] EXT4-fs (loop0): 1 orphan inode deleted [ 36.027135][ T5137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.032005][ T5137] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 36.053998][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.148019][ T5152] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.148058][ T5152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.159884][ T5152] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 36.169633][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 36.169661][ C1] EXT4-fs (loop0): initial error at time 36: mb_free_blocks:2049: inode 11: block 198 [ 36.169702][ C1] EXT4-fs (loop0): last error at time 36: mb_free_blocks:2049: inode 11: block 198 [ 36.169878][ T5152] EXT4-fs (loop0): Remounting filesystem read-only [ 36.170811][ T5152] EXT4-fs (loop0): 1 truncate cleaned up [ 36.171289][ T5152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.199068][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.489616][ T4715] Bluetooth: hci1: command tx timeout [ 36.489657][ T4715] Bluetooth: hci2: command tx timeout [ 36.489682][ T4715] Bluetooth: hci4: command tx timeout [ 36.494074][ T4725] Bluetooth: hci3: command tx timeout [ 36.574273][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.890911][ T50] Bluetooth: hci0: command tx timeout [ 36.922172][ T5227] ext4: Unknown parameter '' [ 37.002673][ T5238] gre0: entered promiscuous mode [ 37.002706][ T5238] gre0: entered allmulticast mode [ 37.047214][ T5242] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.090347][ T5242] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.102969][ T5242] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 37.124091][ T5242] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 37.180715][ T4713] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.196448][ T4383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.241037][ T4383] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.249752][ T5261] tipc: Enabling of bearer rejected, failed to enable media [ 37.292997][ T5255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.293443][ T5255] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 37.293520][ T5255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.293552][ T5255] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 37.293591][ T5255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.293614][ T5255] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 37.293646][ T5255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.293668][ T5255] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 37.293699][ T5255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.334142][ T5269] fido_id[5269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.398336][ T5209] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.398874][ T5209] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.398894][ T5209] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.398912][ T5209] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.232013][ T5288] block nbd0: shutting down sockets [ 38.454789][ T5300] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 38.454847][ T5300] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 38.505637][ T5316] set_capacity_and_notify: 10 callbacks suppressed [ 38.507023][ T5304] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 38.508855][ T5316] loop3: detected capacity change from 0 to 1024 [ 38.518628][ T5316] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.523292][ T5300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 38.523378][ T5300] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 38.527230][ T5300] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 38.527248][ T5316] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 38.530270][ T5316] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.534036][ T5316] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.96: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 38.534043][ T5300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 38.534104][ T5300] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 38.540888][ T5300] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 38.543469][ T5316] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 38.544002][ T5316] EXT4-fs (loop3): no journal found [ 38.545421][ T5300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 38.545778][ T5300] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 38.549182][ T5316] EXT4-fs (loop3): can't get journal size [ 38.549236][ T5300] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 38.550404][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 38.550414][ C1] EXT4-fs (loop3): initial error at time 38: ext4_ext_check_inode:521: inode 3 [ 38.550428][ C1] EXT4-fs (loop3): last error at time 38: ext4_ext_check_inode:521: inode 3 [ 38.554911][ T5300] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 38.554970][ T5300] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 38.562712][ T5300] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 38.568367][ T5316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.571509][ T50] Bluetooth: hci2: command tx timeout [ 38.573572][ T5300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 38.573734][ T5300] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 38.582412][ T5300] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 38.602004][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.615578][ T5300] __nla_validate_parse: 8 callbacks suppressed [ 38.615623][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 38.646160][ T5325] syz.0.99: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 38.647331][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT [ 38.647343][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.647348][ T5325] Call trace: [ 38.647351][ T5325] show_stack+0x2c/0x3c (C) [ 38.647373][ T5325] __dump_stack+0x30/0x40 [ 38.647386][ T5325] dump_stack_lvl+0xd8/0x12c [ 38.647398][ T5325] dump_stack+0x1c/0x28 [ 38.647409][ T5325] warn_alloc+0x1bc/0x1d0 [ 38.647420][ T5325] __vmalloc_node_range_noprof+0x120/0x105c [ 38.647432][ T5325] __vmalloc_node_noprof+0xec/0x14c [ 38.647443][ T5325] vmalloc_noprof+0x3c/0x4c [ 38.647454][ T5325] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 38.647465][ T5325] dvb_demux_do_ioctl+0x3e0/0x4bc [ 38.647474][ T5325] dvb_usercopy+0x2a4/0x4d4 [ 38.647482][ T5325] dvb_demux_ioctl+0x3c/0x54 [ 38.647491][ T5325] __arm64_sys_ioctl+0x154/0x1cc [ 38.647511][ T5325] invoke_syscall+0x98/0x244 [ 38.647523][ T5325] el0_svc_common+0xec/0x23c [ 38.647535][ T5325] do_el0_svc+0x4c/0x5c [ 38.647547][ T5325] el0_svc+0x64/0x260 [ 38.647558][ T5325] el0t_64_sync_handler+0x44/0x104 [ 38.647568][ T5325] el0t_64_sync+0x198/0x19c [ 38.647579][ T5325] Mem-Info: [ 38.647584][ T5325] active_anon:50 inactive_anon:14756 isolated_anon:0 [ 38.647584][ T5325] active_file:2287 inactive_file:13255 isolated_file:0 [ 38.647584][ T5325] unevictable:768 dirty:1682 writeback:0 [ 38.647584][ T5325] slab_reclaimable:8924 slab_unreclaimable:87947 [ 38.647584][ T5325] mapped:28917 shmem:10575 pagetables:1010 [ 38.647584][ T5325] sec_pagetables:0 bounce:0 [ 38.647584][ T5325] kernel_misc_reclaimable:0 [ 38.647584][ T5325] free:1469643 free_pcp:13633 free_cma:7616 [ 38.647607][ T5325] Node 0 active_anon:200kB inactive_anon:59024kB active_file:9148kB inactive_file:53020kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115668kB dirty:6728kB writeback:0kB shmem:42300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9224kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 38.647628][ T5325] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 38.647653][ T5325] lowmem_reserve[]: 0 0 3651 3651 3651 [ 38.647672][ T5325] Node 0 Normal free:2800684kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:200kB inactive_anon:59024kB active_file:9148kB inactive_file:53020kB unevictable:3072kB writepending:6728kB zspages:0kB present:5242880kB managed:3739084kB mlocked:0kB bounce:0kB free_pcp:54532kB local_pcp:26896kB free_cma:0kB [ 38.647696][ T5325] lowmem_reserve[]: 0 0 0 0 0 [ 38.647714][ T5325] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 38.647777][ T5325] Node 0 Normal: 1925*4kB (UE) 589*8kB (U) 163*16kB (UM) 8*32kB (UE) 4*64kB (UE) 1*128kB (U) 1*256kB (M) 1*512kB (E) 3*1024kB (UME) 4*2048kB (UME) 677*4096kB (UM) = 2800684kB [ 38.647856][ T5325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 38.647863][ T5325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 38.647870][ T5325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 38.647876][ T5325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 38.647883][ T5325] 26138 total pagecache pages [ 38.647887][ T5325] 0 pages in swap cache [ 38.647893][ T5325] Free swap = 124996kB [ 38.651152][ T5325] Total swap = 124996kB [ 38.651170][ T5325] 2097152 pages RAM [ 38.651179][ T5325] 0 pages HighMem/MovableOnly [ 38.651184][ T5325] 392333 pages reserved [ 38.651188][ T5325] 8192 pages cma reserved [ 38.651191][ T5325] 230 pages hwpoisoned [ 38.671282][ T5300] could not allocate digest TFM handle sha3-256-generic [ 38.673814][ T5328] FAULT_INJECTION: forcing a failure. [ 38.673814][ T5328] name failslab, interval 1, probability 0, space 0, times 1 [ 38.673830][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT [ 38.673840][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.673845][ T5328] Call trace: [ 38.673848][ T5328] show_stack+0x2c/0x3c (C) [ 38.673867][ T5328] __dump_stack+0x30/0x40 [ 38.673878][ T5328] dump_stack_lvl+0xd8/0x12c [ 38.673888][ T5328] dump_stack+0x1c/0x28 [ 38.673898][ T5328] should_fail_ex+0x41c/0x590 [ 38.673906][ T5328] should_failslab+0xc4/0x120 [ 38.673914][ T5328] __kmalloc_cache_node_noprof+0x98/0x60c [ 38.673923][ T5328] __get_vm_area_node+0x188/0x32c [ 38.673932][ T5328] __vmalloc_node_range_noprof+0x2c8/0x105c [ 38.673942][ T5328] __vmalloc_node_noprof+0xec/0x14c [ 38.673951][ T5328] __vmalloc_noprof+0x64/0x8c [ 38.673960][ T5328] bpf_prog_alloc_no_stats+0x60/0x488 [ 38.673968][ T5328] bpf_prog_alloc+0x48/0x110 [ 38.673975][ T5328] bpf_prog_load+0x5d8/0x158c [ 38.673983][ T5328] __sys_bpf+0x7d4/0x82c [ 38.673990][ T5328] __arm64_sys_bpf+0xd0/0xec [ 38.673996][ T5328] invoke_syscall+0x98/0x244 [ 38.674006][ T5328] el0_svc_common+0xec/0x23c [ 38.674016][ T5328] do_el0_svc+0x4c/0x5c [ 38.674025][ T5328] el0_svc+0x64/0x260 [ 38.674035][ T5328] el0t_64_sync_handler+0x44/0x104 [ 38.674043][ T5328] el0t_64_sync+0x198/0x19c [ 38.837309][ T5347] loop2: detected capacity change from 0 to 256 [ 38.842091][ T5347] vfat: Unknown parameter 'nonGPL' [ 38.893077][ T5354] gtp0: entered allmulticast mode [ 38.901415][ T5367] loop2: detected capacity change from 0 to 512 [ 38.933466][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.989459][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.041019][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.046833][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.156704][ T5475] loop0: detected capacity change from 0 to 256 [ 39.168297][ T5475] FAT-fs (loop0): Directory bread(block 1285) failed [ 39.168338][ T5475] FAT-fs (loop0): Directory bread(block 1286) failed [ 39.168363][ T5475] FAT-fs (loop0): Directory bread(block 1287) failed [ 39.168408][ T5475] FAT-fs (loop0): Directory bread(block 1288) failed [ 39.354267][ T5494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 39.480406][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 39.522194][ T5522] binder: 5521:5522 ioctl 40086e81 20000080 returned -22 [ 39.526590][ T5516] loop0: detected capacity change from 0 to 4096 [ 39.526951][ T5516] EXT4-fs: inline encryption not supported [ 39.528065][ T5522] binder: BINDER_SET_CONTEXT_MGR already set [ 39.528071][ T5522] binder: 5521:5522 ioctl 4018620d 20000040 returned -16 [ 39.534690][ T5516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.541056][ T5522] loop2: detected capacity change from 0 to 1024 [ 39.548686][ T5508] loop4: detected capacity change from 0 to 128 [ 39.550297][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.572771][ T5516] 9p: Bad value for 'wfdno' [ 39.574648][ T5508] FAT-fs (loop4): bogus logical sector size 0 [ 39.574681][ T5508] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 39.574855][ T5508] FAT-fs (loop4): Can't find a valid FAT filesystem [ 39.584924][ T5522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.598791][ T5522] EXT4-fs (loop2): shut down requested (2) [ 39.664549][ T5535] loop1: detected capacity change from 0 to 8192 [ 39.888427][ T5546] binder: 5545:5546 ioctl c0306201 20000080 returned -14 [ 39.891808][ T5546] binder: 5545:5546 ioctl c0306201 200003c0 returned -14 [ 40.104657][ T5550] process 'syz.4.125' launched './file2' with NULL argv: empty string added [ 40.185085][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.295814][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.445807][ T5553] loop4: detected capacity change from 0 to 8192 [ 40.539829][ T5569] loop2: detected capacity change from 0 to 256 [ 40.570952][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 40.571014][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 40.571047][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 40.571074][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 40.613867][ T5567] syzkaller0: entered promiscuous mode [ 40.613907][ T5567] syzkaller0: entered allmulticast mode [ 40.649772][ T4724] Bluetooth: hci2: command 0x0c1a tx timeout [ 40.649957][ T5567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.656732][ T5567] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.128: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 40.722237][ T5586] fuse: Unknown parameter 'ˆwQ¯”n–¨¤KÚ¬Í9GöÓ4Å‚†Ú‘ [ 40.722237][ T5586] YhªÑôÊLs0è”;àOÙ ý ‡t þÖ3ßïçèâV\8ïÁ Mn}›ÆwÆR;@58in' [ 40.887005][ T5594] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.103964][ T5600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 41.416797][ T5613] net_ratelimit: 4 callbacks suppressed [ 41.420844][ T5613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.514307][ T5622] capability: warning: `syz.0.144' uses deprecated v2 capabilities in a way that may be insecure [ 41.536323][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.615843][ T5630] syzkaller1: entered promiscuous mode [ 41.615926][ T5630] syzkaller1: entered allmulticast mode [ 41.639761][ T5631] input: syz0 as /devices/virtual/input/input2 [ 41.777550][ T5635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.146'. [ 41.810462][ T5638] mmap: syz.3.148 (5638) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.822307][ T5633] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.148'. [ 42.034791][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 42.045659][ T5661] Illegal XDP return value 4294967294 on prog (id 18) dev syz_tun, expect packet loss! [ 42.086267][ T5662] 9p: Bad value for 'rfdno' [ 42.103340][ T5664] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.276659][ T4718] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.368743][ T5674] warning: `syz.4.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.439215][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 42.650121][ T4724] Bluetooth: hci4: command 0x0c1a tx timeout [ 42.650361][ T4724] Bluetooth: hci3: command 0x0c1a tx timeout [ 42.650545][ T4724] Bluetooth: hci0: command 0x0c1a tx timeout [ 42.650765][ T4724] Bluetooth: hci1: command 0x0c1a tx timeout [ 42.730690][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 42.867193][ T5692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.875007][ T5692] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.163: bad orphan inode 131083 [ 42.875044][ T5692] loop2: lost filesystem error report for type 5 error -117 [ 42.875666][ T5692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.887464][ T30] audit: type=1326 audit(42.860:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5691 comm="syz.2.163" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad9792a8 code=0x0 [ 42.953197][ T5702] misc userio: No port type given on /dev/userio [ 42.956600][ T5700] misc userio: The device must be registered before sending interrupts [ 42.958617][ T5700] misc userio: The device must be registered before sending interrupts [ 43.316257][ T5710] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.322530][ T5710] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.350175][ T5711] tipc: Started in network mode [ 43.350205][ T5711] tipc: Node identity , cluster identity 4711 [ 43.350214][ T5711] tipc: Failed to obtain node identity [ 43.350223][ T5711] tipc: Enabling of bearer rejected, failed to enable media [ 43.696178][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.732847][ T5741] set_capacity_and_notify: 9 callbacks suppressed [ 43.732891][ T5741] loop2: detected capacity change from 0 to 512 [ 43.737086][ T5741] ext4: Unknown parameter 'euid<00000000000000000000' [ 43.917902][ T5761] netlink: 'syz.0.178': attribute type 18 has an invalid length. [ 44.274775][ T5770] support for the xor transformation has been removed. [ 44.474470][ T5779] loop1: detected capacity change from 0 to 1024 [ 44.498671][ T5777] syzkaller0: entered promiscuous mode [ 44.501227][ T5777] syzkaller0: entered allmulticast mode [ 44.503296][ T5781] __nla_validate_parse: 1 callbacks suppressed [ 44.503307][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 44.518504][ T5779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.620671][ T50] Bluetooth: Frame is too long (len 10, expected len 4) [ 44.700317][ T5801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.729600][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 44.729649][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 44.730246][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 44.730267][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 44.742787][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.791855][ T5813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.194'. [ 44.820057][ T4724] Bluetooth: hci2: command 0x0c1a tx timeout [ 44.821430][ T30] audit: type=1400 audit(44.790:3): lsm=SMACK fn=smack_file_ioctl action=denied subject="_" object="l" requested=r pid=5808 comm="syz.0.195" path="/43/file1" dev="tmpfs" ino=247 [ 44.871122][ T5819] loop3: detected capacity change from 0 to 128 [ 44.875919][ T5819] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.967050][ T5827] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 45.212020][ T5837] loop4: detected capacity change from 0 to 256 [ 45.215308][ T5839] 8021q: VLANs not supported on ip6_vti0 [ 45.397637][ T5850] nbd: must specify at least one socket [ 45.402570][ T5850] loop2: detected capacity change from 0 to 256 [ 45.407164][ T5845] xt_hashlimit: size too large, truncated to 1048576 [ 45.503992][ T5857] loop2: detected capacity change from 0 to 1024 [ 45.504362][ T5857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.519107][ T5857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 45.519179][ T5857] System zones: 0-1, 3-12 [ 45.519995][ T5857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.540559][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 45.566053][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.803995][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.804194][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.901325][ T5887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.210'. [ 46.183988][ T5898] vivid-000: disconnect [ 46.199182][ T5898] vivid-000: reconnect [ 46.236008][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.343804][ T5207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.482708][ T5207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.523818][ T4715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.526065][ T4715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.527614][ T4715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.531562][ T4715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.533302][ T4715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.599515][ T5207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.687492][ T5207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.809723][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 46.897241][ T5207] bridge_slave_1: left allmulticast mode [ 46.897302][ T5207] bridge_slave_1: left promiscuous mode [ 46.897777][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.905530][ T5207] bridge_slave_0: left allmulticast mode [ 46.905565][ T5207] bridge_slave_0: left promiscuous mode [ 46.905655][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.985807][ T5974] loop4: detected capacity change from 0 to 512 [ 47.002826][ T5974] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 47.014799][ T5974] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.016796][ T5974] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.223: bad orphan inode 15 [ 47.019131][ T5974] loop4: lost filesystem error report for type 5 error -117 [ 47.019530][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.019558][ C1] EXT4-fs (loop4): initial error at time 46: ext4_orphan_get:1425 [ 47.019584][ C1] EXT4-fs (loop4): last error at time 46: ext4_orphan_get:1425 [ 47.028661][ T5974] ext4_test_bit(bit=14, block=18) = 1 [ 47.028701][ T5974] is_bad_inode(inode)=0 [ 47.028708][ T5974] NEXT_ORPHAN(inode)=1023 [ 47.028714][ T5974] max_ino=32 [ 47.028720][ T5974] i_nlink=0 [ 47.037952][ T5974] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.223: corrupted xattr block 19: e_value size too large [ 47.038003][ T5974] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.041345][ T5974] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 47.042077][ T5974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.053484][ T5974] xt_hashlimit: max too large, truncated to 1048576 [ 47.090364][ T5979] overlayfs: failed to clone upperpath [ 47.091202][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.101772][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.125146][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.150643][ T5207] bond0 (unregistering): Released all slaves [ 47.155494][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 47.220722][ T5999] loop4: detected capacity change from 0 to 512 [ 47.225212][ T5999] EXT4-fs: Ignoring removed bh option [ 47.235257][ T5999] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.239281][ T5998] trusted_key: syz.0.228 sent an empty control message without MSG_MORE. [ 47.249289][ T5999] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.267933][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.269783][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.269879][ T5911] bridge_slave_0: entered allmulticast mode [ 47.270335][ T5911] bridge_slave_0: entered promiscuous mode [ 47.271052][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.271071][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.271121][ T5911] bridge_slave_1: entered allmulticast mode [ 47.271514][ T5911] bridge_slave_1: entered promiscuous mode [ 47.293144][ T4717] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 47.344145][ T50] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 47.360882][ T6019] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 47.389449][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.390583][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.397018][ T6022] loop2: detected capacity change from 0 to 1024 [ 47.398289][ T6022] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 47.398289][ T6022] [ 47.398300][ T6022] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 47.421864][ T5911] team0: Port device team_slave_0 added [ 47.422801][ T5911] team0: Port device team_slave_1 added [ 47.444183][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.444216][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.444244][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.444850][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.444857][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.444871][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.521755][ T5911] hsr_slave_0: entered promiscuous mode [ 47.522157][ T5911] hsr_slave_1: entered promiscuous mode [ 47.523614][ T5911] debugfs: 'hsr0' already exists in 'hsr' [ 47.523628][ T5911] Cannot create hsr debugfs directory [ 47.526546][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2 [ 47.623544][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.233'. [ 47.980957][ T5207] hsr_slave_0: left promiscuous mode [ 47.988031][ T5207] hsr_slave_1: left promiscuous mode [ 47.988400][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.988433][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.996824][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.998531][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.058636][ T5207] veth1_macvtap: left promiscuous mode [ 48.058697][ T5207] veth0_macvtap: left promiscuous mode [ 48.064423][ T5207] veth1_vlan: left promiscuous mode [ 48.064505][ T5207] veth0_vlan: left promiscuous mode [ 48.120613][ T6069] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 48.282736][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 48.390698][ T6078] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 48.400999][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 48.558786][ T6077] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 48.579581][ T50] Bluetooth: hci3: command tx timeout [ 48.593388][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 48.600349][ T6087] netlink: 'syz.4.238': attribute type 9 has an invalid length. [ 48.600379][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 48.604667][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 48.687174][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 48.689631][ T6089] Console: switching to colour dummy device 80x25 [ 48.693612][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1 [ 48.701599][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 48.707831][ T6087] bridge1: entered promiscuous mode [ 48.751802][ T6089] Console: switching to colour frame buffer device 128x48 [ 48.850892][ T6094] loop4: detected capacity change from 0 to 8192 [ 48.864215][ T50] Bluetooth: hci4: unexpected subevent 0x1a length: 10 > 6 [ 48.870398][ T5911] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.875337][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.876759][ T5911] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.884920][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.885326][ T5911] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.891525][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.897062][ T5911] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.904055][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.971319][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.981254][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.991455][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.991507][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.992212][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.992234][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.125543][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.349339][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.519731][ T6193] input: syz0 as /devices/virtual/input/input3 [ 49.595330][ T5911] veth0_vlan: entered promiscuous mode [ 49.603886][ T5911] veth1_vlan: entered promiscuous mode [ 49.695898][ T5911] veth0_macvtap: entered promiscuous mode [ 49.705934][ T5911] veth1_macvtap: entered promiscuous mode [ 49.740364][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.752040][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.802777][ T5204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.802946][ T5204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.803057][ T5204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.803087][ T5204] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.935698][ T6233] __nla_validate_parse: 4 callbacks suppressed [ 49.937208][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.260'. [ 49.949141][ T6227] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 49.980510][ T6233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.197844][ T6243] overlayfs: failed to clone upperpath [ 50.376914][ T6246] 9pnet: p9_errstr2errno: server reported unknown error  [ 50.382887][ T6254] fuse: Bad value for 'fd' [ 50.410304][ T6258] fuse: Bad value for 'fd' [ 50.550095][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 50.652455][ T6285] loop1: detected capacity change from 0 to 2048 [ 50.658629][ T50] Bluetooth: hci3: command tx timeout [ 50.677747][ T6285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.694489][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.028273][ T6338] team0 (unregistering): Port device team_slave_0 removed [ 51.038050][ T6338] team0 (unregistering): Port device team_slave_1 removed [ 51.075694][ T6334] loop2: detected capacity change from 0 to 512 [ 51.079450][ T6334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.085765][ T6334] EXT4-fs (loop2): 1 truncate cleaned up [ 51.087635][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.181981][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.304712][ T6367] Injecting memory failure for pfn 0x120994 at process virtual address 0x20000000 [ 51.307455][ T6367] Memory failure: 0x120994: Sending SIGBUS to syz.2.275:6367 due to hardware memory corruption [ 51.308278][ T6367] Memory failure: 0x120994: recovery action for dirty LRU page: Recovered [ 51.308311][ T6367] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 51.308382][ T6367] Memory failure: 0x219070: unhandlable page. [ 51.308391][ T6367] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 51.609570][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.610968][ T4722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.610980][ T4722] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 51.766532][ T6371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 51.766572][ T6371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 51.796704][ T6371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 51.796750][ T6371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 51.815277][ T6371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 51.815322][ T6371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 52.729752][ T50] Bluetooth: hci3: command tx timeout [ 53.689617][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 53.690969][ T4722] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 53.690994][ T4722] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 53.693555][ T6398] fuse: Bad value for 'fd' [ 54.809628][ T50] Bluetooth: hci3: command tx timeout [ 55.779565][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.779584][ T4722] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 55.779605][ T4722] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 57.561613][ T6465] sctp: [Deprecated]: syz.0.295 (pid 6465) Use of int in max_burst socket option. [ 57.561613][ T6465] Use struct sctp_assoc_value instead [ 57.648267][ T6470] netlink: 'syz.0.297': attribute type 12 has an invalid length. [ 57.648296][ T6470] netlink: 'syz.0.297': attribute type 29 has an invalid length. [ 57.648306][ T6470] netlink: 148 bytes leftover after parsing attributes in process `syz.0.297'. [ 57.849569][ T4722] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 57.849602][ T4722] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 57.859619][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 58.554614][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 58.577136][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'. [ 58.618712][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.0.301'. [ 58.618747][ T6482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.666642][ T6488] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 59.604729][ T6517] overlayfs: failed to clone upperpath [ 60.169550][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.169572][ T4722] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 60.169595][ T4722] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 60.353847][ T6534] loop4: detected capacity change from 0 to 512 [ 60.356201][ T6538] loop2: detected capacity change from 0 to 512 [ 60.359432][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.363029][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.383221][ T6534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.384571][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.384584][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.414843][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.596206][ T6557] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.596246][ T6557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.624016][ T6566] netlink: 56 bytes leftover after parsing attributes in process `syz.0.314'. [ 60.627736][ T6564] loop4: detected capacity change from 0 to 1024 [ 60.633248][ T6564] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.726356][ T6564] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.315: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.731592][ T6564] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.736085][ T6570] netlink: 3 bytes leftover after parsing attributes in process `syz.2.316'. [ 60.739746][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 60.739757][ C1] EXT4-fs (loop4): initial error at time 60: ext4_map_blocks:791: inode 3: block 2 [ 60.739775][ C1] EXT4-fs (loop4): last error at time 60: ext4_map_blocks:791: inode 3: block 2 [ 60.746612][ T6564] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 60.746673][ T6564] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.315: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.746697][ T6564] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.751844][ T6564] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 60.751876][ T6564] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.315: Failed to acquire dquot type 0 [ 60.751902][ T6564] loop4: lost filesystem error report for type 5 error -117 [ 60.758502][ T6564] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 60.758542][ T6564] loop4: lost filesystem error report for type 5 error -117 [ 60.769438][ T6564] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.315: mark_inode_dirty error [ 60.775028][ T6564] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.778455][ T6564] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 60.778531][ T6564] EXT4-fs (loop4): 1 orphan inode deleted [ 60.788012][ T6564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.793268][ T3506] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.802864][ T3506] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 60.804835][ T3506] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 60.822476][ T26] IPVS: starting estimator thread 0... [ 60.861253][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.871016][ T14] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.871050][ T14] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.874349][ T14] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 60.874383][ T14] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 60.874409][ T14] loop4: lost filesystem error report for type 5 error -117 [ 60.881255][ T4717] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 60.885758][ T4717] loop4: lost filesystem error report for type 5 error -117 [ 60.887773][ T4717] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 60.887888][ T4717] loop4: lost filesystem error report for type 5 error -117 [ 60.891585][ T4717] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 60.891612][ T4717] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.919731][ T6571] IPVS: using max 61 ests per chain, 146400 per kthread [ 61.035828][ T6584] overlayfs: failed to resolve './sys/file0': -2 [ 61.127536][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.327'. [ 61.207006][ T6623] loop4: detected capacity change from 0 to 256 [ 61.298722][ T6635] loop4: detected capacity change from 0 to 128 [ 61.305364][ T6635] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.313208][ T6635] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.347994][ T5206] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.601952][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 61.602859][ T6666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.335'. [ 61.702546][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.340'. [ 61.828655][ T6701] loop1: detected capacity change from 0 to 128 [ 61.834777][ T6701] ext3: Unknown parameter 'hash' [ 61.843699][ T6694] loop4: detected capacity change from 0 to 8192 [ 61.899339][ T6694] loop4: AHDI p1 p2 p3 p4 [ 61.903780][ T6694] loop4: p3 start 1638400 is beyond EOD, truncated [ 61.905557][ T6694] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 61.986312][ T26] kernel write not supported for file /input/mice (pid: 26 comm: kworker/1:1) [ 62.001430][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 62.003826][ T5401] udevd[5401]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.008335][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 62.126422][ T6736] loop4: detected capacity change from 0 to 128 [ 62.144199][ T6738] loop1: detected capacity change from 0 to 256 [ 62.681832][ T6761] fuse: Unknown parameter 'fsname' [ 62.688043][ T6763] loop4: detected capacity change from 0 to 512 [ 62.705117][ T6762] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.708696][ T6763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.751800][ T6763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.358'. [ 62.755622][ T6763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.358'. [ 62.812055][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.321734][ T6778] syz_tun: entered allmulticast mode [ 63.368989][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 63.400667][ T6787] binder: 6786:6787 tried to acquire reference to desc 0, got 1 instead [ 63.404369][ T6791] tunl0: entered promiscuous mode [ 63.410488][ T6791] netlink: 'syz.5.367': attribute type 4 has an invalid length. [ 63.410520][ T6791] netlink: 9 bytes leftover after parsing attributes in process `syz.5.367'. [ 63.415570][ T6795] trusted_key: encrypted_key: hex blob is missing [ 63.451959][ T6799] binder: 6786:6799 got transaction with invalid data ptr [ 63.452079][ T6799] binder: 6786:6799 transaction call to 6786:0 failed 9/29201/-14, code 0 size 0-24 line 3511 [ 63.481438][ T26] binder: undelivered TRANSACTION_COMPLETE [ 63.481475][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.486664][ T26] binder: undelivered transaction 8, process died. [ 63.535260][ T6803] xt_hashlimit: size too large, truncated to 1048576 [ 63.538510][ T6806] tmpfs: Bad value for 'nr_blocks' [ 63.574275][ T6809] input: syz0 as /devices/virtual/input/input4 [ 63.578270][ T6809] FAULT_INJECTION: forcing a failure. [ 63.578270][ T6809] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.578310][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT [ 63.578324][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.578330][ T6809] Call trace: [ 63.578334][ T6809] show_stack+0x2c/0x3c (C) [ 63.578357][ T6809] __dump_stack+0x30/0x40 [ 63.578371][ T6809] dump_stack_lvl+0xd8/0x12c [ 63.578381][ T6809] dump_stack+0x1c/0x28 [ 63.578390][ T6809] should_fail_ex+0x41c/0x590 [ 63.578399][ T6809] should_fail+0x14/0x24 [ 63.578405][ T6809] should_fail_usercopy+0x20/0x30 [ 63.578412][ T6809] _inline_copy_from_user+0x3c/0x174 [ 63.578424][ T6809] input_event_from_user+0xb4/0x250 [ 63.578434][ T6809] uinput_write+0x238/0xb0c [ 63.578445][ T6809] vfs_write+0x2a4/0xa0c [ 63.578453][ T6809] ksys_write+0x12c/0x228 [ 63.578459][ T6809] __arm64_sys_write+0x84/0x98 [ 63.578466][ T6809] invoke_syscall+0x98/0x244 [ 63.578476][ T6809] el0_svc_common+0xec/0x23c [ 63.578486][ T6809] do_el0_svc+0x4c/0x5c [ 63.578496][ T6809] el0_svc+0x64/0x260 [ 63.578512][ T6809] el0t_64_sync_handler+0x44/0x104 [ 63.578520][ T6809] el0t_64_sync+0x198/0x19c [ 63.662101][ T6814] input: syz0 as /devices/virtual/input/input5 [ 63.702001][ T6816] ext4: Unknown parameter 'euid<00000000000000000000' [ 63.908599][ T6832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.946327][ T6836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.955181][ T6836] EXT4-fs (loop2): 1 truncate cleaned up [ 63.956978][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.975319][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.980361][ T6840] bond0: option all_slaves_active: invalid value (253) [ 64.008447][ T6844] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.015461][ T6844] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.387: bad orphan inode 131083 [ 64.015492][ T6844] loop2: lost filesystem error report for type 5 error -117 [ 64.018209][ T6844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.122208][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.357426][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.432617][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 64.470225][ T6864] binder: 6863:6864 tried to acquire reference to desc 0, got 1 instead [ 64.473620][ T6864] binder: tried to use weak ref as strong ref [ 64.473663][ T6864] binder: 6863:6864 got transaction to invalid handle, 1 [ 64.473676][ T6864] binder: 6863:6864 cannot find target node [ 64.473693][ T6864] binder: 6863:6864 transaction call to 0:0 failed 21/29201/-22, code 0 size 0-0 line 3252 [ 64.474882][ T4822] binder: release 6863:6864 transaction 14 out, still active [ 64.474897][ T4822] binder: undelivered TRANSACTION_COMPLETE [ 64.492844][ T9] cfg80211: failed to load regulatory.db [ 64.494378][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494424][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.508708][ T6878] cgroup: Unknown subsys name 'cpuset' [ 64.508988][ T4822] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.509035][ T4822] binder: send failed reply for transaction 14, target dead [ 64.607447][ T6883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.626834][ T6883] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #16: comm syz.5.398: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 64.626887][ T6883] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.627080][ T6883] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.398: couldn't read orphan inode 16 (err -117) [ 64.627094][ T6883] loop5: lost filesystem error report for type 5 error -117 [ 64.627213][ T6883] EXT4-fs (loop5): 1 orphan inode deleted [ 64.637404][ T6883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.644522][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.398'. [ 64.690754][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.731225][ T6897] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.404: inode has both inline data and extents flags [ 64.731270][ T6897] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.731928][ T6897] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.404: couldn't read orphan inode 15 (err -117) [ 64.731944][ T6897] loop4: lost filesystem error report for type 5 error -117 [ 64.734173][ T6897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.765442][ T6900] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.788558][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.788786][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.789184][ T6879] netlink: 'syz.2.395': attribute type 21 has an invalid length. [ 64.789229][ T6879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.395'. [ 64.814087][ T6900] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.842466][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.913683][ T6914] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.121738][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.342773][ T6940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.413'. [ 65.532693][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.532887][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.549944][ T4822] IPVS: starting estimator thread 0... [ 65.640240][ T6945] IPVS: using max 60 ests per chain, 144000 per kthread [ 65.791334][ T6972] input: syz0 as /devices/virtual/input/input6 [ 65.922455][ T6982] set_capacity_and_notify: 10 callbacks suppressed [ 65.922739][ T6982] loop2: detected capacity change from 0 to 512 [ 65.933186][ T6982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.933227][ T6982] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.967956][ T6982] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.420: Allocating blocks 41-42 which overlap fs metadata [ 65.968002][ T6982] loop2: lost filesystem error report for type 5 error -117 [ 65.969537][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 65.969550][ C0] EXT4-fs (loop2): initial error at time 65: ext4_mb_mark_diskspace_used:4222 [ 65.969565][ C0] EXT4-fs (loop2): last error at time 65: ext4_mb_mark_diskspace_used:4222 [ 65.985223][ T6982] EXT4-fs (loop2): Remounting filesystem read-only [ 65.986917][ T6982] Quota error (device loop2): write_blk: dquota write failed [ 65.988473][ T6982] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 65.992626][ T6982] Quota error (device loop2): write_blk: dquota write failed [ 65.995178][ T6982] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 65.997633][ T6982] EXT4-fs (loop2): 1 truncate cleaned up [ 66.001222][ T6982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.040394][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.081312][ T6998] loop2: detected capacity change from 0 to 1024 [ 66.083134][ T6998] EXT4-fs: quotafile must be on filesystem root [ 66.168969][ T7005] loop2: detected capacity change from 0 to 1024 [ 66.229144][ T7014] loop5: detected capacity change from 0 to 8 [ 66.280187][ T7005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.290658][ T7008] tipc: Enabling of bearer rejected, failed to enable media [ 66.312807][ T7005] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.426: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.317645][ T7005] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 66.320250][ T7005] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.320250][ T7005] [ 66.320782][ T7005] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.426: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.321938][ T7005] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.426: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.323176][ T7005] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.426: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.323373][ T7005] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.426: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.352022][ T7005] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.426: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 66.356605][ T7005] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.360054][ T7005] EXT4-fs error (device loop2): ext4_evict_inode:278: comm syz.2.426: couldn't truncate inode 15 (err -117) [ 66.374816][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.503587][ T7057] netlink: 80 bytes leftover after parsing attributes in process `syz.2.432'. [ 66.590688][ T7075] loop4: detected capacity change from 0 to 512 [ 66.603104][ T7075] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.603312][ T7075] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 66.603440][ T7075] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.605787][ T7075] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 66.618174][ T7075] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #14: comm syz.4.436: invalid orphan symlink nlink 1 [ 66.618218][ T7075] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 66.619528][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 66.619543][ C0] EXT4-fs (loop4): last error at time 66: ext4_orphan_get:1399: inode 14 [ 66.622771][ T7075] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.436: couldn't read orphan inode 14 (err -117) [ 66.622790][ T7075] loop4: lost filesystem error report for type 5 error -117 [ 66.624864][ T7075] EXT4-fs (loop4): 1 truncate cleaned up [ 66.625355][ T7075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.662375][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.718070][ T7097] bond0: entered promiscuous mode [ 66.719266][ T7097] bond_slave_0: entered promiscuous mode [ 66.723802][ T7097] bond_slave_1: entered promiscuous mode [ 66.727055][ T7097] batadv0: entered promiscuous mode [ 66.730138][ T7097] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 66.745775][ T7097] bond0: left promiscuous mode [ 66.745816][ T7097] bond_slave_0: left promiscuous mode [ 66.745914][ T7097] bond_slave_1: left promiscuous mode [ 66.751529][ T7097] batadv0: left promiscuous mode [ 66.835071][ T7118] 9p: Bad value for 'rfdno' [ 66.946899][ T7123] loop2: detected capacity change from 0 to 2048 [ 66.947277][ T7123] EXT4-fs: Ignoring removed oldalloc option [ 66.994978][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.002359][ T7123] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.003252][ T7123] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 67.003268][ T7123] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.003268][ T7123] [ 67.003276][ T7123] EXT4-fs (loop2): Total free blocks count 0 [ 67.003283][ T7123] EXT4-fs (loop2): Free/Dirty block details [ 67.003298][ T7123] EXT4-fs (loop2): free_blocks=2415919104 [ 67.003314][ T7123] EXT4-fs (loop2): dirty_blocks=16 [ 67.003321][ T7123] EXT4-fs (loop2): Block reservation details [ 67.003327][ T7123] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 67.003496][ T7123] loop6: detected capacity change from 0 to 1 [ 67.008212][ T7123] Dev loop6: unable to read RDB block 1 [ 67.008229][ T7123] loop6: unable to read partition table [ 67.008296][ T7123] loop6: partition table beyond EOD, truncated [ 67.008306][ T7123] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.025845][ T7135] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 67.038573][ T7135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.057577][ T7135] bond1: (slave veth0_to_bond): making interface the new active one [ 67.060183][ T7135] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 67.075915][ T7141] loop5: detected capacity change from 0 to 512 [ 67.076270][ T7141] EXT4-fs: Ignoring removed oldalloc option [ 67.077192][ T7141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.085215][ T7135] macvlan2: entered promiscuous mode [ 67.085251][ T7135] macvlan2: entered allmulticast mode [ 67.085570][ T7135] bond1: entered promiscuous mode [ 67.085586][ T7135] veth0_to_bond: entered promiscuous mode [ 67.096043][ T7135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.097875][ T7135] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 67.102454][ T7135] bond1: left promiscuous mode [ 67.104549][ T7135] veth0_to_bond: left promiscuous mode [ 67.122400][ T7141] EXT4-fs (loop5): 1 orphan inode deleted [ 67.123783][ T7141] EXT4-fs (loop5): 1 truncate cleaned up [ 67.125771][ T7141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.250869][ T7144] netlink: 'syz.5.453': attribute type 10 has an invalid length. [ 67.261919][ T7144] team0: Device veth0_vlan failed to register rx_handler [ 67.274992][ T7144] overlayfs: workdir and upperdir must reside under the same mount [ 67.277413][ T7144] overlayfs: workdir and upperdir must reside under the same mount [ 67.280884][ T7145] overlayfs: workdir and upperdir must reside under the same mount [ 67.296743][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 67.298859][ T7149] netlink: 'syz.1.455': attribute type 11 has an invalid length. [ 67.304781][ T7149] netlink: 'syz.1.455': attribute type 12 has an invalid length. [ 67.549822][ T7174] netlink: 'syz.1.462': attribute type 12 has an invalid length. [ 67.551531][ T7174] netlink: 'syz.1.462': attribute type 13 has an invalid length. [ 67.609113][ T7181] loop4: detected capacity change from 0 to 128 [ 67.610660][ T7176] ip_tables: iptables: counters copy to user failed while replacing table [ 67.614194][ T7181] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.624567][ T7181] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.707212][ T4713] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.722099][ T4713] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.760449][ T7180] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 67.760484][ T7180] __nla_validate_parse: 4 callbacks suppressed [ 67.760491][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 68.105654][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.118580][ T7198] fuse: Bad value for 'group_id' [ 68.118609][ T7198] fuse: Bad value for 'group_id' [ 68.158957][ T4713] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 68.168028][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.169029][ T7200] loop5: detected capacity change from 0 to 512 [ 68.183675][ T7200] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 68.183803][ T7200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.186912][ T7200] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 68.188053][ T7200] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 68.188248][ T7200] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 68.188274][ T7200] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 68.188421][ T7200] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.469: couldn't read orphan inode 13 (err -117) [ 68.188434][ T7200] loop5: lost filesystem error report for type 5 error -117 [ 68.189064][ T7200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.374611][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.469'. [ 68.529926][ T3506] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.537378][ T7208] syz_tun: entered allmulticast mode [ 68.604003][ T3506] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.617289][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.620365][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.621739][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.473'. [ 68.624212][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.626253][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.628187][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.629164][ T7218] sctp: [Deprecated]: syz.0.475 (pid 7218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.629164][ T7218] Use struct sctp_sack_info instead [ 68.660866][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.662446][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.664231][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.667382][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.668606][ T7227] capability: warning: `syz.0.477' uses 32-bit capabilities (legacy support in use) [ 68.672350][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.701714][ T3506] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.792607][ T3506] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.816074][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 69.024988][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.096922][ T7300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 69.099040][ T7300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 69.169215][ T3506] bridge_slave_1: left allmulticast mode [ 69.169252][ T3506] bridge_slave_1: left promiscuous mode [ 69.169353][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.173931][ T3506] bridge_slave_0: left allmulticast mode [ 69.173958][ T3506] bridge_slave_0: left promiscuous mode [ 69.174029][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.191429][ T7320] EXT4-fs: Ignoring removed bh option [ 69.191465][ T7320] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.197850][ T7320] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 69.202294][ T7320] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 69.202436][ T7320] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.206098][ T7320] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 69.206154][ T7320] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 69.206195][ T7320] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.493: Failed to acquire dquot type 1 [ 69.206214][ T7320] loop5: lost filesystem error report for type 5 error -5 [ 69.210545][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 69.210558][ C0] EXT4-fs (loop5): last error at time 69: ext4_acquire_dquot:7041 [ 69.217933][ T7320] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.493: Invalid block bitmap block 0 in block_group 0 [ 69.217966][ T7320] loop5: lost filesystem error report for type 5 error -117 [ 69.232289][ T7320] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.493: Invalid block bitmap block 0 in block_group 0 [ 69.232338][ T7320] loop5: lost filesystem error report for type 5 error -117 [ 69.237868][ T7320] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.493: Invalid block bitmap block 0 in block_group 0 [ 69.237886][ T7320] loop5: lost filesystem error report for type 5 error -117 [ 69.247349][ T7320] Quota error (device loop5): write_blk: dquota write failed [ 69.247418][ T7320] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 69.247450][ T7320] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.493: Failed to acquire dquot type 1 [ 69.247468][ T7320] loop5: lost filesystem error report for type 5 error -28 [ 69.251473][ T7320] Quota error (device loop5): write_blk: dquota write failed [ 69.254458][ T7320] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.493: Failed to acquire dquot type 1 [ 69.254478][ T7320] loop5: lost filesystem error report for type 5 error -28 [ 69.255784][ T7320] EXT4-fs (loop5): 1 orphan inode deleted [ 69.269788][ T7320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.304943][ T7278] cgroup: fork rejected by pids controller in /syz4 [ 69.331146][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.415818][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 69.465113][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.502571][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.523037][ T3506] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 69.545431][ T3506] bond0 (unregistering): Released all slaves [ 69.595299][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.595351][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.595477][ T7215] bridge_slave_0: entered allmulticast mode [ 69.598581][ T7215] bridge_slave_0: entered promiscuous mode [ 69.603160][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.603204][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.603299][ T7215] bridge_slave_1: entered allmulticast mode [ 69.606276][ T7215] bridge_slave_1: entered promiscuous mode [ 69.654051][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.655375][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.713361][ T7376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.734587][ T7215] team0: Port device team_slave_0 added [ 69.736715][ T7215] team0: Port device team_slave_1 added [ 69.760385][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.760422][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.760448][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.761060][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.762262][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.762285][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.856567][ T7376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 69.896611][ T7215] hsr_slave_0: entered promiscuous mode [ 69.898156][ T7215] hsr_slave_1: entered promiscuous mode [ 69.903713][ T7215] debugfs: 'hsr0' already exists in 'hsr' [ 69.903750][ T7215] Cannot create hsr debugfs directory [ 69.921659][ T7414] geneve4: entered promiscuous mode [ 69.943143][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.982309][ T3506] hsr_slave_0: left promiscuous mode [ 69.983610][ T3506] hsr_slave_1: left promiscuous mode [ 69.983897][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.983908][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.993192][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.993224][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.035111][ T3506] veth1_macvtap: left promiscuous mode [ 70.035165][ T3506] veth0_macvtap: left promiscuous mode [ 70.035218][ T3506] veth1_vlan: left promiscuous mode [ 70.035256][ T3506] veth0_vlan: left promiscuous mode [ 70.103227][ T7433] UDC core: g1: couldn't find an available UDC or it's busy [ 70.276244][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.456738][ T7215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.463682][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.466362][ T7215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.476177][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.478560][ T7215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.485547][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.486766][ T7215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.499386][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.567473][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.577104][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.585340][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.585383][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.598380][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.598425][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.732064][ T50] Bluetooth: hci1: command tx timeout [ 70.786768][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.979708][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.047807][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 71.056897][ T7519] sctp: [Deprecated]: syz.5.508 (pid 7519) Use of int in maxseg socket option. [ 71.056897][ T7519] Use struct sctp_assoc_value instead [ 71.152879][ T7215] veth0_vlan: entered promiscuous mode [ 71.165581][ T7215] veth1_vlan: entered promiscuous mode [ 71.176771][ T7215] veth0_macvtap: entered promiscuous mode [ 71.180938][ T7215] veth1_macvtap: entered promiscuous mode [ 71.184266][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.227813][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.247880][ T3506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.247999][ T3506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248026][ T3506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.259965][ T198] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.326984][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6 [ 71.344411][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.344447][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.377375][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.377415][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.594433][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 71.595979][ T30] audit: type=1326 audit(71.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.596020][ T30] audit: type=1326 audit(71.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.596047][ T30] audit: type=1326 audit(71.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.614579][ T30] audit: type=1326 audit(71.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.614619][ T30] audit: type=1326 audit(71.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.614644][ T30] audit: type=1326 audit(71.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.636698][ T30] audit: type=1326 audit(71.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.636743][ T30] audit: type=1326 audit(71.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.636783][ T30] audit: type=1326 audit(71.610:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.636806][ T30] audit: type=1326 audit(71.610:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.0.514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff943792a8 code=0x7ffc0000 [ 71.800618][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7 [ 71.814096][ T7577] netlink: 'syz.0.516': attribute type 34 has an invalid length. [ 71.814127][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 71.974196][ T7587] gtp0: entered allmulticast mode [ 72.043395][ T7591] bond0: invalid ARP target specified [ 72.094392][ T7597] netlink: 68 bytes leftover after parsing attributes in process `syz.6.522'. [ 72.094429][ T7597] netlink: 68 bytes leftover after parsing attributes in process `syz.6.522'. [ 72.095328][ T7597] input: syz0 as /devices/virtual/input/input8 [ 72.187180][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.524'. [ 72.809703][ T50] Bluetooth: hci1: command tx timeout [ 73.003292][ T7614] set_capacity_and_notify: 3 callbacks suppressed [ 73.003334][ T7614] loop6: detected capacity change from 0 to 128 [ 73.158864][ T7623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 73.161136][ T7623] bond0: (slave bond5): Enslaving as an active interface with an up link [ 73.171562][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 73.177944][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.528'. [ 73.180061][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.528'. [ 73.312835][ T7651] Injecting memory failure for pfn 0x136bca at process virtual address 0x20001000 [ 73.312939][ T7652] netlink: 44 bytes leftover after parsing attributes in process `syz.5.539'. [ 73.330184][ T7651] Memory failure: 0x136bca: recovery action for clean LRU page: Recovered [ 73.330282][ T7651] Injecting memory failure for pfn 0x1235ce at process virtual address 0x20002000 [ 73.330378][ T7651] Memory failure: 0x1235ce: recovery action for clean LRU page: Recovered [ 73.330432][ T7651] Injecting memory failure for pfn 0x120bdb at process virtual address 0x20003000 [ 73.330526][ T7651] Memory failure: 0x120bdb: recovery action for clean LRU page: Recovered [ 73.352098][ T4715] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 73.400014][ T4715] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 73.469854][ T4722] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 73.506952][ T7667] input: syz0 as /devices/virtual/input/input9 [ 73.585618][ T7674] loop5: detected capacity change from 0 to 4096 [ 73.625573][ T7674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.720926][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.779715][ T4809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 73.893190][ T7687] loop5: detected capacity change from 0 to 512 [ 73.894834][ T7687] EXT4-fs: Ignoring removed bh option [ 73.907837][ T7687] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.549: corrupted in-inode xattr: e_value size too large [ 73.907878][ T7687] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.908047][ T7687] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.549: couldn't read orphan inode 15 (err -117) [ 73.908063][ T7687] loop5: lost filesystem error report for type 5 error -117 [ 73.908847][ T7687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.974925][ T7690] loop1: detected capacity change from 0 to 512 [ 73.977211][ T7690] EXT4-fs (loop1): invalid first ino: 4294574091 [ 74.013148][ T7692] loop1: detected capacity change from 0 to 4096 [ 74.015064][ T7692] EXT4-fs: inline encryption not supported [ 74.018772][ T7692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.018803][ T7692] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.025284][ T7692] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 74.025401][ T7692] System zones: 0-5 [ 74.028914][ T7692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.075964][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.169753][ T4808] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 74.169786][ T4808] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 74.176375][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 74.182014][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 74.184194][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 74.186304][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 74.188248][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 74.191052][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 74.219565][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.222900][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.227920][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.230667][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.234809][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.237875][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.242252][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.244322][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.249878][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.252406][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.329766][ T5206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 74.775535][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.796405][ T7733] tc_dump_action: action bad kind [ 74.797357][ T7733] netlink: 'syz.5.563': attribute type 39 has an invalid length. [ 75.252213][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.318079][ T7768] netlink: 'syz.4.571': attribute type 3 has an invalid length. [ 75.320409][ T7768] openvswitch: netlink: Actions may not be safe on all matching packets [ 75.350996][ T7764] loop5: detected capacity change from 0 to 1024 [ 75.353406][ T7764] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 75.356211][ T7764] JBD2: no valid journal superblock found [ 75.358879][ T7764] EXT4-fs (loop5): Could not load journal inode [ 75.365867][ T7764] netlink: 'syz.5.570': attribute type 1 has an invalid length. [ 75.381078][ T7764] bond1: entered promiscuous mode [ 75.382193][ T7764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.386110][ T5253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.386212][ T5253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.397238][ T7781] geneve5: entered promiscuous mode [ 75.402189][ T7764] bond1: entered allmulticast mode [ 75.407503][ T7764] bond1: (slave bridge2): making interface the new active one [ 75.407598][ T7764] bridge2: entered promiscuous mode [ 75.407673][ T7764] bridge2: entered allmulticast mode [ 75.409787][ T7764] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 75.498346][ T7783] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.810569][ T7800] loop1: detected capacity change from 0 to 512 [ 75.824898][ T7800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.103370][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.194410][ T7813] loop1: detected capacity change from 0 to 876 [ 76.250155][ T7392] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.293325][ T7825] loop1: detected capacity change from 0 to 4096 [ 76.298620][ T7825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.298656][ T7825] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.304365][ T7827] 9p: Bad value for 'rfdno' [ 76.309469][ T7827] overlayfs: failed to resolve './file0': -2 [ 76.311283][ T7825] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 76.311335][ T7825] System zones: 0-5 [ 76.312880][ T7825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.395108][ T198] IPv6: BUG: Address 2001::1 on device lo is missing its host route. [ 76.426865][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.209762][ C1] TC_ACT_REPEAT abuse ? [ 79.289605][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!