last executing test programs: 2m38.59039264s ago: executing program 4 (id=253): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xf5e61000) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) (async) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f0, &(0x7f00000025c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) (async) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x7, r5, r6, 0x3, 0x80, 0x9}) (async) mremap(&(0x7f0000031000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000494000/0x3000)=nil) 2m38.440005469s ago: executing program 4 (id=256): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05db71b86f", 0x5, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'macvlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r7, 0x1, 0xe5, 0x6, @random="8ccaa646aecc"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x40, 0x0, 0xa, 0x4, {{0x6, 0x4, 0x3, 0xb, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x44, 0x0, 0x1, @private2, @local, 0x8, 0x40, 0x6, 0x5e8}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x7, 0x10, 0x0, 0x3, {{0x27, 0x4, 0x2, 0x8, 0x9c, 0x67, 0x0, 0x42, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x24, 0x44, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x8ef4}, {@multicast1, 0x9}, {@broadcast, 0x80000000}]}, @end, @noop, @timestamp_addr={0x44, 0x3c, 0x32, 0x1, 0x5, [{@multicast1, 0x5}, {@multicast2}, {@remote, 0x6}, {@multicast2, 0x6}, {@remote, 0x5}, {@multicast1, 0x7}, {@multicast1}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x37, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x5}, {@broadcast, 0xf}]}, @lsrr={0x83, 0x7, 0xc1, [@loopback]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x1fc, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x1fc}}, 0x8004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000000000000000000850000000f00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r15 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r15, 0x3a, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r14, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m37.267027903s ago: executing program 4 (id=265): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x8}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0xa, 0x3, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x26, 0x4, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x12, 0xfffffffffffffffe, &(0x7f0000000140)=0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0xcb7, 0x2}, 0xe) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000180)={0x9, 0x9, 0x6, 0x8, 0xe5, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="21000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000000000000100"/28], 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[], 0x94}}, 0x2400094d) 2m36.891187598s ago: executing program 4 (id=269): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000200)={[{@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e1, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x8000000000000000, 0xa25, 0x2, 0xfefffffffefffffd, 0x1, 0x4000000007fff, 0x4}) (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x8000000000000000, 0xa25, 0x2, 0xfefffffffefffffd, 0x1, 0x4000000007fff, 0x4}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x420f, r5, 0x0, 0x6) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080), 0x4) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000580)=0xfffffffd, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) sysinfo(&(0x7f0000000000)=""/76) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) (async) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x1, 0x80000, r3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdc}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m36.313515156s ago: executing program 4 (id=272): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000001240)='./file0/file0\x00', 0x4) 2m36.004122415s ago: executing program 4 (id=281): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x180000000) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@debug}, {@auto_da_alloc}, {@dioread_nolock}, {@noblock_validity}]}, 0x3, 0x493, &(0x7f0000000ec0)="$eJzs3M1vVFUbAPDn3nYKvMDbivjBh1pFY4PaUkBl4UKNJi4wMdEFxlXTFoIM1NCaCCEKxuDKGBP3xqUb/wBXujFGNyZudW9IiOkGcOOYO3NvOy0zU6addirz+yW3PWfuxznPnHtmzr1nZgLoWcPZnyRiR0T8HhGDtezSDYZr/27OX5q8NX9pMolK5c2/kup2N+YvTfblmxb7bc8zI2lE+kkS+xqUO3vh4pmJcnn6fJ4fmzv73tjshYvPnD47cWr61PS5w8eOHT0y/vxzh59tXPGB9uLM6nRj74cz+/e89vYXrx//rH8xvG+31JKT7R1xRcOtVj5RqXS4uO7aWZdO+rtYEdqS9d2suUrV/j8YfbHYeIPx6sddrRywriqVSmV789WXK8BdLImleV0eekXxRp9dxxfL8kHAi+s3/Oi66y/VLoCyuG/mS21Nf6T5NqVl17edNBwRJy7//VW2RN4Od753mzdBAAAi4vts/PN0o/FfGvfXbff/fG5oKCLuiYhdEXFvROyOiPsiqts+EBEPVveMhbHTSpZPktw+/kmvrSnAFWTjvxfyua2l47+FCIb68tzOavyl5OTp8vSh/DkZidKWLD/eoowfXvnt82br6sd/2ZKVX4wF83pc69+ydJ+pibmJtcRc7/qViL39Raz18ScLMwFJROyJiL2rLOP0wW/2N1u3cvwtdGCeqfJ1xJO19r8c80vjLySt5yfHtkZ5+tBYcVbc7udfr77RpPjqE3/i4Crj74Cs/f/X8PxfiH8oqZ+vnW2/jKt/fNr0mma15/9A8lY1XVwBfTAxN3d+PGIgOV6rdP3jhxf3LfLF9ln8Iwca9/9dsfhM7IuI7CR+KCIejohH8ro/GhGPRcSBFvH/9PLj7zZcka7x/O+ALP6pttp/MTEQyx9pnOg78+N3SwodWkzm8d9q3f5Hq6mR/JE7ef27k3qt7mwGAACA/540InZEko4upNN0dLT2efndEWl5ZnbuqZMz75+bqn1HYChKaXGna7Dufuh4fllfy1+JiNpHC4r1R/L7xl/2bavmRydnylPdDh563PYm/T/zZ1+3awesO9/Xgt6l/0PvatT/t3ahHsDG8/4PvatB/9/WjXoAG6/R+/9HrXf5Z73qAmysZf3ftB/0kPav/395Z10qAmy4pv3/bv7lH6DK/X/oSbPbYuUvybdMFEda5e6bJZFEREcPGKVNEdfaE5WkYeNGmiVKm6GGEhPlcvF7HZ06YPdekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrp3wAAAP//xY7WRg==") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008050}, 0x24004000) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440020000000900010073797a3000000000080003"], 0x64}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0004feff06bd8800fbd9df2500910028", @ANYRES8=r1, @ANYBLOB="0000000005200400240012800c0001006d6163766c616e00140002800800030001000000080001001000000008000f0008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r4, &(0x7f0000002880)=ANY=[], 0xfd7b) splice(r3, 0x0, r2, 0x0, 0xffff, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x7fffffff, 0x8, 0xc49, 0x2, 0x0}) wait4(r7, 0x0, 0x8, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000340)='v7\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b32, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x183102, 0x0) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x30000, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r12, 0x8982, &(0x7f00000002c0)={0x1, 'wlan1\x00', {}, 0x33}) fdatasync(r11) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x10}) 2m35.905090517s ago: executing program 32 (id=281): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x180000000) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@debug}, {@auto_da_alloc}, {@dioread_nolock}, {@noblock_validity}]}, 0x3, 0x493, &(0x7f0000000ec0)="$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") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008050}, 0x24004000) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440020000000900010073797a3000000000080003"], 0x64}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0004feff06bd8800fbd9df2500910028", @ANYRES8=r1, @ANYBLOB="0000000005200400240012800c0001006d6163766c616e00140002800800030001000000080001001000000008000f0008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r4, &(0x7f0000002880)=ANY=[], 0xfd7b) splice(r3, 0x0, r2, 0x0, 0xffff, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x7fffffff, 0x8, 0xc49, 0x2, 0x0}) wait4(r7, 0x0, 0x8, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000340)='v7\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b32, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x183102, 0x0) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x30000, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r12, 0x8982, &(0x7f00000002c0)={0x1, 'wlan1\x00', {}, 0x33}) fdatasync(r11) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x10}) 2m35.573084388s ago: executing program 0 (id=288): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x18}, 0x0) 2m35.55168869s ago: executing program 0 (id=289): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 2m35.503860246s ago: executing program 0 (id=291): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000600021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x99) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x480a1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2m35.384234497s ago: executing program 0 (id=294): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x9226}}, {@init_itable}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000480)={0x10020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000340)=""/95, &(0x7f0000000440)=[r1], 0x1, {r0}}, 0x58) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)) r2 = timerfd_create(0x9, 0x800) clock_gettime(0x3, &(0x7f0000000180)={0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) timerfd_settime(r2, 0x5, &(0x7f0000000500)={{r3, r4+10000000}}, &(0x7f0000000540)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m35.31937729s ago: executing program 0 (id=296): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$tipc(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x40000000000009}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000180)="de1e", 0x2, 0x3e7ffffffc, 0x0, 0x10}]) 2m34.78108612s ago: executing program 0 (id=300): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800014001080800418e00000004fcff", 0x58}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x5}}, 0x731, 0x7, 0x8, 0x1, 0x8000}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x800}, &(0x7f00000001c0)=0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x3, 0x101, 0xe7, 0x2, 0x1, 0x9]}) 2m34.688204478s ago: executing program 33 (id=300): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800014001080800418e00000004fcff", 0x58}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x5}}, 0x731, 0x7, 0x8, 0x1, 0x8000}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x800}, &(0x7f00000001c0)=0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x3, 0x101, 0xe7, 0x2, 0x1, 0x9]}) 2m8.516883316s ago: executing program 3 (id=531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000005c80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fanotify_init(0x20, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r6 = fcntl$dupfd(r3, 0x0, r4) r7 = fanotify_init(0x24, 0x80000) fanotify_mark(r7, 0x441, 0x1002, r6, 0x0) r8 = dup(r3) fanotify_mark(r2, 0x201, 0x20, r8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xf, &(0x7f0000005d80)=ANY=[@ANYBLOB="180000000700458f5b2b00000000000000000000c38d525556fef373295fc90d7fd34d4e6a2e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f000000d0c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f000000d140)={0x0, 0x0, 0x0}, &(0x7f000000d180)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f000000d1c0)='./file0\x00', &(0x7f000000d200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$TIOCGSID(r6, 0x5429, &(0x7f000000d600)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f000000d640)={0x7, 0x2, {}, {0x0}, 0x0, 0x80000001}) r15 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r16) r17 = openat$random(0xffffffffffffff9c, &(0x7f000000d680), 0x48000, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f000000d6c0)={0x2, 0x5, 0xffffffff, 0x10800, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d900)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000005fc0)=[@rights={{0x20, 0x1, 0x1, [r5, r2, 0xffffffffffffffff, r8]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r15]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0x78, 0x40002}}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006040)="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", 0x1000}, {&(0x7f0000007040)="62ec5ed089839cf3f96aa44baf3eb3e15a995f92bdeddd074fabbfd1abe436c9ad73103133686eb13ed194529746a959772e67b325d6c1a6b0ada90b81bedda7ee94298a6f28b16fbe0a2ddd46eeeb5ee1d87310e53f173a105034daf74ec89df0a590b079ae220920ba61c58415227f01c23a2ddb4d1933e4eb7298f401c53de48161a26288a399b82210d9283ab1cc1281801d2f1e8cdbaff411c16927c3dd0d7675d85cce0d9cc9744a3ba8593c0ebddd5240a6e2b5f0a29db1cd79433a47e6482a", 0xc3}, {&(0x7f0000007140)="532ead3f13fce66f99352fb2032a8d954036e3bcd21017e235b7710821f1a49d4e6e913aa71afefa69d23547fe839f1e0d5b6b5de127868d3026384a8b99cbb0906a0ce2899f1ea41c8c067119ecf8d9304c6e805af490dd8bcbf324b9a65667d05d", 0x62}, {&(0x7f00000071c0)="7a9cde765b6261f1594171ab9b08883ac892e5c60a4d1616939814c9efeca4d158339acf2a46ca3915f1bf780c0b9801c76db7538b0deba8c8de7e9e1d06ddbb7c55f2f72a0b25994ec542496751063e8b4002c75b908b2462fc1d556ad43368e03b7ae78bfa4e4c85c3a70dca1ec47f5615e03da81b0056332e", 0x7a}, {&(0x7f0000007240)="ecc57ded9754859718612368f692a4699e6906c20c8678ff802223337aaac1892d9e36fc56628d16b3483a4395d92137d9694367fbb6f7506ea457a8f03766b42e6b2e4c78a2b8e7e342d7174efa54c11ffadf17b16c07a36977bb5e3b662ceb5d85bb47a08ad7cb569a5e3cbbadc594e26b", 0x72}, {&(0x7f00000072c0)="0b33664a31ff67a115395afa1ad89d7e48ab95c939f8db7dc8df8f7527", 0x1d}, {&(0x7f0000007300)="e8af9c031b0e79b7388b138f5343200dd0e70d6cfa28942907ccf5ede7e4f23b335d3216a49ac3988eb27277b0e4b1062098ae256c7e65b6bb86eec9c6af66618cbca49d1b56cdb633f48838e558d5d2e95c3f89f83f4a39bdc406187d3fe99f1821d61f23d9bcae7516cbd44ca2c645013f1f818f113b73450c19c221a0743c5ff1753ca8129c1719", 0x89}], 0x7, &(0x7f0000005e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRESHEX=r6, @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="93eae631", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000009840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000009a80)=[{&(0x7f00000098c0)="ffe726e01a543512c8ed91cde306165c0a3a23272704bd6f25f12505563b729e84882f8481c8d9389928cd41c527", 0x2e}, {&(0x7f0000009900)="b03532d03addf3565124465bd80c0e3f2fd44ee4f34234a6ad85d3303a33df8fd7f92ba4d24056a1b7115db15f3dc183a7ace626d6a9422c18a57186e6bb65bd980bad5d22ecff9747db4352802987f5b0c64002e90d33b76c4fdc9677d738a58d50ca222302652f4b6391702c8727df6b4c443a008d68aa8c9677641d7b3f8124a441349408c310412890c59bd171b1c30a8098ce17740e568a5389e094672be3430af55d44b84823e598e09f268f4f69420603c7b874", 0xb7}, {&(0x7f00000099c0)="65c71e93b33d276d6e8488b43c6bc4508bf813bef3ecf2777de7f600faef6cc420e385e10f5faf523b49ab498aa81e3c4a0dba8e82018db61b3dab436cb3ba5ec28fc9e5618161b802745ee77f051d716f41147ee530c13f1fb69fbe9e79763e787cf4cb1262ffef845db90f1e08f369d9a781309c6a402607ebc04c42f160788b16b993d977d60e1e6f2cd281", 0x8d}], 0x3, &(0x7f000000d280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r8, r8, r0, r6, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, r1, r2, r5, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}, @rights={{0x1c, 0x1, 0x1, [r4, r7, r8]}}], 0x128, 0x1}}, {{0x0, 0x0, &(0x7f000000d5c0), 0x0, &(0x7f0000005f00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r16, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r17, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r18, @ANYBLOB="000000007e1ebb0e254d750ebc80c9a6bc9eed23230533e325c7675694e1fd04a623d6d131af98dba0ee4d87195773c1714c97c38f3eff977bdfa36361160106cdb2e1eb5dcb459b5d8b51635ab1104c7e6d59e74e59e1fb21d7e474e6925a29a5f909aa6c2d8fcc11df"], 0x50, 0x10}}, {{&(0x7f000000d780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000d8c0)=[{&(0x7f000000d800)="3ac4c892831e8773880484f17c749e8a1161f6af9929dd248a44b53244a178aa66e7c6b18311b96ca37d4b18cc4aa90d", 0x30}, {&(0x7f000000d840)="c466e51b6969bab627e69d6166b229d126179dc38cdb260600b55ffaa34ff42e4b067b3bc0f0eaf1e2665c4586673faefd158b0a2007b5452c2efd1aac102af9a7f20733e8beb69ee77d5cf318f44e8c868791f21e7e48f48e2dc36d0426e8687d52b29c9e11bae72236b7b9e833ef24ac744034c7e6", 0x76}], 0x2, 0x0, 0x0, 0x2c000000}}], 0x5, 0x20004804) r19 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r19, &(0x7f0000005a80)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/149, 0x95}], 0x1, &(0x7f0000000280)=""/70, 0x46}, 0x3}, {{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f00000006c0)=""/191, 0xbf}], 0x2, &(0x7f00000007c0)=""/173, 0xad}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000880)=""/28, 0x1c}, {&(0x7f00000008c0)=""/51, 0x33}, {&(0x7f0000000900)=""/100, 0x64}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/154, 0x9a}, {&(0x7f0000001a80)=""/93, 0x5d}, {&(0x7f0000001b00)=""/98, 0x62}, {&(0x7f0000001b80)=""/116, 0x74}, {&(0x7f0000001c00)=""/84, 0x54}], 0xa, &(0x7f0000001d40)=""/64, 0x40}, 0x97f0}, {{&(0x7f0000001d80)=@hci, 0x80, &(0x7f0000003380)=[{&(0x7f0000001e00)=""/172, 0xac}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/145, 0x91}, {&(0x7f0000002f80)=""/252, 0xfc}, {&(0x7f0000003080)=""/177, 0xb1}, {&(0x7f0000003140)=""/129, 0x81}, {&(0x7f0000003200)=""/152, 0x98}, {&(0x7f00000032c0)=""/174, 0xae}], 0x8, &(0x7f0000003400)=""/196, 0xc4}, 0x8}, {{&(0x7f0000003500)=@tipc, 0x80, &(0x7f0000004740)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/249, 0xf9}, {&(0x7f0000004680)=""/178, 0xb2}], 0x3, &(0x7f0000004780)=""/232, 0xe8}, 0x1}, {{&(0x7f0000004880)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004900)=""/172, 0xac}, {&(0x7f00000049c0)=""/112, 0x70}, {&(0x7f0000004a40)=""/212, 0xd4}, {&(0x7f0000004b40)=""/218, 0xda}, {&(0x7f0000004c40)=""/227, 0xe3}, {&(0x7f0000004d40)=""/153, 0x99}, {&(0x7f0000004e00)=""/221, 0xdd}, {&(0x7f0000004f00)=""/155, 0x9b}], 0x8}, 0x5}, {{&(0x7f0000005040)=@ieee802154, 0x80, &(0x7f00000053c0)=[{&(0x7f00000050c0)=""/142, 0x8e}, {&(0x7f0000005180)=""/197, 0xc5}, {&(0x7f0000005280)=""/43, 0x2b}, {&(0x7f00000052c0)=""/201, 0xc9}], 0x4, &(0x7f0000005400)=""/236, 0xec}, 0x3}, {{&(0x7f0000005500)=@phonet, 0x80, &(0x7f0000005940)=[{&(0x7f0000005580)=""/236, 0xec}, {&(0x7f0000005680)=""/193, 0xc1}, {&(0x7f0000005780)=""/237, 0xed}, {&(0x7f0000005880)=""/149, 0x95}], 0x4, &(0x7f0000005980)=""/195, 0xc3}, 0x8}], 0x8, 0x0, 0x0) 2m8.371131016s ago: executing program 3 (id=538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000070004006b111a000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0xffffffc0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x52e, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0xfffffffe, 0x94, 0x0, 0x0, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x47, [0x4, 0x7f]}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaa8aaaaaabbaaaa8aaaaaaa08060306a2c200000e03db1553697c37"], &(0x7f0000000040)={0x0, 0x2, [0xacb, 0xb38, 0x5d5, 0xc50]}) 2m8.351627073s ago: executing program 3 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0x70bd27, 0x25dfdbff, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000890}, 0xc000) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2361000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) pipe2$watch_queue(&(0x7f0000001180), 0x80) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x8, 0x3, 0xb, 0xfffffffe, 0x4}) ioctl$NBD_DO_IT(r2, 0xab3f) 2m7.976107633s ago: executing program 3 (id=547): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8020) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x3003c20, 0x0) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$inet6(0xa, 0x2, 0x9) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xb) waitid(0x1, r3, 0x0, 0x2, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x6d, 0x2, 0x0, 0x4c30038e, 0x400000}) 2m7.703097152s ago: executing program 3 (id=553): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, {}, 0x5, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0xe8) (async, rerun: 32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'vlan0\x00', 0x2000}) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c080}, 0x90) (async, rerun: 32) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x201, 0x4) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2017be01}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="10001ffffeffffff800220000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800b00010067726574617000000c00028008000700ac1414220800040000100000"], 0x44}}, 0x4000) 2m7.187257079s ago: executing program 3 (id=558): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)='|w') ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m6.198670066s ago: executing program 34 (id=558): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)='|w') ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m2.799686275s ago: executing program 6 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) 2m2.535438567s ago: executing program 6 (id=608): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x200, @empty, 0x5}, 0xff7d) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000040)) (async) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xfffffffc, {0x6, 0x6, "5fdfaf", 0xfff7, 0x32, 0xff, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [], "57f02c471280264c"}}}}}}}, 0x0) 2m2.140182527s ago: executing program 6 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0xb}, {0x1, 0x5}, {0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20008010) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r3) 2m2.060931224s ago: executing program 6 (id=610): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x200000, &(0x7f0000000300), 0x3, 0x5a2, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x0, 0x4, 0x0, 0x1, [{0x0, 0x3, 0x2}, {0x0, 0x3, 0x6}, {0x0, 0x3, 0x1}, {}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x0, 0x1, 0xfffffffffffffffb}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0xfffffffffffffcc4, 0x7}]}]}, 0x34}}, 0x8074) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) setfsgid(0xee00) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/cgroup\x00') mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2, 0x0) 2m1.94535308s ago: executing program 6 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (fail_nth: 1) 2m1.540055852s ago: executing program 6 (id=617): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='lo'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000300)='./file1\x00', r1, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000880)=@ethtool_coalesce={0x19, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x555e}}) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2m1.520021682s ago: executing program 35 (id=617): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='lo'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000300)='./file1\x00', r1, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000880)=@ethtool_coalesce={0x19, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x555e}}) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2.714249561s ago: executing program 8 (id=1333): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x450000) read$FUSE(r0, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0}, 0xffffffffffffff94) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000003fc0)={[{@grpjquota}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio}, {@bh}, {@noblock_validity}], [{@uid_gt={'uid>', r1}}]}, 0x3, 0x453, &(0x7f0000000600)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x96993eb26f5a5f63}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0xb, 0xf622, 0x3, 0x9}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@gettaction={0xd8, 0x32, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x600000}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 1.653049017s ago: executing program 7 (id=1341): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000366000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 1.551546828s ago: executing program 8 (id=1344): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000280003801800008008000340000000020c000440000000002df31ab30c0000800800034000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000775000/0x3000)=nil, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001800010029bd7000fedbdf251d01050015000100020000400001000045495dbab9113c6e01"], 0x58}}, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x18) 1.518791003s ago: executing program 1 (id=1345): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x4cf, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac0010000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800014000000002080003400000000008000240000000000900010073797a30000000000900020073797a3200000000f90007"], 0x1e8}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000080), 0x1004) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x28, 0x2, @tid=r3}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) 1.512904955s ago: executing program 2 (id=1346): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="c36100000000000061107e000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.459991329s ago: executing program 8 (id=1347): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@barrier}, {@acl}, {@nogrpid}, {@errors_remount}, {@dioread_lock}]}, 0xff, 0x578, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) 1.447614069s ago: executing program 8 (id=1348): socket$netlink(0x10, 0x3, 0xf) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000005fc02000000000000000000000000000000000004e10000000a0060803b0000005d838b6a264e914d80ec766ce5245430d8295a3932d432d5034b057171c32dbbba3c12e1bb576a9f6f4c", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002000300000000000000fdffffffffffffff44050000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.42802779s ago: executing program 2 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) clock_gettime(0x0, 0x0) 1.284184531s ago: executing program 8 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x10) (fail_nth: 1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) clock_gettime(0x0, 0x0) 1.028660997s ago: executing program 7 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000028bd70000500000080008003fc01c80200180000080004003f560d5461e54837ecca7ee80fe813baec7ad1b618870591dfb64ad229fd62b6f9f42c15afa62528e42272afdcfcc8e1337f13fbb4fd159c187346325b9cfec1df0a1b0be6bac634e1d21058e5516f2fbd127448c62b70ae106772029c7e382cf8e848ef4593eb08202e4bccdfa1242b9b644e31a08af3bcd5a94ec765a69b27b799075aff6d48c8e1e0ee109cd24eeda3ccae11c7ab13f31ebb25b6fd77112b03f5625da2270ef53fdabc176aea2af578308c37af65311061c3f16ba3ad3fb838d0cdf06665f614f3c0986b4d572a", @ANYRES32=r3, @ANYBLOB="080010000500000005001b0001000000"], 0x34}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000028bd70000500000080008003fc01c80200180000080004003f560d5461e54837ecca7ee80fe813baec7ad1b618870591dfb64ad229fd62b6f9f42c15afa62528e42272afdcfcc8e1337f13fbb4fd159c187346325b9cfec1df0a1b0be6bac634e1d21058e5516f2fbd127448c62b70ae106772029c7e382cf8e848ef4593eb08202e4bccdfa1242b9b644e31a08af3bcd5a94ec765a69b27b799075aff6d48c8e1e0ee109cd24eeda3ccae11c7ab13f31ebb25b6fd77112b03f5625da2270ef53fdabc176aea2af578308c37af65311061c3f16ba3ad3fb838d0cdf06665f614f3c0986b4d572a", @ANYRES32=r3, @ANYBLOB="080010000500000005001b0001000000"], 0x34}}, 0x10) (async) 988.693825ms ago: executing program 8 (id=1352): prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@sysvgroups}, {@abort}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="fe4ea020fe9a919c82009a0a9ebd14fd749b3524ef45534937c35a1b32c6dc122b41e3a3f6b93632d5217a34a01959dab1cc0ffba65d8df6dcf94191c0f38ba75b12c9b1fbddb4347ae1b0f620d0ea9fae644f2acef0ff52e2f263f163e3f927ea8b55a838b41381e8da596a1af1fd53569a4cf2ff762b33d3e894e0d43fc7fa2a36402efb24db7c0d6c94ba75965f2a80fa3ab87f99626b0aaaf2cbb6ead91e65d43ab05b24d726abf019c85e6b"], 0x20}}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="05000000810d00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0300006001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80900) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_MOVE(r9, 0xc028aa05, 0xfffffffffffffffe) 802.044305ms ago: executing program 7 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 692.708902ms ago: executing program 7 (id=1356): socket$packet(0x11, 0x3, 0x300) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) listns(&(0x7f0000000340)={0x20, 0x0, 0xa7, 0x2000000, 0x0, 0xffffffffffffffff}, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000004c0)="2700000014000707030e0000120f0a0011000100fe601c8d14afa7841610817233b021f4246d67", 0x27) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = epoll_create1(0x0) epoll_pwait(r4, 0xffffffffffffffff, 0x40, 0x8000005, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x663f, &(0x7f0000000200)={0x0, 0xd95f, 0x0, 0x2, 0x394}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40046306, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) 616.241981ms ago: executing program 1 (id=1357): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) fallocate(r1, 0x10, 0x800, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x19) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 610.959696ms ago: executing program 5 (id=1358): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@grpjquota}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000100)=[0x9, 0x4, 0x3], &(0x7f0000000180)=[0xe, 0x3], &(0x7f00000001c0)=[0xff, 0x2, 0xce, 0xffff], &(0x7f0000000300)=[0x401]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1a22}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x3, 0x2, 0x9, 0x7fff}, {0x6, 0x2, 0x3, 0x4, 0x8000, 0x1000}, 0x5, 0xffffffff, 0x17f7}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x7e7468173a94719d}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002005b01000003000100"/56]) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0xc029, 0x3}) 606.802819ms ago: executing program 1 (id=1359): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x50) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/196, 0xc4}], 0x1, 0x200000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x800000007, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071107200000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r7 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x62, 0x0, &(0x7f0000001140)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) add_key(0x0, 0x0, 0x0, 0x0, r7) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x18) 531.183761ms ago: executing program 2 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x200400d4) 484.124749ms ago: executing program 7 (id=1361): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000366000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 471.853863ms ago: executing program 2 (id=1362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x8, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 413.277566ms ago: executing program 2 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x786) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x7ff, 0x81, 0x5, 0x2}, {0x5, 0x80, 0x3, 0x1}, {0x7fff, 0xe7, 0xf, 0xa}, {0x6, 0xd, 0x7, 0xadeb}]}) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full', 0x20, 0x9, 0x20, 0x400}, 0x2f) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x1, 0x80000, r1}) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="967870a46e5b724da054ce0ef56d58d6ebf176871a1e612aea48648198787e8422f0431baa81962e05595fd07a6c44e2895685afa09878f1b292a846fc8a1a6d5385542c70e66e5b76e11ff8ef754e5a84665f9799a14664a27e3dbcbc0ae1719d", 0x61}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x1, "83"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x48, 0x8040}, 0x0) (async) r3 = getuid() quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, r3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000340)={r4, 0x5}) mremap(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)}, 0x10) (async) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r2) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="7910d4f5a0ffebcdb5f9a8"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x80) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x114) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000025c0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000002680)={0xffffffffffffffff, 0x0, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x381b83b185e7f13d}, 0x20004800) (async) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000026c0)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002740), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x8090) (async) fsetxattr(0xffffffffffffffff, &(0x7f0000002840)=@known='trusted.overlay.redirect\x00', &(0x7f0000002880)='cpu.pressure\x00', 0xd, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002a80)={r2, &(0x7f00000028c0)="c1923fefc346bf33df8021e5e9fc9dde7eef8b93bc2a287eb47cc159ed1e016b77a5f39eea6e35413837ec9718ae27cf7700c8149e50125e557487827af9c393134cef5fea2aa5680a8bde772693e5abc672a702f06eab8da137905c21dee477e4eeccd4b2595186bcf4d1b2f15f3f2abe9c13fe61a738dedd84b8ad27e4d41fbe34667b63b807260bac254401484d11d49055b20f4cdbac97573671fc50233210412d87ba6dc202b1e5e2d0ea553eea70", &(0x7f0000002980)=""/239, 0x4}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000002ac0)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000002b00)=0xf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x4c, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcc29bde}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) write$tun(r2, &(0x7f0000002c80)={@val={0x0, 0x892f}, @val={0x3, 0x80, 0x1, 0x7fff, 0x9, 0xc606}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @multicast1, @local, @private=0xa010102}}, 0x2a) 374.321581ms ago: executing program 5 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x29000000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0c00018008000100020041"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) 360.697658ms ago: executing program 2 (id=1365): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) listen(r0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) 326.892946ms ago: executing program 5 (id=1366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 148.659045ms ago: executing program 1 (id=1367): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000340)={0x0, @in={{0xa, 0x0, @dev}}}, 0x90) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa088520920bedcad11a670200456c007000000000fb01907866d5534b090014aa030090780324000045000000000100077f000001640100fe863dffffff68dc92aac63081c5e06cb8dd94520508c80007651442011274b000561de584b703c87214d42243b60009da06d30bd28b"], 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88c0, &(0x7f0000000200), 0x1, 0x24d, &(0x7f0000000400)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r4 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f0000001f80)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x5) (async) r5 = epoll_create1(0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000000c0)=0xfe0f, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x6) (async) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000010100000000000000070b2a05000005"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x800) (async) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/17, 0x11}}], 0x1, 0x40010100, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009902996900000e0000001400450000000200000000010800010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000240)={0x80000011}) (async) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'syzkaller0\x00'}}, 0x1e) 147.637927ms ago: executing program 5 (id=1368): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) connect$l2tp6(r0, &(0x7f0000000440)={0xa, 0x0, 0x5, @local, 0x2, 0x1000004}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 147.126286ms ago: executing program 1 (id=1369): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) fallocate(r1, 0x10, 0x800, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x19) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 124.739768ms ago: executing program 5 (id=1370): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@dax_never}, {@usrjquota}, {@noacl}, {@nomblk_io_submit}, {@quota}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0x1, 0x454, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvTH8gArYi/uCHWkVj44+WAioHD2o08YCJiR702LSFIIUaWhMhRMAYPBlj4t149F/wpBdjPJl41bshIYYL4GnM7M7Q3WV3oWWX0e7nkwy8N/OG97775u2+mbdLAANrIv8jidgaEX9ExFg921xgov7XtStn565fOTuXRJa9+3dSK3f1ytm5smh53pYiM5lGpJ8nsbtNvcunzxyfXVxcOFXkp1dOfDS9fPrMC8dOzB5dOLpwcv+hQwcPzLz80v4XexJn3qaruz5d2rPzrQ++fvvwl03xt8TRIxPdDj6dZT2urlrbGtLJcIUNYU2GIiLvrpHa+B+LoVjtvLF487NKGwf0VZZl2ZbOh89nwAaWRHPekIdBUX7Q5/e/5dY6CXi1f9OPyl1+rX4DlMd9rdhqB7IsO1eUGWm5v+2liYh4//w/3+Zb9Oc5BABAkx/z+c/z7eZ/aTzUUO6+Ym1oPCLuj4jtEfFAROyIiAcjamUfjohH1lh/6yLJzfOf9NK6ArtN+fzvlWJtq2n+F2lZZHyoyG2rxT+SHDm2uLCveE0mY2RTnp/pUsdPb/z+VadjjfO/fMvrL+eCRTsuDW9qPmd+dmX2TmJudPlCxK7hdvEnN1YCkojYGRG71lnHsWe/39Pp2K3j76IH60zZdxHP1Pv/fLTEX0q6r09O3xOLC/umy6viZr/+dvGdTvXfUfw9kPf/vW2v/xvxjyeN67XLa6/j4p9fdLynWe/1P5q8V0uPFvs+mV1ZOTUTMZocrje6cf/+1XPLfFk+j39yb/vxvz1WX4ndEZFfxI9GxGMR8XjR9ici4smI2Nsl/l9ef+rD9cffX3n882vq/9XEaLTuaZ8YOv7zD02Vjt8U//Xu/X+wlpos9tzO+9/ttGt9VzMAAAD8/6QRsTWSdOpGOk2npurfl98RkS4uLa88d2Tp45Pz9d8IjMdIWj7pGmt4HjpT3NbX8xciov7VgvL4geK58TdDm2v5qbmlxfmqg4cBt6XD+M/9NVR164C+G47YVHUbgGr4vSYMLuMfBpfxD4OrzfjfXEU7gLuv3ef/uQraAdx9LePfsh8MEPf/MLg6jv+N/D//ADU+/2EgLW+OW/9Ivmui/JfWefqGTcTIf6IZd57IkradG2nVDZPoZ6La9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+TcAAP//yinjzA==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x0, 0xffffffffffffffff, 0x6}, 0x10}}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0xc9, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}}, @sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}]}, 0x50}}, 0x0) 123.705323ms ago: executing program 1 (id=1371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) clock_gettime(0x0, 0x0) 75.783011ms ago: executing program 7 (id=1372): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@quota}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x1, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 5 (id=1373): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="7577a163e64ece037da72c50b5921cc6d043562750425bc42dc7220ff6e34e6808e3c508f203c0cad066d5bdcde68d1655a1ff53f958cdd15f7f9623b9536ca8e1051d85ef0af8a7fe87ebfc954970dce02a875bcae66737e0e1870c6a1951f1740ae7cca83b40fba0b359b938aac842f09f4c827b90a6352a7d7e12102ef037efb9d29a75658c3ed677af40c0ee81c6210e936c8f14d55af1bd05c84c0a557a129dcf13a56a3b72c2a447e0da0dcc63bfe29c9b2d6c4fb5106c897888a6f00aca40b076abcded66a52f9add72c6a4668b49d4db5030a74ba1546df1dd59d4b75e", @ANYBLOB="000000002200ff00000000bf5fc3c0a200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000009500000000000000000000000000506cac23296e3a1781189970a8d0efc15f3fce765aa7b0971badbe74fa92b9491980092857f724d43a8d1cf2ad2aefc6db108d9f72d353dc4d0e67fea7d33fcc955f5cf7228f0a8c4fc4c677b0a4ad842905ec856014e146292dc12fbe90f4ae811ad053efba65ac570a05cdeccdcc402054b550846f78534770d8e5fb80203ccb1a4bbc6730c6199d7b41897dcaf033e3cca37647d66f4f7b947a5bac9b127e6b33d3c44b3bbcb7fcf106fb6d3950375050afc1edf80173c7416223785c157784f58c1f25a65fa3cf072093d0745ab8c070b2c3ee3ed7aceb4cc10a38145e1b50"], &(0x7f0000000040)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r3 = syz_ublk_setup_io_uring(0x6593, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRES8=r0], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080), 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000008c0)={0xb, @pix_mp={0x2000002, 0xb2dd, 0x3631564e, 0x2, 0x1, [{0x2, 0x7fc}, {0x4020000, 0x3550}, {0x5, 0x81}, {0x3, 0x3}, {0xd, 0x4}, {0xffffea37, 0xfffffff4}, {0xffffffe7}, {0x5, 0x1000009}], 0x0, 0x7, 0x4, 0x0, 0x5}}) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x7fffffff, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x6, 0x21}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in6=@private2, 0xfffffffd, 0x2b}, 0xa, @in=@loopback, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffff6}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508000100000000000ae38f64b47de72b79a6c275b37d6fca3ee44d9eeaeac267fbeb811dfcf3843f6d53ac128a28b3", @ANYRESDEC=r6], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) kernel console output (not intermixed with test programs): 986'. [ 208.371772][ T9150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.392959][ T9150] netlink: 'syz.7.985': attribute type 10 has an invalid length. [ 208.395560][ T9150] syz_tun: entered promiscuous mode [ 208.404868][ T9150] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 208.540154][ T9175] loop5: detected capacity change from 0 to 512 [ 208.543325][ T9175] EXT4-fs: Ignoring removed i_version option [ 208.543365][ T9175] EXT4-fs: Ignoring removed bh option [ 208.549898][ T9175] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.988: inode #13: comm syz.5.988: iget: illegal inode # [ 208.552981][ T9175] loop5: lost filesystem error report for type 5 error -117 [ 208.553247][ T9175] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.988: couldn't read orphan inode 13 (err -117) [ 208.553270][ T9175] loop5: lost filesystem error report for type 5 error -117 [ 208.557400][ T9175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.475511][ T9188] fuse: Unknown parameter 'fdJ0x0000000000000003' [ 209.620744][ T6022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.382077][ T9242] tipc: Started in network mode [ 210.382112][ T9242] tipc: Node identity 00000000000000400000000000000001, cluster identity 4711 [ 210.382283][ T9242] tipc: Enabling of bearer rejected, failed to enable media [ 211.180357][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 211.248719][ T9251] team1: entered promiscuous mode [ 211.256667][ T9251] team1: entered allmulticast mode [ 211.256925][ T9251] 8021q: adding VLAN 0 to HW filter on device team1 [ 211.283008][ T9257] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 211.587230][ T9277] netlink: 'syz.2.1010': attribute type 39 has an invalid length. [ 211.590832][ T9277] dvmrp8: entered allmulticast mode [ 211.926634][ T9285] loop7: detected capacity change from 0 to 256 [ 212.111355][ T4718] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 212.113331][ T4718] Bluetooth: hci4: Injecting HCI hardware error event [ 212.115480][ T4718] Bluetooth: hci4: hardware error 0x00 [ 212.198262][ T9305] loop7: detected capacity change from 0 to 256 [ 212.293188][ T9271] dvmrp8: left allmulticast mode [ 212.300710][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 212.300748][ T30] audit: type=1400 audit(212.279:230): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lowerd" requested=rw pid=9307 comm="syz.1.1022" name="file1" dev="tmpfs" ino=1273 [ 212.327932][ T9305] x_tables: ip_tables: osf match: only valid for protocol 6 [ 212.330984][ T9305] tmpfs: Bad value for 'mpol' [ 212.387324][ T9319] loop2: detected capacity change from 0 to 512 [ 212.389073][ T9319] EXT4-fs: Ignoring removed i_version option [ 212.392408][ T9319] EXT4-fs: Ignoring removed bh option [ 212.402646][ T9319] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1025: inode #13: comm syz.2.1025: iget: illegal inode # [ 212.402689][ T9319] loop2: lost filesystem error report for type 5 error -117 [ 212.405181][ T9319] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1025: couldn't read orphan inode 13 (err -117) [ 212.405212][ T9319] loop2: lost filesystem error report for type 5 error -117 [ 212.409915][ T9319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.711300][ T9326] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set [ 213.401363][ T30] audit: type=1326 audit(213.329:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.1031" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e777aa8 code=0x0 [ 213.506579][ T9355] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 213.514516][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.947980][ T9384] loop2: detected capacity change from 0 to 512 [ 213.952176][ T9384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.965976][ T9384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.016068][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.050961][ T9389] loop2: detected capacity change from 0 to 512 [ 214.055469][ T9389] EXT4-fs: Ignoring removed i_version option [ 214.055528][ T9389] EXT4-fs: Ignoring removed bh option [ 214.059489][ T9389] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1046: inode #13: comm syz.2.1046: iget: illegal inode # [ 214.060073][ T9389] loop2: lost filesystem error report for type 5 error -117 [ 214.060500][ T9389] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1046: couldn't read orphan inode 13 (err -117) [ 214.060524][ T9389] loop2: lost filesystem error report for type 5 error -117 [ 214.065513][ T9389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.172548][ T4718] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 214.179157][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1047'. [ 214.181034][ T9393] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1047'. [ 214.934368][ T9399] loop5: detected capacity change from 0 to 1024 [ 215.010919][ T9404] netlink: 'syz.7.1050': attribute type 10 has an invalid length. [ 215.023068][ T9404] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.028566][ T9404] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.045141][ T9399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.080353][ T6022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 215.097396][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.146334][ T9420] atomic_op 000000002517bdd3 conn xmit_atomic 0000000000000000 [ 215.197412][ T4825] IPVS: starting estimator thread 0... [ 215.224175][ T9426] overlayfs: failed to resolve './file1': -2 [ 215.233996][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.236294][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.283156][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 215.306089][ T9429] IPVS: using max 58 ests per chain, 139200 per kthread [ 215.306982][ T9432] Soft offlining pfn 0x13737e at process virtual address 0x20000000 [ 215.310677][ T9432] Soft offlining pfn 0x21cf58 at process virtual address 0x20001000 [ 215.317167][ T9432] Memory failure: 0x21cf58: unhandlable page. [ 215.339327][ T9457] loop5: detected capacity change from 0 to 512 [ 215.425833][ T9465] overlayfs: failed to resolve './cgroup': -2 [ 215.465338][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1065'. [ 215.466979][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 215.468684][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 215.498184][ T9468] loop5: detected capacity change from 0 to 4096 [ 215.500219][ T9468] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.501118][ T9468] EXT4-fs: Ignoring removed oldalloc option [ 215.502342][ T9468] EXT4-fs (loop5): unable to read superblock [ 215.545607][ T9472] lo speed is unknown, defaulting to 1000 [ 215.607379][ T9481] loop2: detected capacity change from 0 to 512 [ 215.780073][ T9488] loop2: detected capacity change from 0 to 1024 [ 215.806452][ T9488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.814888][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 215.826422][ T9488] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1071: lblock 3 mapped to illegal pblock 3 (length 3) [ 215.853396][ T9488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 215.853452][ T9488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 215.853452][ T9488] [ 215.854306][ T9488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1071: bg 0: block 112: padding at end of block bitmap is not set [ 215.855312][ T1042] kernel write not supported for file /input/event0 (pid: 1042 comm: kworker/0:2) [ 215.856537][ T9488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 215.856553][ T9488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 215.856553][ T9488] [ 215.856562][ T9488] EXT4-fs (loop2): Total free blocks count 0 [ 215.856570][ T9488] EXT4-fs (loop2): Free/Dirty block details [ 215.856579][ T9488] EXT4-fs (loop2): free_blocks=0 [ 215.856588][ T9488] EXT4-fs (loop2): dirty_blocks=64 [ 215.856596][ T9488] EXT4-fs (loop2): Block reservation details [ 215.905686][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 215.907348][ T9501] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1075'. [ 215.925273][ T4888] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 215.935633][ T4719] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 216.651302][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'. [ 217.053587][ T9533] syzkaller0: entered promiscuous mode [ 217.057470][ T9533] syzkaller0: entered allmulticast mode [ 217.076311][ T9541] loop5: detected capacity change from 0 to 128 [ 217.179077][ T30] audit: type=1326 audit(217.159:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.5.1086" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98977aa8 code=0x0 [ 217.344908][ T9560] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 217.344933][ T9560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.353777][ T9560] vhci_hcd vhci_hcd.0: Device attached [ 217.437854][ T9565] netlink: 'syz.5.1092': attribute type 1 has an invalid length. [ 217.465854][ T9562] vhci_hcd: connection closed [ 217.466121][ T15] vhci_hcd vhci_hcd.7: stop threads [ 217.466153][ T15] vhci_hcd vhci_hcd.7: release socket [ 217.466822][ T15] vhci_hcd vhci_hcd.7: disconnect device [ 217.489247][ T9565] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 217.541917][ T24] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 217.947869][ T9580] Injecting memory failure for pfn 0x1384a2 at process virtual address 0x20000000 [ 217.960778][ T9580] Memory failure: 0x1384a2: keeping poisoned page in swap cache [ 217.960896][ T9580] Memory failure: 0x1384a2: recovery action for clean swapcache page: Recovered [ 217.960951][ T9580] Injecting memory failure for pfn 0x1384a3 at process virtual address 0x20001000 [ 217.973584][ T9580] Memory failure: 0x1384a3: keeping poisoned page in swap cache [ 217.973657][ T9580] Memory failure: 0x1384a3: recovery action for clean swapcache page: Recovered [ 217.973695][ T9580] Injecting memory failure for pfn 0x1384a4 at process virtual address 0x20002000 [ 217.973742][ T9580] Memory failure: 0x1384a4: keeping poisoned page in swap cache [ 217.973765][ T9580] Memory failure: 0x1384a4: recovery action for clean swapcache page: Recovered [ 217.973785][ T9580] Injecting memory failure for pfn 0x1384a5 at process virtual address 0x20003000 [ 217.973815][ T9580] Memory failure: 0x1384a5: keeping poisoned page in swap cache [ 217.973840][ T9580] Memory failure: 0x1384a5: recovery action for clean swapcache page: Recovered [ 217.973857][ T9580] Injecting memory failure for pfn 0x1384a6 at process virtual address 0x20004000 [ 217.973880][ T9580] Memory failure: 0x1384a6: keeping poisoned page in swap cache [ 217.973900][ T9580] Memory failure: 0x1384a6: recovery action for clean swapcache page: Recovered [ 217.974046][ T9580] Injecting memory failure for pfn 0x133220 at process virtual address 0x20005000 [ 217.974086][ T9580] Memory failure: 0x133220: keeping poisoned page in swap cache [ 217.974105][ T9580] Memory failure: 0x133220: recovery action for clean swapcache page: Recovered [ 217.974123][ T9580] Injecting memory failure for pfn 0x13584c at process virtual address 0x20006000 [ 217.974144][ T9580] Memory failure: 0x13584c: keeping poisoned page in swap cache [ 217.974171][ T9580] Memory failure: 0x13584c: recovery action for clean swapcache page: Recovered [ 217.974190][ T9580] Injecting memory failure for pfn 0x151f97 at process virtual address 0x20007000 [ 217.974213][ T9580] Memory failure: 0x151f97: keeping poisoned page in swap cache [ 217.974234][ T9580] Memory failure: 0x151f97: recovery action for clean swapcache page: Recovered [ 217.974250][ T9580] Injecting memory failure for pfn 0x152096 at process virtual address 0x20008000 [ 217.974271][ T9580] Memory failure: 0x152096: keeping poisoned page in swap cache [ 217.974290][ T9580] Memory failure: 0x152096: recovery action for clean swapcache page: Recovered [ 217.974306][ T9580] Injecting memory failure for pfn 0x1517fd at process virtual address 0x20009000 [ 217.974327][ T9580] Memory failure: 0x1517fd: keeping poisoned page in swap cache [ 217.974345][ T9580] Memory failure: 0x1517fd: recovery action for clean swapcache page: Recovered [ 217.974362][ T9580] Injecting memory failure for pfn 0x139ee3 at process virtual address 0x2000a000 [ 217.974382][ T9580] Memory failure: 0x139ee3: keeping poisoned page in swap cache [ 217.983989][ T9580] Memory failure: 0x139ee3: recovery action for clean swapcache page: Recovered [ 217.984030][ T9580] Injecting memory failure for pfn 0x12190e at process virtual address 0x2000b000 [ 217.987174][ T9580] Memory failure: 0x12190e: keeping poisoned page in swap cache [ 217.987215][ T9580] Memory failure: 0x12190e: recovery action for clean swapcache page: Recovered [ 217.987244][ T9580] Injecting memory failure for pfn 0x1380fc at process virtual address 0x2000c000 [ 217.987369][ T9580] Memory failure: 0x1380fc: keeping poisoned page in swap cache [ 217.987392][ T9580] Memory failure: 0x1380fc: recovery action for clean swapcache page: Recovered [ 217.987531][ T9580] Injecting memory failure for pfn 0x1345a3 at process virtual address 0x2000d000 [ 217.987577][ T9580] Memory failure: 0x1345a3: keeping poisoned page in swap cache [ 217.987597][ T9580] Memory failure: 0x1345a3: recovery action for clean swapcache page: Recovered [ 217.987615][ T9580] Injecting memory failure for pfn 0x11f744 at process virtual address 0x2000e000 [ 217.987642][ T9580] Memory failure: 0x11f744: keeping poisoned page in swap cache [ 217.987661][ T9580] Memory failure: 0x11f744: recovery action for clean swapcache page: Recovered [ 217.987678][ T9580] Injecting memory failure for pfn 0x137eca at process virtual address 0x2000f000 [ 217.987703][ T9580] Memory failure: 0x137eca: keeping poisoned page in swap cache [ 217.987722][ T9580] Memory failure: 0x137eca: recovery action for clean swapcache page: Recovered [ 217.987738][ T9580] Injecting memory failure for pfn 0x14231c at process virtual address 0x20010000 [ 217.987760][ T9580] Memory failure: 0x14231c: keeping poisoned page in swap cache [ 217.987779][ T9580] Memory failure: 0x14231c: recovery action for clean swapcache page: Recovered [ 217.987795][ T9580] Injecting memory failure for pfn 0x137abc at process virtual address 0x20011000 [ 217.987816][ T9580] Memory failure: 0x137abc: keeping poisoned page in swap cache [ 217.987834][ T9580] Memory failure: 0x137abc: recovery action for clean swapcache page: Recovered [ 217.987850][ T9580] Injecting memory failure for pfn 0x137abf at process virtual address 0x20012000 [ 217.987872][ T9580] Memory failure: 0x137abf: keeping poisoned page in swap cache [ 217.987891][ T9580] Memory failure: 0x137abf: recovery action for clean swapcache page: Recovered [ 217.987907][ T9580] Injecting memory failure for pfn 0x139182 at process virtual address 0x20013000 [ 217.997050][ T9580] Memory failure: 0x139182: keeping poisoned page in swap cache [ 217.997109][ T9580] Memory failure: 0x139182: recovery action for clean swapcache page: Recovered [ 217.997142][ T9580] Injecting memory failure for pfn 0x13b6ba at process virtual address 0x20014000 [ 217.997475][ T9580] Memory failure: 0x13b6ba: keeping poisoned page in swap cache [ 217.997499][ T9580] Memory failure: 0x13b6ba: recovery action for clean swapcache page: Recovered [ 217.997640][ T9580] Injecting memory failure for pfn 0x120fa4 at process virtual address 0x20015000 [ 217.997694][ T9580] Memory failure: 0x120fa4: keeping poisoned page in swap cache [ 217.997715][ T9580] Memory failure: 0x120fa4: recovery action for clean swapcache page: Recovered [ 218.003181][ T9580] Injecting memory failure for pfn 0x120fa3 at process virtual address 0x20016000 [ 218.003426][ T9580] Memory failure: 0x120fa3: keeping poisoned page in swap cache [ 218.003455][ T9580] Memory failure: 0x120fa3: recovery action for clean swapcache page: Recovered [ 218.003476][ T9580] Injecting memory failure for pfn 0x120fa2 at process virtual address 0x20017000 [ 218.003510][ T9580] Memory failure: 0x120fa2: keeping poisoned page in swap cache [ 218.003531][ T9580] Memory failure: 0x120fa2: recovery action for clean swapcache page: Recovered [ 218.003550][ T9580] Injecting memory failure for pfn 0x13a691 at process virtual address 0x20018000 [ 218.003576][ T9580] Memory failure: 0x13a691: keeping poisoned page in swap cache [ 218.003596][ T9580] Memory failure: 0x13a691: recovery action for clean swapcache page: Recovered [ 218.003613][ T9580] Injecting memory failure for pfn 0x13322a at process virtual address 0x20019000 [ 218.003637][ T9580] Memory failure: 0x13322a: keeping poisoned page in swap cache [ 218.003657][ T9580] Memory failure: 0x13322a: recovery action for clean swapcache page: Recovered [ 218.003674][ T9580] Injecting memory failure for pfn 0x11f704 at process virtual address 0x2001a000 [ 218.003695][ T9580] Memory failure: 0x11f704: keeping poisoned page in swap cache [ 218.003714][ T9580] Memory failure: 0x11f704: recovery action for clean swapcache page: Recovered [ 218.003730][ T9580] Injecting memory failure for pfn 0x151f92 at process virtual address 0x2001b000 [ 218.003751][ T9580] Memory failure: 0x151f92: keeping poisoned page in swap cache [ 218.003771][ T9580] Memory failure: 0x151f92: recovery action for clean swapcache page: Recovered [ 218.003787][ T9580] Injecting memory failure for pfn 0x1230d2 at process virtual address 0x2001c000 [ 218.003808][ T9580] Memory failure: 0x1230d2: keeping poisoned page in swap cache [ 218.003826][ T9580] Memory failure: 0x1230d2: recovery action for clean swapcache page: Recovered [ 218.003956][ T9580] Injecting memory failure for pfn 0x13c38d at process virtual address 0x2001d000 [ 218.003994][ T9580] Memory failure: 0x13c38d: keeping poisoned page in swap cache [ 218.004012][ T9580] Memory failure: 0x13c38d: recovery action for clean swapcache page: Recovered [ 218.004028][ T9580] Injecting memory failure for pfn 0x150d35 at process virtual address 0x2001e000 [ 218.004049][ T9580] Memory failure: 0x150d35: keeping poisoned page in swap cache [ 218.004068][ T9580] Memory failure: 0x150d35: recovery action for clean swapcache page: Recovered [ 218.004084][ T9580] Injecting memory failure for pfn 0x13a623 at process virtual address 0x2001f000 [ 218.004105][ T9580] Memory failure: 0x13a623: keeping poisoned page in swap cache [ 218.004123][ T9580] Memory failure: 0x13a623: recovery action for clean swapcache page: Recovered [ 218.088182][ T9594] syzkaller0: entered promiscuous mode [ 218.088201][ T9594] syzkaller0: entered allmulticast mode [ 218.096483][ T9580] Injecting memory failure for pfn 0x13d444 at process virtual address 0x20020000 [ 218.115922][ T9599] loop7: detected capacity change from 0 to 1024 [ 218.148434][ T9580] Memory failure: 0x13d444: recovery action for clean swapcache page: Recovered [ 218.148505][ T9580] Injecting memory failure for pfn 0x11ee18 at process virtual address 0x20021000 [ 218.149531][ T9599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 218.159831][ T9599] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1100: lblock 2 mapped to illegal pblock 2 (length 4) [ 218.162895][ T9580] Memory failure: 0x11ee18: keeping poisoned page in swap cache [ 218.162980][ T9580] Memory failure: 0x11ee18: recovery action for clean swapcache page: Recovered [ 218.163015][ T9580] Injecting memory failure for pfn 0x13ad16 at process virtual address 0x20022000 [ 218.164530][ T9599] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1100: bg 0: block 112: padding at end of block bitmap is not set [ 218.166408][ T9599] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 218.166425][ T9599] EXT4-fs (loop7): This should not happen!! Data will be lost [ 218.166425][ T9599] [ 218.166433][ T9599] EXT4-fs (loop7): Total free blocks count 0 [ 218.166441][ T9599] EXT4-fs (loop7): Free/Dirty block details [ 218.166449][ T9599] EXT4-fs (loop7): free_blocks=0 [ 218.166458][ T9599] EXT4-fs (loop7): dirty_blocks=48 [ 218.166465][ T9599] EXT4-fs (loop7): Block reservation details [ 218.166471][ T9599] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 218.182287][ T9580] Memory failure: 0x13ad16: keeping poisoned page in swap cache [ 218.182352][ T9580] Memory failure: 0x13ad16: recovery action for clean swapcache page: Recovered [ 218.182406][ T9580] Injecting memory failure for pfn 0x135aa2 at process virtual address 0x20023000 [ 218.185119][ T9580] Memory failure: 0x135aa2: keeping poisoned page in swap cache [ 218.185166][ T9580] Memory failure: 0x135aa2: recovery action for clean swapcache page: Recovered [ 218.185199][ T9580] Injecting memory failure for pfn 0x1424e5 at process virtual address 0x20024000 [ 218.185305][ T9580] Memory failure: 0x1424e5: keeping poisoned page in swap cache [ 218.185330][ T9580] Memory failure: 0x1424e5: recovery action for clean swapcache page: Recovered [ 218.185471][ T9580] Injecting memory failure for pfn 0x13541e at process virtual address 0x20025000 [ 218.185516][ T9580] Memory failure: 0x13541e: keeping poisoned page in swap cache [ 218.185537][ T9580] Memory failure: 0x13541e: recovery action for clean swapcache page: Recovered [ 218.185555][ T9580] Injecting memory failure for pfn 0x12158e at process virtual address 0x20026000 [ 218.185580][ T9580] Memory failure: 0x12158e: keeping poisoned page in swap cache [ 218.185599][ T9580] Memory failure: 0x12158e: recovery action for clean swapcache page: Recovered [ 218.185616][ T9580] Injecting memory failure for pfn 0x150daa at process virtual address 0x20027000 [ 218.185638][ T9580] Memory failure: 0x150daa: keeping poisoned page in swap cache [ 218.185657][ T9580] Memory failure: 0x150daa: recovery action for clean swapcache page: Recovered [ 218.185673][ T9580] Injecting memory failure for pfn 0x13b110 at process virtual address 0x20028000 [ 218.185695][ T9580] Memory failure: 0x13b110: keeping poisoned page in swap cache [ 218.185713][ T9580] Memory failure: 0x13b110: recovery action for clean swapcache page: Recovered [ 218.185729][ T9580] Injecting memory failure for pfn 0x11fb8f at process virtual address 0x20029000 [ 218.185750][ T9580] Memory failure: 0x11fb8f: keeping poisoned page in swap cache [ 218.185768][ T9580] Memory failure: 0x11fb8f: recovery action for clean swapcache page: Recovered [ 218.185784][ T9580] Injecting memory failure for pfn 0x121a21 at process virtual address 0x2002a000 [ 218.185805][ T9580] Memory failure: 0x121a21: keeping poisoned page in swap cache [ 218.185823][ T9580] Memory failure: 0x121a21: recovery action for clean swapcache page: Recovered [ 218.185840][ T9580] Injecting memory failure for pfn 0x133222 at process virtual address 0x2002b000 [ 218.185860][ T9580] Memory failure: 0x133222: keeping poisoned page in swap cache [ 218.185879][ T9580] Memory failure: 0x133222: recovery action for clean swapcache page: Recovered [ 218.185895][ T9580] Injecting memory failure for pfn 0x11f8c9 at process virtual address 0x2002c000 [ 218.185916][ T9580] Memory failure: 0x11f8c9: keeping poisoned page in swap cache [ 218.187936][ T9580] Memory failure: 0x11f8c9: recovery action for clean swapcache page: Recovered [ 218.188836][ T9580] Injecting memory failure for pfn 0x13b1f3 at process virtual address 0x2002d000 [ 218.188947][ T9580] Memory failure: 0x13b1f3: keeping poisoned page in swap cache [ 218.188973][ T9580] Memory failure: 0x13b1f3: recovery action for clean swapcache page: Recovered [ 218.188995][ T9580] Injecting memory failure for pfn 0x13b4d7 at process virtual address 0x2002e000 [ 218.189019][ T9580] Memory failure: 0x13b4d7: keeping poisoned page in swap cache [ 218.189040][ T9580] Memory failure: 0x13b4d7: recovery action for clean swapcache page: Recovered [ 218.189058][ T9580] Injecting memory failure for pfn 0x123153 at process virtual address 0x2002f000 [ 218.189077][ T9580] Memory failure: 0x123153: keeping poisoned page in swap cache [ 218.189097][ T9580] Memory failure: 0x123153: recovery action for clean swapcache page: Recovered [ 218.192468][ T9580] Injecting memory failure for pfn 0x151c1b at process virtual address 0x20030000 [ 218.192523][ T9580] Memory failure: 0x151c1b: keeping poisoned page in swap cache [ 218.192554][ T9580] Memory failure: 0x151c1b: recovery action for clean swapcache page: Recovered [ 218.192581][ T9580] Injecting memory failure for pfn 0x139443 at process virtual address 0x20031000 [ 218.192611][ T9580] Memory failure: 0x139443: keeping poisoned page in swap cache [ 218.192633][ T9580] Memory failure: 0x139443: recovery action for clean swapcache page: Recovered [ 218.192651][ T9580] Injecting memory failure for pfn 0x137f8e at process virtual address 0x20032000 [ 218.192671][ T9580] Memory failure: 0x137f8e: keeping poisoned page in swap cache [ 218.192690][ T9580] Memory failure: 0x137f8e: recovery action for clean swapcache page: Recovered [ 218.192708][ T9580] Injecting memory failure for pfn 0x137ecd at process virtual address 0x20033000 [ 218.192726][ T9580] Memory failure: 0x137ecd: keeping poisoned page in swap cache [ 218.192744][ T9580] Memory failure: 0x137ecd: recovery action for clean swapcache page: Recovered [ 218.192760][ T9580] Injecting memory failure for pfn 0x142088 at process virtual address 0x20034000 [ 218.192778][ T9580] Memory failure: 0x142088: keeping poisoned page in swap cache [ 218.192796][ T9580] Memory failure: 0x142088: recovery action for clean swapcache page: Recovered [ 218.192940][ T9580] Injecting memory failure for pfn 0x13780d at process virtual address 0x20035000 [ 218.192993][ T9580] Memory failure: 0x13780d: keeping poisoned page in swap cache [ 218.193011][ T9580] Memory failure: 0x13780d: recovery action for clean swapcache page: Recovered [ 218.193026][ T9580] Injecting memory failure for pfn 0x13c0bd at process virtual address 0x20036000 [ 218.193044][ T9580] Memory failure: 0x13c0bd: keeping poisoned page in swap cache [ 218.193061][ T9580] Memory failure: 0x13c0bd: recovery action for clean swapcache page: Recovered [ 218.193076][ T9580] Injecting memory failure for pfn 0x13adb7 at process virtual address 0x20037000 [ 218.193094][ T9580] Memory failure: 0x13adb7: keeping poisoned page in swap cache [ 218.193111][ T9580] Memory failure: 0x13adb7: recovery action for clean swapcache page: Recovered [ 218.193126][ T9580] Injecting memory failure for pfn 0x11f008 at process virtual address 0x20038000 [ 218.193144][ T9580] Memory failure: 0x11f008: keeping poisoned page in swap cache [ 218.193179][ T9580] Memory failure: 0x11f008: recovery action for clean swapcache page: Recovered [ 218.193196][ T9580] Injecting memory failure for pfn 0x135e80 at process virtual address 0x20039000 [ 218.193213][ T9580] Memory failure: 0x135e80: keeping poisoned page in swap cache [ 218.193231][ T9580] Memory failure: 0x135e80: recovery action for clean swapcache page: Recovered [ 218.193246][ T9580] Injecting memory failure for pfn 0x132cc8 at process virtual address 0x2003a000 [ 218.193263][ T9580] Memory failure: 0x132cc8: keeping poisoned page in swap cache [ 218.193280][ T9580] Memory failure: 0x132cc8: recovery action for clean swapcache page: Recovered [ 218.193296][ T9580] Injecting memory failure for pfn 0x121833 at process virtual address 0x2003b000 [ 218.193313][ T9580] Memory failure: 0x121833: keeping poisoned page in swap cache [ 218.193330][ T9580] Memory failure: 0x121833: recovery action for clean swapcache page: Recovered [ 218.193345][ T9580] Injecting memory failure for pfn 0x11fc08 at process virtual address 0x2003c000 [ 218.193362][ T9580] Memory failure: 0x11fc08: keeping poisoned page in swap cache [ 218.193379][ T9580] Memory failure: 0x11fc08: recovery action for clean swapcache page: Recovered [ 218.198552][ T9580] Injecting memory failure for pfn 0x132fec at process virtual address 0x2003d000 [ 218.209076][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 218.210067][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 218.210844][ T9580] Memory failure: 0x132fec: keeping poisoned page in swap cache [ 218.210894][ T9580] Memory failure: 0x132fec: recovery action for clean swapcache page: Recovered [ 218.210931][ T9580] Injecting memory failure for pfn 0x121428 at process virtual address 0x2003e000 [ 218.214603][ T9580] Memory failure: 0x121428: keeping poisoned page in swap cache [ 218.214648][ T9580] Memory failure: 0x121428: recovery action for clean swapcache page: Recovered [ 218.214958][ T9580] Injecting memory failure for pfn 0x142af9 at process virtual address 0x2003f000 [ 218.215026][ T9580] Memory failure: 0x142af9: keeping poisoned page in swap cache [ 218.215050][ T9580] Memory failure: 0x142af9: recovery action for clean swapcache page: Recovered [ 218.215072][ T9580] Injecting memory failure for pfn 0x132d11 at process virtual address 0x20040000 [ 218.215101][ T9580] Memory failure: 0x132d11: keeping poisoned page in swap cache [ 218.215121][ T9580] Memory failure: 0x132d11: recovery action for clean swapcache page: Recovered [ 218.215139][ T9580] Injecting memory failure for pfn 0x13c0bf at process virtual address 0x20041000 [ 218.215169][ T9580] Memory failure: 0x13c0bf: keeping poisoned page in swap cache [ 218.215190][ T9580] Memory failure: 0x13c0bf: recovery action for clean swapcache page: Recovered [ 218.215207][ T9580] Injecting memory failure for pfn 0x123394 at process virtual address 0x20042000 [ 218.215231][ T9580] Memory failure: 0x123394: keeping poisoned page in swap cache [ 218.215250][ T9580] Memory failure: 0x123394: recovery action for clean swapcache page: Recovered [ 218.215267][ T9580] Injecting memory failure for pfn 0x13ae25 at process virtual address 0x20043000 [ 218.215286][ T9580] Memory failure: 0x13ae25: keeping poisoned page in swap cache [ 218.215304][ T9580] Memory failure: 0x13ae25: recovery action for clean swapcache page: Recovered [ 218.215320][ T9580] Injecting memory failure for pfn 0x136c4c at process virtual address 0x20044000 [ 218.215339][ T9580] Memory failure: 0x136c4c: keeping poisoned page in swap cache [ 218.215357][ T9580] Memory failure: 0x136c4c: recovery action for clean swapcache page: Recovered [ 218.215515][ T9580] Injecting memory failure for pfn 0x151af6 at process virtual address 0x20045000 [ 218.220647][ T9580] Memory failure: 0x151af6: keeping poisoned page in swap cache [ 218.220693][ T9580] Memory failure: 0x151af6: recovery action for clean swapcache page: Recovered [ 218.220730][ T9580] Injecting memory failure for pfn 0x151fd2 at process virtual address 0x20046000 [ 218.223905][ T9580] Memory failure: 0x151fd2: keeping poisoned page in swap cache [ 218.223939][ T9580] Memory failure: 0x151fd2: recovery action for clean swapcache page: Recovered [ 218.223966][ T9580] Injecting memory failure for pfn 0x150e9c at process virtual address 0x20047000 [ 218.223999][ T9580] Memory failure: 0x150e9c: keeping poisoned page in swap cache [ 218.224021][ T9580] Memory failure: 0x150e9c: recovery action for clean swapcache page: Recovered [ 218.224040][ T9580] Injecting memory failure for pfn 0x137a4a at process virtual address 0x20048000 [ 218.224066][ T9580] Memory failure: 0x137a4a: keeping poisoned page in swap cache [ 218.224086][ T9580] Memory failure: 0x137a4a: recovery action for clean swapcache page: Recovered [ 218.224103][ T9580] Injecting memory failure for pfn 0x13b3df at process virtual address 0x20049000 [ 218.224124][ T9580] Memory failure: 0x13b3df: keeping poisoned page in swap cache [ 218.224142][ T9580] Memory failure: 0x13b3df: recovery action for clean swapcache page: Recovered [ 218.224166][ T9580] Injecting memory failure for pfn 0x15285f at process virtual address 0x2004a000 [ 218.224190][ T9580] Memory failure: 0x15285f: keeping poisoned page in swap cache [ 218.224208][ T9580] Memory failure: 0x15285f: recovery action for clean swapcache page: Recovered [ 218.224224][ T9580] Injecting memory failure for pfn 0x135dad at process virtual address 0x2004b000 [ 218.224243][ T9580] Memory failure: 0x135dad: keeping poisoned page in swap cache [ 218.224261][ T9580] Memory failure: 0x135dad: recovery action for clean swapcache page: Recovered [ 218.224277][ T9580] Injecting memory failure for pfn 0x138db7 at process virtual address 0x2004c000 [ 218.224295][ T9580] Memory failure: 0x138db7: keeping poisoned page in swap cache [ 218.224312][ T9580] Memory failure: 0x138db7: recovery action for clean swapcache page: Recovered [ 218.224446][ T9580] Injecting memory failure for pfn 0x139a07 at process virtual address 0x2004d000 [ 218.224481][ T9580] Memory failure: 0x139a07: keeping poisoned page in swap cache [ 218.224499][ T9580] Memory failure: 0x139a07: recovery action for clean swapcache page: Recovered [ 218.224514][ T9580] Injecting memory failure for pfn 0x13c3fe at process virtual address 0x2004e000 [ 218.224532][ T9580] Memory failure: 0x13c3fe: keeping poisoned page in swap cache [ 218.224549][ T9580] Memory failure: 0x13c3fe: recovery action for clean swapcache page: Recovered [ 218.224565][ T9580] Injecting memory failure for pfn 0x120cbe at process virtual address 0x2004f000 [ 218.224582][ T9580] Memory failure: 0x120cbe: keeping poisoned page in swap cache [ 218.224599][ T9580] Memory failure: 0x120cbe: recovery action for clean swapcache page: Recovered [ 218.224614][ T9580] Injecting memory failure for pfn 0x120c90 at process virtual address 0x20050000 [ 218.224632][ T9580] Memory failure: 0x120c90: keeping poisoned page in swap cache [ 218.224649][ T9580] Memory failure: 0x120c90: recovery action for clean swapcache page: Recovered [ 218.224664][ T9580] Injecting memory failure for pfn 0x134514 at process virtual address 0x20051000 [ 218.224681][ T9580] Memory failure: 0x134514: keeping poisoned page in swap cache [ 218.229487][ T9580] Memory failure: 0x134514: recovery action for clean swapcache page: Recovered [ 218.229528][ T9580] Injecting memory failure for pfn 0x1507a0 at process virtual address 0x20052000 [ 218.229635][ T9580] Memory failure: 0x1507a0: keeping poisoned page in swap cache [ 218.229664][ T9580] Memory failure: 0x1507a0: recovery action for clean swapcache page: Recovered [ 218.229683][ T9580] Injecting memory failure for pfn 0x13b7a0 at process virtual address 0x20053000 [ 218.230177][ T9580] Memory failure: 0x13b7a0: keeping poisoned page in swap cache [ 218.230211][ T9580] Memory failure: 0x13b7a0: recovery action for clean swapcache page: Recovered [ 218.230237][ T9580] Injecting memory failure for pfn 0x122c56 at process virtual address 0x20054000 [ 218.230267][ T9580] Memory failure: 0x122c56: keeping poisoned page in swap cache [ 218.230290][ T9580] Memory failure: 0x122c56: recovery action for clean swapcache page: Recovered [ 218.230435][ T9580] Injecting memory failure for pfn 0x151f9a at process virtual address 0x20055000 [ 218.230491][ T9580] Memory failure: 0x151f9a: keeping poisoned page in swap cache [ 218.230526][ T9580] Memory failure: 0x151f9a: recovery action for clean swapcache page: Recovered [ 218.230546][ T9580] Injecting memory failure for pfn 0x11eca1 at process virtual address 0x20056000 [ 218.230568][ T9580] Memory failure: 0x11eca1: keeping poisoned page in swap cache [ 218.230589][ T9580] Memory failure: 0x11eca1: recovery action for clean swapcache page: Recovered [ 218.230607][ T9580] Injecting memory failure for pfn 0x132e52 at process virtual address 0x20057000 [ 218.230625][ T9580] Memory failure: 0x132e52: keeping poisoned page in swap cache [ 218.230645][ T9580] Memory failure: 0x132e52: recovery action for clean swapcache page: Recovered [ 218.230662][ T9580] Injecting memory failure for pfn 0x122f3f at process virtual address 0x20058000 [ 218.230680][ T9580] Memory failure: 0x122f3f: keeping poisoned page in swap cache [ 218.230698][ T9580] Memory failure: 0x122f3f: recovery action for clean swapcache page: Recovered [ 218.230714][ T9580] Injecting memory failure for pfn 0x15220a at process virtual address 0x20059000 [ 218.230732][ T9580] Memory failure: 0x15220a: keeping poisoned page in swap cache [ 218.232798][ T9580] Memory failure: 0x15220a: recovery action for clean swapcache page: Recovered [ 218.232834][ T9580] Injecting memory failure for pfn 0x137c5f at process virtual address 0x2005a000 [ 218.233728][ T9580] Memory failure: 0x137c5f: keeping poisoned page in swap cache [ 218.233850][ T9580] Memory failure: 0x137c5f: recovery action for clean swapcache page: Recovered [ 218.233872][ T9580] Injecting memory failure for pfn 0x11fd16 at process virtual address 0x2005b000 [ 218.233901][ T9580] Memory failure: 0x11fd16: keeping poisoned page in swap cache [ 218.235313][ T9580] Memory failure: 0x11fd16: recovery action for clean swapcache page: Recovered [ 218.235346][ T9580] Injecting memory failure for pfn 0x151c37 at process virtual address 0x2005c000 [ 218.235415][ T9580] Memory failure: 0x151c37: keeping poisoned page in swap cache [ 218.235437][ T9580] Memory failure: 0x151c37: recovery action for clean swapcache page: Recovered [ 218.235575][ T9580] Injecting memory failure for pfn 0x150adf at process virtual address 0x2005d000 [ 218.235633][ T9580] Memory failure: 0x150adf: keeping poisoned page in swap cache [ 218.235653][ T9580] Memory failure: 0x150adf: recovery action for clean swapcache page: Recovered [ 218.235670][ T9580] Injecting memory failure for pfn 0x1411b6 at process virtual address 0x2005e000 [ 218.235689][ T9580] Memory failure: 0x1411b6: keeping poisoned page in swap cache [ 218.235708][ T9580] Memory failure: 0x1411b6: recovery action for clean swapcache page: Recovered [ 218.235725][ T9580] Injecting memory failure for pfn 0x152a2f at process virtual address 0x2005f000 [ 218.235743][ T9580] Memory failure: 0x152a2f: keeping poisoned page in swap cache [ 218.235761][ T9580] Memory failure: 0x152a2f: recovery action for clean swapcache page: Recovered [ 218.237759][ T9580] Injecting memory failure for pfn 0x13c236 at process virtual address 0x20060000 [ 218.237801][ T9580] Memory failure: 0x13c236: keeping poisoned page in swap cache [ 218.237825][ T9580] Memory failure: 0x13c236: recovery action for clean swapcache page: Recovered [ 218.237846][ T9580] Injecting memory failure for pfn 0x150ce7 at process virtual address 0x20061000 [ 218.237869][ T9580] Memory failure: 0x150ce7: keeping poisoned page in swap cache [ 218.237889][ T9580] Memory failure: 0x150ce7: recovery action for clean swapcache page: Recovered [ 218.238442][ T9580] Injecting memory failure for pfn 0x139a0e at process virtual address 0x20062000 [ 218.238475][ T9580] Memory failure: 0x139a0e: keeping poisoned page in swap cache [ 218.238497][ T9580] Memory failure: 0x139a0e: recovery action for clean swapcache page: Recovered [ 218.238517][ T9580] Injecting memory failure for pfn 0x13b0ff at process virtual address 0x20063000 [ 218.238537][ T9580] Memory failure: 0x13b0ff: keeping poisoned page in swap cache [ 218.238556][ T9580] Memory failure: 0x13b0ff: recovery action for clean swapcache page: Recovered [ 218.238574][ T9580] Injecting memory failure for pfn 0x142256 at process virtual address 0x20064000 [ 218.238593][ T9580] Memory failure: 0x142256: keeping poisoned page in swap cache [ 218.238612][ T9580] Memory failure: 0x142256: recovery action for clean swapcache page: Recovered [ 218.240150][ T9580] Injecting memory failure for pfn 0x135677 at process virtual address 0x20065000 [ 218.240419][ T9580] Memory failure: 0x135677: keeping poisoned page in swap cache [ 218.240446][ T9580] Memory failure: 0x135677: recovery action for clean swapcache page: Recovered [ 218.240467][ T9580] Injecting memory failure for pfn 0x135ebe at process virtual address 0x20066000 [ 218.240489][ T9580] Memory failure: 0x135ebe: keeping poisoned page in swap cache [ 218.240509][ T9580] Memory failure: 0x135ebe: recovery action for clean swapcache page: Recovered [ 218.240526][ T9580] Injecting memory failure for pfn 0x13c79f at process virtual address 0x20067000 [ 218.240545][ T9580] Memory failure: 0x13c79f: keeping poisoned page in swap cache [ 218.240564][ T9580] Memory failure: 0x13c79f: recovery action for clean swapcache page: Recovered [ 218.240580][ T9580] Injecting memory failure for pfn 0x152107 at process virtual address 0x20068000 [ 218.240598][ T9580] Memory failure: 0x152107: keeping poisoned page in swap cache [ 218.240616][ T9580] Memory failure: 0x152107: recovery action for clean swapcache page: Recovered [ 218.240633][ T9580] Injecting memory failure for pfn 0x13aaff at process virtual address 0x20069000 [ 218.240650][ T9580] Memory failure: 0x13aaff: keeping poisoned page in swap cache [ 218.240668][ T9580] Memory failure: 0x13aaff: recovery action for clean swapcache page: Recovered [ 218.240684][ T9580] Injecting memory failure for pfn 0x13c1fa at process virtual address 0x2006a000 [ 218.240702][ T9580] Memory failure: 0x13c1fa: keeping poisoned page in swap cache [ 218.240719][ T9580] Memory failure: 0x13c1fa: recovery action for clean swapcache page: Recovered [ 218.240735][ T9580] Injecting memory failure for pfn 0x150e9b at process virtual address 0x2006b000 [ 218.240752][ T9580] Memory failure: 0x150e9b: keeping poisoned page in swap cache [ 218.240769][ T9580] Memory failure: 0x150e9b: recovery action for clean swapcache page: Recovered [ 218.240785][ T9580] Injecting memory failure for pfn 0x13b4fa at process virtual address 0x2006c000 [ 218.240802][ T9580] Memory failure: 0x13b4fa: keeping poisoned page in swap cache [ 218.240819][ T9580] Memory failure: 0x13b4fa: recovery action for clean swapcache page: Recovered [ 218.240937][ T9580] Injecting memory failure for pfn 0x132d38 at process virtual address 0x2006d000 [ 218.240968][ T9580] Memory failure: 0x132d38: keeping poisoned page in swap cache [ 218.240985][ T9580] Memory failure: 0x132d38: recovery action for clean swapcache page: Recovered [ 218.241001][ T9580] Injecting memory failure for pfn 0x13584d at process virtual address 0x2006e000 [ 218.241018][ T9580] Memory failure: 0x13584d: keeping poisoned page in swap cache [ 218.241036][ T9580] Memory failure: 0x13584d: recovery action for clean swapcache page: Recovered [ 218.241051][ T9580] Injecting memory failure for pfn 0x141032 at process virtual address 0x2006f000 [ 218.241068][ T9580] Memory failure: 0x141032: keeping poisoned page in swap cache [ 218.247149][ T9580] Memory failure: 0x141032: recovery action for clean swapcache page: Recovered [ 218.247183][ T9580] Injecting memory failure for pfn 0x151d76 at process virtual address 0x20070000 [ 218.247257][ T9580] Memory failure: 0x151d76: keeping poisoned page in swap cache [ 218.247282][ T9580] Memory failure: 0x151d76: recovery action for clean swapcache page: Recovered [ 218.247302][ T9580] Injecting memory failure for pfn 0x142e45 at process virtual address 0x20071000 [ 218.247326][ T9580] Memory failure: 0x142e45: keeping poisoned page in swap cache [ 218.247346][ T9580] Memory failure: 0x142e45: recovery action for clean swapcache page: Recovered [ 218.247364][ T9580] Injecting memory failure for pfn 0x13780f at process virtual address 0x20072000 [ 218.247383][ T9580] Memory failure: 0x13780f: keeping poisoned page in swap cache [ 218.247486][ T9580] Memory failure: 0x13780f: recovery action for clean swapcache page: Recovered [ 218.247510][ T9580] Injecting memory failure for pfn 0x13b738 at process virtual address 0x20073000 [ 218.247529][ T9580] Memory failure: 0x13b738: keeping poisoned page in swap cache [ 218.247548][ T9580] Memory failure: 0x13b738: recovery action for clean swapcache page: Recovered [ 218.247565][ T9580] Injecting memory failure for pfn 0x13b27b at process virtual address 0x20074000 [ 218.247583][ T9580] Memory failure: 0x13b27b: keeping poisoned page in swap cache [ 218.247601][ T9580] Memory failure: 0x13b27b: recovery action for clean swapcache page: Recovered [ 218.247732][ T9580] Injecting memory failure for pfn 0x141c1b at process virtual address 0x20075000 [ 218.247766][ T9580] Memory failure: 0x141c1b: keeping poisoned page in swap cache [ 218.247784][ T9580] Memory failure: 0x141c1b: recovery action for clean swapcache page: Recovered [ 218.247800][ T9580] Injecting memory failure for pfn 0x13a9ae at process virtual address 0x20076000 [ 218.247818][ T9580] Memory failure: 0x13a9ae: keeping poisoned page in swap cache [ 218.247835][ T9580] Memory failure: 0x13a9ae: recovery action for clean swapcache page: Recovered [ 218.247851][ T9580] Injecting memory failure for pfn 0x142a16 at process virtual address 0x20077000 [ 218.247868][ T9580] Memory failure: 0x142a16: keeping poisoned page in swap cache [ 218.247886][ T9580] Memory failure: 0x142a16: recovery action for clean swapcache page: Recovered [ 218.247901][ T9580] Injecting memory failure for pfn 0x13a21b at process virtual address 0x20078000 [ 218.247928][ T9580] Memory failure: 0x13a21b: keeping poisoned page in swap cache [ 218.247946][ T9580] Memory failure: 0x13a21b: recovery action for clean swapcache page: Recovered [ 218.247961][ T9580] Injecting memory failure for pfn 0x138086 at process virtual address 0x20079000 [ 218.247978][ T9580] Memory failure: 0x138086: keeping poisoned page in swap cache [ 218.247996][ T9580] Memory failure: 0x138086: recovery action for clean swapcache page: Recovered [ 218.248011][ T9580] Injecting memory failure for pfn 0x13b0db at process virtual address 0x2007a000 [ 218.248028][ T9580] Memory failure: 0x13b0db: keeping poisoned page in swap cache [ 218.248045][ T9580] Memory failure: 0x13b0db: recovery action for clean swapcache page: Recovered [ 218.248060][ T9580] Injecting memory failure for pfn 0x150d92 at process virtual address 0x2007b000 [ 218.248077][ T9580] Memory failure: 0x150d92: keeping poisoned page in swap cache [ 218.248094][ T9580] Memory failure: 0x150d92: recovery action for clean swapcache page: Recovered [ 218.248109][ T9580] Injecting memory failure for pfn 0x13b78f at process virtual address 0x2007c000 [ 218.248126][ T9580] Memory failure: 0x13b78f: keeping poisoned page in swap cache [ 218.248143][ T9580] Memory failure: 0x13b78f: recovery action for clean swapcache page: Recovered [ 218.248278][ T9580] Injecting memory failure for pfn 0x136c22 at process virtual address 0x2007d000 [ 218.248328][ T9580] Memory failure: 0x136c22: keeping poisoned page in swap cache [ 218.248346][ T9580] Memory failure: 0x136c22: recovery action for clean swapcache page: Recovered [ 218.248361][ T9580] Injecting memory failure for pfn 0x151d5f at process virtual address 0x2007e000 [ 218.248378][ T9580] Memory failure: 0x151d5f: keeping poisoned page in swap cache [ 218.248395][ T9580] Memory failure: 0x151d5f: recovery action for clean swapcache page: Recovered [ 218.248410][ T9580] Injecting memory failure for pfn 0x11f5c2 at process virtual address 0x2007f000 [ 218.248427][ T9580] Memory failure: 0x11f5c2: keeping poisoned page in swap cache [ 218.251542][ T9580] Memory failure: 0x11f5c2: recovery action for clean swapcache page: Recovered [ 218.253568][ T9580] Injecting memory failure for pfn 0x137827 at process virtual address 0x20080000 [ 218.253759][ T9580] Memory failure: 0x137827: keeping poisoned page in swap cache [ 218.253789][ T9580] Memory failure: 0x137827: recovery action for clean swapcache page: Recovered [ 218.253812][ T9580] Injecting memory failure for pfn 0x1399c6 at process virtual address 0x20081000 [ 218.253839][ T9580] Memory failure: 0x1399c6: keeping poisoned page in swap cache [ 218.253861][ T9580] Memory failure: 0x1399c6: recovery action for clean swapcache page: Recovered [ 218.253880][ T9580] Injecting memory failure for pfn 0x139fe3 at process virtual address 0x20082000 [ 218.253900][ T9580] Memory failure: 0x139fe3: keeping poisoned page in swap cache [ 218.253919][ T9580] Memory failure: 0x139fe3: recovery action for clean swapcache page: Recovered [ 218.253936][ T9580] Injecting memory failure for pfn 0x142e36 at process virtual address 0x20083000 [ 218.253955][ T9580] Memory failure: 0x142e36: keeping poisoned page in swap cache [ 218.253973][ T9580] Memory failure: 0x142e36: recovery action for clean swapcache page: Recovered [ 218.253989][ T9580] Injecting memory failure for pfn 0x142913 at process virtual address 0x20084000 [ 218.254007][ T9580] Memory failure: 0x142913: keeping poisoned page in swap cache [ 218.254025][ T9580] Memory failure: 0x142913: recovery action for clean swapcache page: Recovered [ 218.254240][ T9580] Injecting memory failure for pfn 0x135fb6 at process virtual address 0x20085000 [ 218.254403][ T9580] Memory failure: 0x135fb6: keeping poisoned page in swap cache [ 218.254422][ T9580] Memory failure: 0x135fb6: recovery action for clean swapcache page: Recovered [ 218.254438][ T9580] Injecting memory failure for pfn 0x136ca3 at process virtual address 0x20086000 [ 218.254455][ T9580] Memory failure: 0x136ca3: keeping poisoned page in swap cache [ 218.254473][ T9580] Memory failure: 0x136ca3: recovery action for clean swapcache page: Recovered [ 218.254489][ T9580] Injecting memory failure for pfn 0x1356d1 at process virtual address 0x20087000 [ 218.254506][ T9580] Memory failure: 0x1356d1: keeping poisoned page in swap cache [ 218.254523][ T9580] Memory failure: 0x1356d1: recovery action for clean swapcache page: Recovered [ 218.254539][ T9580] Injecting memory failure for pfn 0x137a96 at process virtual address 0x20088000 [ 218.254556][ T9580] Memory failure: 0x137a96: keeping poisoned page in swap cache [ 218.254573][ T9580] Memory failure: 0x137a96: recovery action for clean swapcache page: Recovered [ 218.257953][ T9580] Injecting memory failure for pfn 0x151f5a at process virtual address 0x20089000 [ 218.260739][ T9580] Memory failure: 0x151f5a: keeping poisoned page in swap cache [ 218.260771][ T9580] Memory failure: 0x151f5a: recovery action for clean swapcache page: Recovered [ 218.260795][ T9580] Injecting memory failure for pfn 0x1524ac at process virtual address 0x2008a000 [ 218.260821][ T9580] Memory failure: 0x1524ac: keeping poisoned page in swap cache [ 218.260841][ T9580] Memory failure: 0x1524ac: recovery action for clean swapcache page: Recovered [ 218.260859][ T9580] Injecting memory failure for pfn 0x1507bf at process virtual address 0x2008b000 [ 218.260879][ T9580] Memory failure: 0x1507bf: keeping poisoned page in swap cache [ 218.260898][ T9580] Memory failure: 0x1507bf: recovery action for clean swapcache page: Recovered [ 218.260915][ T9580] Injecting memory failure for pfn 0x13a34d at process virtual address 0x2008c000 [ 218.260933][ T9580] Memory failure: 0x13a34d: keeping poisoned page in swap cache [ 218.260952][ T9580] Memory failure: 0x13a34d: recovery action for clean swapcache page: Recovered [ 218.264155][ T9580] Injecting memory failure for pfn 0x137ecc at process virtual address 0x2008d000 [ 218.264315][ T9580] Memory failure: 0x137ecc: keeping poisoned page in swap cache [ 218.264344][ T9580] Memory failure: 0x137ecc: recovery action for clean swapcache page: Recovered [ 218.264367][ T9580] Injecting memory failure for pfn 0x11f0e1 at process virtual address 0x2008e000 [ 218.265314][ T9580] Memory failure: 0x11f0e1: keeping poisoned page in swap cache [ 218.265345][ T9580] Memory failure: 0x11f0e1: recovery action for clean swapcache page: Recovered [ 218.265370][ T9580] Injecting memory failure for pfn 0x150957 at process virtual address 0x2008f000 [ 218.265400][ T9580] Memory failure: 0x150957: keeping poisoned page in swap cache [ 218.265464][ T9580] Memory failure: 0x150957: recovery action for clean swapcache page: Recovered [ 218.265485][ T9580] Injecting memory failure for pfn 0x13c66f at process virtual address 0x20090000 [ 218.265510][ T9580] Memory failure: 0x13c66f: keeping poisoned page in swap cache [ 218.265530][ T9580] Memory failure: 0x13c66f: recovery action for clean swapcache page: Recovered [ 218.265548][ T9580] Injecting memory failure for pfn 0x138c6f at process virtual address 0x20091000 [ 218.265568][ T9580] Memory failure: 0x138c6f: keeping poisoned page in swap cache [ 218.265587][ T9580] Memory failure: 0x138c6f: recovery action for clean swapcache page: Recovered [ 218.265604][ T9580] Injecting memory failure for pfn 0x13abd0 at process virtual address 0x20092000 [ 218.265623][ T9580] Memory failure: 0x13abd0: keeping poisoned page in swap cache [ 218.265641][ T9580] Memory failure: 0x13abd0: recovery action for clean swapcache page: Recovered [ 218.265657][ T9580] Injecting memory failure for pfn 0x13aa48 at process virtual address 0x20093000 [ 218.265676][ T9580] Memory failure: 0x13aa48: keeping poisoned page in swap cache [ 218.265694][ T9580] Memory failure: 0x13aa48: recovery action for clean swapcache page: Recovered [ 218.265710][ T9580] Injecting memory failure for pfn 0x12159d at process virtual address 0x20094000 [ 218.265728][ T9580] Memory failure: 0x12159d: keeping poisoned page in swap cache [ 218.265746][ T9580] Memory failure: 0x12159d: recovery action for clean swapcache page: Recovered [ 218.265871][ T9580] Injecting memory failure for pfn 0x11f0b5 at process virtual address 0x20095000 [ 218.265906][ T9580] Memory failure: 0x11f0b5: keeping poisoned page in swap cache [ 218.265923][ T9580] Memory failure: 0x11f0b5: recovery action for clean swapcache page: Recovered [ 218.265939][ T9580] Injecting memory failure for pfn 0x137f64 at process virtual address 0x20096000 [ 218.265957][ T9580] Memory failure: 0x137f64: keeping poisoned page in swap cache [ 218.265974][ T9580] Memory failure: 0x137f64: recovery action for clean swapcache page: Recovered [ 218.265990][ T9580] Injecting memory failure for pfn 0x13a44f at process virtual address 0x20097000 [ 218.266007][ T9580] Memory failure: 0x13a44f: keeping poisoned page in swap cache [ 218.266024][ T9580] Memory failure: 0x13a44f: recovery action for clean swapcache page: Recovered [ 218.266040][ T9580] Injecting memory failure for pfn 0x141c19 at process virtual address 0x20098000 [ 218.266057][ T9580] Memory failure: 0x141c19: keeping poisoned page in swap cache [ 218.266074][ T9580] Memory failure: 0x141c19: recovery action for clean swapcache page: Recovered [ 218.266089][ T9580] Injecting memory failure for pfn 0x13b21e at process virtual address 0x20099000 [ 218.266107][ T9580] Memory failure: 0x13b21e: keeping poisoned page in swap cache [ 218.266124][ T9580] Memory failure: 0x13b21e: recovery action for clean swapcache page: Recovered [ 218.266139][ T9580] Injecting memory failure for pfn 0x142e41 at process virtual address 0x2009a000 [ 218.266162][ T9580] Memory failure: 0x142e41: keeping poisoned page in swap cache [ 218.266179][ T9580] Memory failure: 0x142e41: recovery action for clean swapcache page: Recovered [ 218.266194][ T9580] Injecting memory failure for pfn 0x141c1a at process virtual address 0x2009b000 [ 218.266211][ T9580] Memory failure: 0x141c1a: keeping poisoned page in swap cache [ 218.266228][ T9580] Memory failure: 0x141c1a: recovery action for clean swapcache page: Recovered [ 218.266243][ T9580] Injecting memory failure for pfn 0x13b5df at process virtual address 0x2009c000 [ 218.266260][ T9580] Memory failure: 0x13b5df: keeping poisoned page in swap cache [ 218.273407][ T9580] Memory failure: 0x13b5df: recovery action for clean swapcache page: Recovered [ 218.273576][ T9580] Injecting memory failure for pfn 0x152b70 at process virtual address 0x2009d000 [ 218.273676][ T9580] Memory failure: 0x152b70: keeping poisoned page in swap cache [ 218.273701][ T9580] Memory failure: 0x152b70: recovery action for clean swapcache page: Recovered [ 218.273719][ T9580] Injecting memory failure for pfn 0x13ac77 at process virtual address 0x2009e000 [ 218.273749][ T9580] Memory failure: 0x13ac77: keeping poisoned page in swap cache [ 218.276824][ T9580] Memory failure: 0x13ac77: recovery action for clean swapcache page: Recovered [ 218.276851][ T9580] Injecting memory failure for pfn 0x136f80 at process virtual address 0x2009f000 [ 218.277554][ T9580] Memory failure: 0x136f80: keeping poisoned page in swap cache [ 218.277588][ T9580] Memory failure: 0x136f80: recovery action for clean swapcache page: Recovered [ 218.277612][ T9580] Injecting memory failure for pfn 0x141ea3 at process virtual address 0x200a0000 [ 218.277650][ T9580] Memory failure: 0x141ea3: keeping poisoned page in swap cache [ 218.277672][ T9580] Memory failure: 0x141ea3: recovery action for clean swapcache page: Recovered [ 218.277691][ T9580] Injecting memory failure for pfn 0x11f5f0 at process virtual address 0x200a1000 [ 218.277716][ T9580] Memory failure: 0x11f5f0: keeping poisoned page in swap cache [ 218.277735][ T9580] Memory failure: 0x11f5f0: recovery action for clean swapcache page: Recovered [ 218.277752][ T9580] Injecting memory failure for pfn 0x142306 at process virtual address 0x200a2000 [ 218.277772][ T9580] Memory failure: 0x142306: keeping poisoned page in swap cache [ 218.277791][ T9580] Memory failure: 0x142306: recovery action for clean swapcache page: Recovered [ 218.277807][ T9580] Injecting memory failure for pfn 0x1388ca at process virtual address 0x200a3000 [ 218.277825][ T9580] Memory failure: 0x1388ca: keeping poisoned page in swap cache [ 218.277844][ T9580] Memory failure: 0x1388ca: recovery action for clean swapcache page: Recovered [ 218.277860][ T9580] Injecting memory failure for pfn 0x142e28 at process virtual address 0x200a4000 [ 218.277877][ T9580] Memory failure: 0x142e28: keeping poisoned page in swap cache [ 218.277895][ T9580] Memory failure: 0x142e28: recovery action for clean swapcache page: Recovered [ 218.282052][ T9580] Injecting memory failure for pfn 0x11f075 at process virtual address 0x200a5000 [ 218.282168][ T9580] Memory failure: 0x11f075: keeping poisoned page in swap cache [ 218.282193][ T9580] Memory failure: 0x11f075: recovery action for clean swapcache page: Recovered [ 218.282214][ T9580] Injecting memory failure for pfn 0x11d2ac at process virtual address 0x200a6000 [ 218.282239][ T9580] Memory failure: 0x11d2ac: keeping poisoned page in swap cache [ 218.282259][ T9580] Memory failure: 0x11d2ac: recovery action for clean swapcache page: Recovered [ 218.282276][ T9580] Injecting memory failure for pfn 0x121acb at process virtual address 0x200a7000 [ 218.282297][ T9580] Memory failure: 0x121acb: keeping poisoned page in swap cache [ 218.282317][ T9580] Memory failure: 0x121acb: recovery action for clean swapcache page: Recovered [ 218.282333][ T9580] Injecting memory failure for pfn 0x117d2b at process virtual address 0x200a8000 [ 218.282352][ T9580] Memory failure: 0x117d2b: keeping poisoned page in swap cache [ 218.282370][ T9580] Memory failure: 0x117d2b: recovery action for clean swapcache page: Recovered [ 218.282386][ T9580] Injecting memory failure for pfn 0x11f0d6 at process virtual address 0x200a9000 [ 218.282405][ T9580] Memory failure: 0x11f0d6: keeping poisoned page in swap cache [ 218.282423][ T9580] Memory failure: 0x11f0d6: recovery action for clean swapcache page: Recovered [ 218.282439][ T9580] Injecting memory failure for pfn 0x11f7f2 at process virtual address 0x200aa000 [ 218.282457][ T9580] Memory failure: 0x11f7f2: keeping poisoned page in swap cache [ 218.282474][ T9580] Memory failure: 0x11f7f2: recovery action for clean swapcache page: Recovered [ 218.282489][ T9580] Injecting memory failure for pfn 0x117d67 at process virtual address 0x200ab000 [ 218.282507][ T9580] Memory failure: 0x117d67: keeping poisoned page in swap cache [ 218.282524][ T9580] Memory failure: 0x117d67: recovery action for clean swapcache page: Recovered [ 218.282539][ T9580] Injecting memory failure for pfn 0x151dfd at process virtual address 0x200ac000 [ 218.282557][ T9580] Memory failure: 0x151dfd: keeping poisoned page in swap cache [ 218.282574][ T9580] Memory failure: 0x151dfd: recovery action for clean swapcache page: Recovered [ 218.282695][ T9580] Injecting memory failure for pfn 0x1231f5 at process virtual address 0x200ad000 [ 218.282728][ T9580] Memory failure: 0x1231f5: keeping poisoned page in swap cache [ 218.282746][ T9580] Memory failure: 0x1231f5: recovery action for clean swapcache page: Recovered [ 218.288928][ T9580] Injecting memory failure for pfn 0x13c354 at process virtual address 0x200ae000 [ 218.289036][ T9580] Memory failure: 0x13c354: keeping poisoned page in swap cache [ 218.289067][ T9580] Memory failure: 0x13c354: recovery action for clean swapcache page: Recovered [ 218.289092][ T9580] Injecting memory failure for pfn 0x136f40 at process virtual address 0x200af000 [ 218.289213][ T9580] Memory failure: 0x136f40: keeping poisoned page in swap cache [ 218.289235][ T9580] Memory failure: 0x136f40: recovery action for clean swapcache page: Recovered [ 218.289254][ T9580] Injecting memory failure for pfn 0x11c10d at process virtual address 0x200b0000 [ 218.289275][ T9580] Memory failure: 0x11c10d: keeping poisoned page in swap cache [ 218.289294][ T9580] Memory failure: 0x11c10d: recovery action for clean swapcache page: Recovered [ 218.289311][ T9580] Injecting memory failure for pfn 0x137cbc at process virtual address 0x200b1000 [ 218.289330][ T9580] Memory failure: 0x137cbc: keeping poisoned page in swap cache [ 218.289349][ T9580] Memory failure: 0x137cbc: recovery action for clean swapcache page: Recovered [ 218.289366][ T9580] Injecting memory failure for pfn 0x141e98 at process virtual address 0x200b2000 [ 218.289384][ T9580] Memory failure: 0x141e98: keeping poisoned page in swap cache [ 218.289403][ T9580] Memory failure: 0x141e98: recovery action for clean swapcache page: Recovered [ 218.289419][ T9580] Injecting memory failure for pfn 0x141c3f at process virtual address 0x200b3000 [ 218.289437][ T9580] Memory failure: 0x141c3f: keeping poisoned page in swap cache [ 218.289454][ T9580] Memory failure: 0x141c3f: recovery action for clean swapcache page: Recovered [ 218.289470][ T9580] Injecting memory failure for pfn 0x11f17a at process virtual address 0x200b4000 [ 218.289488][ T9580] Memory failure: 0x11f17a: keeping poisoned page in swap cache [ 218.289505][ T9580] Memory failure: 0x11f17a: recovery action for clean swapcache page: Recovered [ 218.289637][ T9580] Injecting memory failure for pfn 0x13c349 at process virtual address 0x200b5000 [ 218.289672][ T9580] Memory failure: 0x13c349: keeping poisoned page in swap cache [ 218.289690][ T9580] Memory failure: 0x13c349: recovery action for clean swapcache page: Recovered [ 218.289706][ T9580] Injecting memory failure for pfn 0x121906 at process virtual address 0x200b6000 [ 218.289723][ T9580] Memory failure: 0x121906: keeping poisoned page in swap cache [ 218.289741][ T9580] Memory failure: 0x121906: recovery action for clean swapcache page: Recovered [ 218.289756][ T9580] Injecting memory failure for pfn 0x150f9c at process virtual address 0x200b7000 [ 218.289773][ T9580] Memory failure: 0x150f9c: keeping poisoned page in swap cache [ 218.289791][ T9580] Memory failure: 0x150f9c: recovery action for clean swapcache page: Recovered [ 218.289806][ T9580] Injecting memory failure for pfn 0x134766 at process virtual address 0x200b8000 [ 218.289823][ T9580] Memory failure: 0x134766: keeping poisoned page in swap cache [ 218.289840][ T9580] Memory failure: 0x134766: recovery action for clean swapcache page: Recovered [ 218.289856][ T9580] Injecting memory failure for pfn 0x13b5fc at process virtual address 0x200b9000 [ 218.289873][ T9580] Memory failure: 0x13b5fc: keeping poisoned page in swap cache [ 218.289890][ T9580] Memory failure: 0x13b5fc: recovery action for clean swapcache page: Recovered [ 218.294560][ T9580] Injecting memory failure for pfn 0x11f653 at process virtual address 0x200ba000 [ 218.294648][ T9580] Memory failure: 0x11f653: keeping poisoned page in swap cache [ 218.294675][ T9580] Memory failure: 0x11f653: recovery action for clean swapcache page: Recovered [ 218.294695][ T9580] Injecting memory failure for pfn 0x123261 at process virtual address 0x200bb000 [ 218.294719][ T9580] Memory failure: 0x123261: keeping poisoned page in swap cache [ 218.294738][ T9580] Memory failure: 0x123261: recovery action for clean swapcache page: Recovered [ 218.294756][ T9580] Injecting memory failure for pfn 0x137e38 at process virtual address 0x200bc000 [ 218.294775][ T9580] Memory failure: 0x137e38: keeping poisoned page in swap cache [ 218.294793][ T9580] Memory failure: 0x137e38: recovery action for clean swapcache page: Recovered [ 218.294956][ T9580] Injecting memory failure for pfn 0x13b9c7 at process virtual address 0x200bd000 [ 218.295042][ T9580] Memory failure: 0x13b9c7: keeping poisoned page in swap cache [ 218.295060][ T9580] Memory failure: 0x13b9c7: recovery action for clean swapcache page: Recovered [ 218.295077][ T9580] Injecting memory failure for pfn 0x1214a5 at process virtual address 0x200be000 [ 218.295105][ T9580] Memory failure: 0x1214a5: keeping poisoned page in swap cache [ 218.295123][ T9580] Memory failure: 0x1214a5: recovery action for clean swapcache page: Recovered [ 218.295139][ T9580] Injecting memory failure for pfn 0x15231c at process virtual address 0x200bf000 [ 218.295162][ T9580] Memory failure: 0x15231c: keeping poisoned page in swap cache [ 218.295186][ T9580] Memory failure: 0x15231c: recovery action for clean swapcache page: Recovered [ 218.295202][ T9580] Injecting memory failure for pfn 0x13b9c0 at process virtual address 0x200c0000 [ 218.295219][ T9580] Memory failure: 0x13b9c0: keeping poisoned page in swap cache [ 218.295237][ T9580] Memory failure: 0x13b9c0: recovery action for clean swapcache page: Recovered [ 218.295252][ T9580] Injecting memory failure for pfn 0x1359a1 at process virtual address 0x200c1000 [ 218.295269][ T9580] Memory failure: 0x1359a1: keeping poisoned page in swap cache [ 218.295288][ T9580] Memory failure: 0x1359a1: recovery action for clean swapcache page: Recovered [ 218.295303][ T9580] Injecting memory failure for pfn 0x136f29 at process virtual address 0x200c2000 [ 218.295320][ T9580] Memory failure: 0x136f29: keeping poisoned page in swap cache [ 218.295337][ T9580] Memory failure: 0x136f29: recovery action for clean swapcache page: Recovered [ 218.295352][ T9580] Injecting memory failure for pfn 0x136ccc at process virtual address 0x200c3000 [ 218.295369][ T9580] Memory failure: 0x136ccc: keeping poisoned page in swap cache [ 218.295386][ T9580] Memory failure: 0x136ccc: recovery action for clean swapcache page: Recovered [ 218.295401][ T9580] Injecting memory failure for pfn 0x13a19a at process virtual address 0x200c4000 [ 218.295418][ T9580] Memory failure: 0x13a19a: keeping poisoned page in swap cache [ 218.295435][ T9580] Memory failure: 0x13a19a: recovery action for clean swapcache page: Recovered [ 218.304249][ T9580] Injecting memory failure for pfn 0x1424cf at process virtual address 0x200c5000 [ 218.306321][ T9580] Memory failure: 0x1424cf: keeping poisoned page in swap cache [ 218.306357][ T9580] Memory failure: 0x1424cf: recovery action for clean swapcache page: Recovered [ 218.306384][ T9580] Injecting memory failure for pfn 0x11fab3 at process virtual address 0x200c6000 [ 218.306422][ T9580] Memory failure: 0x11fab3: keeping poisoned page in swap cache [ 218.306443][ T9580] Memory failure: 0x11fab3: recovery action for clean swapcache page: Recovered [ 218.306461][ T9580] Injecting memory failure for pfn 0x11f8ef at process virtual address 0x200c7000 [ 218.306487][ T9580] Memory failure: 0x11f8ef: keeping poisoned page in swap cache [ 218.306505][ T9580] Memory failure: 0x11f8ef: recovery action for clean swapcache page: Recovered [ 218.306523][ T9580] Injecting memory failure for pfn 0x135588 at process virtual address 0x200c8000 [ 218.306542][ T9580] Memory failure: 0x135588: keeping poisoned page in swap cache [ 218.306561][ T9580] Memory failure: 0x135588: recovery action for clean swapcache page: Recovered [ 218.306577][ T9580] Injecting memory failure for pfn 0x137920 at process virtual address 0x200c9000 [ 218.306595][ T9580] Memory failure: 0x137920: keeping poisoned page in swap cache [ 218.310879][ T9580] Memory failure: 0x137920: recovery action for clean swapcache page: Recovered [ 218.310913][ T9580] Injecting memory failure for pfn 0x1346dc at process virtual address 0x200ca000 [ 218.314682][ T9580] Memory failure: 0x1346dc: keeping poisoned page in swap cache [ 218.314714][ T9580] Memory failure: 0x1346dc: recovery action for clean swapcache page: Recovered [ 218.314740][ T9580] Injecting memory failure for pfn 0x11fc04 at process virtual address 0x200cb000 [ 218.314772][ T9580] Memory failure: 0x11fc04: keeping poisoned page in swap cache [ 218.314794][ T9580] Memory failure: 0x11fc04: recovery action for clean swapcache page: Recovered [ 218.314812][ T9580] Injecting memory failure for pfn 0x122f8c at process virtual address 0x200cc000 [ 218.314834][ T9580] Memory failure: 0x122f8c: keeping poisoned page in swap cache [ 218.314853][ T9580] Memory failure: 0x122f8c: recovery action for clean swapcache page: Recovered [ 218.314998][ T9580] Injecting memory failure for pfn 0x11f0da at process virtual address 0x200cd000 [ 218.315401][ T9580] Memory failure: 0x11f0da: keeping poisoned page in swap cache [ 218.315427][ T9580] Memory failure: 0x11f0da: recovery action for clean swapcache page: Recovered [ 218.315450][ T9580] Injecting memory failure for pfn 0x138f9f at process virtual address 0x200ce000 [ 218.315472][ T9580] Memory failure: 0x138f9f: keeping poisoned page in swap cache [ 218.315492][ T9580] Memory failure: 0x138f9f: recovery action for clean swapcache page: Recovered [ 218.315510][ T9580] Injecting memory failure for pfn 0x13475e at process virtual address 0x200cf000 [ 218.315529][ T9580] Memory failure: 0x13475e: keeping poisoned page in swap cache [ 218.315547][ T9580] Memory failure: 0x13475e: recovery action for clean swapcache page: Recovered [ 218.315564][ T9580] Injecting memory failure for pfn 0x117c4a at process virtual address 0x200d0000 [ 218.318323][ T9580] Memory failure: 0x117c4a: keeping poisoned page in swap cache [ 218.318353][ T9580] Memory failure: 0x117c4a: recovery action for clean swapcache page: Recovered [ 218.318375][ T9580] Injecting memory failure for pfn 0x121430 at process virtual address 0x200d1000 [ 218.318625][ T9580] Memory failure: 0x121430: keeping poisoned page in swap cache [ 218.318645][ T9580] Memory failure: 0x121430: recovery action for clean swapcache page: Recovered [ 218.318664][ T9580] Injecting memory failure for pfn 0x11ec54 at process virtual address 0x200d2000 [ 218.318686][ T9580] Memory failure: 0x11ec54: keeping poisoned page in swap cache [ 218.318704][ T9580] Memory failure: 0x11ec54: recovery action for clean swapcache page: Recovered [ 218.318722][ T9580] Injecting memory failure for pfn 0x117cfc at process virtual address 0x200d3000 [ 218.318740][ T9580] Memory failure: 0x117cfc: keeping poisoned page in swap cache [ 218.318758][ T9580] Memory failure: 0x117cfc: recovery action for clean swapcache page: Recovered [ 218.318775][ T9580] Injecting memory failure for pfn 0x11fca7 at process virtual address 0x200d4000 [ 218.318793][ T9580] Memory failure: 0x11fca7: keeping poisoned page in swap cache [ 218.318810][ T9580] Memory failure: 0x11fca7: recovery action for clean swapcache page: Recovered [ 218.319068][ T9580] Injecting memory failure for pfn 0x13b51f at process virtual address 0x200d5000 [ 218.329406][ T9580] Memory failure: 0x13b51f: keeping poisoned page in swap cache [ 218.329450][ T9580] Memory failure: 0x13b51f: recovery action for clean swapcache page: Recovered [ 218.329482][ T9580] Injecting memory failure for pfn 0x1332a7 at process virtual address 0x200d6000 [ 218.329516][ T9580] Memory failure: 0x1332a7: keeping poisoned page in swap cache [ 218.329537][ T9580] Memory failure: 0x1332a7: recovery action for clean swapcache page: Recovered [ 218.329555][ T9580] Injecting memory failure for pfn 0x120eb3 at process virtual address 0x200d7000 [ 218.329575][ T9580] Memory failure: 0x120eb3: keeping poisoned page in swap cache [ 218.329595][ T9580] Memory failure: 0x120eb3: recovery action for clean swapcache page: Recovered [ 218.329612][ T9580] Injecting memory failure for pfn 0x11f0e9 at process virtual address 0x200d8000 [ 218.329630][ T9580] Memory failure: 0x11f0e9: keeping poisoned page in swap cache [ 218.329649][ T9580] Memory failure: 0x11f0e9: recovery action for clean swapcache page: Recovered [ 218.329665][ T9580] Injecting memory failure for pfn 0x11fc9d at process virtual address 0x200d9000 [ 218.329683][ T9580] Memory failure: 0x11fc9d: keeping poisoned page in swap cache [ 218.329701][ T9580] Memory failure: 0x11fc9d: recovery action for clean swapcache page: Recovered [ 218.329717][ T9580] Injecting memory failure for pfn 0x117c5e at process virtual address 0x200da000 [ 218.329735][ T9580] Memory failure: 0x117c5e: keeping poisoned page in swap cache [ 218.329753][ T9580] Memory failure: 0x117c5e: recovery action for clean swapcache page: Recovered [ 218.329768][ T9580] Injecting memory failure for pfn 0x13888b at process virtual address 0x200db000 [ 218.330959][ T9580] Memory failure: 0x13888b: keeping poisoned page in swap cache [ 218.330991][ T9580] Memory failure: 0x13888b: recovery action for clean swapcache page: Recovered [ 218.331013][ T9580] Injecting memory failure for pfn 0x1380bd at process virtual address 0x200dc000 [ 218.331113][ T9580] Memory failure: 0x1380bd: keeping poisoned page in swap cache [ 218.331133][ T9580] Memory failure: 0x1380bd: recovery action for clean swapcache page: Recovered [ 218.334613][ T9580] Injecting memory failure for pfn 0x141c18 at process virtual address 0x200dd000 [ 218.337080][ T9580] Memory failure: 0x141c18: keeping poisoned page in swap cache [ 218.337124][ T9580] Memory failure: 0x141c18: recovery action for clean swapcache page: Recovered [ 218.337157][ T9580] Injecting memory failure for pfn 0x122f30 at process virtual address 0x200de000 [ 218.339196][ T9580] Memory failure: 0x122f30: keeping poisoned page in swap cache [ 218.339229][ T9580] Memory failure: 0x122f30: recovery action for clean swapcache page: Recovered [ 218.339257][ T9580] Injecting memory failure for pfn 0x13acd3 at process virtual address 0x200df000 [ 218.340701][ T9580] Memory failure: 0x13acd3: keeping poisoned page in swap cache [ 218.340729][ T9580] Memory failure: 0x13acd3: recovery action for clean swapcache page: Recovered [ 218.340753][ T9580] Injecting memory failure for pfn 0x13acd0 at process virtual address 0x200e0000 [ 218.340786][ T9580] Memory failure: 0x13acd0: keeping poisoned page in swap cache [ 218.340807][ T9580] Memory failure: 0x13acd0: recovery action for clean swapcache page: Recovered [ 218.340826][ T9580] Injecting memory failure for pfn 0x12190f at process virtual address 0x200e1000 [ 218.340852][ T9580] Memory failure: 0x12190f: keeping poisoned page in swap cache [ 218.340871][ T9580] Memory failure: 0x12190f: recovery action for clean swapcache page: Recovered [ 218.340889][ T9580] Injecting memory failure for pfn 0x123395 at process virtual address 0x200e2000 [ 218.340910][ T9580] Memory failure: 0x123395: keeping poisoned page in swap cache [ 218.340928][ T9580] Memory failure: 0x123395: recovery action for clean swapcache page: Recovered [ 218.340945][ T9580] Injecting memory failure for pfn 0x117d64 at process virtual address 0x200e3000 [ 218.340964][ T9580] Memory failure: 0x117d64: keeping poisoned page in swap cache [ 218.340983][ T9580] Memory failure: 0x117d64: recovery action for clean swapcache page: Recovered [ 218.340999][ T9580] Injecting memory failure for pfn 0x139ee1 at process virtual address 0x200e4000 [ 218.341017][ T9580] Memory failure: 0x139ee1: keeping poisoned page in swap cache [ 218.341035][ T9580] Memory failure: 0x139ee1: recovery action for clean swapcache page: Recovered [ 218.345937][ T9580] Injecting memory failure for pfn 0x14225e at process virtual address 0x200e5000 [ 218.351533][ T9580] Memory failure: 0x14225e: keeping poisoned page in swap cache [ 218.351583][ T9580] Memory failure: 0x14225e: recovery action for clean swapcache page: Recovered [ 218.351618][ T9580] Injecting memory failure for pfn 0x122e11 at process virtual address 0x200e6000 [ 218.352498][ T9580] Memory failure: 0x122e11: keeping poisoned page in swap cache [ 218.352528][ T9580] Memory failure: 0x122e11: recovery action for clean swapcache page: Recovered [ 218.352552][ T9580] Injecting memory failure for pfn 0x1427df at process virtual address 0x200e7000 [ 218.352589][ T9580] Memory failure: 0x1427df: keeping poisoned page in swap cache [ 218.352610][ T9580] Memory failure: 0x1427df: recovery action for clean swapcache page: Recovered [ 218.352629][ T9580] Injecting memory failure for pfn 0x1420d7 at process virtual address 0x200e8000 [ 218.352653][ T9580] Memory failure: 0x1420d7: keeping poisoned page in swap cache [ 218.352673][ T9580] Memory failure: 0x1420d7: recovery action for clean swapcache page: Recovered [ 218.352691][ T9580] Injecting memory failure for pfn 0x123173 at process virtual address 0x200e9000 [ 218.352711][ T9580] Memory failure: 0x123173: keeping poisoned page in swap cache [ 218.352729][ T9580] Memory failure: 0x123173: recovery action for clean swapcache page: Recovered [ 218.352746][ T9580] Injecting memory failure for pfn 0x117c45 at process virtual address 0x200ea000 [ 218.352783][ T9580] Memory failure: 0x117c45: keeping poisoned page in swap cache [ 218.352803][ T9580] Memory failure: 0x117c45: recovery action for clean swapcache page: Recovered [ 218.352820][ T9580] Injecting memory failure for pfn 0x11c197 at process virtual address 0x200eb000 [ 218.352838][ T9580] Memory failure: 0x11c197: keeping poisoned page in swap cache [ 218.352856][ T9580] Memory failure: 0x11c197: recovery action for clean swapcache page: Recovered [ 218.352872][ T9580] Injecting memory failure for pfn 0x11f35f at process virtual address 0x200ec000 [ 218.352890][ T9580] Memory failure: 0x11f35f: keeping poisoned page in swap cache [ 218.352907][ T9580] Memory failure: 0x11f35f: recovery action for clean swapcache page: Recovered [ 218.357077][ T9611] loop2: detected capacity change from 0 to 512 [ 218.360368][ T9580] Injecting memory failure for pfn 0x13a8b1 at process virtual address 0x200ed000 [ 218.360522][ T9580] Memory failure: 0x13a8b1: keeping poisoned page in swap cache [ 218.360560][ T9580] Memory failure: 0x13a8b1: recovery action for clean swapcache page: Recovered [ 218.360588][ T9580] Injecting memory failure for pfn 0x1394dc at process virtual address 0x200ee000 [ 218.360617][ T9580] Memory failure: 0x1394dc: keeping poisoned page in swap cache [ 218.360639][ T9580] Memory failure: 0x1394dc: recovery action for clean swapcache page: Recovered [ 218.360657][ T9580] Injecting memory failure for pfn 0x11f165 at process virtual address 0x200ef000 [ 218.360677][ T9580] Memory failure: 0x11f165: keeping poisoned page in swap cache [ 218.360697][ T9580] Memory failure: 0x11f165: recovery action for clean swapcache page: Recovered [ 218.360714][ T9580] Injecting memory failure for pfn 0x135a5f at process virtual address 0x200f0000 [ 218.360732][ T9580] Memory failure: 0x135a5f: keeping poisoned page in swap cache [ 218.360751][ T9580] Memory failure: 0x135a5f: recovery action for clean swapcache page: Recovered [ 218.360767][ T9580] Injecting memory failure for pfn 0x117c68 at process virtual address 0x200f1000 [ 218.360785][ T9580] Memory failure: 0x117c68: keeping poisoned page in swap cache [ 218.360803][ T9580] Memory failure: 0x117c68: recovery action for clean swapcache page: Recovered [ 218.360819][ T9580] Injecting memory failure for pfn 0x117e24 at process virtual address 0x200f2000 [ 218.360836][ T9580] Memory failure: 0x117e24: keeping poisoned page in swap cache [ 218.360854][ T9580] Memory failure: 0x117e24: recovery action for clean swapcache page: Recovered [ 218.360869][ T9580] Injecting memory failure for pfn 0x133088 at process virtual address 0x200f3000 [ 218.360887][ T9580] Memory failure: 0x133088: keeping poisoned page in swap cache [ 218.360904][ T9580] Memory failure: 0x133088: recovery action for clean swapcache page: Recovered [ 218.360919][ T9580] Injecting memory failure for pfn 0x132de8 at process virtual address 0x200f4000 [ 218.360937][ T9580] Memory failure: 0x132de8: keeping poisoned page in swap cache [ 218.360955][ T9580] Memory failure: 0x132de8: recovery action for clean swapcache page: Recovered [ 218.361083][ T9580] Injecting memory failure for pfn 0x122f85 at process virtual address 0x200f5000 [ 218.361116][ T9580] Memory failure: 0x122f85: keeping poisoned page in swap cache [ 218.361134][ T9580] Memory failure: 0x122f85: recovery action for clean swapcache page: Recovered [ 218.365626][ T9580] Injecting memory failure for pfn 0x137394 at process virtual address 0x200f6000 [ 218.365758][ T9580] Memory failure: 0x137394: keeping poisoned page in swap cache [ 218.365788][ T9580] Memory failure: 0x137394: recovery action for clean swapcache page: Recovered [ 218.365812][ T9580] Injecting memory failure for pfn 0x117c9b at process virtual address 0x200f7000 [ 218.366525][ T9580] Memory failure: 0x117c9b: keeping poisoned page in swap cache [ 218.366559][ T9580] Memory failure: 0x117c9b: recovery action for clean swapcache page: Recovered [ 218.368489][ T9580] Injecting memory failure for pfn 0x1378c6 at process virtual address 0x200f8000 [ 218.368915][ T9580] Memory failure: 0x1378c6: keeping poisoned page in swap cache [ 218.368946][ T9580] Memory failure: 0x1378c6: recovery action for clean swapcache page: Recovered [ 218.368969][ T9580] Injecting memory failure for pfn 0x13460b at process virtual address 0x200f9000 [ 218.369066][ T9580] Memory failure: 0x13460b: keeping poisoned page in swap cache [ 218.369090][ T9580] Memory failure: 0x13460b: recovery action for clean swapcache page: Recovered [ 218.369109][ T9580] Injecting memory failure for pfn 0x13549f at process virtual address 0x200fa000 [ 218.369136][ T9580] Memory failure: 0x13549f: keeping poisoned page in swap cache [ 218.369163][ T9580] Memory failure: 0x13549f: recovery action for clean swapcache page: Recovered [ 218.369184][ T9580] Injecting memory failure for pfn 0x142917 at process virtual address 0x200fb000 [ 218.369210][ T9580] Memory failure: 0x142917: keeping poisoned page in swap cache [ 218.369231][ T9580] Memory failure: 0x142917: recovery action for clean swapcache page: Recovered [ 218.369248][ T9580] Injecting memory failure for pfn 0x13737f at process virtual address 0x200fc000 [ 218.369268][ T9580] Memory failure: 0x13737f: keeping poisoned page in swap cache [ 218.369286][ T9580] Memory failure: 0x13737f: recovery action for clean swapcache page: Recovered [ 218.369418][ T9580] Injecting memory failure for pfn 0x117d59 at process virtual address 0x200fd000 [ 218.369454][ T9580] Memory failure: 0x117d59: keeping poisoned page in swap cache [ 218.369472][ T9580] Memory failure: 0x117d59: recovery action for clean swapcache page: Recovered [ 218.369488][ T9580] Injecting memory failure for pfn 0x1424b4 at process virtual address 0x200fe000 [ 218.369507][ T9580] Memory failure: 0x1424b4: keeping poisoned page in swap cache [ 218.369525][ T9580] Memory failure: 0x1424b4: recovery action for clean swapcache page: Recovered [ 218.369540][ T9580] Injecting memory failure for pfn 0x117e4c at process virtual address 0x200ff000 [ 218.369559][ T9580] Memory failure: 0x117e4c: keeping poisoned page in swap cache [ 218.369577][ T9580] Memory failure: 0x117e4c: recovery action for clean swapcache page: Recovered [ 218.369592][ T9580] Injecting memory failure for pfn 0x11fb8d at process virtual address 0x20100000 [ 218.369610][ T9580] Memory failure: 0x11fb8d: keeping poisoned page in swap cache [ 218.369627][ T9580] Memory failure: 0x11fb8d: recovery action for clean swapcache page: Recovered [ 218.369643][ T9580] Injecting memory failure for pfn 0x117e12 at process virtual address 0x20101000 [ 218.369660][ T9580] Memory failure: 0x117e12: keeping poisoned page in swap cache [ 218.369677][ T9580] Memory failure: 0x117e12: recovery action for clean swapcache page: Recovered [ 218.369693][ T9580] Injecting memory failure for pfn 0x11c05b at process virtual address 0x20102000 [ 218.369710][ T9580] Memory failure: 0x11c05b: keeping poisoned page in swap cache [ 218.369728][ T9580] Memory failure: 0x11c05b: recovery action for clean swapcache page: Recovered [ 218.369743][ T9580] Injecting memory failure for pfn 0x1387cc at process virtual address 0x20103000 [ 218.369761][ T9580] Memory failure: 0x1387cc: keeping poisoned page in swap cache [ 218.369778][ T9580] Memory failure: 0x1387cc: recovery action for clean swapcache page: Recovered [ 218.369793][ T9580] Injecting memory failure for pfn 0x13475d at process virtual address 0x20104000 [ 218.369810][ T9580] Memory failure: 0x13475d: keeping poisoned page in swap cache [ 218.369829][ T9580] Memory failure: 0x13475d: recovery action for clean swapcache page: Recovered [ 218.371546][ T9611] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.373946][ T9611] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 218.373970][ T9611] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 218.373979][ T9611] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1104: Failed to acquire dquot type 1 [ 218.373990][ T9611] loop2: lost filesystem error report for type 5 error -5 [ 218.376858][ T9580] Injecting memory failure for pfn 0x1387a4 at process virtual address 0x20105000 [ 218.378578][ T9580] Memory failure: 0x1387a4: keeping poisoned page in swap cache [ 218.378618][ T9580] Memory failure: 0x1387a4: recovery action for clean swapcache page: Recovered [ 218.378647][ T9580] Injecting memory failure for pfn 0x120e08 at process virtual address 0x20106000 [ 218.378686][ T9580] Memory failure: 0x120e08: keeping poisoned page in swap cache [ 218.378708][ T9580] Memory failure: 0x120e08: recovery action for clean swapcache page: Recovered [ 218.378728][ T9580] Injecting memory failure for pfn 0x137e88 at process virtual address 0x20107000 [ 218.378754][ T9580] Memory failure: 0x137e88: keeping poisoned page in swap cache [ 218.378773][ T9580] Memory failure: 0x137e88: recovery action for clean swapcache page: Recovered [ 218.378791][ T9580] Injecting memory failure for pfn 0x120dc8 at process virtual address 0x20108000 [ 218.378812][ T9580] Memory failure: 0x120dc8: keeping poisoned page in swap cache [ 218.378831][ T9580] Memory failure: 0x120dc8: recovery action for clean swapcache page: Recovered [ 218.378848][ T9580] Injecting memory failure for pfn 0x137902 at process virtual address 0x20109000 [ 218.378877][ T9580] Memory failure: 0x137902: keeping poisoned page in swap cache [ 218.378996][ T9611] EXT4-fs (loop2): 1 truncate cleaned up [ 218.380810][ T9611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.383718][ T9580] Memory failure: 0x137902: recovery action for clean swapcache page: Recovered [ 218.383756][ T9580] Injecting memory failure for pfn 0x137959 at process virtual address 0x2010a000 [ 218.383873][ T9580] Memory failure: 0x137959: keeping poisoned page in swap cache [ 218.383896][ T9580] Memory failure: 0x137959: recovery action for clean swapcache page: Recovered [ 218.383916][ T9580] Injecting memory failure for pfn 0x141c02 at process virtual address 0x2010b000 [ 218.383947][ T9580] Memory failure: 0x141c02: keeping poisoned page in swap cache [ 218.383967][ T9580] Memory failure: 0x141c02: recovery action for clean swapcache page: Recovered [ 218.383984][ T9580] Injecting memory failure for pfn 0x136f66 at process virtual address 0x2010c000 [ 218.384009][ T9580] Memory failure: 0x136f66: keeping poisoned page in swap cache [ 218.384028][ T9580] Memory failure: 0x136f66: recovery action for clean swapcache page: Recovered [ 218.384177][ T9580] Injecting memory failure for pfn 0x135f08 at process virtual address 0x2010d000 [ 218.384214][ T9580] Memory failure: 0x135f08: keeping poisoned page in swap cache [ 218.384233][ T9580] Memory failure: 0x135f08: recovery action for clean swapcache page: Recovered [ 218.384250][ T9580] Injecting memory failure for pfn 0x150e5c at process virtual address 0x2010e000 [ 218.384269][ T9580] Memory failure: 0x150e5c: keeping poisoned page in swap cache [ 218.384288][ T9580] Memory failure: 0x150e5c: recovery action for clean swapcache page: Recovered [ 218.384305][ T9580] Injecting memory failure for pfn 0x11f0c5 at process virtual address 0x2010f000 [ 218.384324][ T9580] Memory failure: 0x11f0c5: keeping poisoned page in swap cache [ 218.384342][ T9580] Memory failure: 0x11f0c5: recovery action for clean swapcache page: Recovered [ 218.384357][ T9580] Injecting memory failure for pfn 0x11fdc8 at process virtual address 0x20110000 [ 218.384376][ T9580] Memory failure: 0x11fdc8: keeping poisoned page in swap cache [ 218.384393][ T9580] Memory failure: 0x11fdc8: recovery action for clean swapcache page: Recovered [ 218.384408][ T9580] Injecting memory failure for pfn 0x135e82 at process virtual address 0x20111000 [ 218.384426][ T9580] Memory failure: 0x135e82: keeping poisoned page in swap cache [ 218.384443][ T9580] Memory failure: 0x135e82: recovery action for clean swapcache page: Recovered [ 218.384458][ T9580] Injecting memory failure for pfn 0x1143d3 at process virtual address 0x20112000 [ 218.384475][ T9580] Memory failure: 0x1143d3: keeping poisoned page in swap cache [ 218.384493][ T9580] Memory failure: 0x1143d3: recovery action for clean swapcache page: Recovered [ 218.384508][ T9580] Injecting memory failure for pfn 0x11f227 at process virtual address 0x20113000 [ 218.384526][ T9580] Memory failure: 0x11f227: keeping poisoned page in swap cache [ 218.384543][ T9580] Memory failure: 0x11f227: recovery action for clean swapcache page: Recovered [ 218.384558][ T9580] Injecting memory failure for pfn 0x13720f at process virtual address 0x20114000 [ 218.384575][ T9580] Memory failure: 0x13720f: keeping poisoned page in swap cache [ 218.384593][ T9580] Memory failure: 0x13720f: recovery action for clean swapcache page: Recovered [ 218.390082][ T9580] Injecting memory failure for pfn 0x11eda1 at process virtual address 0x20115000 [ 218.390204][ T9580] Memory failure: 0x11eda1: keeping poisoned page in swap cache [ 218.390235][ T9580] Memory failure: 0x11eda1: recovery action for clean swapcache page: Recovered [ 218.390256][ T9580] Injecting memory failure for pfn 0x117ff5 at process virtual address 0x20116000 [ 218.390283][ T9580] Memory failure: 0x117ff5: keeping poisoned page in swap cache [ 218.390303][ T9580] Memory failure: 0x117ff5: recovery action for clean swapcache page: Recovered [ 218.390321][ T9580] Injecting memory failure for pfn 0x13ca25 at process virtual address 0x20117000 [ 218.394308][ T9580] Memory failure: 0x13ca25: keeping poisoned page in swap cache [ 218.394342][ T9580] Memory failure: 0x13ca25: recovery action for clean swapcache page: Recovered [ 218.394370][ T9580] Injecting memory failure for pfn 0x120f8b at process virtual address 0x20118000 [ 218.394405][ T9580] Memory failure: 0x120f8b: keeping poisoned page in swap cache [ 218.394427][ T9580] Memory failure: 0x120f8b: recovery action for clean swapcache page: Recovered [ 218.394445][ T9580] Injecting memory failure for pfn 0x151ef3 at process virtual address 0x20119000 [ 218.394466][ T9580] Memory failure: 0x151ef3: keeping poisoned page in swap cache [ 218.394485][ T9580] Memory failure: 0x151ef3: recovery action for clean swapcache page: Recovered [ 218.394503][ T9580] Injecting memory failure for pfn 0x150bdb at process virtual address 0x2011a000 [ 218.394522][ T9580] Memory failure: 0x150bdb: keeping poisoned page in swap cache [ 218.394540][ T9580] Memory failure: 0x150bdb: recovery action for clean swapcache page: Recovered [ 218.394557][ T9580] Injecting memory failure for pfn 0x135e84 at process virtual address 0x2011b000 [ 218.394575][ T9580] Memory failure: 0x135e84: keeping poisoned page in swap cache [ 218.394593][ T9580] Memory failure: 0x135e84: recovery action for clean swapcache page: Recovered [ 218.394609][ T9580] Injecting memory failure for pfn 0x121bfc at process virtual address 0x2011c000 [ 218.394627][ T9580] Memory failure: 0x121bfc: keeping poisoned page in swap cache [ 218.394644][ T9580] Memory failure: 0x121bfc: recovery action for clean swapcache page: Recovered [ 218.397062][ T9580] Injecting memory failure for pfn 0x139e89 at process virtual address 0x2011d000 [ 218.397381][ T9580] Memory failure: 0x139e89: keeping poisoned page in swap cache [ 218.397409][ T9580] Memory failure: 0x139e89: recovery action for clean swapcache page: Recovered [ 218.397431][ T9580] Injecting memory failure for pfn 0x13a252 at process virtual address 0x2011e000 [ 218.420264][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.335778][ T9580] Memory failure: 0x13a252: keeping poisoned page in swap cache [ 219.335836][ T9580] Memory failure: 0x13a252: recovery action for clean swapcache page: Recovered [ 219.346771][ T9618] __nla_validate_parse: 3 callbacks suppressed [ 219.346784][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 219.509005][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 219.631995][ T9649] loop5: detected capacity change from 0 to 1024 [ 219.668865][ T9649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 219.686351][ T9649] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 2: comm syz.5.1113: lblock 2 mapped to illegal pblock 2 (length 4) [ 219.690377][ T9649] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1113: bg 0: block 112: padding at end of block bitmap is not set [ 219.695342][ T9649] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 219.695359][ T9649] EXT4-fs (loop5): This should not happen!! Data will be lost [ 219.695359][ T9649] [ 219.695368][ T9649] EXT4-fs (loop5): Total free blocks count 0 [ 219.695375][ T9649] EXT4-fs (loop5): Free/Dirty block details [ 219.695384][ T9649] EXT4-fs (loop5): free_blocks=0 [ 219.695392][ T9649] EXT4-fs (loop5): dirty_blocks=48 [ 219.695399][ T9649] EXT4-fs (loop5): Block reservation details [ 219.695405][ T9649] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 219.737879][ T6022] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 219.738771][ T6022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 219.832183][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 220.682487][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1114'. [ 220.682520][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1114'. [ 220.683245][ T9654] netlink: 'syz.8.1114': attribute type 14 has an invalid length. [ 220.683505][ T9654] netlink: 'syz.8.1114': attribute type 13 has an invalid length. [ 220.851933][ T9675] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.1118'. [ 220.851978][ T9675] veth0_to_bond: default FDB implementation only supports local addresses [ 220.856009][ T9678] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1118'. [ 220.856473][ T9675] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1118'. [ 220.862421][ T9679] netlink: 'syz.5.1119': attribute type 8 has an invalid length. [ 221.070553][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1122'. [ 221.131269][ T9694] loop2: detected capacity change from 0 to 7 [ 221.133157][ T9694] Dev loop2: unable to read RDB block 7 [ 221.133194][ T9694] loop2: unable to read partition table [ 221.133247][ T9694] loop2: partition table beyond EOD, truncated [ 221.133256][ T9694] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.250727][ T9716] loop5: detected capacity change from 0 to 512 [ 221.277656][ T9716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.564331][ T9729] loop7: detected capacity change from 0 to 512 [ 221.564686][ T9729] EXT4-fs: Ignoring removed i_version option [ 221.564708][ T9729] EXT4-fs: Ignoring removed bh option [ 221.571573][ T9729] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1135: inode #13: comm syz.7.1135: iget: illegal inode # [ 221.575478][ T9729] loop7: lost filesystem error report for type 5 error -117 [ 221.576389][ T9729] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1135: couldn't read orphan inode 13 (err -117) [ 221.576430][ T9729] loop7: lost filesystem error report for type 5 error -117 [ 221.580796][ T9729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.645738][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1133'. [ 221.673990][ T9716] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 221.682239][ T9716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 223.041434][ T9751] Soft offlining pfn 0x1379a3 at process virtual address 0x20000000 [ 223.208550][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.260456][ T9764] overlayfs: failed to clone upperpath [ 223.281975][ T9754] loop2: detected capacity change from 0 to 512 [ 223.290228][ T9754] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 223.743304][ T9779] loop7: detected capacity change from 0 to 1024 [ 223.853226][ T9779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.864891][ T9779] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1143: lblock 2 mapped to illegal pblock 2 (length 4) [ 223.879286][ T9787] Injecting memory failure for pfn 0x139125 at process virtual address 0x20001000 [ 223.881973][ T9779] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1143: bg 0: block 112: padding at end of block bitmap is not set [ 223.897135][ T9779] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 223.897176][ T9779] EXT4-fs (loop7): This should not happen!! Data will be lost [ 223.897176][ T9779] [ 223.897200][ T9779] EXT4-fs (loop7): Total free blocks count 0 [ 223.897213][ T9779] EXT4-fs (loop7): Free/Dirty block details [ 223.897226][ T9779] EXT4-fs (loop7): free_blocks=0 [ 223.897238][ T9779] EXT4-fs (loop7): dirty_blocks=48 [ 223.897249][ T9779] EXT4-fs (loop7): Block reservation details [ 223.897259][ T9779] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 223.921201][ T9791] netlink: 'syz.5.1148': attribute type 4 has an invalid length. [ 224.033338][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 224.034133][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.148159][ T9787] Memory failure: 0x139125: Sending SIGBUS to syz.2.1146:9787 due to hardware memory corruption [ 224.148311][ T9787] Memory failure: 0x139125: recovery action for dirty LRU page: Recovered [ 224.148343][ T9787] Injecting memory failure for pfn 0x11c1bf at process virtual address 0x20002000 [ 224.163028][ T9787] Memory failure: 0x11c1bf: recovery action for clean LRU page: Recovered [ 224.163070][ T9787] Injecting memory failure for pfn 0x11c1c5 at process virtual address 0x20003000 [ 224.163150][ T9787] Memory failure: 0x11c1c5: recovery action for clean LRU page: Recovered [ 224.653071][ T9813] loop2: detected capacity change from 0 to 512 [ 224.654274][ T9813] EXT4-fs: Ignoring removed i_version option [ 224.654301][ T9813] EXT4-fs: Ignoring removed bh option [ 224.668171][ T9813] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1155: inode #13: comm syz.2.1155: iget: illegal inode # [ 224.668219][ T9813] loop2: lost filesystem error report for type 5 error -117 [ 224.670808][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 224.670837][ C1] EXT4-fs (loop2): initial error at time 524512: ext4_orphan_get:1397 [ 224.670868][ C1] EXT4-fs (loop2): last error at time 524512: ext4_orphan_get:1397 [ 224.676771][ T9813] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1155: couldn't read orphan inode 13 (err -117) [ 224.676813][ T9813] loop2: lost filesystem error report for type 5 error -117 [ 224.685860][ T9813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.906879][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.919876][ T9845] loop7: detected capacity change from 0 to 1024 [ 225.933132][ T9845] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 225.980397][ T9856] loop7: detected capacity change from 0 to 256 [ 225.996332][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 225.999888][ T1042] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.297912][ T9863] __nla_validate_parse: 3 callbacks suppressed [ 226.297971][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 226.387653][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1169'. [ 226.389459][ T9865] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 226.729174][ T9886] loop7: detected capacity change from 0 to 4096 [ 226.732555][ T9886] EXT4-fs: inline encryption not supported [ 226.736226][ T9886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.736255][ T9886] EXT4-fs (loop7): Test dummy encryption mode enabled [ 226.742515][ T9886] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c1a8, mo2=0003] [ 226.746166][ T9886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.986305][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.027124][ T9897] loop2: detected capacity change from 0 to 512 [ 227.031116][ T9897] EXT4-fs: Ignoring removed i_version option [ 227.031169][ T9897] EXT4-fs: Ignoring removed bh option [ 227.036827][ T9897] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1178: inode #13: comm syz.2.1178: iget: illegal inode # [ 227.036879][ T9897] loop2: lost filesystem error report for type 5 error -117 [ 227.037124][ T9897] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1178: couldn't read orphan inode 13 (err -117) [ 227.037142][ T9897] loop2: lost filesystem error report for type 5 error -117 [ 227.037965][ T9897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.123547][ T9905] geneve2: entered promiscuous mode [ 227.125084][ T9908] fuse: fd is not a fuse device [ 227.831748][ T9605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set [ 228.294675][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.746987][ T9952] netlink: 'syz.2.1190': attribute type 5 has an invalid length. [ 228.966599][ T4905] Bluetooth: (null): Invalid header checksum [ 229.070710][ T9993] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1202'. [ 229.082675][ T4888] Bluetooth: (null): Invalid header checksum [ 229.200971][ T15] Bluetooth: (null): Invalid header checksum [ 229.294597][T10005] loop7: detected capacity change from 0 to 1024 [ 229.313675][ T39] Bluetooth: (null): Invalid header checksum [ 229.318222][T10005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.343748][T10005] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.1205: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 229.356088][T10005] 9p: Bad value for 'wfdno' [ 229.420423][ T15] Bluetooth: (null): Invalid header checksum [ 229.532596][ T6481] Bluetooth: (null): Invalid header checksum [ 230.002607][T10051] syzkaller0: entered promiscuous mode [ 230.004852][T10051] syzkaller0: entered allmulticast mode [ 230.141995][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.270598][T10071] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1225'. [ 230.288916][T10075] SET target dimension over the limit! [ 230.293676][T10073] loop7: detected capacity change from 0 to 1024 [ 230.323444][T10069] loop2: detected capacity change from 0 to 256 [ 230.338673][T10073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.348752][T10073] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1221: lblock 2 mapped to illegal pblock 2 (length 4) [ 230.355768][T10073] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1221: bg 0: block 112: padding at end of block bitmap is not set [ 230.356229][T10073] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 230.356243][T10073] EXT4-fs (loop7): This should not happen!! Data will be lost [ 230.356243][T10073] [ 230.356251][T10073] EXT4-fs (loop7): Total free blocks count 0 [ 230.356259][T10073] EXT4-fs (loop7): Free/Dirty block details [ 230.356267][T10073] EXT4-fs (loop7): free_blocks=0 [ 230.356275][T10073] EXT4-fs (loop7): dirty_blocks=48 [ 230.356282][T10073] EXT4-fs (loop7): Block reservation details [ 230.356288][T10073] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 230.377325][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 230.382260][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.472461][T10083] loop7: detected capacity change from 0 to 512 [ 230.474630][T10083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.479488][T10083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 230.479557][T10083] System zones: 1-12 [ 230.485072][T10083] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1227: invalid indirect mapped block 8 (level 2) [ 230.485099][T10083] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.488172][T10083] EXT4-fs (loop7): 1 truncate cleaned up [ 230.490530][T10084] tipc: Enabled bearer , priority 0 [ 230.491831][T10084] 8021q: VLANs not supported on ipvlan0 [ 230.496614][T10083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.505434][T10083] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 5: comm syz.7.1227: lblock 0 mapped to illegal pblock 5 (length 1) [ 230.508445][T10083] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.7.1227: error -117 reading directory block [ 230.563772][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.587309][T10094] loop7: detected capacity change from 0 to 512 [ 230.589226][T10094] EXT4-fs: Ignoring removed i_version option [ 230.596030][T10094] EXT4-fs: Ignoring removed bh option [ 230.602699][T10094] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1231: inode #13: comm syz.7.1231: iget: illegal inode # [ 230.606119][T10094] loop7: lost filesystem error report for type 5 error -117 [ 230.606474][T10094] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1231: couldn't read orphan inode 13 (err -117) [ 230.610571][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 230.610585][ C0] EXT4-fs (loop7): initial error at time 524518: ext4_orphan_get:1397 [ 230.610599][ C0] EXT4-fs (loop7): last error at time 524518: ext4_orphan_get:1397 [ 230.613942][T10094] loop7: lost filesystem error report for type 5 error -117 [ 230.617833][T10094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.665765][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1233'. [ 230.685692][ T4718] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 232.460561][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.520276][T10134] loop7: detected capacity change from 0 to 1024 [ 232.533824][T10134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 232.546117][T10134] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1237: lblock 2 mapped to illegal pblock 2 (length 4) [ 232.552887][T10134] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1237: bg 0: block 112: padding at end of block bitmap is not set [ 232.557548][T10134] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 232.561076][T10134] EXT4-fs (loop7): This should not happen!! Data will be lost [ 232.561076][T10134] [ 232.561120][T10134] EXT4-fs (loop7): Total free blocks count 0 [ 232.561137][T10134] EXT4-fs (loop7): Free/Dirty block details [ 232.561154][T10134] EXT4-fs (loop7): free_blocks=0 [ 232.561176][T10134] EXT4-fs (loop7): dirty_blocks=48 [ 232.561189][T10134] EXT4-fs (loop7): Block reservation details [ 232.561202][T10134] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 232.593293][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 232.596584][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 232.665091][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1246'. [ 232.665503][T10144] comedi comedi0: bad chanlist[0]=0x00080004 chan=4 range length=2 [ 232.701234][ T1042] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.710245][T10144] netlink: 4148 bytes leftover after parsing attributes in process `syz.7.1246'. [ 232.710449][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1246'. [ 232.731383][T10144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.735756][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1249'. [ 232.738008][T10153] loop2: detected capacity change from 0 to 512 [ 232.739000][T10153] EXT4-fs: Ignoring removed i_version option [ 232.739040][T10153] EXT4-fs: Ignoring removed bh option [ 232.766550][T10153] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1250: inode #13: comm syz.2.1250: iget: illegal inode # [ 232.766589][T10153] loop2: lost filesystem error report for type 5 error -117 [ 232.766759][T10153] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1250: couldn't read orphan inode 13 (err -117) [ 232.766780][T10153] loop2: lost filesystem error report for type 5 error -117 [ 232.767520][T10153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.845784][T10161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1252'. [ 232.874006][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1251'. [ 232.916625][T10167] loop7: detected capacity change from 0 to 512 [ 232.924656][T10167] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 232.939967][T10167] EXT4-fs (loop7): 1 truncate cleaned up [ 232.940448][T10167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.967395][T10175] sctp: [Deprecated]: syz.8.1256 (pid 10175) Use of int in max_burst socket option. [ 232.967395][T10175] Use struct sctp_assoc_value instead [ 233.174361][ T1042] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.304960][T10190] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1258'. [ 233.304991][T10190] tipc: Invalid UDP bearer configuration [ 233.305022][T10190] tipc: Enabling of bearer rejected, failed to enable media [ 233.619160][ T6481] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.671170][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.772679][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.952066][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1264'. [ 234.044267][T10217] loop7: detected capacity change from 0 to 1024 [ 234.081673][T10220] syzkaller0: entered promiscuous mode [ 234.081708][T10220] syzkaller0: entered allmulticast mode [ 234.094957][T10217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.111675][T10217] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1269: lblock 2 mapped to illegal pblock 2 (length 4) [ 234.118297][T10217] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1269: bg 0: block 112: padding at end of block bitmap is not set [ 234.122409][T10217] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 234.124723][T10217] EXT4-fs (loop7): This should not happen!! Data will be lost [ 234.124723][T10217] [ 234.124739][T10217] EXT4-fs (loop7): Total free blocks count 0 [ 234.124750][T10217] EXT4-fs (loop7): Free/Dirty block details [ 234.124760][T10217] EXT4-fs (loop7): free_blocks=0 [ 234.124770][T10217] EXT4-fs (loop7): dirty_blocks=48 [ 234.124778][T10217] EXT4-fs (loop7): Block reservation details [ 234.124786][T10217] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 234.150236][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 234.154550][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.162412][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 234.255607][T10230] loop2: detected capacity change from 0 to 2048 [ 234.261321][T10238] loop7: detected capacity change from 0 to 512 [ 234.263261][T10238] EXT4-fs: Ignoring removed i_version option [ 234.265525][T10238] EXT4-fs: Ignoring removed bh option [ 234.275364][T10235] fuse: Bad value for 'fd' [ 234.307352][T10230] loop2: p1 p2 p3 [ 234.307352][T10230] p1: [ 234.312879][T10230] loop2: p3 start 46336 is beyond EOD, truncated [ 234.343256][T10238] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1272: inode #13: comm syz.7.1272: iget: illegal inode # [ 234.343289][T10238] loop7: lost filesystem error report for type 5 error -117 [ 234.345951][T10238] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1272: couldn't read orphan inode 13 (err -117) [ 234.345979][T10238] loop7: lost filesystem error report for type 5 error -117 [ 234.351280][T10238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.422718][ T9156] udevd[9156]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 234.428660][ T9616] udevd[9616]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 234.441015][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1277'. [ 234.654341][ T6482] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.658871][ T6482] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.784875][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.232991][T10271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.245054][T10271] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1282: lblock 2 mapped to illegal pblock 2 (length 4) [ 235.250470][T10271] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1282: bg 0: block 112: padding at end of block bitmap is not set [ 235.255738][T10271] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 235.259203][T10271] EXT4-fs (loop7): This should not happen!! Data will be lost [ 235.259203][T10271] [ 235.259239][T10271] EXT4-fs (loop7): Total free blocks count 0 [ 235.259255][T10271] EXT4-fs (loop7): Free/Dirty block details [ 235.259273][T10271] EXT4-fs (loop7): free_blocks=0 [ 235.259289][T10271] EXT4-fs (loop7): dirty_blocks=48 [ 235.259301][T10271] EXT4-fs (loop7): Block reservation details [ 235.259314][T10271] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 235.299441][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 235.300310][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.363688][T10297] bond4: (slave gretap0): Device is not bonding slave [ 235.366252][T10297] bond4: option active_slave: invalid value (gretap0) [ 235.381242][T10297] bond4 (unregistering): Released all slaves [ 235.507713][T10317] set_capacity_and_notify: 1 callbacks suppressed [ 235.507758][T10317] loop2: detected capacity change from 0 to 512 [ 235.508100][T10317] EXT4-fs: Ignoring removed i_version option [ 235.508133][T10317] EXT4-fs: Ignoring removed bh option [ 235.514565][T10317] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1293: inode #13: comm syz.2.1293: iget: illegal inode # [ 235.514600][T10317] loop2: lost filesystem error report for type 5 error -117 [ 235.514743][T10317] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1293: couldn't read orphan inode 13 (err -117) [ 235.514758][T10317] loop2: lost filesystem error report for type 5 error -117 [ 235.515330][T10317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.518803][T10295] loop7: detected capacity change from 0 to 32768 [ 235.529891][ T4822] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.545560][T10295] loop7: p1 p3 < > [ 235.605409][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.726858][ T9616] udevd[9616]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 235.736529][ T9201] udevd[9201]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 235.786900][T10349] loop7: detected capacity change from 0 to 8 [ 235.831055][T10349] SQUASHFS error: Unable to read directory block [631:43] [ 235.928449][T10367] netlink: 'syz.5.1306': attribute type 6 has an invalid length. [ 236.948221][T10389] loop7: detected capacity change from 0 to 1024 [ 236.993017][T10389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.006998][T10389] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 2: comm syz.7.1312: lblock 2 mapped to illegal pblock 2 (length 4) [ 237.012969][T10389] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1312: bg 0: block 112: padding at end of block bitmap is not set [ 237.019926][T10389] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 237.022375][T10389] EXT4-fs (loop7): This should not happen!! Data will be lost [ 237.022375][T10389] [ 237.022403][T10389] EXT4-fs (loop7): Total free blocks count 0 [ 237.022413][T10389] EXT4-fs (loop7): Free/Dirty block details [ 237.022422][T10389] EXT4-fs (loop7): free_blocks=0 [ 237.022432][T10389] EXT4-fs (loop7): dirty_blocks=48 [ 237.022439][T10389] EXT4-fs (loop7): Block reservation details [ 237.022446][T10389] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 237.071875][ T7328] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 237.072745][ T7328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.192791][T10414] tap0: tun_chr_ioctl cmd 1074025677 [ 237.194285][T10414] tap0: linktype set to 0 [ 237.297035][T10425] netlink: 'syz.1.1322': attribute type 21 has an invalid length. [ 237.297072][T10425] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.376465][ T30] audit: type=1326 audit(524525.363:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.2.1323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96377aa8 code=0x0 [ 237.831879][T10449] loop2: detected capacity change from 0 to 1024 [ 237.845732][T10449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.850460][T10449] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 2: comm syz.2.1329: lblock 2 mapped to illegal pblock 2 (length 4) [ 237.856137][T10449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1329: bg 0: block 112: padding at end of block bitmap is not set [ 237.861105][T10449] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 237.861143][T10449] EXT4-fs (loop2): This should not happen!! Data will be lost [ 237.861143][T10449] [ 237.861153][T10449] EXT4-fs (loop2): Total free blocks count 0 [ 237.861161][T10449] EXT4-fs (loop2): Free/Dirty block details [ 237.861174][T10449] EXT4-fs (loop2): free_blocks=0 [ 237.861184][T10449] EXT4-fs (loop2): dirty_blocks=48 [ 237.861192][T10449] EXT4-fs (loop2): Block reservation details [ 237.861200][T10449] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 237.882861][ T4719] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 237.883975][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.885136][T10458] bond0: option packets_per_slave: invalid value (2103706) [ 237.885151][T10458] bond0: option packets_per_slave: allowed values 0 - 65535 [ 238.118719][T10485] binder: 10484:10485 got transaction to invalid handle, 2 [ 238.118748][T10485] binder: 10484:10485 cannot find target node [ 238.120353][T10485] binder: 10484:10485 transaction async to 0:0 failed 11/29201/-22, code 0 size 0-0 line 3236 [ 238.729027][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.029749][ T4718] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 239.074467][T10497] loop2: detected capacity change from 0 to 1024 [ 239.112300][T10497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.119252][T10497] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 2: comm syz.2.1342: lblock 2 mapped to illegal pblock 2 (length 4) [ 239.123580][T10497] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1342: bg 0: block 112: padding at end of block bitmap is not set [ 239.126419][T10497] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 239.131534][T10501] __nla_validate_parse: 3 callbacks suppressed [ 239.131547][T10501] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1344'. [ 239.134917][T10497] EXT4-fs (loop2): This should not happen!! Data will be lost [ 239.134917][T10497] [ 239.137786][T10497] EXT4-fs (loop2): Total free blocks count 0 [ 239.139007][T10497] EXT4-fs (loop2): Free/Dirty block details [ 239.140087][T10497] EXT4-fs (loop2): free_blocks=0 [ 239.140985][T10497] EXT4-fs (loop2): dirty_blocks=48 [ 239.141946][T10497] EXT4-fs (loop2): Block reservation details [ 239.143117][T10497] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 239.169090][ T4719] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 239.169952][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.194280][T10507] overlayfs: failed to clone upperpath [ 239.901866][T10544] syzkaller0: entered promiscuous mode [ 239.901901][T10544] syzkaller0: entered allmulticast mode [ 239.959020][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1354'. [ 240.001297][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1354'. [ 240.073272][T10547] binder: BINDER_SET_CONTEXT_MGR already set [ 240.073304][T10547] binder: 10546:10547 ioctl 4018620d 20000180 returned -16 [ 240.074648][T10547] binder: 10546:10547 Release 1 refcount change on invalid ref 1 ret -22 [ 240.074674][T10547] binder: 10546:10547 unknown command 0 [ 240.074687][T10547] binder: 10546:10547 ioctl c0306201 200001c0 returned -22 [ 240.239631][T10565] tipc: Enabling of bearer rejected, media not registered [ 240.604269][T10600] loop7: detected capacity change from 0 to 512 [ 240.634888][T10600] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1372: invalid indirect mapped block 4294967295 (level 1) [ 240.637997][T10600] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.638925][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 240.638957][ C0] EXT4-fs (loop7): initial error at time 524528: ext4_free_branches:1023: inode 11 [ 240.638993][ C0] EXT4-fs (loop7): last error at time 524528: ext4_free_branches:1023: inode 11 [ 240.642152][ T4718] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 240.646668][T10600] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1372: invalid indirect mapped block 4294967295 (level 1) [ 240.646720][T10600] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.773967][T10600] EXT4-fs (loop7): 2 truncates cleaned up [ 240.911336][T10607] lo speed is unknown, defaulting to 1000 [ 240.911388][T10607] lo speed is unknown, defaulting to 1000 [ 240.912082][T10607] lo speed is unknown, defaulting to 1000 [ 240.912886][T10607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 240.915940][T10607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.933609][T10607] lo speed is unknown, defaulting to 1000 [ 240.934508][T10607] lo speed is unknown, defaulting to 1000 [ 240.935095][T10607] lo speed is unknown, defaulting to 1000 [ 240.937252][T10607] lo speed is unknown, defaulting to 1000 [ 240.939587][T10607] lo speed is unknown, defaulting to 1000 [ 240.958880][T10607] smc: removing ib device syz1 [ 241.337423][T10607] ------------[ cut here ]------------ [ 241.337437][T10607] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.5.1373/10607 [ 241.340424][T10607] Modules linked in: [ 241.341134][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.5.1373 Tainted: G L syzkaller #0 PREEMPT [ 241.342971][T10607] Tainted: [L]=SOFTLOCKUP [ 241.343751][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.345543][T10607] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 241.346966][T10607] pc : rxe_pool_cleanup+0x58/0x60 [ 241.347786][T10607] lr : rxe_pool_cleanup+0x58/0x60 [ 241.348599][T10607] sp : ffff800093d96ee0 [ 241.349306][T10607] x29: ffff800093d96ee0 x28: ffff800093d97500 x27: ffff800087543780 [ 241.350555][T10607] x26: 0000000000000005 x25: ffff800093d96fe0 x24: dfff800000000000 [ 241.352035][T10607] x23: ffff0000d3dd5108 x22: ffff0000cdc03c98 x21: dfff800000000000 [ 241.353473][T10607] x20: ffff8000844b2960 x19: ffff0000d3dd5428 x18: 1fffe00035c08220 [ 241.354837][T10607] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff800084b03e18 [ 241.356295][T10607] x14: 000000008679e8e0 x13: 0000000000000001 x12: 0000000000000000 [ 241.357668][T10607] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 241.359052][T10607] x8 : ffff800099e79000 x7 : 0000000000000000 x6 : 0000000000000000 [ 241.360473][T10607] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800084334754 [ 241.361754][T10607] x2 : 0000000000000002 x1 : ffff0000ef2fd700 x0 : 0000000000000001 [ 241.363265][T10607] Call trace: [ 241.363822][T10607] rxe_pool_cleanup+0x58/0x60 (P) [ 241.364693][T10607] rxe_dealloc+0x30/0xd0 [ 241.365415][T10607] ib_dealloc_device+0x50/0x1e0 [ 241.366270][T10607] __ib_unregister_device+0x2b4/0x334 [ 241.367270][T10607] ib_unregister_device_and_put+0x5c/0x80 [ 241.368275][T10607] nldev_dellink+0x2e4/0x328 [ 241.369051][T10607] rdma_nl_rcv+0x568/0x828 [ 241.369766][T10607] netlink_unicast+0x610/0x800 [ 241.370571][T10607] netlink_sendmsg+0x63c/0x920 [ 241.371403][T10607] __sock_sendmsg+0xc8/0x138 [ 241.372236][T10607] ____sys_sendmsg+0x418/0x70c [ 241.373084][T10607] ___sys_sendmsg+0x198/0x224 [ 241.373862][T10607] __sys_sendmsg+0x160/0x214 [ 241.374621][T10607] __arm64_sys_sendmsg+0x80/0x94 [ 241.375420][T10607] invoke_syscall+0x98/0x244 [ 241.376234][T10607] el0_svc_common+0xe8/0x23c [ 241.377032][T10607] do_el0_svc+0x48/0x58 [ 241.377732][T10607] el0_svc+0x64/0x260 [ 241.378444][T10607] el0t_64_sync_handler+0x48/0x148 [ 241.379283][T10607] el0t_64_sync+0x198/0x19c [ 241.380083][T10607] irq event stamp: 178810 [ 241.380813][T10607] hardirqs last enabled at (178809): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 241.382607][T10607] hardirqs last disabled at (178810): [] el1_brk64+0x20/0x54 [ 241.384226][T10607] softirqs last enabled at (178720): [] __alloc_skb+0x1c0/0x5f8 [ 241.385890][T10607] softirqs last disabled at (178718): [] __alloc_skb+0x1a8/0x5f8 [ 241.387449][T10607] ---[ end trace 0000000000000000 ]--- [ 241.388884][T10607] ------------[ cut here ]------------ [ 241.388893][T10607] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.5.1373/10607 [ 241.391663][T10607] Modules linked in: [ 241.392373][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.5.1373 Tainted: G W L syzkaller #0 PREEMPT [ 241.394082][T10607] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 241.394871][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.396594][T10607] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 241.397843][T10607] pc : rxe_pool_cleanup+0x58/0x60 [ 241.398669][T10607] lr : rxe_pool_cleanup+0x58/0x60 [ 241.399521][T10607] sp : ffff800093d96ee0 [ 241.400210][T10607] x29: ffff800093d96ee0 x28: ffff800093d97500 x27: ffff800087543780 [ 241.401455][T10607] x26: 0000000000000005 x25: ffff800093d96fe0 x24: dfff800000000000 [ 241.402760][T10607] x23: ffff0000d3dd5108 x22: ffff0000cdc03c98 x21: dfff800000000000 [ 241.404195][T10607] x20: ffff8000844b2960 x19: ffff0000d3dd5720 x18: 1fffe00035c08220 [ 241.405593][T10607] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff800084b03e18 [ 241.407001][T10607] x14: 000000008679e8e0 x13: 0000000000000001 x12: 0000000000000000 [ 241.408498][T10607] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 241.409948][T10607] x8 : ffff800099e79000 x7 : 0000000000000000 x6 : 0000000000000000 [ 241.411413][T10607] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800084334754 [ 241.412848][T10607] x2 : 0000000000000002 x1 : ffff0000ef2fd700 x0 : 0000000000000001 [ 241.414325][T10607] Call trace: [ 241.414980][T10607] rxe_pool_cleanup+0x58/0x60 (P) [ 241.415878][T10607] rxe_dealloc+0x6c/0xd0 [ 241.416639][T10607] ib_dealloc_device+0x50/0x1e0 [ 241.417510][T10607] __ib_unregister_device+0x2b4/0x334 [ 241.418432][T10607] ib_unregister_device_and_put+0x5c/0x80 [ 241.419442][T10607] nldev_dellink+0x2e4/0x328 [ 241.420237][T10607] rdma_nl_rcv+0x568/0x828 [ 241.421057][T10607] netlink_unicast+0x610/0x800 [ 241.421991][T10607] netlink_sendmsg+0x63c/0x920 [ 241.422813][T10607] __sock_sendmsg+0xc8/0x138 [ 241.423611][T10607] ____sys_sendmsg+0x418/0x70c [ 241.424487][T10607] ___sys_sendmsg+0x198/0x224 [ 241.425331][T10607] __sys_sendmsg+0x160/0x214 [ 241.426123][T10607] __arm64_sys_sendmsg+0x80/0x94 [ 241.426975][T10607] invoke_syscall+0x98/0x244 [ 241.427780][T10607] el0_svc_common+0xe8/0x23c [ 241.428572][T10607] do_el0_svc+0x48/0x58 [ 241.429293][T10607] el0_svc+0x64/0x260 [ 241.430021][T10607] el0t_64_sync_handler+0x48/0x148 [ 241.430914][T10607] el0t_64_sync+0x198/0x19c [ 241.431690][T10607] irq event stamp: 178914 [ 241.432480][T10607] hardirqs last enabled at (178913): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 241.434203][T10607] hardirqs last disabled at (178914): [] el1_brk64+0x20/0x54 [ 241.435861][T10607] softirqs last enabled at (178906): [] handle_softirqs+0xbc4/0xd34 [ 241.437587][T10607] softirqs last disabled at (178813): [] __do_softirq+0x14/0x20 [ 241.439243][T10607] ---[ end trace 0000000000000000 ]--- [ 241.448237][T10607] ------------[ cut here ]------------ [ 241.448251][T10607] WARNING: drivers/infiniband/core/restrack.c:52 at rdma_restrack_clean+0xa4/0xd4, CPU#0: syz.5.1373/10607 [ 241.451144][T10607] Modules linked in: [ 241.451864][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.5.1373 Tainted: G W L syzkaller #0 PREEMPT [ 241.453701][T10607] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 241.454667][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.456144][T10607] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 241.457408][T10607] pc : rdma_restrack_clean+0xa4/0xd4 [ 241.458346][T10607] lr : rdma_restrack_clean+0xa4/0xd4 [ 241.459343][T10607] sp : ffff800093d96ed0 [ 241.459985][T10607] x29: ffff800093d96ed0 x28: ffff800093d97500 x27: ffff800087543780 [ 241.461364][T10607] x26: 0000000000000005 x25: ffff0000cf5be800 x24: 0000000000000048 [ 241.462734][T10607] x23: 1fffe0001a7ba9da x22: dfff800000000000 x21: ffff0000cf5be848 [ 241.464023][T10607] x20: ffff0000cf5be800 x19: ffff0000d3dd4ed0 x18: 1fffe00035c08220 [ 241.465419][T10607] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff800084b03e18 [ 241.466825][T10607] x14: 000000008679e8e0 x13: 0000000000000001 x12: 0000000000000000 [ 241.468230][T10607] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 241.469650][T10607] x8 : ffff800099e79000 x7 : 0000000000000000 x6 : 0000000000000000 [ 241.471074][T10607] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008433288c [ 241.472459][T10607] x2 : 0000000000000000 x1 : ffff0000ef2fd700 x0 : 0000000000000001 [ 241.473872][T10607] Call trace: [ 241.474414][T10607] rdma_restrack_clean+0xa4/0xd4 (P) [ 241.475412][T10607] ib_dealloc_device+0x14c/0x1e0 [ 241.476309][T10607] __ib_unregister_device+0x2b4/0x334 [ 241.477266][T10607] ib_unregister_device_and_put+0x5c/0x80 [ 241.478264][T10607] nldev_dellink+0x2e4/0x328 [ 241.479067][T10607] rdma_nl_rcv+0x568/0x828 [ 241.479864][T10607] netlink_unicast+0x610/0x800 [ 241.480768][T10607] netlink_sendmsg+0x63c/0x920 [ 241.481624][T10607] __sock_sendmsg+0xc8/0x138 [ 241.482503][T10607] ____sys_sendmsg+0x418/0x70c [ 241.483267][T10607] ___sys_sendmsg+0x198/0x224 [ 241.484052][T10607] __sys_sendmsg+0x160/0x214 [ 241.484880][T10607] __arm64_sys_sendmsg+0x80/0x94 [ 241.485752][T10607] invoke_syscall+0x98/0x244 [ 241.486554][T10607] el0_svc_common+0xe8/0x23c [ 241.487357][T10607] do_el0_svc+0x48/0x58 [ 241.488083][T10607] el0_svc+0x64/0x260 [ 241.488799][T10607] el0t_64_sync_handler+0x48/0x148 [ 241.489672][T10607] el0t_64_sync+0x198/0x19c [ 241.490450][T10607] irq event stamp: 179162 [ 241.491272][T10607] hardirqs last enabled at (179161): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 241.493204][T10607] hardirqs last disabled at (179162): [] el1_brk64+0x20/0x54 [ 241.494847][T10607] softirqs last enabled at (179144): [] handle_softirqs+0xbc4/0xd34 [ 241.496591][T10607] softirqs last disabled at (178917): [] __do_softirq+0x14/0x20 [ 241.498232][T10607] ---[ end trace 0000000000000000 ]--- [ 241.537433][T10600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.537854][ T15] ================================================================== [ 241.537864][ T15] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x48/0x60 [ 241.537880][ T15] Read of size 1 at addr ffff0000cf5be818 by task kworker/u8:1/15 [ 241.537888][ T15] [ 241.537895][ T15] CPU: 0 UID: 0 PID: 15 Comm: kworker/u8:1 Tainted: G W L syzkaller #0 PREEMPT [ 241.537906][ T15] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 241.537910][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.537915][ T15] Workqueue: krdsd rds_ib_dev_free [ 241.537931][ T15] Call trace: [ 241.537934][ T15] show_stack+0x2c/0x3c (C) [ 241.537948][ T15] __dump_stack+0x30/0x40 [ 241.537959][ T15] dump_stack_lvl+0xd8/0x12c [ 241.537968][ T15] print_address_description+0xb0/0x238 [ 241.537977][ T15] print_report+0x68/0x84 [ 241.537984][ T15] kasan_report+0x8c/0xc4 [ 241.537994][ T15] __kasan_check_byte+0x3c/0x54 [ 241.538003][ T15] lock_acquire+0xa4/0x368 [ 241.538014][ T15] _raw_spin_lock+0x48/0x60 [ 241.538021][ T15] xa_erase+0x24/0x50 [ 241.538032][ T15] rdma_restrack_del+0xc0/0x27c [ 241.538042][ T15] ib_dealloc_pd_user+0x134/0x168 [ 241.538054][ T15] rds_ib_dev_free+0xc0/0x278 [ 241.538064][ T15] process_scheduled_works+0x79c/0x1098 [ 241.538073][ T15] worker_thread+0x754/0xba0 [ 241.538081][ T15] kthread+0x2f8/0x3c8 [ 241.538089][ T15] ret_from_fork+0x10/0x20 [ 241.538096][ T15] [ 241.538098][ T15] Allocated by task 6624: [ 241.538103][ T15] kasan_save_track+0x40/0x78 [ 241.538111][ T15] kasan_save_alloc_info+0x44/0x54 [ 241.538119][ T15] __kasan_kmalloc+0x9c/0xb4 [ 241.538127][ T15] __kmalloc_cache_noprof+0x2d4/0x624 [ 241.538135][ T15] rdma_restrack_init+0x60/0x150 [ 241.538142][ T15] _ib_alloc_device+0x58/0x4a8 [ 241.538155][ T15] rxe_net_add+0x30/0x110 [ 241.538163][ T15] rxe_newlink+0x114/0x1c0 [ 241.538173][ T15] nldev_newlink+0x478/0x4f0 [ 241.538179][ T15] rdma_nl_rcv+0x568/0x828 [ 241.538191][ T15] netlink_unicast+0x610/0x800 [ 241.538201][ T15] netlink_sendmsg+0x63c/0x920 [ 241.538210][ T15] __sock_sendmsg+0xc8/0x138 [ 241.538219][ T15] ____sys_sendmsg+0x418/0x70c [ 241.538225][ T15] ___sys_sendmsg+0x198/0x224 [ 241.538230][ T15] __sys_sendmsg+0x160/0x214 [ 241.538235][ T15] __arm64_sys_sendmsg+0x80/0x94 [ 241.538241][ T15] invoke_syscall+0x98/0x244 [ 241.538250][ T15] el0_svc_common+0xe8/0x23c [ 241.538258][ T15] do_el0_svc+0x48/0x58 [ 241.538267][ T15] el0_svc+0x64/0x260 [ 241.538272][ T15] el0t_64_sync_handler+0x48/0x148 [ 241.538278][ T15] el0t_64_sync+0x198/0x19c [ 241.538284][ T15] [ 241.538286][ T15] Freed by task 10607: [ 241.538290][ T15] kasan_save_track+0x40/0x78 [ 241.538297][ T15] kasan_save_free_info+0x58/0x70 [ 241.538305][ T15] __kasan_slab_free+0x74/0xa4 [ 241.538312][ T15] kfree+0x188/0x690 [ 241.538318][ T15] rdma_restrack_clean+0xb8/0xd4 [ 241.538325][ T15] ib_dealloc_device+0x14c/0x1e0 [ 241.538332][ T15] __ib_unregister_device+0x2b4/0x334 [ 241.538339][ T15] ib_unregister_device_and_put+0x5c/0x80 [ 241.538347][ T15] nldev_dellink+0x2e4/0x328 [ 241.538352][ T15] rdma_nl_rcv+0x568/0x828 [ 241.538361][ T15] netlink_unicast+0x610/0x800 [ 241.538369][ T15] netlink_sendmsg+0x63c/0x920 [ 241.538377][ T15] __sock_sendmsg+0xc8/0x138 [ 241.538385][ T15] ____sys_sendmsg+0x418/0x70c [ 241.538390][ T15] ___sys_sendmsg+0x198/0x224 [ 241.538396][ T15] __sys_sendmsg+0x160/0x214 [ 241.538401][ T15] __arm64_sys_sendmsg+0x80/0x94 [ 241.538407][ T15] invoke_syscall+0x98/0x244 [ 241.538415][ T15] el0_svc_common+0xe8/0x23c [ 241.538423][ T15] do_el0_svc+0x48/0x58 [ 241.538431][ T15] el0_svc+0x64/0x260 [ 241.538436][ T15] el0t_64_sync_handler+0x48/0x148 [ 241.538442][ T15] el0t_64_sync+0x198/0x19c [ 241.538447][ T15] [ 241.538450][ T15] The buggy address belongs to the object at ffff0000cf5be800 [ 241.538450][ T15] which belongs to the cache kmalloc-1k of size 1024 [ 241.538456][ T15] The buggy address is located 24 bytes inside of [ 241.538456][ T15] freed 1024-byte region [ffff0000cf5be800, ffff0000cf5bec00) [ 241.538467][ T15] [ 241.538470][ T15] The buggy address belongs to the physical page: [ 241.538474][ T15] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000cf5ba800 pfn:0x10f5b8 [ 241.538483][ T15] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 241.538490][ T15] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 241.538499][ T15] page_type: f5(slab) [ 241.538506][ T15] raw: 05ffc00000000240 ffff0000c0001dc0 fffffdffc34a9210 fffffdffc32ee010 [ 241.538513][ T15] raw: ffff0000cf5ba800 000000080010000f 00000000f5000000 0000000000000000 [ 241.538519][ T15] head: 05ffc00000000240 ffff0000c0001dc0 fffffdffc34a9210 fffffdffc32ee010 [ 241.538525][ T15] head: ffff0000cf5ba800 000000080010000f 00000000f5000000 0000000000000000 [ 241.538531][ T15] head: 05ffc00000000003 fffffdffc33d6e01 00000000ffffffff 00000000ffffffff [ 241.538537][ T15] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 241.538541][ T15] page dumped because: kasan: bad access detected [ 241.538544][ T15] [ 241.538546][ T15] Memory state around the buggy address: [ 241.538550][ T15] ffff0000cf5be700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 241.538555][ T15] ffff0000cf5be780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 241.538559][ T15] >ffff0000cf5be800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.538563][ T15] ^ [ 241.538566][ T15] ffff0000cf5be880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.538571][ T15] ffff0000cf5be900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.538574][ T15] ================================================================== [ 241.538669][ T15] Disabling lock debugging due to kernel taint [ 241.538679][ T15] ------------[ cut here ]------------ [ 241.538685][ T15] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 241.538696][ T15] index 13467 is out of range for type 'unsigned long[8]' [ 241.538705][ T15] CPU: 0 UID: 0 PID: 15 Comm: kworker/u8:1 Tainted: G B W L syzkaller #0 PREEMPT [ 241.538716][ T15] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 241.538719][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.538724][ T15] Workqueue: krdsd rds_ib_dev_free [ 241.538734][ T15] Call trace: [ 241.538736][ T15] show_stack+0x2c/0x3c (C) [ 241.538746][ T15] __dump_stack+0x30/0x40 [ 241.538756][ T15] dump_stack_lvl+0xd8/0x12c [ 241.538765][ T15] dump_stack+0x1c/0x28 [ 241.538774][ T15] ubsan_epilogue+0x14/0x48 [ 241.538783][ T15] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 241.538793][ T15] queued_spin_lock_slowpath+0x834/0xd0c [ 241.538801][ T15] do_raw_spin_lock+0x21c/0x2d0 [ 241.538808][ T15] _raw_spin_lock+0x50/0x60 [ 241.538815][ T15] xa_erase+0x24/0x50 [ 241.538824][ T15] rdma_restrack_del+0xc0/0x27c [ 241.538832][ T15] ib_dealloc_pd_user+0x134/0x168 [ 241.538842][ T15] rds_ib_dev_free+0xc0/0x278 [ 241.538851][ T15] process_scheduled_works+0x79c/0x1098 [ 241.538860][ T15] worker_thread+0x754/0xba0 [ 241.538868][ T15] kthread+0x2f8/0x3c8 [ 241.538875][ T15] ret_from_fork+0x10/0x20 [ 241.538885][ T15] ---[ end trace ]--- [ 246.407850][T10453] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 247.527739][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.808638][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.810576][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.811726][ T1593] ieee802154 phy1 wpan1: encryption failed: -22