last executing test programs: 38.571401267s ago: executing program 1 (id=958): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f0000002840)) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) clock_gettime(0x3, 0x0) clock_settime(0x0, 0x0) 35.838288484s ago: executing program 1 (id=970): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200002, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200048f4, &(0x7f0000b63fe4)={0xa, 0x2, 0x9, @empty, 0x5}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002600)=""/4113, 0x1011) 32.553678596s ago: executing program 1 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 31.093773202s ago: executing program 1 (id=991): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{0x6, 0x2}, 0x100, './file2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x6}) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x5, 0x12, 0x1ff}]}}]}, 0x3c}}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 30.120359775s ago: executing program 1 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_io_uring_setup(0x7c29, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) ppoll(&(0x7f0000000040)=[{r5, 0x2049}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x13f81, 0x0, 0x28c, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_io_uring_setup(0x5015, &(0x7f0000000540)={0x0, 0xf2d9, 0xc00, 0x5, 0x14e}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000000c0)="a95cee00400000fbffffffffffffff00", 0x10) r12 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xe) pwrite64(r10, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, 0x10001, &(0x7f00000001c0)=[{0x3, 0x6, 0x6}, {0x5, 0x0, 0xe}, {0x12, 0x7, 0x3}, {0x200, 0x2, 0x1}], 0x4, 0xfffffffffffffc01, 0x7, 0x77, 0xc, 0x40}) 29.907414122s ago: executing program 1 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffff073) shmctl$IPC_INFO(r6, 0x3, 0x0) r8 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x9, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200000060000480240001800a000100717565756500000014000280060003400002000006000140000b0000380001800b0001006f626a72656600002800028008000340000000130900040073797a3100000000080001400000001f08000540000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x1c, 0x25, 0x101, 0x70bd2c, 0xfefffffb, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28850) 14.090176417s ago: executing program 32 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffff073) shmctl$IPC_INFO(r6, 0x3, 0x0) r8 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x9, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200000060000480240001800a000100717565756500000014000280060003400002000006000140000b0000380001800b0001006f626a72656600002800028008000340000000130900040073797a3100000000080001400000001f08000540000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x1c, 0x25, 0x101, 0x70bd2c, 0xfefffffb, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28850) 11.032157453s ago: executing program 4 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfff9}]}) getpriority(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000580)={{r0}, "f9bdd4246b928992e0fcc4e6aeed36ac58fcc850551aa75bd9f075b00901caead8699f1b3f602aacca74d3c031484c64656ed2ec1dc8c2841a3fd36914e6e866434dc75d2ee3a8abc7e48b34b4558947c91d7df37f97822c59747e4a223b09b981e204129e2d02f4d79f8a111e10b36d8b77d910869442f1a9b1e75cd30e6bc02755db32caa7cac3fb3e09a701075ef1bb05a8166063d402bb9a08bab62802ac3b3a3caae1516bdeb0bdb93e6837cfcd2fa4167b1d3d4f83eff6d6201ab32b9a4936245861f9af0dd30385a75a5976590d9eab49c47c0d1dbb7b2bf84fc25772a91ea3a2ed455785c8330e4904a8738b3786ecff6db2411d0b48750521e8f631b6a1e392a1fe7e714f29a659e3c4735c7530b4fa85f84e55ae48ba2cf028b4f9c49b10b15f858a7899e5eeb896620d618fbae94dd93feb62e4ab541e32ab66dc8397ba5752339b4ff1ca8a03929377c6c5106d676ad6767a0d0ab33bdeea7e7f9cfa6b4b7f64b8d5449ff0d54cfa452be1c88655e4ebd1f0dcf0df88ce82cbd1ff921520fe025cee8194fe6ff5d450bafba2f1dbd399f5ff29fca513cbc75eaeb9d39a4c63af78f0eefae4ca328beb5d846cba894cf14232be371806fd28c5c537e2980f8a687184f64103200613fef887fbad19ce4efbee5085e4da799c2f76622fb0cd368947c752772269ad0b6ec81161f8977aaeb8ec06f90f2b74c8ea3baceb0a88266517e99fc2692f5eeafdd79f2ea19695396a21a94f4b968bdf6410cc5d63154c9604b08268ebfb6bc8f145fa649f5662fb63c391bddcd845475ac9abfb25a4af813033ca095404b39b4f0493d734279251534616e5674cb2b89571839a34d8f9f3695676d2f061291496d67b644bc16626c091c5b94ff9d616e41e9580e3c6b50f989b64b0b111d01be63040d27e33e8c187762e54fe1255de3b9408c3ff1fbe7b45bde4b4305a69550f28cc36c619e4e6dbd1656d4507063b446c40887f59b74fe619d249493717b095513c11f21ea3cc5a1b35de9dd72e72d3264d622e78c19811f62c5a2de5e2d78dea7b0a4610310b8b02615b31d991afb7aa034d0cd9e8e68d68a9bf38776244951ae0c26727c675e807df76e383e38a85460dc386038f44463d252ff6a6ef023871af77a627925ab3c02bae613abdc33b9b649d078d9cba812bf79f07e180b9d2925098fb9357f09e3c7c400e76eda9cd05a5766ad52611c2a26fbc3f4b1126140aa23794b9d14849179f30fee18add0e5a728c16aa47f09f5a77b372e65ce37874d87ecebc05a1727c47b9cee4bd36f76ac8fb2ad16684107841b85790a6cda401a4752a69f634f652c797f00f44e7d4ab223882457e9cbb1f71554291014c672634c6de6344893fc30ab2d117bae28295e35231f121ffbbdbaf344d93ab7f2dcfc83f3e0111b7983bf3d26df9ad408647bd1657aac0a9fb7afd462664647d0d3b16bdd758cb2b194ba0c2c635a02809ccfc79d1f19037fadf48e297e997e1830d42bbdd54528a3396c30a0970421f789aa16045ddb0d92106374e180e462b8b4dfc5c35813c54a6872407cb7ba96af47f7e5a2122f86fda3effe5706d61ea816c33470cff0f91336cf2bb53cb2a7537e067054de150d5f9cb808a2b6aaa7b2308bf12e378a6aab43017548bb72db6ad2370fe237d3e36d53d859cbe817f0c3a8b42fc23bd22b9ca275ea8050a483b3f279bd94d245d5f8b6c25b8f91923dabe50106ef9e86c3f2e80d8c14f18a7e66afca7188c9473dc25a473bcc3a133a113c36862851ab2a976e930ad47a372e6133592c85efc7d56747cf0242cd74ebc68537e84303b909b7b61e7424e2c9fa9e94dc496178fa7b145eb95e9fadde5357946deef9875beea5230bde6bac55c6b07d07070349eed638160f0f0efeb48d009f4a5e77176e83cdc83616927aabefdd58e9b08361d68c9bc50475c7f2dc03e84d541e582e797e176b9b4e26953f8e6318f2fb94a9c4455cf599be96143ce63e7e7580e2ddf3b0496247ae1c5e92de61687a6c69f7f3327d6acd01f350b700048febb6b927a6edc72517d9412ab2b4c11e001acd249cfe55c3ae39ef416315d46e15f30921f6ca6772b9d239a83f7323530dd261840d90b99a6344aa7abfc1f5b437b75d49235e5586c5d41a081d82a0bdbbe9233eb9ec222b7a2873ded7016e7b7abbc31543073a93c14e03371be23688b8b01caafd84bbaedb629d34f7807cf1e14a3f95c18e7754f9d6601b4c068cb5c980fe0ba7479c602640b7a6545893ad00fae724555859f74325ee99c2cce17c70afc913120e4b6d9c987cd8c27cb39ec4c7261014982155c120e911f56c90b804e13d6121f92c1bf9c4bcc01347bf4734b0c0e9c2777eb9263a459a46246fd88479debddb85d0ace7392f00c14b93313e4db48dbd3d9affbb49b9adf76657fc759dd8d8ae9481b7237ed027395adb845270eace1db02514ff537691f8c693eaee7ac12e3f56572f7b6c98e45ff1a3af442c09fbeeb8d3cb1fabf02d562aa43cb429ef313c80a22de081bc31f8d13b54dd8e15055a568ea8060a8928629af3e8390f9e18fb3bce0cef40dfa574c7c7478f985e936ee07cc93ae06427b36e3047636a1376d393d8be80c61083455d32b33bf1d2a9263eb63f6b0abaeec4c58becc986eaaef9cc9028f995f3538599422964b3a3821cd9b459d1b18b36d351118fe82640208b38e6eaa460deb7755cf10e96fe78895fd71c27fa65611286c3c4c64e37faafb00a8d7dc825290a1746b3aa26fb913d31a94e06b379a3cae09ea47cf1b1af9b1a59029f75833c95b1efa3ac1acdbc4256c6002cf54a040fa5ac63ce7ff72abf137aa5bec38577a3782745096bc148c4de78b8aecd97bb2bc2b16a2e0bbe240d2e6c1390cd030cb72d5aaa8ff37d41961f03b5c9f721bc6ee6b9ff3b7faaa2b1f3b02a2cd1e54bfc4e46f919db423184d352ae77ef28f91f18981ad519e12c5c34288ad00de55b13e9b91267fec0b336d5292aae829ace2e05f61aee9c6f209c85585a2067eed991f0334106989cac2db634605166fcdd1f45cc120ad9715ea116d8888fcc7ef672c7405302ca17cc01aef28de0b1047c1ace0212ca8f950a1fd0fc474278a21bc56b1a70d5c1255c5ff809f1d0a3b6cefbc708c33459f00ea33b7d06eaaf30527647943d794417d1c4233baed3c05e9531f252a7b89d483eee3b72e209f1b21a275764e3987f40d0ed268233cbe9191fbdc7e7ffc9834a8f144abf259fd7fc987c7755f2986bb03be14ab95bdeda76b1041d8557201dcc55f02aa0bad938d748f5c9b24e41bc6a78c06218c52980488734b2d221d784ac6070db3a8229d4881d4900cc476ef123dd1b1507e39a8c0e02b13e8de5c691edf1efb777570b304edcb70f315af87cb1648af303f0602af1174c3ce41b8a1626a5976984414fa246a241d71d0391a32814cd8183a1b3602096a9e0f797b67ced8e9f9587a10ea6d187c177f0b54ebc623e305e873ba24d2390d09af7073a5cabd4561c9822eb76a70a5485092227e80d722b7cffd6e8ac2a6735c75924259f84485d0d0a1643349f161a9ee3513eb705c18ec557aadc6f62d490fb1c2b21d079e080f7b40ffbf1121337048b9226c51477c0bd98b5e9198bb7791b2bd2e45a1b5b563a4d58d152170c62e3c13161edda0ebcc63addb0233cd6fea22d80ce38d7198c3b17d798af07fc0f5c07eb9da8cd614ef983d94fc19fa3d00a6aea431d2520fb7738a8a09d98c5300be91dd943d37400e37d315e3cecadb3710e7ccaa31f63684b2d30d25576ed558335fdf6cc47bb88fa180c20789b55cad9e1e22d82cf8448e61c63bfa8cb347052f36f9677201453c8c02633a9650f9db792ef51aded0eb388a8b7a39126c58113dbfdafd708d98a9a7cf999e843c65010a7140ba946ae8903f58f935792ad3e861a5bee4d6b95e75f8afad757b0b9d42ca1add0d3b125a28b0c9a137e7b384fbb6bf1fc573cc9e88ae994b3a2c00dda4fc7bffc16d3c7b34dc48365197bf1ff1d5895270c2bef7e81d921192ff7590eb58b89ceaa1cb84a3fa834cf723d642e5385c6000f09c4301e6ee3c0b1cec5b3f75bd17ed827e1bbfe1f23b13c5a1c2b35fd03560359066bb4d30783275e9cd2b563093b9599d3aeb1ae466a2575e27775cf4029251befd5811046c12aecbba037b51d82932cc886b37c41d0a885e456872140e3515feaa950c9a6efbdab8c730e48c9f174791fdbdb2fcb6672762c1ecf128b5c03127801c78918e294a86302752f5603c67c90430edbcc9bd09a859d6d2448b733ce04301ca5b8efb3fe4c8e261dd0c8cbdc0b3b7f0099a1b8df7231c4d1e06a4311f17429b6aee7470f5bc336b2965ea82b82d680bdd50b6abd2492e371ff97f9990f44b314bd2f8f80a1c958317e24bb4488ec88a82c55b83601e7e206ca30d47bab7d91da74a43246de5f4a7eb79679ff9abbe42e6ae4d2d505ca3f997296935ff8af54b4084d4cf3d3374718e16d615eaf40b90da459aa33b180a3f6c4f705a44699e98f5e69a6fc648495068d89004e981aed58b8f5d916ec07a82342b640046bb21a9ccc03705c65eec171646e08725b61d2097a448882eb885c1c120dd4f88a03491c7df8432039ad1d4bdd2e7b768ab33f086b6e59720df6387316225b72058a6b0b0c453726556f8f4f51cb86c816ea4c705551baf87eaf8195a457f8e03fc3fba5344306b86d39c4b4339e4751d58a2cd15a300e1c906f9f24526d5771b62d537a57cd4f210d353a077da8ee9822034a32b804b23cbf27e3b42fcb90513bd877738f7416620a2e999fe7adf1fa1e267a3bedf32f6a8689bb3c6b1ed343d825a578d20da4d0bf4591ef85997a5b033663d81911b94ef2f08fec4fed8940dd3129da26d440f332771c2db57f03cdee76321e5ec0a71b2ab81a6b168c92c47eb689c1196ab49edae35379922aee21b059c13e5df86d9c87abdbd4c777b71eee0044d98c91931565a0eb6547b797a8a73bb19f86937e3597bf6c6d75024a5b4c0bc385d9964b051235bb45f5b94f1408c8f6aceba4db2b8cdc80d022a32b716167a3e360130d376b7ce84b8718c118bc0ae3c70bb6c932c73c4c501046b0bf53ad0335b3fee8711f059ef53828e9e7c4c4f920162857d4ce6a6982ceb166e2d83ea8f3226c030ebae535b48cfb979b8caad9011538539893df0089fa3abff36e47ed291335027b2dcd3c518b034a662a58d37a844ccad97392b791877f3279afc64b110798a25b084b220e10fb22023d55d9463fef1a52eb148de66e89eabf4b7050b6c28117756a6536d201907c2d7062d4e4a5ec3fba691a7cd610357ad6c1150dc98b9afc40c3dec4cd3238c6665fa71df93326c554a60997b05c5d5bee4280bb0ff93d9fd2ba3cb5e9e67540d27629647c7ba2bd371cba58fdfc35bdbac61365b2b06c01410a5e4df53e2b2576d343611e37e895e8cfc7990a496c114b2c052761cf5ee6f2efe488298e8bbd3b7292b57e941d60e6774778a51793aaef722fcff5755d5ead444db9bb4e55798ddd14aefe54dd6471ae4c7ada0c85ebc75f88401d542bf0c0d268934418418c957d8b294769114192eaccf19eced284f0837dd33b37c37dc80eadaa353a6617547ce9f8f325c9d56182ec0f51c9a15c6deaa4d968ca5641248174b46584608408e5c5ac4ea9e1ebadff15a1a1e0d4d4544315ebb6f25accff0ffaf9f27f8a908e0d34ed26eb34d9ef3153bb14aacb899397798134cd842"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020500090c0000000000000000000000010006"], 0x60}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1e, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2a}}, 0x14) setgroups(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$mouse(0x0, 0x7fff, 0x0) r7 = shmget(0x0, 0x4000, 0x1000, &(0x7f00007bd000/0x4000)=nil) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000240)=""/169) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x18) 10.197590331s ago: executing program 5 (id=1066): prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x4559}], 0x1, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 9.952154141s ago: executing program 4 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.307557903s ago: executing program 5 (id=1071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005080), 0x0, 0x8000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r7) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 7.92104544s ago: executing program 4 (id=1072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'geneve1\x00', @remote}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000480)={'veth0_to_bridge\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4008804) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x801, 0x0) close(r0) 7.300240868s ago: executing program 5 (id=1076): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x1, 0x4048044) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="010025bd7000d702000025000000978b62e8f193b1a0bced73eb110080ff47f7b02ed29632828273f06fac3b"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x53340389580ec156) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$SIOCSIFHWADDR(r7, 0x89b0, &(0x7f0000000440)={'vlan0\x00', @random="1800002000"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2012, 0x8000, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) 6.929648144s ago: executing program 0 (id=1077): read$smackfs_cipsonum(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000001c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000000)=""/34, 0x22, 0x80000000) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 6.614958175s ago: executing program 3 (id=1079): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101940, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 6.021395564s ago: executing program 4 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900c60000001e0000000a0006000802110000000000040067001c00330008010000ffe28baa7a3c6ea0ffffff8a43848811000001ff"], 0x54}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000314010000000000000000000900020073797a32000000000800410072786500140033006272696467655f736c6176655f3000000900020073797a32000000000800410073697700140033006e6574706369300000000000000000000900020073797a310000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a30000000000800410072786500140033007465616d3000001800000000000000000900020073797a3200000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000710025042dbd70007f00000007000000", @ANYRES32=r8, @ANYBLOB="0ccc3b04587796faf8b6143ad9b96e4d0001800800010063000100f015778a2b7f55ee9297413d02d5d7ddb4295ea460b225c6e919c61e1d20c30532c6fab611e0fb482a1ab79d34ca0b367f82592c5e36576a8bf5902d88a08853215fcc191d2a194ba92ee555eca78508bb3e4eddb9e91b8c1804837eddc892e79eb7f93c9e0eaceace56769c96ca19ee7b8f05d65916b77cb4d83bb26424989d2d2b8c3e"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.02045786s ago: executing program 5 (id=1081): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000080000000500000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000100"/17, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRES16=0x0], 0x6, 0x237, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x2b8, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x11}}, @common=@addrtype={{0x20}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f00000000c0)='./file1\x00', 0x5) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x9) close_range(r8, 0xffffffffffffffff, 0x0) 5.999356301s ago: executing program 0 (id=1082): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x2007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f0000003800)={0xf, 0x289, 0x1}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x4d) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80008, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e3502c9], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0xda4a, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x2, 0xe, 0x8000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000000000)={0x1, 0x2, 0xfffffffffffffff9, 0x444, 0x6, 0x4}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r6, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x44008) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0xd8000000, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x8, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x10000003, 0x0, 0x1, 0x1ff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4.98502715s ago: executing program 3 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.97161349s ago: executing program 5 (id=1084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb000005000006140000001100"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) unshare(0x28000600) r6 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r8 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x10420, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) 4.808052476s ago: executing program 0 (id=1086): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0xd) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x84) listen(r3, 0x8) listen(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000180)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@dax_never}, {@oldalloc}, {@resuid}, {@resuid}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="01f826bd7000fbdbdf2505000000200001800d0001007564"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0x140, 0xfeffffff, 0x0, 0x140, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @gre_key=0xc5, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', @broadcast}) shmget(0x3, 0x7000, 0x800, &(0x7f0000940000/0x7000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000000000516ac8a1ab4cc31fbe78000000e3e7f846a7970345"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000001440)=0x4) 4.083686613s ago: executing program 2 (id=1087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x90012, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0xd000)=nil, 0xd000, 0x0, 0x13, r6, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 4.07210513s ago: executing program 3 (id=1088): bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x5, 0x2, 0x5, 0x2, 0x1], 0x3, 0x2}, {0x1, [0x1, 0x0, 0x8, 0x6, 0x2, 0x1], 0x4, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x7, 0x10, [0x19, 0x2e, 0x17, 0x21, 0x4, 0xb, 0x3c, 0x1a, 0xd, 0x21, 0x2e, 0x3f, 0x3d, 0x2c, 0x30, 0x28], 0x2, 0x0, 0xb6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r4, 0x8970, &(0x7f0000001f80)={'dummy0\x00', @ifru_mtu=0xffff}) syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r5}, 0x18) 4.061139221s ago: executing program 4 (id=1089): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x401, 0x3, 0x80, "89dc90f7effb6593f33462e891c4fe12f7c1f0ad4ae91998ebaca746050482d4", 0x56595559}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.946286254s ago: executing program 0 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b}) sendto$inet6(0xffffffffffffffff, 0x0, 0x2c, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xa}, 0x1fb}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001200)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r5, 0x1d07}, 0x8) r6 = getpid() syz_open_procfs$pagemap(r6, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x40) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 2.504944181s ago: executing program 3 (id=1091): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0c00990001000080730000000600f700040400000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pwritev2(r6, 0x0, 0x0, 0x5c, 0x4, 0x2) sendto$inet(r5, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.433454692s ago: executing program 2 (id=1092): read$smackfs_cipsonum(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000001c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000000)=""/34, 0x22, 0x80000000) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 2.389323488s ago: executing program 4 (id=1093): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f00000000c0)={0x0, 0x5, 0x2}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0088bf8d", @ANYRES16=r6, @ANYBLOB="01000000000000000000810000000800", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000006006600c78800001c00330008010000ffffffffffff0802110000010802110000000000"], 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.240084572s ago: executing program 0 (id=1094): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101940, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1.579828207s ago: executing program 2 (id=1095): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) 1.549962515s ago: executing program 2 (id=1096): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 1.404069116s ago: executing program 2 (id=1097): socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080), 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x16, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x2}}) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8202000fcff"], 0x25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.198083301s ago: executing program 3 (id=1098): fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1e3, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0xb, 0x20}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.154328756s ago: executing program 3 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 478.777902ms ago: executing program 0 (id=1100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x13, 0x0, 0xfffffffa, 0x871e, 0x5, 0x8, 0x9, 0x4, 0xffffff1b, 0x1, 0x8, 0x8, 0x4, 0xfffffff9, 0x0, 0x5, 0x1, 0x2, 0x7, 0x7, 0x2, 0x9, 0xc}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000280)={{@align=0x3, {0x2, 0x0, 0x9, 0x9}}, {{[0xfffffff7, 0x0, 0x3, 0x4]}, 0x0, 0x1, 0xfffffff9, 0x0, &(0x7f00000001c0)=[{{@_ha_fsid={[0x8, 0x7]}, {0x1, 0x800, 0xffff, 0x52d0}}, 0x9b3, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x44f6, 0x8]}, {0xa, 0x3, 0xfff, 0x9}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x980, 0xffff2340]}, {0x5, 0x93b, 0x100000, 0x6}}, 0x10, 0x0, '-\x00'}]}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dummy_udc.0', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) 336.578554ms ago: executing program 2 (id=1101): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001400010300000000000000002c000000000000001a"], 0x24}}, 0x0) 0s ago: executing program 5 (id=1102): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x5, 0x2, 0x5, 0x2, 0x1], 0x3, 0x2}, {0x1, [0x1, 0x0, 0x8, 0x6, 0x2, 0x1], 0x4, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x7, 0x10, [0x19, 0x2e, 0x17, 0x21, 0x4, 0xb, 0x3c, 0x1a, 0xd, 0x21, 0x2e, 0x3f, 0x3d, 0x2c, 0x30, 0x28], 0x2, 0x0, 0xb6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r4, 0x8970, &(0x7f0000001f80)={'dummy0\x00', @ifru_mtu=0xffff}) syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r5}, 0x18) kernel console output (not intermixed with test programs): ing memory failure for pfn 0x13870c at process virtual address 0x20adc000 [ 75.479349][ T5779] Memory failure: 0x13870c: recovery action for dirty LRU page: Recovered [ 75.479356][ T5779] Injecting memory failure for pfn 0x13870d at process virtual address 0x20add000 [ 75.479379][ T5779] Memory failure: 0x13870d: recovery action for dirty LRU page: Recovered [ 75.479385][ T5779] Injecting memory failure for pfn 0x13870e at process virtual address 0x20ade000 [ 75.479407][ T5779] Memory failure: 0x13870e: recovery action for dirty LRU page: Recovered [ 75.479414][ T5779] Injecting memory failure for pfn 0x13870f at process virtual address 0x20adf000 [ 75.479439][ T5779] Memory failure: 0x13870f: recovery action for dirty LRU page: Recovered [ 75.479446][ T5779] Injecting memory failure for pfn 0x138710 at process virtual address 0x20ae0000 [ 75.479469][ T5779] Memory failure: 0x138710: recovery action for dirty LRU page: Recovered [ 75.479476][ T5779] Injecting memory failure for pfn 0x138711 at process virtual address 0x20ae1000 [ 75.479498][ T5779] Memory failure: 0x138711: recovery action for dirty LRU page: Recovered [ 75.479505][ T5779] Injecting memory failure for pfn 0x138712 at process virtual address 0x20ae2000 [ 75.479526][ T5779] Memory failure: 0x138712: recovery action for dirty LRU page: Recovered [ 75.479533][ T5779] Injecting memory failure for pfn 0x138713 at process virtual address 0x20ae3000 [ 75.479554][ T5779] Memory failure: 0x138713: recovery action for dirty LRU page: Recovered [ 75.479561][ T5779] Injecting memory failure for pfn 0x138714 at process virtual address 0x20ae4000 [ 75.479582][ T5779] Memory failure: 0x138714: recovery action for dirty LRU page: Recovered [ 75.479589][ T5779] Injecting memory failure for pfn 0x138715 at process virtual address 0x20ae5000 [ 75.479610][ T5779] Memory failure: 0x138715: recovery action for dirty LRU page: Recovered [ 75.479617][ T5779] Injecting memory failure for pfn 0x138716 at process virtual address 0x20ae6000 [ 75.479638][ T5779] Memory failure: 0x138716: recovery action for dirty LRU page: Recovered [ 75.479645][ T5779] Injecting memory failure for pfn 0x138717 at process virtual address 0x20ae7000 [ 75.479666][ T5779] Memory failure: 0x138717: recovery action for dirty LRU page: Recovered [ 75.479673][ T5779] Injecting memory failure for pfn 0x138718 at process virtual address 0x20ae8000 [ 75.479694][ T5779] Memory failure: 0x138718: recovery action for dirty LRU page: Recovered [ 75.479701][ T5779] Injecting memory failure for pfn 0x138719 at process virtual address 0x20ae9000 [ 75.479722][ T5779] Memory failure: 0x138719: recovery action for dirty LRU page: Recovered [ 75.479729][ T5779] Injecting memory failure for pfn 0x13871a at process virtual address 0x20aea000 [ 75.479750][ T5779] Memory failure: 0x13871a: recovery action for dirty LRU page: Recovered [ 75.479757][ T5779] Injecting memory failure for pfn 0x13871b at process virtual address 0x20aeb000 [ 75.479779][ T5779] Memory failure: 0x13871b: recovery action for dirty LRU page: Recovered [ 75.479786][ T5779] Injecting memory failure for pfn 0x1363f5 at process virtual address 0x20aec000 [ 75.479808][ T5779] Memory failure: 0x1363f5: recovery action for dirty LRU page: Recovered [ 75.479815][ T5779] Injecting memory failure for pfn 0x138657 at process virtual address 0x20aed000 [ 75.479837][ T5779] Memory failure: 0x138657: recovery action for dirty LRU page: Recovered [ 75.479844][ T5779] Injecting memory failure for pfn 0x13865f at process virtual address 0x20aee000 [ 75.479866][ T5779] Memory failure: 0x13865f: recovery action for dirty LRU page: Recovered [ 75.479872][ T5779] Injecting memory failure for pfn 0x138731 at process virtual address 0x20aef000 [ 75.479894][ T5779] Memory failure: 0x138731: recovery action for dirty LRU page: Recovered [ 75.479901][ T5779] Injecting memory failure for pfn 0x1345d6 at process virtual address 0x20af0000 [ 75.479925][ T5779] Memory failure: 0x1345d6: recovery action for dirty LRU page: Recovered [ 75.479932][ T5779] Injecting memory failure for pfn 0x1345d7 at process virtual address 0x20af1000 [ 75.479954][ T5779] Memory failure: 0x1345d7: recovery action for dirty LRU page: Recovered [ 75.479961][ T5779] Injecting memory failure for pfn 0x1345d8 at process virtual address 0x20af2000 [ 75.479983][ T5779] Memory failure: 0x1345d8: recovery action for dirty LRU page: Recovered [ 75.479990][ T5779] Injecting memory failure for pfn 0x1345da at process virtual address 0x20af3000 [ 75.480014][ T5779] Memory failure: 0x1345da: recovery action for dirty LRU page: Recovered [ 75.480021][ T5779] Injecting memory failure for pfn 0x13865c at process virtual address 0x20af4000 [ 75.480043][ T5779] Memory failure: 0x13865c: recovery action for dirty LRU page: Recovered [ 75.480050][ T5779] Injecting memory failure for pfn 0x138658 at process virtual address 0x20af5000 [ 75.480071][ T5779] Memory failure: 0x138658: recovery action for dirty LRU page: Recovered [ 75.480078][ T5779] Injecting memory failure for pfn 0x13865b at process virtual address 0x20af6000 [ 75.480101][ T5779] Memory failure: 0x13865b: recovery action for dirty LRU page: Recovered [ 75.480108][ T5779] Injecting memory failure for pfn 0x138656 at process virtual address 0x20af7000 [ 75.480130][ T5779] Memory failure: 0x138656: recovery action for dirty LRU page: Recovered [ 75.480136][ T5779] Injecting memory failure for pfn 0x13865e at process virtual address 0x20af8000 [ 75.480158][ T5779] Memory failure: 0x13865e: recovery action for dirty LRU page: Recovered [ 75.480165][ T5779] Injecting memory failure for pfn 0x137583 at process virtual address 0x20af9000 [ 75.480187][ T5779] Memory failure: 0x137583: recovery action for dirty LRU page: Recovered [ 75.480196][ T5779] Injecting memory failure for pfn 0x1363f0 at process virtual address 0x20afa000 [ 75.480218][ T5779] Memory failure: 0x1363f0: recovery action for dirty LRU page: Recovered [ 75.480225][ T5779] Injecting memory failure for pfn 0x1363f3 at process virtual address 0x20afb000 [ 75.480247][ T5779] Memory failure: 0x1363f3: recovery action for dirty LRU page: Recovered [ 75.480254][ T5779] Injecting memory failure for pfn 0x137587 at process virtual address 0x20afc000 [ 75.480276][ T5779] Memory failure: 0x137587: recovery action for dirty LRU page: Recovered [ 75.480283][ T5779] Injecting memory failure for pfn 0x13758f at process virtual address 0x20afd000 [ 75.480307][ T5779] Memory failure: 0x13758f: recovery action for dirty LRU page: Recovered [ 75.480314][ T5779] Injecting memory failure for pfn 0x13758b at process virtual address 0x20afe000 [ 75.480335][ T5779] Memory failure: 0x13758b: recovery action for dirty LRU page: Recovered [ 75.480342][ T5779] Injecting memory failure for pfn 0x13758a at process virtual address 0x20aff000 [ 75.480364][ T5779] Memory failure: 0x13758a: recovery action for dirty LRU page: Recovered [ 75.480370][ T5779] Injecting memory failure for pfn 0x13758d at process virtual address 0x20b00000 [ 75.480392][ T5779] Memory failure: 0x13758d: recovery action for dirty LRU page: Recovered [ 75.480398][ T5779] Injecting memory failure for pfn 0x13758e at process virtual address 0x20b01000 [ 75.480421][ T5779] Memory failure: 0x13758e: recovery action for dirty LRU page: Recovered [ 75.480428][ T5779] Injecting memory failure for pfn 0x13758c at process virtual address 0x20b02000 [ 75.480449][ T5779] Memory failure: 0x13758c: recovery action for dirty LRU page: Recovered [ 75.480456][ T5779] Injecting memory failure for pfn 0x1363f1 at process virtual address 0x20b03000 [ 75.480477][ T5779] Memory failure: 0x1363f1: recovery action for dirty LRU page: Recovered [ 75.480484][ T5779] Injecting memory failure for pfn 0x137585 at process virtual address 0x20b04000 [ 75.480506][ T5779] Memory failure: 0x137585: recovery action for dirty LRU page: Recovered [ 75.480513][ T5779] Injecting memory failure for pfn 0x137586 at process virtual address 0x20b05000 [ 75.480535][ T5779] Memory failure: 0x137586: recovery action for dirty LRU page: Recovered [ 75.480542][ T5779] Injecting memory failure for pfn 0x1363f4 at process virtual address 0x20b06000 [ 75.480563][ T5779] Memory failure: 0x1363f4: recovery action for dirty LRU page: Recovered [ 75.480570][ T5779] Injecting memory failure for pfn 0x137589 at process virtual address 0x20b07000 [ 75.480592][ T5779] Memory failure: 0x137589: recovery action for dirty LRU page: Recovered [ 75.480599][ T5779] Injecting memory failure for pfn 0x1363f2 at process virtual address 0x20b08000 [ 75.480620][ T5779] Memory failure: 0x1363f2: recovery action for dirty LRU page: Recovered [ 75.480627][ T5779] Injecting memory failure for pfn 0x137588 at process virtual address 0x20b09000 [ 75.480648][ T5779] Memory failure: 0x137588: recovery action for dirty LRU page: Recovered [ 75.480655][ T5779] Injecting memory failure for pfn 0x137584 at process virtual address 0x20b0a000 [ 75.480676][ T5779] Memory failure: 0x137584: recovery action for dirty LRU page: Recovered [ 75.480683][ T5779] Injecting memory failure for pfn 0x13865d at process virtual address 0x20b0b000 [ 75.480784][ T5779] Memory failure: 0x13865d: recovery action for dirty LRU page: Recovered [ 75.480791][ T5779] Injecting memory failure for pfn 0x13865a at process virtual address 0x20b0c000 [ 75.480812][ T5779] Memory failure: 0x13865a: recovery action for dirty LRU page: Recovered [ 75.480819][ T5779] Injecting memory failure for pfn 0x138659 at process virtual address 0x20b0d000 [ 75.480840][ T5779] Memory failure: 0x138659: recovery action for dirty LRU page: Recovered [ 75.480847][ T5779] Injecting memory failure for pfn 0x136660 at process virtual address 0x20b0e000 [ 75.480868][ T5779] Memory failure: 0x136660: recovery action for dirty LRU page: Recovered [ 75.480875][ T5779] Injecting memory failure for pfn 0x138655 at process virtual address 0x20b0f000 [ 75.480896][ T5779] Memory failure: 0x138655: recovery action for dirty LRU page: Recovered [ 75.480903][ T5779] Injecting memory failure for pfn 0x13636a at process virtual address 0x20b10000 [ 75.480925][ T5779] Memory failure: 0x13636a: recovery action for dirty LRU page: Recovered [ 75.480931][ T5779] Injecting memory failure for pfn 0x13636b at process virtual address 0x20b11000 [ 75.480953][ T5779] Memory failure: 0x13636b: recovery action for dirty LRU page: Recovered [ 75.480960][ T5779] Injecting memory failure for pfn 0x13636c at process virtual address 0x20b12000 [ 75.480981][ T5779] Memory failure: 0x13636c: recovery action for dirty LRU page: Recovered [ 75.480988][ T5779] Injecting memory failure for pfn 0x13636d at process virtual address 0x20b13000 [ 75.481010][ T5779] Memory failure: 0x13636d: recovery action for dirty LRU page: Recovered [ 75.481017][ T5779] Injecting memory failure for pfn 0x13636e at process virtual address 0x20b14000 [ 75.481038][ T5779] Memory failure: 0x13636e: recovery action for dirty LRU page: Recovered [ 75.481045][ T5779] Injecting memory failure for pfn 0x13636f at process virtual address 0x20b15000 [ 75.481066][ T5779] Memory failure: 0x13636f: recovery action for dirty LRU page: Recovered [ 75.481073][ T5779] Injecting memory failure for pfn 0x136370 at process virtual address 0x20b16000 [ 75.481095][ T5779] Memory failure: 0x136370: recovery action for dirty LRU page: Recovered [ 75.481101][ T5779] Injecting memory failure for pfn 0x136371 at process virtual address 0x20b17000 [ 75.481123][ T5779] Memory failure: 0x136371: recovery action for dirty LRU page: Recovered [ 75.481130][ T5779] Injecting memory failure for pfn 0x136372 at process virtual address 0x20b18000 [ 75.481151][ T5779] Memory failure: 0x136372: recovery action for dirty LRU page: Recovered [ 75.481158][ T5779] Injecting memory failure for pfn 0x136373 at process virtual address 0x20b19000 [ 75.481179][ T5779] Memory failure: 0x136373: recovery action for dirty LRU page: Recovered [ 75.481186][ T5779] Injecting memory failure for pfn 0x136374 at process virtual address 0x20b1a000 [ 75.481210][ T5779] Memory failure: 0x136374: recovery action for dirty LRU page: Recovered [ 75.481217][ T5779] Injecting memory failure for pfn 0x136375 at process virtual address 0x20b1b000 [ 75.481239][ T5779] Memory failure: 0x136375: recovery action for dirty LRU page: Recovered [ 75.481245][ T5779] Injecting memory failure for pfn 0x136376 at process virtual address 0x20b1c000 [ 75.481267][ T5779] Memory failure: 0x136376: recovery action for dirty LRU page: Recovered [ 75.481274][ T5779] Injecting memory failure for pfn 0x136377 at process virtual address 0x20b1d000 [ 75.481295][ T5779] Memory failure: 0x136377: recovery action for dirty LRU page: Recovered [ 75.481302][ T5779] Injecting memory failure for pfn 0x136378 at process virtual address 0x20b1e000 [ 75.481325][ T5779] Memory failure: 0x136378: recovery action for dirty LRU page: Recovered [ 75.481331][ T5779] Injecting memory failure for pfn 0x136379 at process virtual address 0x20b1f000 [ 75.481352][ T5779] Memory failure: 0x136379: recovery action for dirty LRU page: Recovered [ 75.481359][ T5779] Injecting memory failure for pfn 0x13637a at process virtual address 0x20b20000 [ 75.481381][ T5779] Memory failure: 0x13637a: recovery action for dirty LRU page: Recovered [ 75.481388][ T5779] Injecting memory failure for pfn 0x13637b at process virtual address 0x20b21000 [ 75.481411][ T5779] Memory failure: 0x13637b: recovery action for dirty LRU page: Recovered [ 75.481417][ T5779] Injecting memory failure for pfn 0x13637c at process virtual address 0x20b22000 [ 75.481438][ T5779] Memory failure: 0x13637c: recovery action for dirty LRU page: Recovered [ 75.481445][ T5779] Injecting memory failure for pfn 0x13637d at process virtual address 0x20b23000 [ 75.481467][ T5779] Memory failure: 0x13637d: recovery action for dirty LRU page: Recovered [ 75.481474][ T5779] Injecting memory failure for pfn 0x13637e at process virtual address 0x20b24000 [ 75.481495][ T5779] Memory failure: 0x13637e: recovery action for dirty LRU page: Recovered [ 75.481502][ T5779] Injecting memory failure for pfn 0x13637f at process virtual address 0x20b25000 [ 75.481525][ T5779] Memory failure: 0x13637f: recovery action for dirty LRU page: Recovered [ 75.481532][ T5779] Injecting memory failure for pfn 0x137100 at process virtual address 0x20b26000 [ 75.481554][ T5779] Memory failure: 0x137100: recovery action for dirty LRU page: Recovered [ 75.481561][ T5779] Injecting memory failure for pfn 0x137101 at process virtual address 0x20b27000 [ 75.481583][ T5779] Memory failure: 0x137101: recovery action for dirty LRU page: Recovered [ 75.481590][ T5779] Injecting memory failure for pfn 0x137102 at process virtual address 0x20b28000 [ 75.481611][ T5779] Memory failure: 0x137102: recovery action for dirty LRU page: Recovered [ 75.481618][ T5779] Injecting memory failure for pfn 0x137103 at process virtual address 0x20b29000 [ 75.481639][ T5779] Memory failure: 0x137103: recovery action for dirty LRU page: Recovered [ 75.481647][ T5779] Injecting memory failure for pfn 0x137104 at process virtual address 0x20b2a000 [ 75.481668][ T5779] Memory failure: 0x137104: recovery action for dirty LRU page: Recovered [ 75.481675][ T5779] Injecting memory failure for pfn 0x137105 at process virtual address 0x20b2b000 [ 75.481697][ T5779] Memory failure: 0x137105: recovery action for dirty LRU page: Recovered [ 75.481704][ T5779] Injecting memory failure for pfn 0x137106 at process virtual address 0x20b2c000 [ 75.481726][ T5779] Memory failure: 0x137106: recovery action for dirty LRU page: Recovered [ 75.481732][ T5779] Injecting memory failure for pfn 0x137107 at process virtual address 0x20b2d000 [ 75.481759][ T5779] Memory failure: 0x137107: recovery action for dirty LRU page: Recovered [ 75.481766][ T5779] Injecting memory failure for pfn 0x137108 at process virtual address 0x20b2e000 [ 75.481788][ T5779] Memory failure: 0x137108: recovery action for dirty LRU page: Recovered [ 75.481795][ T5779] Injecting memory failure for pfn 0x137109 at process virtual address 0x20b2f000 [ 75.481818][ T5779] Memory failure: 0x137109: recovery action for dirty LRU page: Recovered [ 75.481825][ T5779] Injecting memory failure for pfn 0x13710a at process virtual address 0x20b30000 [ 75.481848][ T5779] Memory failure: 0x13710a: recovery action for dirty LRU page: Recovered [ 75.481854][ T5779] Injecting memory failure for pfn 0x13710b at process virtual address 0x20b31000 [ 75.481877][ T5779] Memory failure: 0x13710b: recovery action for dirty LRU page: Recovered [ 75.481884][ T5779] Injecting memory failure for pfn 0x13710c at process virtual address 0x20b32000 [ 75.481906][ T5779] Memory failure: 0x13710c: recovery action for dirty LRU page: Recovered [ 75.481913][ T5779] Injecting memory failure for pfn 0x13710d at process virtual address 0x20b33000 [ 75.481935][ T5779] Memory failure: 0x13710d: recovery action for dirty LRU page: Recovered [ 75.481942][ T5779] Injecting memory failure for pfn 0x13710e at process virtual address 0x20b34000 [ 75.481966][ T5779] Memory failure: 0x13710e: recovery action for dirty LRU page: Recovered [ 75.481973][ T5779] Injecting memory failure for pfn 0x13710f at process virtual address 0x20b35000 [ 75.481996][ T5779] Memory failure: 0x13710f: recovery action for dirty LRU page: Recovered [ 75.482003][ T5779] Injecting memory failure for pfn 0x138968 at process virtual address 0x20b36000 [ 75.482028][ T5779] Memory failure: 0x138968: recovery action for dirty LRU page: Recovered [ 75.482036][ T5779] Injecting memory failure for pfn 0x138969 at process virtual address 0x20b37000 [ 75.482065][ T5779] Memory failure: 0x138969: recovery action for dirty LRU page: Recovered [ 75.482072][ T5779] Injecting memory failure for pfn 0x13896a at process virtual address 0x20b38000 [ 75.482094][ T5779] Memory failure: 0x13896a: recovery action for dirty LRU page: Recovered [ 75.482102][ T5779] Injecting memory failure for pfn 0x13896b at process virtual address 0x20b39000 [ 75.482124][ T5779] Memory failure: 0x13896b: recovery action for dirty LRU page: Recovered [ 75.482131][ T5779] Injecting memory failure for pfn 0x13896c at process virtual address 0x20b3a000 [ 75.482153][ T5779] Memory failure: 0x13896c: recovery action for dirty LRU page: Recovered [ 75.482160][ T5779] Injecting memory failure for pfn 0x13896d at process virtual address 0x20b3b000 [ 75.482182][ T5779] Memory failure: 0x13896d: recovery action for dirty LRU page: Recovered [ 75.482191][ T5779] Injecting memory failure for pfn 0x13896e at process virtual address 0x20b3c000 [ 75.482218][ T5779] Memory failure: 0x13896e: recovery action for dirty LRU page: Recovered [ 75.482227][ T5779] Injecting memory failure for pfn 0x13896f at process virtual address 0x20b3d000 [ 75.482252][ T5779] Memory failure: 0x13896f: recovery action for dirty LRU page: Recovered [ 75.482260][ T5779] Injecting memory failure for pfn 0x136e90 at process virtual address 0x20b3e000 [ 75.482282][ T5779] Memory failure: 0x136e90: recovery action for dirty LRU page: Recovered [ 75.482289][ T5779] Injecting memory failure for pfn 0x136e91 at process virtual address 0x20b3f000 [ 75.482311][ T5779] Memory failure: 0x136e91: recovery action for dirty LRU page: Recovered [ 75.482318][ T5779] Injecting memory failure for pfn 0x136e92 at process virtual address 0x20b40000 [ 75.482340][ T5779] Memory failure: 0x136e92: recovery action for dirty LRU page: Recovered [ 75.482347][ T5779] Injecting memory failure for pfn 0x136e93 at process virtual address 0x20b41000 [ 75.482369][ T5779] Memory failure: 0x136e93: recovery action for dirty LRU page: Recovered [ 75.482376][ T5779] Injecting memory failure for pfn 0x136e94 at process virtual address 0x20b42000 [ 75.482398][ T5779] Memory failure: 0x136e94: recovery action for dirty LRU page: Recovered [ 75.482405][ T5779] Injecting memory failure for pfn 0x136e95 at process virtual address 0x20b43000 [ 75.482426][ T5779] Memory failure: 0x136e95: recovery action for dirty LRU page: Recovered [ 75.482433][ T5779] Injecting memory failure for pfn 0x136e96 at process virtual address 0x20b44000 [ 75.482457][ T5779] Memory failure: 0x136e96: recovery action for dirty LRU page: Recovered [ 75.482463][ T5779] Injecting memory failure for pfn 0x136e97 at process virtual address 0x20b45000 [ 75.482486][ T5779] Memory failure: 0x136e97: recovery action for dirty LRU page: Recovered [ 75.482492][ T5779] Injecting memory failure for pfn 0x136e98 at process virtual address 0x20b46000 [ 75.484907][ T5779] Memory failure: 0x136e98: recovery action for dirty LRU page: Recovered [ 75.484918][ T5779] Injecting memory failure for pfn 0x136e99 at process virtual address 0x20b47000 [ 75.485055][ T5779] Memory failure: 0x136e99: recovery action for dirty LRU page: Recovered [ 75.485064][ T5779] Injecting memory failure for pfn 0x136e9a at process virtual address 0x20b48000 [ 75.485088][ T5779] Memory failure: 0x136e9a: recovery action for dirty LRU page: Recovered [ 75.485096][ T5779] Injecting memory failure for pfn 0x136e9b at process virtual address 0x20b49000 [ 75.485119][ T5779] Memory failure: 0x136e9b: recovery action for dirty LRU page: Recovered [ 75.485126][ T5779] Injecting memory failure for pfn 0x136e9c at process virtual address 0x20b4a000 [ 75.485149][ T5779] Memory failure: 0x136e9c: recovery action for dirty LRU page: Recovered [ 75.485157][ T5779] Injecting memory failure for pfn 0x136e9d at process virtual address 0x20b4b000 [ 75.485180][ T5779] Memory failure: 0x136e9d: recovery action for dirty LRU page: Recovered [ 75.485191][ T5779] Injecting memory failure for pfn 0x136e9e at process virtual address 0x20b4c000 [ 75.485220][ T5779] Memory failure: 0x136e9e: recovery action for dirty LRU page: Recovered [ 75.485229][ T5779] Injecting memory failure for pfn 0x136e9f at process virtual address 0x20b4d000 [ 75.485257][ T5779] Memory failure: 0x136e9f: recovery action for dirty LRU page: Recovered [ 75.485264][ T5779] Injecting memory failure for pfn 0x136bd0 at process virtual address 0x20b4e000 [ 75.485287][ T5779] Memory failure: 0x136bd0: recovery action for dirty LRU page: Recovered [ 75.485294][ T5779] Injecting memory failure for pfn 0x136bd1 at process virtual address 0x20b4f000 [ 75.485316][ T5779] Memory failure: 0x136bd1: recovery action for dirty LRU page: Recovered [ 75.485323][ T5779] Injecting memory failure for pfn 0x136bd2 at process virtual address 0x20b50000 [ 75.485346][ T5779] Memory failure: 0x136bd2: recovery action for dirty LRU page: Recovered [ 75.485353][ T5779] Injecting memory failure for pfn 0x136bd3 at process virtual address 0x20b51000 [ 75.485375][ T5779] Memory failure: 0x136bd3: recovery action for dirty LRU page: Recovered [ 75.485382][ T5779] Injecting memory failure for pfn 0x136bd4 at process virtual address 0x20b52000 [ 75.485404][ T5779] Memory failure: 0x136bd4: recovery action for dirty LRU page: Recovered [ 75.485411][ T5779] Injecting memory failure for pfn 0x136bd5 at process virtual address 0x20b53000 [ 75.485434][ T5779] Memory failure: 0x136bd5: recovery action for dirty LRU page: Recovered [ 75.485441][ T5779] Injecting memory failure for pfn 0x136bd6 at process virtual address 0x20b54000 [ 75.485463][ T5779] Memory failure: 0x136bd6: recovery action for dirty LRU page: Recovered [ 75.485470][ T5779] Injecting memory failure for pfn 0x136bd7 at process virtual address 0x20b55000 [ 75.485492][ T5779] Memory failure: 0x136bd7: recovery action for dirty LRU page: Recovered [ 75.485499][ T5779] Injecting memory failure for pfn 0x136bd8 at process virtual address 0x20b56000 [ 75.485520][ T5779] Memory failure: 0x136bd8: recovery action for dirty LRU page: Recovered [ 75.485527][ T5779] Injecting memory failure for pfn 0x136bd9 at process virtual address 0x20b57000 [ 75.485550][ T5779] Memory failure: 0x136bd9: recovery action for dirty LRU page: Recovered [ 75.485557][ T5779] Injecting memory failure for pfn 0x136bda at process virtual address 0x20b58000 [ 75.485578][ T5779] Memory failure: 0x136bda: recovery action for dirty LRU page: Recovered [ 75.485585][ T5779] Injecting memory failure for pfn 0x136bdb at process virtual address 0x20b59000 [ 75.485607][ T5779] Memory failure: 0x136bdb: recovery action for dirty LRU page: Recovered [ 75.485613][ T5779] Injecting memory failure for pfn 0x136bdc at process virtual address 0x20b5a000 [ 75.485635][ T5779] Memory failure: 0x136bdc: recovery action for dirty LRU page: Recovered [ 75.485642][ T5779] Injecting memory failure for pfn 0x136bdd at process virtual address 0x20b5b000 [ 75.485663][ T5779] Memory failure: 0x136bdd: recovery action for dirty LRU page: Recovered [ 75.485670][ T5779] Injecting memory failure for pfn 0x136bde at process virtual address 0x20b5c000 [ 75.485691][ T5779] Memory failure: 0x136bde: recovery action for dirty LRU page: Recovered [ 75.485698][ T5779] Injecting memory failure for pfn 0x136bdf at process virtual address 0x20b5d000 [ 75.485719][ T5779] Memory failure: 0x136bdf: recovery action for dirty LRU page: Recovered [ 75.485726][ T5779] Injecting memory failure for pfn 0x1219d0 at process virtual address 0x20b5e000 [ 75.485748][ T5779] Memory failure: 0x1219d0: recovery action for dirty LRU page: Recovered [ 75.485755][ T5779] Injecting memory failure for pfn 0x1219d1 at process virtual address 0x20b5f000 [ 75.485778][ T5779] Memory failure: 0x1219d1: recovery action for dirty LRU page: Recovered [ 75.485785][ T5779] Injecting memory failure for pfn 0x1219d2 at process virtual address 0x20b60000 [ 75.486020][ T5779] Memory failure: 0x1219d2: recovery action for dirty LRU page: Recovered [ 75.486029][ T5779] Injecting memory failure for pfn 0x1219d3 at process virtual address 0x20b61000 [ 75.486059][ T5779] Memory failure: 0x1219d3: recovery action for dirty LRU page: Recovered [ 75.486066][ T5779] Injecting memory failure for pfn 0x1219d4 at process virtual address 0x20b62000 [ 75.486088][ T5779] Memory failure: 0x1219d4: recovery action for dirty LRU page: Recovered [ 75.486095][ T5779] Injecting memory failure for pfn 0x1219d5 at process virtual address 0x20b63000 [ 75.486118][ T5779] Memory failure: 0x1219d5: recovery action for dirty LRU page: Recovered [ 75.486125][ T5779] Injecting memory failure for pfn 0x1219d6 at process virtual address 0x20b64000 [ 75.486146][ T5779] Memory failure: 0x1219d6: recovery action for dirty LRU page: Recovered [ 75.486153][ T5779] Injecting memory failure for pfn 0x1219d7 at process virtual address 0x20b65000 [ 75.486174][ T5779] Memory failure: 0x1219d7: recovery action for dirty LRU page: Recovered [ 75.486181][ T5779] Injecting memory failure for pfn 0x1219d8 at process virtual address 0x20b66000 [ 75.486208][ T5779] Memory failure: 0x1219d8: recovery action for dirty LRU page: Recovered [ 75.486215][ T5779] Injecting memory failure for pfn 0x1219d9 at process virtual address 0x20b67000 [ 75.486236][ T5779] Memory failure: 0x1219d9: recovery action for dirty LRU page: Recovered [ 75.486244][ T5779] Injecting memory failure for pfn 0x1219da at process virtual address 0x20b68000 [ 75.486265][ T5779] Memory failure: 0x1219da: recovery action for dirty LRU page: Recovered [ 75.486272][ T5779] Injecting memory failure for pfn 0x1219db at process virtual address 0x20b69000 [ 75.486294][ T5779] Memory failure: 0x1219db: recovery action for dirty LRU page: Recovered [ 75.486301][ T5779] Injecting memory failure for pfn 0x1219dc at process virtual address 0x20b6a000 [ 75.486322][ T5779] Memory failure: 0x1219dc: recovery action for dirty LRU page: Recovered [ 75.486329][ T5779] Injecting memory failure for pfn 0x1219dd at process virtual address 0x20b6b000 [ 75.486350][ T5779] Memory failure: 0x1219dd: recovery action for dirty LRU page: Recovered [ 75.486357][ T5779] Injecting memory failure for pfn 0x1219de at process virtual address 0x20b6c000 [ 75.486379][ T5779] Memory failure: 0x1219de: recovery action for dirty LRU page: Recovered [ 75.486386][ T5779] Injecting memory failure for pfn 0x1219df at process virtual address 0x20b6d000 [ 75.486408][ T5779] Memory failure: 0x1219df: recovery action for dirty LRU page: Recovered [ 75.486415][ T5779] Injecting memory failure for pfn 0x138aa0 at process virtual address 0x20b6e000 [ 75.486437][ T5779] Memory failure: 0x138aa0: recovery action for dirty LRU page: Recovered [ 75.486444][ T5779] Injecting memory failure for pfn 0x138aa1 at process virtual address 0x20b6f000 [ 75.486466][ T5779] Memory failure: 0x138aa1: recovery action for dirty LRU page: Recovered [ 75.486473][ T5779] Injecting memory failure for pfn 0x138aa2 at process virtual address 0x20b70000 [ 75.486494][ T5779] Memory failure: 0x138aa2: recovery action for dirty LRU page: Recovered [ 75.486501][ T5779] Injecting memory failure for pfn 0x138aa3 at process virtual address 0x20b71000 [ 75.486523][ T5779] Memory failure: 0x138aa3: recovery action for dirty LRU page: Recovered [ 75.486530][ T5779] Injecting memory failure for pfn 0x138aa4 at process virtual address 0x20b72000 [ 75.486551][ T5779] Memory failure: 0x138aa4: recovery action for dirty LRU page: Recovered [ 75.486558][ T5779] Injecting memory failure for pfn 0x138aa5 at process virtual address 0x20b73000 [ 75.486580][ T5779] Memory failure: 0x138aa5: recovery action for dirty LRU page: Recovered [ 75.486587][ T5779] Injecting memory failure for pfn 0x138aa6 at process virtual address 0x20b74000 [ 75.486608][ T5779] Memory failure: 0x138aa6: recovery action for dirty LRU page: Recovered [ 75.486615][ T5779] Injecting memory failure for pfn 0x138aa7 at process virtual address 0x20b75000 [ 75.486637][ T5779] Memory failure: 0x138aa7: recovery action for dirty LRU page: Recovered [ 75.486644][ T5779] Injecting memory failure for pfn 0x138aa8 at process virtual address 0x20b76000 [ 75.486666][ T5779] Memory failure: 0x138aa8: recovery action for dirty LRU page: Recovered [ 75.486672][ T5779] Injecting memory failure for pfn 0x138aa9 at process virtual address 0x20b77000 [ 75.486701][ T5779] Memory failure: 0x138aa9: recovery action for dirty LRU page: Recovered [ 75.486708][ T5779] Injecting memory failure for pfn 0x138aaa at process virtual address 0x20b78000 [ 75.486733][ T5779] Memory failure: 0x138aaa: recovery action for dirty LRU page: Recovered [ 75.486740][ T5779] Injecting memory failure for pfn 0x138aab at process virtual address 0x20b79000 [ 75.486767][ T5779] Memory failure: 0x138aab: recovery action for dirty LRU page: Recovered [ 75.486774][ T5779] Injecting memory failure for pfn 0x138aac at process virtual address 0x20b7a000 [ 75.486803][ T5779] Memory failure: 0x138aac: recovery action for dirty LRU page: Recovered [ 75.486810][ T5779] Injecting memory failure for pfn 0x138aad at process virtual address 0x20b7b000 [ 75.486839][ T5779] Memory failure: 0x138aad: recovery action for dirty LRU page: Recovered [ 75.486846][ T5779] Injecting memory failure for pfn 0x138aae at process virtual address 0x20b7c000 [ 75.486874][ T5779] Memory failure: 0x138aae: recovery action for dirty LRU page: Recovered [ 75.486881][ T5779] Injecting memory failure for pfn 0x138aaf at process virtual address 0x20b7d000 [ 75.486909][ T5779] Memory failure: 0x138aaf: recovery action for dirty LRU page: Recovered [ 75.486916][ T5779] Injecting memory failure for pfn 0x1216a0 at process virtual address 0x20b7e000 [ 75.486945][ T5779] Memory failure: 0x1216a0: recovery action for dirty LRU page: Recovered [ 75.486952][ T5779] Injecting memory failure for pfn 0x1216a1 at process virtual address 0x20b7f000 [ 75.486973][ T5779] Memory failure: 0x1216a1: recovery action for dirty LRU page: Recovered [ 75.486980][ T5779] Injecting memory failure for pfn 0x1216a2 at process virtual address 0x20b80000 [ 75.487003][ T5779] Memory failure: 0x1216a2: recovery action for dirty LRU page: Recovered [ 75.487010][ T5779] Injecting memory failure for pfn 0x1216a3 at process virtual address 0x20b81000 [ 75.487031][ T5779] Memory failure: 0x1216a3: recovery action for dirty LRU page: Recovered [ 75.487038][ T5779] Injecting memory failure for pfn 0x1216a4 at process virtual address 0x20b82000 [ 75.487060][ T5779] Memory failure: 0x1216a4: recovery action for dirty LRU page: Recovered [ 75.487067][ T5779] Injecting memory failure for pfn 0x1216a5 at process virtual address 0x20b83000 [ 75.487088][ T5779] Memory failure: 0x1216a5: recovery action for dirty LRU page: Recovered [ 75.487095][ T5779] Injecting memory failure for pfn 0x1216a6 at process virtual address 0x20b84000 [ 75.487117][ T5779] Memory failure: 0x1216a6: recovery action for dirty LRU page: Recovered [ 75.487124][ T5779] Injecting memory failure for pfn 0x1216a7 at process virtual address 0x20b85000 [ 75.487145][ T5779] Memory failure: 0x1216a7: recovery action for dirty LRU page: Recovered [ 75.487152][ T5779] Injecting memory failure for pfn 0x1216a8 at process virtual address 0x20b86000 [ 75.487175][ T5779] Memory failure: 0x1216a8: recovery action for dirty LRU page: Recovered [ 75.487182][ T5779] Injecting memory failure for pfn 0x1216a9 at process virtual address 0x20b87000 [ 75.487208][ T5779] Memory failure: 0x1216a9: recovery action for dirty LRU page: Recovered [ 75.487215][ T5779] Injecting memory failure for pfn 0x1216aa at process virtual address 0x20b88000 [ 75.487243][ T5779] Memory failure: 0x1216aa: recovery action for dirty LRU page: Recovered [ 75.487249][ T5779] Injecting memory failure for pfn 0x1216ab at process virtual address 0x20b89000 [ 75.487275][ T5779] Memory failure: 0x1216ab: recovery action for dirty LRU page: Recovered [ 75.487283][ T5779] Injecting memory failure for pfn 0x1216ac at process virtual address 0x20b8a000 [ 75.487304][ T5779] Memory failure: 0x1216ac: recovery action for dirty LRU page: Recovered [ 75.487311][ T5779] Injecting memory failure for pfn 0x1216ad at process virtual address 0x20b8b000 [ 75.487333][ T5779] Memory failure: 0x1216ad: recovery action for dirty LRU page: Recovered [ 75.487340][ T5779] Injecting memory failure for pfn 0x1216ae at process virtual address 0x20b8c000 [ 75.487361][ T5779] Memory failure: 0x1216ae: recovery action for dirty LRU page: Recovered [ 75.487368][ T5779] Injecting memory failure for pfn 0x1216af at process virtual address 0x20b8d000 [ 75.487390][ T5779] Memory failure: 0x1216af: recovery action for dirty LRU page: Recovered [ 75.487397][ T5779] Injecting memory failure for pfn 0x137db0 at process virtual address 0x20b8e000 [ 75.487420][ T5779] Memory failure: 0x137db0: recovery action for dirty LRU page: Recovered [ 75.487427][ T5779] Injecting memory failure for pfn 0x137db1 at process virtual address 0x20b8f000 [ 75.487448][ T5779] Memory failure: 0x137db1: recovery action for dirty LRU page: Recovered [ 75.487456][ T5779] Injecting memory failure for pfn 0x137db2 at process virtual address 0x20b90000 [ 75.487477][ T5779] Memory failure: 0x137db2: recovery action for dirty LRU page: Recovered [ 75.487484][ T5779] Injecting memory failure for pfn 0x137db3 at process virtual address 0x20b91000 [ 75.487506][ T5779] Memory failure: 0x137db3: recovery action for dirty LRU page: Recovered [ 75.487513][ T5779] Injecting memory failure for pfn 0x137db4 at process virtual address 0x20b92000 [ 75.487534][ T5779] Memory failure: 0x137db4: recovery action for dirty LRU page: Recovered [ 75.487541][ T5779] Injecting memory failure for pfn 0x137db5 at process virtual address 0x20b93000 [ 75.487563][ T5779] Memory failure: 0x137db5: recovery action for dirty LRU page: Recovered [ 75.487570][ T5779] Injecting memory failure for pfn 0x137db6 at process virtual address 0x20b94000 [ 75.487591][ T5779] Memory failure: 0x137db6: recovery action for dirty LRU page: Recovered [ 75.487598][ T5779] Injecting memory failure for pfn 0x137db7 at process virtual address 0x20b95000 [ 75.487620][ T5779] Memory failure: 0x137db7: recovery action for dirty LRU page: Recovered [ 75.487627][ T5779] Injecting memory failure for pfn 0x137db8 at process virtual address 0x20b96000 [ 75.487649][ T5779] Memory failure: 0x137db8: recovery action for dirty LRU page: Recovered [ 75.487656][ T5779] Injecting memory failure for pfn 0x137db9 at process virtual address 0x20b97000 [ 75.487678][ T5779] Memory failure: 0x137db9: recovery action for dirty LRU page: Recovered [ 75.487685][ T5779] Injecting memory failure for pfn 0x137dba at process virtual address 0x20b98000 [ 75.487707][ T5779] Memory failure: 0x137dba: recovery action for dirty LRU page: Recovered [ 75.487714][ T5779] Injecting memory failure for pfn 0x137dbb at process virtual address 0x20b99000 [ 75.487736][ T5779] Memory failure: 0x137dbb: recovery action for dirty LRU page: Recovered [ 75.487743][ T5779] Injecting memory failure for pfn 0x137dbc at process virtual address 0x20b9a000 [ 75.487764][ T5779] Memory failure: 0x137dbc: recovery action for dirty LRU page: Recovered [ 75.487771][ T5779] Injecting memory failure for pfn 0x137dbd at process virtual address 0x20b9b000 [ 75.487793][ T5779] Memory failure: 0x137dbd: recovery action for dirty LRU page: Recovered [ 75.487800][ T5779] Injecting memory failure for pfn 0x137dbe at process virtual address 0x20b9c000 [ 75.487823][ T5779] Memory failure: 0x137dbe: recovery action for dirty LRU page: Recovered [ 75.487830][ T5779] Injecting memory failure for pfn 0x137dbf at process virtual address 0x20b9d000 [ 75.487852][ T5779] Memory failure: 0x137dbf: recovery action for dirty LRU page: Recovered [ 75.487859][ T5779] Injecting memory failure for pfn 0x1345f0 at process virtual address 0x20b9e000 [ 75.487881][ T5779] Memory failure: 0x1345f0: recovery action for dirty LRU page: Recovered [ 75.487888][ T5779] Injecting memory failure for pfn 0x1345f1 at process virtual address 0x20b9f000 [ 75.487909][ T5779] Memory failure: 0x1345f1: recovery action for dirty LRU page: Recovered [ 75.487916][ T5779] Injecting memory failure for pfn 0x1345f2 at process virtual address 0x20ba0000 [ 75.487939][ T5779] Memory failure: 0x1345f2: recovery action for dirty LRU page: Recovered [ 75.487946][ T5779] Injecting memory failure for pfn 0x1345f3 at process virtual address 0x20ba1000 [ 75.487968][ T5779] Memory failure: 0x1345f3: recovery action for dirty LRU page: Recovered [ 75.487976][ T5779] Injecting memory failure for pfn 0x1345f4 at process virtual address 0x20ba2000 [ 75.487998][ T5779] Memory failure: 0x1345f4: recovery action for dirty LRU page: Recovered [ 75.488005][ T5779] Injecting memory failure for pfn 0x1345f5 at process virtual address 0x20ba3000 [ 75.488026][ T5779] Memory failure: 0x1345f5: recovery action for dirty LRU page: Recovered [ 75.488033][ T5779] Injecting memory failure for pfn 0x1345f6 at process virtual address 0x20ba4000 [ 75.488055][ T5779] Memory failure: 0x1345f6: recovery action for dirty LRU page: Recovered [ 75.488062][ T5779] Injecting memory failure for pfn 0x1345f7 at process virtual address 0x20ba5000 [ 75.488084][ T5779] Memory failure: 0x1345f7: recovery action for dirty LRU page: Recovered [ 75.488091][ T5779] Injecting memory failure for pfn 0x1345f8 at process virtual address 0x20ba6000 [ 75.488113][ T5779] Memory failure: 0x1345f8: recovery action for dirty LRU page: Recovered [ 75.488120][ T5779] Injecting memory failure for pfn 0x1345f9 at process virtual address 0x20ba7000 [ 75.488141][ T5779] Memory failure: 0x1345f9: recovery action for dirty LRU page: Recovered [ 75.488148][ T5779] Injecting memory failure for pfn 0x1345fa at process virtual address 0x20ba8000 [ 75.488169][ T5779] Memory failure: 0x1345fa: recovery action for dirty LRU page: Recovered [ 75.488176][ T5779] Injecting memory failure for pfn 0x1345fb at process virtual address 0x20ba9000 [ 75.488201][ T5779] Memory failure: 0x1345fb: recovery action for dirty LRU page: Recovered [ 75.488208][ T5779] Injecting memory failure for pfn 0x1345fc at process virtual address 0x20baa000 [ 75.488230][ T5779] Memory failure: 0x1345fc: recovery action for dirty LRU page: Recovered [ 75.488237][ T5779] Injecting memory failure for pfn 0x1345fd at process virtual address 0x20bab000 [ 75.488258][ T5779] Memory failure: 0x1345fd: recovery action for dirty LRU page: Recovered [ 75.488265][ T5779] Injecting memory failure for pfn 0x1345fe at process virtual address 0x20bac000 [ 75.488288][ T5779] Memory failure: 0x1345fe: recovery action for dirty LRU page: Recovered [ 75.488295][ T5779] Injecting memory failure for pfn 0x1345ff at process virtual address 0x20bad000 [ 75.488317][ T5779] Memory failure: 0x1345ff: recovery action for dirty LRU page: Recovered [ 75.488324][ T5779] Injecting memory failure for pfn 0x1380b0 at process virtual address 0x20bae000 [ 75.488345][ T5779] Memory failure: 0x1380b0: recovery action for dirty LRU page: Recovered [ 75.488352][ T5779] Injecting memory failure for pfn 0x1380b1 at process virtual address 0x20baf000 [ 75.488374][ T5779] Memory failure: 0x1380b1: recovery action for dirty LRU page: Recovered [ 75.488381][ T5779] Injecting memory failure for pfn 0x1380b2 at process virtual address 0x20bb0000 [ 75.488403][ T5779] Memory failure: 0x1380b2: recovery action for dirty LRU page: Recovered [ 75.488410][ T5779] Injecting memory failure for pfn 0x1380b3 at process virtual address 0x20bb1000 [ 75.488432][ T5779] Memory failure: 0x1380b3: recovery action for dirty LRU page: Recovered [ 75.488440][ T5779] Injecting memory failure for pfn 0x1380b4 at process virtual address 0x20bb2000 [ 75.488461][ T5779] Memory failure: 0x1380b4: recovery action for dirty LRU page: Recovered [ 75.488468][ T5779] Injecting memory failure for pfn 0x1380b5 at process virtual address 0x20bb3000 [ 75.488489][ T5779] Memory failure: 0x1380b5: recovery action for dirty LRU page: Recovered [ 75.488496][ T5779] Injecting memory failure for pfn 0x1380b6 at process virtual address 0x20bb4000 [ 75.488518][ T5779] Memory failure: 0x1380b6: recovery action for dirty LRU page: Recovered [ 75.488525][ T5779] Injecting memory failure for pfn 0x1380b7 at process virtual address 0x20bb5000 [ 75.488546][ T5779] Memory failure: 0x1380b7: recovery action for dirty LRU page: Recovered [ 75.488553][ T5779] Injecting memory failure for pfn 0x1380b8 at process virtual address 0x20bb6000 [ 75.488575][ T5779] Memory failure: 0x1380b8: recovery action for dirty LRU page: Recovered [ 75.488581][ T5779] Injecting memory failure for pfn 0x1380b9 at process virtual address 0x20bb7000 [ 75.488603][ T5779] Memory failure: 0x1380b9: recovery action for dirty LRU page: Recovered [ 75.488610][ T5779] Injecting memory failure for pfn 0x1380ba at process virtual address 0x20bb8000 [ 75.488631][ T5779] Memory failure: 0x1380ba: recovery action for dirty LRU page: Recovered [ 75.488638][ T5779] Injecting memory failure for pfn 0x1380bb at process virtual address 0x20bb9000 [ 75.488660][ T5779] Memory failure: 0x1380bb: recovery action for dirty LRU page: Recovered [ 75.488667][ T5779] Injecting memory failure for pfn 0x1380bc at process virtual address 0x20bba000 [ 75.488688][ T5779] Memory failure: 0x1380bc: recovery action for dirty LRU page: Recovered [ 75.488696][ T5779] Injecting memory failure for pfn 0x1380bd at process virtual address 0x20bbb000 [ 75.488717][ T5779] Memory failure: 0x1380bd: recovery action for dirty LRU page: Recovered [ 75.488724][ T5779] Injecting memory failure for pfn 0x1380be at process virtual address 0x20bbc000 [ 75.488746][ T5779] Memory failure: 0x1380be: recovery action for dirty LRU page: Recovered [ 75.488754][ T5779] Injecting memory failure for pfn 0x1380bf at process virtual address 0x20bbd000 [ 75.488775][ T5779] Memory failure: 0x1380bf: recovery action for dirty LRU page: Recovered [ 75.488782][ T5779] Injecting memory failure for pfn 0x1384e0 at process virtual address 0x20bbe000 [ 75.488805][ T5779] Memory failure: 0x1384e0: recovery action for dirty LRU page: Recovered [ 75.488812][ T5779] Injecting memory failure for pfn 0x1384e1 at process virtual address 0x20bbf000 [ 75.488834][ T5779] Memory failure: 0x1384e1: recovery action for dirty LRU page: Recovered [ 75.488841][ T5779] Injecting memory failure for pfn 0x1384e2 at process virtual address 0x20bc0000 [ 75.488864][ T5779] Memory failure: 0x1384e2: recovery action for dirty LRU page: Recovered [ 75.488871][ T5779] Injecting memory failure for pfn 0x1384e3 at process virtual address 0x20bc1000 [ 75.488893][ T5779] Memory failure: 0x1384e3: recovery action for dirty LRU page: Recovered [ 75.488900][ T5779] Injecting memory failure for pfn 0x1384e4 at process virtual address 0x20bc2000 [ 75.488922][ T5779] Memory failure: 0x1384e4: recovery action for dirty LRU page: Recovered [ 75.488929][ T5779] Injecting memory failure for pfn 0x1384e5 at process virtual address 0x20bc3000 [ 75.488951][ T5779] Memory failure: 0x1384e5: recovery action for dirty LRU page: Recovered [ 75.488958][ T5779] Injecting memory failure for pfn 0x1384e6 at process virtual address 0x20bc4000 [ 75.488979][ T5779] Memory failure: 0x1384e6: recovery action for dirty LRU page: Recovered [ 75.488986][ T5779] Injecting memory failure for pfn 0x1384e7 at process virtual address 0x20bc5000 [ 75.489010][ T5779] Memory failure: 0x1384e7: recovery action for dirty LRU page: Recovered [ 75.489017][ T5779] Injecting memory failure for pfn 0x1384e8 at process virtual address 0x20bc6000 [ 75.489038][ T5779] Memory failure: 0x1384e8: recovery action for dirty LRU page: Recovered [ 75.489045][ T5779] Injecting memory failure for pfn 0x1384e9 at process virtual address 0x20bc7000 [ 75.489067][ T5779] Memory failure: 0x1384e9: recovery action for dirty LRU page: Recovered [ 75.489074][ T5779] Injecting memory failure for pfn 0x1384ea at process virtual address 0x20bc8000 [ 75.489095][ T5779] Memory failure: 0x1384ea: recovery action for dirty LRU page: Recovered [ 75.489102][ T5779] Injecting memory failure for pfn 0x1384eb at process virtual address 0x20bc9000 [ 75.489124][ T5779] Memory failure: 0x1384eb: recovery action for dirty LRU page: Recovered [ 75.489131][ T5779] Injecting memory failure for pfn 0x1384ec at process virtual address 0x20bca000 [ 75.489153][ T5779] Memory failure: 0x1384ec: recovery action for dirty LRU page: Recovered [ 75.489160][ T5779] Injecting memory failure for pfn 0x1384ed at process virtual address 0x20bcb000 [ 75.489181][ T5779] Memory failure: 0x1384ed: recovery action for dirty LRU page: Recovered [ 75.489191][ T5779] Injecting memory failure for pfn 0x1384ee at process virtual address 0x20bcc000 [ 75.489213][ T5779] Memory failure: 0x1384ee: recovery action for dirty LRU page: Recovered [ 75.489220][ T5779] Injecting memory failure for pfn 0x1384ef at process virtual address 0x20bcd000 [ 75.489241][ T5779] Memory failure: 0x1384ef: recovery action for dirty LRU page: Recovered [ 75.489249][ T5779] Injecting memory failure for pfn 0x1376c0 at process virtual address 0x20bce000 [ 75.489270][ T5779] Memory failure: 0x1376c0: recovery action for dirty LRU page: Recovered [ 75.489277][ T5779] Injecting memory failure for pfn 0x1376c1 at process virtual address 0x20bcf000 [ 75.489298][ T5779] Memory failure: 0x1376c1: recovery action for dirty LRU page: Recovered [ 75.489305][ T5779] Injecting memory failure for pfn 0x1376c2 at process virtual address 0x20bd0000 [ 75.489326][ T5779] Memory failure: 0x1376c2: recovery action for dirty LRU page: Recovered [ 75.489333][ T5779] Injecting memory failure for pfn 0x1376c3 at process virtual address 0x20bd1000 [ 75.489355][ T5779] Memory failure: 0x1376c3: recovery action for dirty LRU page: Recovered [ 75.489362][ T5779] Injecting memory failure for pfn 0x1376c4 at process virtual address 0x20bd2000 [ 75.489383][ T5779] Memory failure: 0x1376c4: recovery action for dirty LRU page: Recovered [ 75.489390][ T5779] Injecting memory failure for pfn 0x1376c5 at process virtual address 0x20bd3000 [ 75.489411][ T5779] Memory failure: 0x1376c5: recovery action for dirty LRU page: Recovered [ 75.489418][ T5779] Injecting memory failure for pfn 0x1376c6 at process virtual address 0x20bd4000 [ 75.489442][ T5779] Memory failure: 0x1376c6: recovery action for dirty LRU page: Recovered [ 75.489449][ T5779] Injecting memory failure for pfn 0x1376c7 at process virtual address 0x20bd5000 [ 75.489470][ T5779] Memory failure: 0x1376c7: recovery action for dirty LRU page: Recovered [ 75.489477][ T5779] Injecting memory failure for pfn 0x1376c8 at process virtual address 0x20bd6000 [ 75.489500][ T5779] Memory failure: 0x1376c8: recovery action for dirty LRU page: Recovered [ 75.489506][ T5779] Injecting memory failure for pfn 0x1376c9 at process virtual address 0x20bd7000 [ 75.489528][ T5779] Memory failure: 0x1376c9: recovery action for dirty LRU page: Recovered [ 75.489535][ T5779] Injecting memory failure for pfn 0x1376ca at process virtual address 0x20bd8000 [ 75.489556][ T5779] Memory failure: 0x1376ca: recovery action for dirty LRU page: Recovered [ 75.489563][ T5779] Injecting memory failure for pfn 0x1376cb at process virtual address 0x20bd9000 [ 75.489584][ T5779] Memory failure: 0x1376cb: recovery action for dirty LRU page: Recovered [ 75.489591][ T5779] Injecting memory failure for pfn 0x1376cc at process virtual address 0x20bda000 [ 75.489612][ T5779] Memory failure: 0x1376cc: recovery action for dirty LRU page: Recovered [ 75.489619][ T5779] Injecting memory failure for pfn 0x1376cd at process virtual address 0x20bdb000 [ 75.489640][ T5779] Memory failure: 0x1376cd: recovery action for dirty LRU page: Recovered [ 75.489647][ T5779] Injecting memory failure for pfn 0x1376ce at process virtual address 0x20bdc000 [ 75.489670][ T5779] Memory failure: 0x1376ce: recovery action for dirty LRU page: Recovered [ 75.489677][ T5779] Injecting memory failure for pfn 0x1376cf at process virtual address 0x20bdd000 [ 75.489698][ T5779] Memory failure: 0x1376cf: recovery action for dirty LRU page: Recovered [ 75.489705][ T5779] Injecting memory failure for pfn 0x137f30 at process virtual address 0x20bde000 [ 75.489726][ T5779] Memory failure: 0x137f30: recovery action for dirty LRU page: Recovered [ 75.489733][ T5779] Injecting memory failure for pfn 0x137f31 at process virtual address 0x20bdf000 [ 75.489754][ T5779] Memory failure: 0x137f31: recovery action for dirty LRU page: Recovered [ 75.489761][ T5779] Injecting memory failure for pfn 0x137f32 at process virtual address 0x20be0000 [ 75.489783][ T5779] Memory failure: 0x137f32: recovery action for dirty LRU page: Recovered [ 75.489790][ T5779] Injecting memory failure for pfn 0x137f33 at process virtual address 0x20be1000 [ 75.489811][ T5779] Memory failure: 0x137f33: recovery action for dirty LRU page: Recovered [ 75.489818][ T5779] Injecting memory failure for pfn 0x137f34 at process virtual address 0x20be2000 [ 75.489840][ T5779] Memory failure: 0x137f34: recovery action for dirty LRU page: Recovered [ 75.489847][ T5779] Injecting memory failure for pfn 0x137f35 at process virtual address 0x20be3000 [ 75.489868][ T5779] Memory failure: 0x137f35: recovery action for dirty LRU page: Recovered [ 75.489875][ T5779] Injecting memory failure for pfn 0x137f36 at process virtual address 0x20be4000 [ 75.489896][ T5779] Memory failure: 0x137f36: recovery action for dirty LRU page: Recovered [ 75.489903][ T5779] Injecting memory failure for pfn 0x137f37 at process virtual address 0x20be5000 [ 75.489926][ T5779] Memory failure: 0x137f37: recovery action for dirty LRU page: Recovered [ 75.489933][ T5779] Injecting memory failure for pfn 0x137f38 at process virtual address 0x20be6000 [ 75.489955][ T5779] Memory failure: 0x137f38: recovery action for dirty LRU page: Recovered [ 75.489962][ T5779] Injecting memory failure for pfn 0x137f39 at process virtual address 0x20be7000 [ 75.489983][ T5779] Memory failure: 0x137f39: recovery action for dirty LRU page: Recovered [ 75.489990][ T5779] Injecting memory failure for pfn 0x137f3a at process virtual address 0x20be8000 [ 75.490012][ T5779] Memory failure: 0x137f3a: recovery action for dirty LRU page: Recovered [ 75.490019][ T5779] Injecting memory failure for pfn 0x137f3b at process virtual address 0x20be9000 [ 75.490041][ T5779] Memory failure: 0x137f3b: recovery action for dirty LRU page: Recovered [ 75.490048][ T5779] Injecting memory failure for pfn 0x137f3c at process virtual address 0x20bea000 [ 75.490070][ T5779] Memory failure: 0x137f3c: recovery action for dirty LRU page: Recovered [ 75.490077][ T5779] Injecting memory failure for pfn 0x137f3d at process virtual address 0x20beb000 [ 75.490098][ T5779] Memory failure: 0x137f3d: recovery action for dirty LRU page: Recovered [ 75.490105][ T5779] Injecting memory failure for pfn 0x137f3e at process virtual address 0x20bec000 [ 75.490126][ T5779] Memory failure: 0x137f3e: recovery action for dirty LRU page: Recovered [ 75.490133][ T5779] Injecting memory failure for pfn 0x137f3f at process virtual address 0x20bed000 [ 75.490155][ T5779] Memory failure: 0x137f3f: recovery action for dirty LRU page: Recovered [ 75.490162][ T5779] Injecting memory failure for pfn 0x135d20 at process virtual address 0x20bee000 [ 75.490184][ T5779] Memory failure: 0x135d20: recovery action for dirty LRU page: Recovered [ 75.490194][ T5779] Injecting memory failure for pfn 0x135d21 at process virtual address 0x20bef000 [ 75.490217][ T5779] Memory failure: 0x135d21: recovery action for dirty LRU page: Recovered [ 75.490225][ T5779] Injecting memory failure for pfn 0x135d22 at process virtual address 0x20bf0000 [ 75.490246][ T5779] Memory failure: 0x135d22: recovery action for dirty LRU page: Recovered [ 75.490254][ T5779] Injecting memory failure for pfn 0x135d23 at process virtual address 0x20bf1000 [ 75.490275][ T5779] Memory failure: 0x135d23: recovery action for dirty LRU page: Recovered [ 75.490282][ T5779] Injecting memory failure for pfn 0x135d24 at process virtual address 0x20bf2000 [ 75.490304][ T5779] Memory failure: 0x135d24: recovery action for dirty LRU page: Recovered [ 75.490311][ T5779] Injecting memory failure for pfn 0x135d25 at process virtual address 0x20bf3000 [ 75.490332][ T5779] Memory failure: 0x135d25: recovery action for dirty LRU page: Recovered [ 75.490339][ T5779] Injecting memory failure for pfn 0x135d26 at process virtual address 0x20bf4000 [ 75.490361][ T5779] Memory failure: 0x135d26: recovery action for dirty LRU page: Recovered [ 75.490368][ T5779] Injecting memory failure for pfn 0x135d27 at process virtual address 0x20bf5000 [ 75.490390][ T5779] Memory failure: 0x135d27: recovery action for dirty LRU page: Recovered [ 75.490397][ T5779] Injecting memory failure for pfn 0x135d28 at process virtual address 0x20bf6000 [ 75.490419][ T5779] Memory failure: 0x135d28: recovery action for dirty LRU page: Recovered [ 75.490426][ T5779] Injecting memory failure for pfn 0x135d29 at process virtual address 0x20bf7000 [ 75.490657][ T5779] Memory failure: 0x135d29: recovery action for dirty LRU page: Recovered [ 75.490664][ T5779] Injecting memory failure for pfn 0x135d2a at process virtual address 0x20bf8000 [ 75.490686][ T5779] Memory failure: 0x135d2a: recovery action for dirty LRU page: Recovered [ 75.490693][ T5779] Injecting memory failure for pfn 0x135d2b at process virtual address 0x20bf9000 [ 75.490715][ T5779] Memory failure: 0x135d2b: recovery action for dirty LRU page: Recovered [ 75.490722][ T5779] Injecting memory failure for pfn 0x135d2c at process virtual address 0x20bfa000 [ 75.490744][ T5779] Memory failure: 0x135d2c: recovery action for dirty LRU page: Recovered [ 75.490751][ T5779] Injecting memory failure for pfn 0x135d2d at process virtual address 0x20bfb000 [ 75.490772][ T5779] Memory failure: 0x135d2d: recovery action for dirty LRU page: Recovered [ 75.490779][ T5779] Injecting memory failure for pfn 0x135d2e at process virtual address 0x20bfc000 [ 75.490800][ T5779] Memory failure: 0x135d2e: recovery action for dirty LRU page: Recovered [ 75.490807][ T5779] Injecting memory failure for pfn 0x135d2f at process virtual address 0x20bfd000 [ 75.490828][ T5779] Memory failure: 0x135d2f: recovery action for dirty LRU page: Recovered [ 75.490836][ T5779] Injecting memory failure for pfn 0x11f2d0 at process virtual address 0x20bfe000 [ 75.490859][ T5779] Memory failure: 0x11f2d0: recovery action for dirty LRU page: Recovered [ 75.490866][ T5779] Injecting memory failure for pfn 0x11f2d1 at process virtual address 0x20bff000 [ 75.490887][ T5779] Memory failure: 0x11f2d1: recovery action for dirty LRU page: Recovered [ 75.497026][ T5803] loop1: detected capacity change from 0 to 512 [ 75.510671][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.527182][ T5803] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.206: invalid block [ 75.527514][ T5803] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.537692][ T5803] EXT4-fs (loop1): Remounting filesystem read-only [ 75.537962][ T5803] EXT4-fs (loop1): 2 truncates cleaned up [ 75.538492][ T5803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.529786][ T5822] loop0: detected capacity change from 0 to 512 [ 76.614336][ T5822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 76.614487][ T5822] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.209: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.614511][ T5822] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 76.614689][ T5822] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.209: Bad quota inode: 4, type: 1 [ 76.614702][ T5822] loop0: lost filesystem error report for type 5 error -117 [ 76.614817][ T5822] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.616076][ T5822] EXT4-fs (loop0): mount failed [ 76.637039][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.455443][ T5839] loop4: detected capacity change from 0 to 512 [ 77.604352][ T5839] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.640752][ T5839] EXT4-fs (loop4): 1 truncate cleaned up [ 77.641774][ T5839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.202054][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.221200][ T5852] x_tables: duplicate underflow at hook 3 [ 79.993500][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 79.994837][ T5874] bridge_slave_1: left allmulticast mode [ 79.994916][ T5874] bridge_slave_1: left promiscuous mode [ 79.995649][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.161005][ T5874] bridge_slave_0: left allmulticast mode [ 80.161029][ T5874] bridge_slave_0: left promiscuous mode [ 80.161140][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.455517][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 85.056438][ T5918] futex_wake_op: syz.0.231 tries to shift op by 144; fix this program [ 85.134938][ T5920] loop0: detected capacity change from 0 to 512 [ 85.400796][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 85.482628][ T5927] loop2: detected capacity change from 0 to 4096 [ 85.509331][ T5927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.679115][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 85.679193][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.679261][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.282688][ T4715] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 86.293393][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.293411][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.459414][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.572362][ T5940] loop4: detected capacity change from 0 to 128 [ 86.711822][ T5940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.476637][ T4726] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.547102][ T5945] loop2: detected capacity change from 0 to 256 [ 88.013382][ T5952] loop2: detected capacity change from 0 to 512 [ 88.015967][ T5952] EXT4-fs: Mount option(s) incompatible with ext2 [ 88.107501][ T5958] loop4: detected capacity change from 0 to 512 [ 88.115004][ T5958] EXT4-fs (loop4): DAX unsupported by block device. [ 91.125276][ T6008] x_tables: duplicate underflow at hook 3 [ 91.220115][ T6012] loop4: detected capacity change from 0 to 512 [ 91.225704][ T6012] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.258: Unrecognised inode hash code 255 [ 91.225745][ T6012] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.258: Corrupt directory, running e2fsck is recommended [ 91.241016][ T6012] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 91.241093][ T6012] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.258: corrupted in-inode xattr: invalid ea_ino [ 91.241376][ T6012] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.249834][ T6012] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.258: couldn't read orphan inode 15 (err -117) [ 91.249871][ T6012] loop4: lost filesystem error report for type 5 error -117 [ 91.255152][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 91.255174][ C1] EXT4-fs (loop4): initial error at time 87: ext4_iget_extra_inode:5180: inode 15 [ 91.255191][ C1] EXT4-fs (loop4): last error at time 87: ext4_orphan_get:1404 [ 91.259916][ T6012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.447179][ T6017] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.258: Unrecognised inode hash code 255 [ 91.448055][ T6017] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.258: Corrupt directory, running e2fsck is recommended [ 91.448901][ T6017] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 4: comm syz.4.258: path /54/file0: bad entry in directory: directory entry overrun - offset=512, inode=4294967295, rec_len=1024, size=1024 fake=0 [ 91.632515][ T6019] can0: slcan on ttyS3. [ 91.690255][ T6019] can0 (unregistered): slcan off ttyS3. [ 91.695860][ T6019] capability: warning: `syz.2.259' uses 32-bit capabilities (legacy support in use) [ 91.894430][ T5929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 92.633906][ T4715] Bluetooth: hci1: Malformed Event: 0x02 [ 92.645304][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.872244][ T6055] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 94.192350][ T9] IPVS: starting estimator thread 0... [ 94.461267][ T6060] IPVS: using max 55 ests per chain, 132000 per kthread [ 94.928968][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 95.041176][ T6076] x_tables: duplicate underflow at hook 3 [ 95.455164][ T6084] loop4: detected capacity change from 0 to 1024 [ 95.461247][ T6084] EXT4-fs: Ignoring removed bh option [ 95.468141][ T6084] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.485585][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.833936][ T6093] netlink: 'syz.4.275': attribute type 18 has an invalid length. [ 96.363819][ T6088] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.417347][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.263081][ T6118] loop0: detected capacity change from 0 to 256 [ 97.268393][ T6118] vfat: Unknown parameter 'obj_user' [ 97.396134][ T6118] binder: 6113:6118 unknown command 0 [ 97.396357][ T6118] binder: 6113:6118 ioctl c0306201 200001c0 returned -22 [ 97.546782][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.550197][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.563122][ T6124] loop4: detected capacity change from 0 to 2048 [ 97.622054][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 97.623621][ T30] audit: type=1400 audit(93.594:38): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6123 comm="syz.4.284" path=2F6D656D66643A791035FBF77583251FE039403A72C2B97830905003202864656C6574656429 dev="tmpfs" ino=1174 [ 97.628826][ T30] audit: type=1400 audit(93.594:39): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6123 comm="syz.4.284" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10160 [ 98.324519][ T30] audit: type=1326 audit(94.249:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.324577][ T30] audit: type=1326 audit(94.249:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.333827][ T30] audit: type=1326 audit(94.258:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.338197][ T30] audit: type=1326 audit(94.258:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.338224][ T30] audit: type=1326 audit(94.258:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.338242][ T30] audit: type=1326 audit(94.258:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.338258][ T30] audit: type=1326 audit(94.258:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.338274][ T30] audit: type=1326 audit(94.258:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.287" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d781a8 code=0x7ffc0000 [ 98.371003][ T6140] loop0: detected capacity change from 0 to 1024 [ 98.373267][ T6140] EXT4-fs: Ignoring removed bh option [ 98.382862][ T6140] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 98.407009][ T6140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.649235][ T6146] netlink: 'syz.0.297': attribute type 18 has an invalid length. [ 98.947154][ T6153] loop1: detected capacity change from 0 to 128 [ 98.960314][ T6153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.161188][ T6162] x_tables: duplicate underflow at hook 3 [ 99.459648][ T6163] Injecting memory failure for pfn 0x13ba01 at process virtual address 0x20001000 [ 99.472333][ T6163] Memory failure: 0x13ba01: Sending SIGBUS to syz.2.289:6163 due to hardware memory corruption [ 99.472372][ T6163] Memory failure: 0x13ba01: recovery action for unsplit thp: Failed [ 99.912600][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.275110][ T4723] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.190651][ T6193] loop4: detected capacity change from 0 to 512 [ 101.294831][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.421861][ T6200] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 101.548015][ T6202] capability: warning: `syz.4.299' uses deprecated v2 capabilities in a way that may be insecure [ 102.105509][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.327605][ T6213] loop4: detected capacity change from 0 to 128 [ 102.537135][ T6213] FAT-fs (loop4): data area starts beyond volume (414 > 128) [ 102.537181][ T6213] FAT-fs (loop4): Can't find a valid FAT filesystem [ 102.540778][ T6218] loop2: detected capacity change from 0 to 256 [ 102.547587][ T6218] vfat: Unknown parameter 'obj_user' [ 102.669405][ T6223] x_tables: duplicate underflow at hook 3 [ 102.981417][ T6228] loop1: detected capacity change from 0 to 8192 [ 102.983416][ T6228] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.092718][ T6231] loop4: detected capacity change from 0 to 512 [ 103.098142][ T6231] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.098445][ T6231] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 104.791355][ T6256] overlayfs: failed to clone upperpath [ 105.597338][ T6278] xt_SECMARK: invalid mode: 2 [ 105.916800][ T6285] x_tables: duplicate underflow at hook 3 [ 106.123999][ T6287] loop2: detected capacity change from 0 to 128 [ 108.824981][ T6322] overlayfs: failed to clone upperpath [ 108.966160][ T6327] loop4: detected capacity change from 0 to 512 [ 109.038073][ T6327] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.333: iget: bad extended attribute block 1 [ 109.038121][ T6327] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.040739][ T6327] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.333: couldn't read orphan inode 15 (err -117) [ 109.040775][ T6327] loop4: lost filesystem error report for type 5 error -117 [ 109.042611][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 109.042626][ C0] EXT4-fs (loop4): initial error at time 104: ext4_orphan_get:1399: inode 15 [ 109.042645][ C0] EXT4-fs (loop4): last error at time 104: ext4_orphan_get:1404 [ 109.065403][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.370864][ T6338] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 13: comm syz.4.333: lblock 0 mapped to illegal pblock 13 (length 1) [ 109.375299][ T6338] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.4.333: error -EUCLEAN reading directory block [ 109.624642][ T6345] x_tables: duplicate underflow at hook 3 [ 109.642478][ T6347] loop2: detected capacity change from 0 to 1024 [ 109.683565][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.130506][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.298371][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.999032][ T6372] loop2: detected capacity change from 0 to 512 [ 112.045270][ T6372] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.354: iget: bad i_size value: 38620345925642 [ 112.052419][ T6372] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.052695][ T6372] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.354: couldn't read orphan inode 15 (err -117) [ 112.052716][ T6372] loop2: lost filesystem error report for type 5 error -117 [ 112.056947][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.791851][ T3606] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 112.808373][ T3606] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 848 with error 28 [ 112.808416][ T3606] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.808416][ T3606] [ 112.808438][ T3606] EXT4-fs (loop2): Total free blocks count 0 [ 112.808447][ T3606] EXT4-fs (loop2): Free/Dirty block details [ 112.808455][ T3606] EXT4-fs (loop2): free_blocks=0 [ 112.808463][ T3606] EXT4-fs (loop2): dirty_blocks=852 [ 112.808469][ T3606] EXT4-fs (loop2): Block reservation details [ 112.808475][ T3606] EXT4-fs (loop2): i_reserved_data_blocks=852 [ 112.820327][ T4717] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 112.822255][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.589893][ T6423] x_tables: duplicate underflow at hook 3 [ 116.040817][ T6431] overlayfs: failed to clone upperpath [ 117.310188][ T6445] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 117.315419][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.316387][ T6445] team0: Port device bond0 added [ 117.652095][ T6459] netlink: 'syz.3.364': attribute type 22 has an invalid length. [ 117.652136][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 117.652660][ T6459] bond0: option ad_select: unable to set because the bond device is up [ 117.799474][ T6467] Injecting memory failure for pfn 0x138402 at process virtual address 0x20001000 [ 117.854294][ T6467] Memory failure: 0x138402: recovery action for clean LRU page: Recovered [ 117.856507][ T6467] Injecting memory failure for pfn 0x13580e at process virtual address 0x20002000 [ 117.861074][ T6467] Memory failure: 0x13580e: recovery action for clean LRU page: Recovered [ 117.861193][ T6467] Injecting memory failure for pfn 0x137cc8 at process virtual address 0x20003000 [ 117.867209][ T6467] Memory failure: 0x137cc8: recovery action for clean LRU page: Recovered [ 117.944348][ T6467] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 117.979925][ T6469] loop4: detected capacity change from 0 to 512 [ 117.989744][ T6469] EXT4-fs (loop4): Test dummy encryption mode enabled [ 118.102850][ T6479] x_tables: duplicate underflow at hook 3 [ 118.214954][ T6469] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 119.202189][ T6489] syzkaller0: entered promiscuous mode [ 119.206467][ T6489] syzkaller0: entered allmulticast mode [ 119.554492][ T6497] loop1: detected capacity change from 0 to 2048 [ 120.003508][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.200610][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.113247][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 121.640220][ T6535] overlayfs: failed to clone upperpath [ 122.846403][ T50] Bluetooth: hci3: unexpected event for opcode 0x042c [ 122.903983][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 123.054573][ T6561] loop0: detected capacity change from 0 to 1024 [ 123.239508][ T6565] loop2: detected capacity change from 0 to 512 [ 123.249789][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.256960][ T6565] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 123.261130][ T6565] EXT4-fs (loop2): Remounting filesystem read-only [ 123.261742][ T6565] EXT4-fs (loop2): 1 truncate cleaned up [ 123.262197][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.666468][ T6571] syzkaller0: entered promiscuous mode [ 123.667674][ T6571] syzkaller0: entered allmulticast mode [ 124.115853][ T6579] overlayfs: missing 'lowerdir' [ 124.875701][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.993542][ T6565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.287528][ T6589] input: syz0 as /devices/virtual/input/input9 [ 125.556568][ T6590] loop1: detected capacity change from 0 to 512 [ 125.616877][ T6590] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 125.636783][ T6590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 125.637137][ T6590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.653895][ T6590] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.398: bg 0: block 361: padding at end of block bitmap is not set [ 125.654138][ T6590] loop1: lost filesystem error report for type 5 error -117 [ 125.657491][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 125.657507][ C0] EXT4-fs (loop1): initial error at time 119: ext4_validate_block_bitmap:441 [ 125.657519][ C0] EXT4-fs (loop1): last error at time 119: ext4_validate_block_bitmap:441 [ 125.667691][ T6590] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 125.667765][ T6590] loop1: lost filesystem error report for type 5 error -117 [ 125.676773][ T6590] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.398: attempt to clear invalid blocks 33619980 len 1 [ 125.676821][ T6590] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.696320][ T6590] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.398: invalid indirect mapped block 1811939328 (level 0) [ 125.696398][ T6590] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.707909][ T6590] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.398: invalid indirect mapped block 2185560079 (level 1) [ 125.707981][ T6590] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.717680][ T6590] EXT4-fs (loop1): 1 truncate cleaned up [ 125.723922][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 126.289342][ T6595] loop2: detected capacity change from 0 to 512 [ 126.296992][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 126.849374][ T6595] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.227275][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 127.326445][ T6595] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.401: inode has both inline data and extents flags [ 127.326479][ T6595] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.329382][ T6595] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.401: couldn't read orphan inode 15 (err -117) [ 127.329422][ T6595] loop2: lost filesystem error report for type 5 error -117 [ 127.334875][ T6595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.262114][ T6622] loop1: detected capacity change from 0 to 256 [ 128.262646][ T6622] vfat: Deprecated parameter 'posix' [ 128.262673][ T6622] FAT-fs: "posix" option is obsolete, not supported now [ 128.949442][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.566812][ T6665] loop1: detected capacity change from 0 to 512 [ 130.618920][ T6665] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 130.637950][ T6665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 130.638086][ T6665] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.668280][ T6665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.416: bg 0: block 361: padding at end of block bitmap is not set [ 130.668352][ T6665] loop1: lost filesystem error report for type 5 error -117 [ 130.671626][ T6665] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 130.671651][ T6665] loop1: lost filesystem error report for type 5 error -117 [ 130.673207][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 130.673222][ C0] EXT4-fs (loop1): initial error at time 124: ext4_validate_block_bitmap:441 [ 130.673235][ C0] EXT4-fs (loop1): last error at time 124: ext4_mb_clear_bb:6679 [ 130.673486][ T6665] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.416: attempt to clear invalid blocks 33619980 len 1 [ 130.673518][ T6665] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.683839][ T6665] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.416: invalid indirect mapped block 1811939328 (level 0) [ 130.683888][ T6665] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.684167][ T6665] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.416: invalid indirect mapped block 2185560079 (level 1) [ 130.684209][ T6665] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.762883][ T6665] EXT4-fs (loop1): 1 truncate cleaned up [ 130.765521][ T6665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 131.184596][ T6672] loop4: detected capacity change from 0 to 512 [ 131.187968][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 131.263800][ T6672] EXT4-fs: inline encryption not supported [ 131.263869][ T6672] EXT4-fs: Ignoring removed i_version option [ 131.448115][ T6681] loop0: detected capacity change from 0 to 512 [ 131.552549][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.565696][ T6672] EXT4-fs (loop4): 1 orphan inode deleted [ 131.566205][ T6672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.774663][ T6690] EXT4-fs error (device loop4): __ext4_add_entry:2412: inode #2: comm syz.4.420: Directory hole found for htree leaf block 0 [ 132.152659][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.164242][ T6693] loop2: detected capacity change from 0 to 512 [ 132.182484][ T6693] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.197384][ T6693] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.424: inode has both inline data and extents flags [ 132.197425][ T6693] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.199932][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 132.199946][ C1] EXT4-fs (loop2): initial error at time 125: ext4_orphan_get:1399: inode 15 [ 132.199962][ C1] EXT4-fs (loop2): last error at time 125: ext4_orphan_get:1399: inode 15 [ 132.207183][ T6693] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.424: couldn't read orphan inode 15 (err -117) [ 132.207232][ T6693] loop2: lost filesystem error report for type 5 error -117 [ 132.210050][ T6693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.699771][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699828][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.032345][ T6701] overlayfs: missing 'lowerdir' [ 133.359482][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.593143][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.224795][ T6709] zram0: detected capacity change from 0 to 8 [ 134.799468][ T4715] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 134.835618][ T4715] Bluetooth: hci2: Dropping invalid advertising data [ 134.835681][ T4715] Bluetooth: hci2: Malformed LE Event: 0x02 [ 136.377970][ T6746] nvme_fabrics: missing parameter 'transport=%s' [ 136.378619][ T6746] nvme_fabrics: missing parameter 'nqn=%s' [ 136.776337][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.437'. [ 136.802937][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 138.887525][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 138.915195][ T6798] sock: sock_timestamping_bind_phc: sock not bind to device [ 138.918759][ T6798] zram: Cannot change disksize for initialized device [ 142.346208][ T6854] loop2: detected capacity change from 0 to 1024 [ 142.348241][ T6854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.364476][ T6854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.039451][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 143.285965][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.913140][ T6928] x_tables: duplicate underflow at hook 3 [ 146.456932][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 146.850267][ T6938] sctp: [Deprecated]: syz.0.491 (pid 6938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.850267][ T6938] Use struct sctp_sack_info instead [ 147.041109][ T6945] No such timeout policy "syz1" [ 148.254953][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 148.318906][ T6972] netlink: 'syz.2.498': attribute type 29 has an invalid length. [ 148.320598][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 148.322772][ T6972] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 148.921627][ T6982] x_tables: duplicate underflow at hook 3 [ 148.941192][ T6984] loop1: detected capacity change from 0 to 4096 [ 148.941734][ T6984] EXT4-fs: inline encryption not supported [ 148.948072][ T6984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.948111][ T6984] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.950629][ T6984] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 148.950673][ T6984] System zones: 0-5 [ 148.960659][ T6984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.981547][ T6984] overlayfs: missing 'lowerdir' [ 149.876704][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.093079][ T7006] nbd: must specify a size in bytes for the device [ 150.434082][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 152.647151][ T7043] x_tables: duplicate underflow at hook 3 [ 152.668276][ T7042] loop1: detected capacity change from 0 to 256 [ 153.123834][ T7057] @0Ù: renamed from dummy0 (while UP) [ 153.304909][ T7058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.866874][ T7081] loop4: detected capacity change from 0 to 512 [ 154.867567][ T7081] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.868504][ T7081] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 154.871241][ T7081] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 154.871737][ T7081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.855990][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.931277][ T7114] loop1: detected capacity change from 0 to 1024 [ 155.935589][ T7114] EXT4-fs: Ignoring removed bh option [ 155.944825][ T7114] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 156.492351][ T7114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.908550][ T7124] netlink: 'syz.1.534': attribute type 18 has an invalid length. [ 156.957865][ T7129] loop2: detected capacity change from 0 to 256 [ 157.151823][ T7134] netlink: 'syz.0.536': attribute type 18 has an invalid length. [ 157.272857][ T7123] input: syz0 as /devices/virtual/input/input18 [ 157.401877][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.601468][ T7143] x_tables: ip_tables: osf match: only valid for protocol 6 [ 157.616561][ T7143] tmpfs: Bad value for 'mpol' [ 157.944327][ T7150] loop2: detected capacity change from 0 to 128 [ 157.948192][ T7150] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.953458][ T7150] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.840438][ T4715] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 159.861707][ T1511] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 160.694004][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.876170][ T1511] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.375395][ T7169] hid-generic 0000:0000:0000.0001: pid 7169 passed too short report [ 163.516985][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 163.517097][ T7204] bridge_slave_1: left allmulticast mode [ 163.517115][ T7204] bridge_slave_1: left promiscuous mode [ 163.518333][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.522076][ T7204] bridge_slave_0: left allmulticast mode [ 163.522097][ T7204] bridge_slave_0: left promiscuous mode [ 163.522197][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.072698][ T7220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.357066][ T7216] binfmt_misc: register: failed to install interpreter file ./file2 [ 165.385144][ T7224] loop4: detected capacity change from 0 to 256 [ 165.385601][ T7224] vfat: Unknown parameter 'shortnameepage' [ 167.274094][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 167.275332][ T30] audit: type=1326 audit(157.175:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.0.563" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f3781a8 code=0x0 [ 167.457993][ T4715] Bluetooth: hci2: command 0x040f tx timeout [ 167.509385][ T50] Bluetooth: hci1: unexpected event for opcode 0x200c [ 169.247341][ T7296] netlink: 'syz.0.573': attribute type 18 has an invalid length. [ 169.775709][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 170.302565][ T7318] loop2: detected capacity change from 0 to 8 [ 170.311320][ T7318] VFS: Lookup of 'file2' in squashfs loop2 would have caused loop [ 172.411364][ T7352] loop4: detected capacity change from 0 to 1024 [ 172.414542][ T7352] EXT4-fs: Ignoring removed bh option [ 172.452015][ T7352] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 172.715950][ T7358] openvswitch: netlink: Message has 78 unknown bytes. [ 172.788561][ T7352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.200177][ T7366] netlink: 'syz.4.589': attribute type 18 has an invalid length. [ 173.497121][ T7371] can0: slcan on ttyS3. [ 173.636685][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.675120][ T7371] can0 (unregistered): slcan off ttyS3. [ 174.024767][ T7380] overlayfs: failed to clone upperpath [ 174.450061][ T7392] loop4: detected capacity change from 0 to 1024 [ 174.450924][ T7392] EXT4-fs: Ignoring removed bh option [ 174.456172][ T7392] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.533608][ T7392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.550374][ T7398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 174.550397][ T7398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.550456][ T7398] vhci_hcd vhci_hcd.0: Device attached [ 174.564269][ T7398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.806142][ T7404] netlink: 'syz.4.598': attribute type 18 has an invalid length. [ 175.359300][ T7399] vhci_hcd: connection closed [ 175.359517][ T1500] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 175.362716][ T7400] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 175.381628][ T2781] vhci_hcd vhci_hcd.1: stop threads [ 175.381671][ T2781] vhci_hcd vhci_hcd.1: release socket [ 175.381746][ T2781] vhci_hcd vhci_hcd.1: disconnect device [ 175.388781][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.556065][ T7425] netlink: 'syz.0.604': attribute type 18 has an invalid length. [ 177.695662][ T4715] Bluetooth: hci0: connection err: -111 [ 177.923449][ T7456] overlayfs: failed to clone upperpath [ 178.665112][ T4715] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 179.659385][ T7483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.619'. [ 179.755372][ T7478] infiniband syz0: set active [ 179.755410][ T7478] infiniband syz0: added team0 [ 179.789582][ T7478] RDS/IB: syz0: added [ 179.789714][ T7478] smc: adding ib device syz0 with port count 1 [ 179.789753][ T7478] smc: ib device syz0 port 1 has no pnetid [ 180.586712][ T7490] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.662626][ T7494] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 180.662654][ T7494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.662725][ T7494] vhci_hcd vhci_hcd.0: Device attached [ 180.756862][ T7500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.886246][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 180.889113][ T1500] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 180.932523][ T9] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 180.964385][ T7497] vhci_hcd: connection reset by peer [ 180.968204][ T3669] vhci_hcd vhci_hcd.2: stop threads [ 180.969511][ T3669] vhci_hcd vhci_hcd.2: release socket [ 180.970785][ T3669] vhci_hcd vhci_hcd.2: disconnect device [ 183.807922][ T7544] loop2: detected capacity change from 0 to 512 [ 184.873949][ T7544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.463089][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 185.463164][ T7563] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 185.463234][ T7563] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 185.463460][ T7563] bridge0: port 3(netdevsim1) entered disabled state [ 185.489996][ T7563] bridge_slave_1: left allmulticast mode [ 185.490018][ T7563] bridge_slave_1: left promiscuous mode [ 185.490106][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.506425][ T7563] bridge_slave_0: left allmulticast mode [ 185.506537][ T7563] bridge_slave_0: left promiscuous mode [ 185.508560][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.559629][ T7563] bond0: (slave bridge0): Releasing backup interface [ 185.874119][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.036004][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 186.846792][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 186.928585][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 191.340292][ T7657] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 192.404513][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 193.416323][ T7693] x_tables: duplicate underflow at hook 3 [ 194.310590][ T7709] xt_NFQUEUE: number of total queues is 0 [ 195.684655][ T7745] netlink: 'syz.4.685': attribute type 8 has an invalid length. [ 196.239102][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 196.374067][ T7753] overlayfs: failed to clone upperpath [ 197.314578][ T7770] netlink: 'syz.2.693': attribute type 2 has an invalid length. [ 197.321652][ T7767] netlink: 'syz.1.691': attribute type 18 has an invalid length. [ 197.337381][ T7763] loop2: detected capacity change from 0 to 512 [ 197.401636][ T7763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.456943][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.690372][ T7782] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.850634][ C1] Illegal XDP return value 16128 on prog (id 53) dev lo, expect packet loss! [ 199.320484][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.320544][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.493002][ T7819] overlayfs: failed to clone upperpath [ 201.026572][ T7830] loop4: detected capacity change from 0 to 1024 [ 201.027032][ T7830] EXT4-fs: Ignoring removed bh option [ 201.060999][ T7830] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 201.083598][ T7830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.620127][ T7844] netlink: 'syz.4.707': attribute type 18 has an invalid length. [ 202.261371][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.624656][ T7843] input: syz0 as /devices/virtual/input/input25 [ 204.329595][ T7879] loop4: detected capacity change from 0 to 512 [ 204.405843][ T7879] EXT4-fs (loop4): Test dummy encryption mode enabled [ 204.410526][ T7879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 204.410577][ T7879] System zones: 1-2, 4-12, 8-8 [ 204.413566][ T7879] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.716: iget: bad i_size value: 38620345925642 [ 204.416063][ T7879] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.417600][ T7879] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.716: couldn't read orphan inode 15 (err -117) [ 204.417654][ T7879] loop4: lost filesystem error report for type 5 error -117 [ 204.421973][ T7879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.647847][ T7887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.716: bg 0: block 5: invalid block bitmap [ 204.780157][ T7887] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 204.780207][ T7887] EXT4-fs (loop4): This should not happen!! Data will be lost [ 204.780207][ T7887] [ 204.780495][ T7887] EXT4-fs (loop4): Total free blocks count 0 [ 204.780525][ T7887] EXT4-fs (loop4): Free/Dirty block details [ 204.780551][ T7887] EXT4-fs (loop4): free_blocks=0 [ 204.780569][ T7887] EXT4-fs (loop4): dirty_blocks=2 [ 204.780581][ T7887] EXT4-fs (loop4): Block reservation details [ 204.780593][ T7887] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 205.501782][ T4726] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 205.880484][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.597348][ T7913] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.669134][ T4404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.018869][ T7957] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 208.734351][ T7967] syz.1.730 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 210.964732][ T8003] loop2: detected capacity change from 0 to 1024 [ 210.966799][ T8003] EXT4-fs: Ignoring removed bh option [ 211.908871][ T8003] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 211.920739][ T8003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.401460][ T8016] netlink: 'syz.2.741': attribute type 18 has an invalid length. [ 212.666070][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.684430][ T8024] netlink: 136 bytes leftover after parsing attributes in process `syz.1.743'. [ 213.219296][ T8035] loop2: detected capacity change from 0 to 2048 [ 213.322062][ T8035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.709778][ T8048] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 214.038015][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.852165][ T8071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.134878][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.752'. [ 215.717693][ T8084] nftables ruleset with unbound set [ 215.719209][ T8087] netlink: 'syz.0.755': attribute type 18 has an invalid length. [ 216.811390][ T8110] loop2: detected capacity change from 0 to 2048 [ 217.098422][ T8110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.331072][ T8119] netlink: 'syz.1.763': attribute type 18 has an invalid length. [ 217.809876][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.136724][ T8132] block nbd2: NBD_DISCONNECT [ 218.688305][ T8144] fuse: root generation should be zero [ 220.174123][ T8174] loop2: detected capacity change from 0 to 1024 [ 220.174970][ T8174] EXT4-fs: Ignoring removed bh option [ 220.178016][ T8174] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 220.409218][ T8179] IPVS: Error connecting to the multicast addr [ 220.849667][ T8174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.278704][ T8188] netlink: 76 bytes leftover after parsing attributes in process `syz.3.781'. [ 221.518457][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.527840][ T8191] loop4: detected capacity change from 0 to 256 [ 223.972344][ T8222] lo: entered promiscuous mode [ 223.973085][ T8222] batadv_slave_0: entered promiscuous mode [ 224.549886][ T8221] batadv_slave_0: left promiscuous mode [ 224.552263][ T8221] lo: left promiscuous mode [ 224.966280][ T8239] loop2: detected capacity change from 0 to 1024 [ 224.997602][ T8239] EXT4-fs: Ignoring removed bh option [ 225.007122][ T8239] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 225.043207][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.676382][ T8253] loop4: detected capacity change from 0 to 2048 [ 225.778994][ T8252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.833986][ T8253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.972742][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.079012][ T8252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.098056][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.441467][ T8252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.575664][ T8252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.638211][ T8271] x_tables: duplicate underflow at hook 3 [ 226.696357][ T40] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.701375][ T40] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.709166][ T3577] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.709257][ T3577] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.740227][ T8280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.865231][ T8280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.991126][ T8280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.092875][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 228.315973][ T39] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.316069][ T39] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.316103][ T39] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.316127][ T39] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.468840][ T8342] loop4: detected capacity change from 0 to 1024 [ 230.469373][ T8342] EXT4-fs: Ignoring removed bh option [ 230.470273][ T8342] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 230.493558][ T8342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.962044][ T8355] x_tables: duplicate underflow at hook 3 [ 231.257799][ T8362] Soft offlining pfn 0x13b2a7 at process virtual address 0x20000000 [ 231.277419][ T8362] netlink: 'syz.3.821': attribute type 10 has an invalid length. [ 231.292162][ T8362] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.301759][ T8362] bond0: (slave team0): Enslaving as an active interface with an up link [ 231.678466][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.901751][ T8391] overlayfs: failed to clone upperpath [ 234.134796][ T4715] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 236.600189][ T8444] loop4: detected capacity change from 0 to 128 [ 236.605359][ T8444] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.646279][ T4726] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.684361][ T8468] loop4: detected capacity change from 0 to 512 [ 237.719711][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.188731][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.790713][ T8501] x_tables: duplicate underflow at hook 3 [ 240.735950][ T8509] loop4: detected capacity change from 0 to 128 [ 240.756542][ T8509] EXT4-fs (loop4): Test dummy encryption mode enabled [ 240.763304][ T8509] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.252807][ T8519] overlayfs: failed to clone upperpath [ 241.995449][ T4726] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.197635][ T8526] loop4: detected capacity change from 0 to 1024 [ 242.198851][ T8526] EXT4-fs: Ignoring removed bh option [ 242.234174][ T8526] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 242.278947][ T8526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.206424][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.807412][ T8553] block nbd4: NBD_DISCONNECT [ 245.307391][ T8562] block nbd4: NBD_DISCONNECT [ 245.309792][ T8562] block nbd4: Disconnected due to user request. [ 245.309804][ T8562] block nbd4: shutting down sockets [ 245.416403][ T8569] syzkaller1: entered promiscuous mode [ 245.417532][ T8569] syzkaller1: entered allmulticast mode [ 245.421134][ T8569] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 245.947438][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.873'. [ 246.219933][ T8588] overlayfs: missing 'lowerdir' [ 246.458380][ T8592] loop4: detected capacity change from 0 to 1024 [ 246.459159][ T8592] EXT4-fs: Ignoring removed bh option [ 246.461135][ T8592] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 246.473848][ T8592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.795985][ T8607] netlink: 'syz.4.875': attribute type 18 has an invalid length. [ 248.655794][ T8620] Console: switching to colour dummy device 80x25 [ 248.667785][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.752965][ T8623] fuse: Bad value for 'fd' [ 249.356214][ T8628] x_tables: duplicate underflow at hook 3 [ 249.408180][ T8638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.885'. [ 250.075576][ T1211] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.765028][ T4715] Bluetooth: hci4: unexpected subevent 0x04 length: 56 > 11 [ 251.650350][ T8671] netlink: 'syz.1.892': attribute type 18 has an invalid length. [ 252.782800][ T8683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.897'. [ 254.041286][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 254.081696][ T8707] sctp: [Deprecated]: syz.4.902 (pid 8707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.081696][ T8707] Use struct sctp_sack_info instead [ 254.487512][ T8717] No such timeout policy "syz1" [ 254.942857][ T8726] netlink: 'syz.2.905': attribute type 18 has an invalid length. [ 255.540389][ T8736] hub 8-0:1.0: USB hub found [ 255.541148][ T8736] hub 8-0:1.0: 8 ports detected [ 255.753780][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.908'. [ 256.510950][ T8753] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 256.843270][ T8761] loop4: detected capacity change from 0 to 256 [ 256.850346][ T8761] vfat: Unknown parameter 'obj_user' [ 257.282914][ T8768] gadgetfs: bound to dummy_udc driver [ 258.175731][ T8785] loop4: detected capacity change from 0 to 1024 [ 258.177354][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.920'. [ 258.177714][ T8785] EXT4-fs: Ignoring removed bh option [ 258.180877][ T8785] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 258.269624][ T8785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.482126][ T8796] netlink: 'syz.4.921': attribute type 18 has an invalid length. [ 259.364248][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.750558][ T8814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.750684][ T8814] batadv_slave_0: entered promiscuous mode [ 260.611534][ T8822] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 262.150497][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.933'. [ 262.468852][ T8850] loop4: detected capacity change from 0 to 256 [ 262.470326][ T8850] vfat: Deprecated parameter 'posix' [ 262.471556][ T8850] FAT-fs: "posix" option is obsolete, not supported now [ 262.900310][ T8857] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 263.817488][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 264.367463][ T8881] hub 8-0:1.0: USB hub found [ 264.367758][ T8881] hub 8-0:1.0: 8 ports detected [ 264.635580][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.635630][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.849293][ T8923] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 266.952397][ T8932] x_tables: duplicate underflow at hook 3 [ 268.850694][ T8955] syz_tun: entered allmulticast mode [ 269.502810][ T8950] syz_tun: left allmulticast mode [ 269.549323][ T8965] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.957978][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 270.064146][ T8976] x_tables: duplicate underflow at hook 3 [ 271.230191][ T8988] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.510063][ T9010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 273.603223][ T9031] x_tables: duplicate underflow at hook 3 [ 277.065599][ T9117] openvswitch: netlink: Message has 78 unknown bytes. [ 277.930791][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1003'. [ 279.366648][ T9144] netlink: 'syz.2.1006': attribute type 18 has an invalid length. [ 279.676748][ T9150] loop4: detected capacity change from 0 to 256 [ 279.678533][ T9150] vfat: Deprecated parameter 'posix' [ 279.681073][ T9150] FAT-fs: "posix" option is obsolete, not supported now [ 282.056258][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 282.077373][ T9184] x_tables: duplicate underflow at hook 3 [ 282.727498][ T9201] xt_SECMARK: invalid mode: 2 [ 283.375769][ T9209] loop4: detected capacity change from 0 to 1024 [ 283.377264][ T9209] EXT4-fs: Ignoring removed bh option [ 283.378948][ T9209] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 283.414171][ T9209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.655424][ T9216] netlink: 'syz.4.1020': attribute type 18 has an invalid length. [ 284.447375][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.896929][ T9235] infiniband syz2: set active [ 285.896966][ T9235] infiniband syz2: added bond_slave_0 [ 285.897404][ T9235] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 285.899638][ T9235] infiniband syz2: Couldn't open port 1 [ 285.905624][ T9235] RDS/IB: syz2: added [ 285.905663][ T9235] smc: adding ib device syz2 with port count 1 [ 285.905692][ T9235] smc: ib device syz2 port 1 has no pnetid [ 286.322072][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 287.162838][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 288.213767][ T9303] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 288.823831][ T9317] loop4: detected capacity change from 0 to 128 [ 289.096767][ T9321] xt_connbytes: Forcing CT accounting to be enabled [ 289.096893][ T9321] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 289.102382][ T9320] Soft offlining pfn 0x13d333 at process virtual address 0x20000000 [ 289.106231][ T9320] Soft offline: 0x13d333: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 289.375050][ T9326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1041'. [ 290.682193][ T9342] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 291.483365][ T4715] Bluetooth: hci2: SCO packet for unknown connection handle 240 [ 292.545089][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.549356][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.551739][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.560483][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.563564][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.978463][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.980060][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.981540][ T9361] bridge_slave_0: entered allmulticast mode [ 292.983472][ T9361] bridge_slave_0: entered promiscuous mode [ 292.989578][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.991076][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.992552][ T9361] bridge_slave_1: entered allmulticast mode [ 292.994307][ T9361] bridge_slave_1: entered promiscuous mode [ 293.005385][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.008798][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.019014][ T9361] team0: Port device team_slave_0 added [ 293.021797][ T9361] team0: Port device team_slave_1 added [ 293.034687][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.036229][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.041501][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.044370][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.045893][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.051198][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.065778][ T9361] hsr_slave_0: entered promiscuous mode [ 293.067349][ T9361] hsr_slave_1: entered promiscuous mode [ 293.069492][ T9361] debugfs: 'hsr0' already exists in 'hsr' [ 293.070579][ T9361] Cannot create hsr debugfs directory [ 293.224055][ T9361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.227510][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.229551][ T9361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.232780][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.234685][ T9361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.237589][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.239473][ T9361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.244471][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.385881][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 293.514559][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.514617][ T9361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.514715][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.514751][ T9361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.579668][ T9361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.587401][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.589243][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.598328][ T9361] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.603745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.603794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.610301][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.610353][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.997975][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.377034][ T9361] veth0_vlan: entered promiscuous mode [ 294.381906][ T9361] veth1_vlan: entered promiscuous mode [ 294.391456][ T9361] veth0_macvtap: entered promiscuous mode [ 294.393169][ T9361] veth1_macvtap: entered promiscuous mode [ 294.397906][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.399839][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.401941][ T1211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.402065][ T1211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.402124][ T1211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.402147][ T1211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.773583][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.773626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.796200][ T4715] Bluetooth: hci5: command tx timeout [ 294.802357][ T573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.802397][ T573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.310195][ T9439] loop4: detected capacity change from 0 to 512 [ 295.312956][ T9439] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 295.317709][ T9439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0003] [ 295.317843][ T9439] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.317856][ T9439] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1061: bad orphan inode 3 [ 295.317871][ T9439] loop4: lost filesystem error report for type 5 error -117 [ 295.318437][ T9439] EXT4-fs (loop4): Remounting filesystem read-only [ 295.320513][ T9439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 295.327872][ T9439] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1061: dx entry: limit 0 != root limit 125 [ 295.327899][ T9439] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1061: Corrupt directory, running e2fsck is recommended [ 295.340935][ T9439] team0 (unregistering): Port device team_slave_0 removed [ 295.344959][ T9439] team0 (unregistering): Port device team_slave_1 removed [ 295.348198][ T9439] team0 (unregistering): Port device bond0 removed [ 295.374725][ T9442] loop5: detected capacity change from 0 to 512 [ 295.392650][ T9442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.480764][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 295.503624][ T30] audit: type=1326 audit(524565.763:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503674][ T30] audit: type=1326 audit(524565.763:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503715][ T30] audit: type=1326 audit(524565.763:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503738][ T30] audit: type=1326 audit(524565.763:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503759][ T30] audit: type=1326 audit(524565.763:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503779][ T30] audit: type=1326 audit(524565.763:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503797][ T30] audit: type=1326 audit(524565.763:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503815][ T30] audit: type=1326 audit(524565.763:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.503833][ T30] audit: type=1326 audit(524565.763:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.508446][ T30] audit: type=1326 audit(524565.763:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd3781a8 code=0x7ffc0000 [ 295.945022][ T9461] overlayfs: failed to clone upperpath [ 296.355964][ T9361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.034719][ T4715] Bluetooth: hci5: command tx timeout [ 298.124998][ T9487] syz_tun: entered allmulticast mode [ 298.512276][ T9478] syz_tun: left allmulticast mode [ 298.942272][ T9501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1073'. [ 299.152161][ T9508] siw: device registration error -23 [ 299.209577][ T9508] smc: removing ib device syz0 [ 299.384376][ T4715] Bluetooth: hci5: command tx timeout [ 300.491520][ T9522] overlayfs: failed to clone upperpath [ 300.540839][ T9526] loop5: detected capacity change from 0 to 128 [ 300.542487][ T9526] vfat: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿ' [ 300.887051][ T9533] input: syz0 as /devices/virtual/input/input37 [ 301.198721][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'. [ 301.272791][ T9535] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 301.561786][ T4715] Bluetooth: hci5: command tx timeout [ 301.882331][ T9544] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 302.189208][ T4807] IPVS: starting estimator thread 0... [ 302.281237][ T9549] IPVS: using max 59 ests per chain, 141600 per kthread [ 302.692506][ T9559] x_tables: duplicate underflow at hook 3 [ 304.301448][ T9578] loop4: detected capacity change from 0 to 512 [ 304.791156][ T9578] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1093: corrupted in-inode xattr: invalid ea_ino [ 304.799494][ T9578] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.954268][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 304.954306][ C1] EXT4-fs (loop4): initial error at time 524574: ext4_iget_extra_inode:5180: inode 15 [ 304.954347][ C1] EXT4-fs (loop4): last error at time 524574: ext4_iget_extra_inode:5180: inode 15 [ 304.963002][ T9578] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1093: couldn't read orphan inode 15 (err -117) [ 304.965383][ T9578] loop4: lost filesystem error report for type 5 error -117 [ 304.968672][ T9578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.346066][ T4715] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 305.457111][ T9600] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 306.689880][ T9606] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 306.690034][ T9606] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 306.690081][ T9606] ================================================================== [ 306.690089][ T9606] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x44/0x84 [ 306.690109][ T9606] Read of size 8 at addr ffff0000cab030f0 by task syz.0.1100/9606 [ 306.690117][ T9606] [ 306.690124][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.0.1100 Tainted: G L syzkaller #0 PREEMPT [ 306.690136][ T9606] Tainted: [L]=SOFTLOCKUP [ 306.690140][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 306.690146][ T9606] Call trace: [ 306.690150][ T9606] show_stack+0x2c/0x3c (C) [ 306.690165][ T9606] __dump_stack+0x30/0x40 [ 306.690177][ T9606] dump_stack_lvl+0xd8/0x12c [ 306.690189][ T9606] print_address_description+0xb0/0x238 [ 306.690203][ T9606] print_report+0x68/0x84 [ 306.690212][ T9606] kasan_report+0x8c/0xc4 [ 306.690224][ T9606] __asan_report_load8_noabort+0x20/0x2c [ 306.690237][ T9606] dummy_free_request+0x44/0x84 [ 306.690248][ T9606] usb_ep_free_request+0x108/0x3fc [ 306.690260][ T9606] uvc_function_bind+0xbb0/0x1230 [ 306.690272][ T9606] usb_add_function+0x1d0/0x6bc [ 306.690281][ T9606] configfs_composite_bind+0xb4c/0x10b8 [ 306.690293][ T9606] gadget_bind_driver+0x274/0x834 [ 306.690301][ T9606] really_probe+0x29c/0x800 [ 306.690313][ T9606] __driver_probe_device+0x1e0/0x350 [ 306.690324][ T9606] driver_probe_device+0x6c/0x19c [ 306.690336][ T9606] __driver_attach+0x168/0x384 [ 306.690346][ T9606] bus_for_each_dev+0x128/0x1b4 [ 306.690356][ T9606] driver_attach+0x50/0x60 [ 306.690367][ T9606] bus_add_driver+0x208/0x500 [ 306.690376][ T9606] driver_register+0x220/0x310 [ 306.690388][ T9606] usb_gadget_register_driver_owner+0xf0/0x25c [ 306.690401][ T9606] gadget_dev_desc_UDC_store+0x164/0x22c [ 306.690412][ T9606] configfs_write_iter+0x27c/0x354 [ 306.690426][ T9606] vfs_write+0x51c/0xa0c [ 306.690433][ T9606] ksys_write+0x12c/0x228 [ 306.690441][ T9606] __arm64_sys_write+0x84/0x98 [ 306.690449][ T9606] invoke_syscall+0x98/0x244 [ 306.690461][ T9606] el0_svc_common+0xec/0x23c [ 306.690473][ T9606] do_el0_svc+0x4c/0x5c [ 306.690484][ T9606] el0_svc+0x64/0x260 [ 306.690497][ T9606] el0t_64_sync_handler+0x48/0x148 [ 306.690509][ T9606] el0t_64_sync+0x198/0x19c [ 306.690518][ T9606] [ 306.690520][ T9606] Allocated by task 7202: [ 306.690526][ T9606] kasan_save_track+0x40/0x78 [ 306.690535][ T9606] kasan_save_alloc_info+0x44/0x54 [ 306.690545][ T9606] __kasan_kmalloc+0x9c/0xb4 [ 306.690553][ T9606] __kmalloc_noprof+0x340/0x6b8 [ 306.690561][ T9606] tnode_new+0xb8/0x32c [ 306.690573][ T9606] resize+0x388/0x2040 [ 306.690583][ T9606] fib_insert_alias+0x858/0xb08 [ 306.690593][ T9606] fib_trie_unmerge+0x1c8/0x9dc [ 306.690604][ T9606] fib_unmerge+0xdc/0x2f4 [ 306.690612][ T9606] fib4_rule_configure+0x264/0x814 [ 306.690622][ T9606] fib_newrule+0x468/0xbd4 [ 306.690633][ T9606] fib_nl_newrule+0x80/0x98 [ 306.690642][ T9606] rtnetlink_rcv_msg+0x66c/0x9bc [ 306.690649][ T9606] netlink_rcv_skb+0x238/0x414 [ 306.690658][ T9606] rtnetlink_rcv+0x28/0x38 [ 306.690666][ T9606] netlink_unicast+0x600/0x7f8 [ 306.690673][ T9606] netlink_sendmsg+0x648/0x948 [ 306.690682][ T9606] __sock_sendmsg+0xc8/0x17c [ 306.690689][ T9606] ____sys_sendmsg+0x3d0/0x6c8 [ 306.690698][ T9606] ___sys_sendmsg+0x198/0x224 [ 306.690707][ T9606] __sys_sendmsg+0x158/0x204 [ 306.690715][ T9606] __arm64_sys_sendmsg+0x88/0x9c [ 306.690725][ T9606] invoke_syscall+0x98/0x244 [ 306.690735][ T9606] el0_svc_common+0xec/0x23c [ 306.690745][ T9606] do_el0_svc+0x4c/0x5c [ 306.690755][ T9606] el0_svc+0x64/0x260 [ 306.690765][ T9606] el0t_64_sync_handler+0x48/0x148 [ 306.690775][ T9606] el0t_64_sync+0x198/0x19c [ 306.690781][ T9606] [ 306.690783][ T9606] Freed by task 9427: [ 306.690787][ T9606] kasan_save_track+0x40/0x78 [ 306.690795][ T9606] kasan_save_free_info+0x58/0x70 [ 306.690805][ T9606] __kasan_slab_free+0x74/0xa4 [ 306.690813][ T9606] kfree+0x188/0x690 [ 306.690820][ T9606] kvfree+0x30/0x40 [ 306.690827][ T9606] __node_free_rcu+0x5c/0x90 [ 306.690837][ T9606] rcu_core+0x598/0xf04 [ 306.690846][ T9606] rcu_core_si+0x10/0x1c [ 306.690853][ T9606] handle_softirqs+0x2ec/0xd98 [ 306.690860][ T9606] __do_softirq+0x14/0x20 [ 306.690866][ T9606] [ 306.690868][ T9606] Last potentially related work creation: [ 306.690872][ T9606] kasan_save_stack+0x40/0x6c [ 306.690879][ T9606] kasan_record_aux_stack+0xb0/0xc8 [ 306.690889][ T9606] call_rcu+0x104/0x75c [ 306.690895][ T9606] tnode_free+0xb0/0x14c [ 306.690906][ T9606] replace+0x188/0x428 [ 306.690916][ T9606] resize+0xe10/0x2040 [ 306.690926][ T9606] fib_table_flush+0x268/0x970 [ 306.690936][ T9606] fib_flush+0xa8/0x108 [ 306.690944][ T9606] fib_disable_ip+0x7c/0xa8 [ 306.690953][ T9606] fib_netdev_event+0x2ec/0x49c [ 306.690961][ T9606] notifier_call_chain+0x1a4/0x624 [ 306.690971][ T9606] raw_notifier_call_chain+0x3c/0x50 [ 306.690980][ T9606] call_netdevice_notifiers_info+0xb8/0x120 [ 306.690992][ T9606] netif_close_many+0x250/0x378 [ 306.691003][ T9606] unregister_netdevice_many_notify+0x740/0x1758 [ 306.691014][ T9606] rtnl_delete_link+0x11c/0x184 [ 306.691020][ T9606] rtnl_dellink+0x35c/0x4c8 [ 306.691027][ T9606] rtnetlink_rcv_msg+0x66c/0x9bc [ 306.691035][ T9606] netlink_rcv_skb+0x238/0x414 [ 306.691043][ T9606] rtnetlink_rcv+0x28/0x38 [ 306.691049][ T9606] netlink_unicast+0x600/0x7f8 [ 306.691057][ T9606] netlink_sendmsg+0x648/0x948 [ 306.691065][ T9606] __sock_sendmsg+0xc8/0x17c [ 306.691073][ T9606] ____sys_sendmsg+0x3d0/0x6c8 [ 306.691081][ T9606] ___sys_sendmsg+0x198/0x224 [ 306.691090][ T9606] __sys_sendmsg+0x158/0x204 [ 306.691099][ T9606] __arm64_sys_sendmsg+0x88/0x9c [ 306.691108][ T9606] invoke_syscall+0x98/0x244 [ 306.691118][ T9606] el0_svc_common+0xec/0x23c [ 306.691129][ T9606] do_el0_svc+0x4c/0x5c [ 306.691138][ T9606] el0_svc+0x64/0x260 [ 306.691148][ T9606] el0t_64_sync_handler+0x48/0x148 [ 306.691158][ T9606] el0t_64_sync+0x198/0x19c [ 306.691164][ T9606] [ 306.691166][ T9606] The buggy address belongs to the object at ffff0000cab03000 [ 306.691166][ T9606] which belongs to the cache kmalloc-128 of size 128 [ 306.691173][ T9606] The buggy address is located 112 bytes to the right of [ 306.691173][ T9606] allocated 128-byte region [ffff0000cab03000, ffff0000cab03080) [ 306.691182][ T9606] [ 306.691184][ T9606] The buggy address belongs to the physical page: [ 306.691188][ T9606] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ab03 [ 306.691196][ T9606] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 306.691208][ T9606] page_type: f5(slab) [ 306.691217][ T9606] raw: 05ffc00000000000 ffff0000c0001a00 dead000000000100 dead000000000122 [ 306.691225][ T9606] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 306.691230][ T9606] page dumped because: kasan: bad access detected [ 306.691234][ T9606] [ 306.691235][ T9606] Memory state around the buggy address: [ 306.691240][ T9606] ffff0000cab02f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 306.691245][ T9606] ffff0000cab03000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.691251][ T9606] >ffff0000cab03080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.691255][ T9606] ^ [ 306.691260][ T9606] ffff0000cab03100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.691266][ T9606] ffff0000cab03180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.691270][ T9606] ================================================================== [ 306.691290][ T9606] Disabling lock debugging due to kernel taint [ 306.691480][ T9606] ------------[ cut here ]------------ [ 306.691486][ T9606] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x7c/0x84, CPU#1: syz.0.1100/9606 [ 306.811416][ T9606] Modules linked in: [ 306.812075][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.0.1100 Tainted: G B L syzkaller #0 PREEMPT [ 306.813839][ T9606] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 306.814744][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 306.816461][ T9606] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 306.817859][ T9606] pc : dummy_free_request+0x7c/0x84 [ 306.818798][ T9606] lr : dummy_free_request+0x7c/0x84 [ 306.819625][ T9606] sp : ffff8000962874e0 [ 306.820282][ T9606] x29: ffff8000962874e0 x28: 0000000000000000 x27: ffff0000c5fd6528 [ 306.821663][ T9606] x26: ffff0000d914a800 x25: 1fffe00018bfaca5 x24: dfff800000000000 [ 306.822986][ T9606] x23: dfff800000000000 x22: ffff800088b07eb8 x21: ffff800087332280 [ 306.824387][ T9606] x20: ffff0000c52a4068 x19: ffff0000cab030f0 x18: 1fffe00035bc9e28 [ 306.825725][ T9606] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800088bbd0a0 [ 306.827077][ T9606] x14: ffff0001ade4f14c x13: 0000000000000001 x12: 0000000000000000 [ 306.828352][ T9606] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000003a7ec [ 306.829718][ T9606] x8 : ffff80009cc0d000 x7 : 0000000000000000 x6 : ffff8000803b8a6c [ 306.831027][ T9606] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000802f7b34 [ 306.832294][ T9606] x2 : 0000000000000000 x1 : ffff0000d0233a80 x0 : 0000000000000001 [ 306.833618][ T9606] Call trace: [ 306.834162][ T9606] dummy_free_request+0x7c/0x84 (P) [ 306.835015][ T9606] usb_ep_free_request+0x108/0x3fc [ 306.835896][ T9606] uvc_function_bind+0xbb0/0x1230 [ 306.836749][ T9606] usb_add_function+0x1d0/0x6bc [ 306.837562][ T9606] configfs_composite_bind+0xb4c/0x10b8 [ 306.838506][ T9606] gadget_bind_driver+0x274/0x834 [ 306.839341][ T9606] really_probe+0x29c/0x800 [ 306.840043][ T9606] __driver_probe_device+0x1e0/0x350 [ 306.840903][ T9606] driver_probe_device+0x6c/0x19c [ 306.841765][ T9606] __driver_attach+0x168/0x384 [ 306.842535][ T9606] bus_for_each_dev+0x128/0x1b4 [ 306.843345][ T9606] driver_attach+0x50/0x60 [ 306.844081][ T9606] bus_add_driver+0x208/0x500 [ 306.844854][ T9606] driver_register+0x220/0x310 [ 306.845641][ T9606] usb_gadget_register_driver_owner+0xf0/0x25c [ 306.846652][ T9606] gadget_dev_desc_UDC_store+0x164/0x22c [ 306.847611][ T9606] configfs_write_iter+0x27c/0x354 [ 306.848476][ T9606] vfs_write+0x51c/0xa0c [ 306.849201][ T9606] ksys_write+0x12c/0x228 [ 306.849922][ T9606] __arm64_sys_write+0x84/0x98 [ 306.850726][ T9606] invoke_syscall+0x98/0x244 [ 306.851499][ T9606] el0_svc_common+0xec/0x23c [ 306.852266][ T9606] do_el0_svc+0x4c/0x5c [ 306.852958][ T9606] el0_svc+0x64/0x260 [ 306.853638][ T9606] el0t_64_sync_handler+0x48/0x148 [ 306.854516][ T9606] el0t_64_sync+0x198/0x19c [ 306.855284][ T9606] irq event stamp: 3647 [ 306.855970][ T9606] hardirqs last enabled at (3647): [] finish_task_switch+0x234/0x858 [ 306.857570][ T9606] hardirqs last disabled at (3646): [] __schedule+0x2f8/0x2d80 [ 306.859067][ T9606] softirqs last enabled at (2608): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 306.860782][ T9606] softirqs last disabled at (2604): [] fpsimd_restore_current_state+0x44/0x9c8 [ 306.862517][ T9606] ---[ end trace 0000000000000000 ]--- [ 306.864461][ T9606] udc dummy_udc.0: failed to start g1: -22 [ 306.864548][ T9606] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 306.865855][ T9606] UDC core: g1: couldn't find an available UDC or it's busy [ 307.089152][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.103331][ T2781] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.198247][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.199820][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.199960][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.200275][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.200465][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to send rpc fd=3 want=7888 sent=0 n=-1 (errno 32: Broken pipe) [ 307.538953][ T2781] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.638198][ T2781] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.821872][ T2781] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.949540][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 307.950747][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 307.951879][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 307.952972][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 307.956637][ T2781] bridge_slave_1: left allmulticast mode [ 307.956671][ T2781] bridge_slave_1: left promiscuous mode [ 307.956766][ T2781] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.960574][ T2781] bridge_slave_0: left allmulticast mode [ 307.960600][ T2781] bridge_slave_0: left promiscuous mode [ 307.960667][ T2781] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.995381][ T2781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.004618][ T2781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.012513][ T2781] bond0 (unregistering): Released all slaves [ 308.122996][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1 [ 308.209588][ T2781] hsr_slave_0: left promiscuous mode [ 308.210656][ T2781] hsr_slave_1: left promiscuous mode [ 308.210889][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.210901][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.215905][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.217373][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.236901][ T2781] veth1_macvtap: left promiscuous mode [ 308.238060][ T2781] veth0_macvtap: left promiscuous mode [ 308.238681][ T2781] veth1_vlan: left promiscuous mode [ 308.238715][ T2781] veth0_vlan: left promiscuous mode [ 308.299003][ T2781] team0 (unregistering): Port device team_slave_1 removed [ 308.301419][ T2781] team0 (unregistering): Port device team_slave_0 removed [ 308.328820][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 308.452980][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 308.554187][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2 [ 308.596183][ T2781] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.660366][ T2781] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.712607][ T2781] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.777691][ T2781] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.904991][ T12] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 308.907170][ T12] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20002 - 0 [ 308.910579][ T12] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20002 - 0 [ 308.914749][ T12] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20002 - 0 [ 308.947887][ T2781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.000468][ T2781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.005595][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6 [ 309.065370][ T2781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.102181][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4 [ 309.120491][ T2781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.173209][ T12] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.183951][ T12] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.184017][ T12] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.184042][ T12] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.208743][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5 [ 309.211930][ T2781] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.280364][ T573] netdevsim netdevsim120 eth12: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.300134][ T2781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.300179][ T2781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.314346][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7 [ 309.374110][ T2781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.374153][ T2781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.417260][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 309.447824][ T2781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.447866][ T2781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.480140][ T2781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.482208][ T2781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.515836][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9 [ 309.566498][ T3669] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.566557][ T3669] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.572259][ T573] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.572327][ T573] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 20002 - 0 [ 309.587428][ T2781] bridge_slave_1: left allmulticast mode [ 309.588524][ T2781] bridge_slave_1: left promiscuous mode [ 309.589556][ T2781] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.591728][ T2781] bridge_slave_0: left allmulticast mode [ 309.592776][ T2781] bridge_slave_0: left promiscuous mode [ 309.593922][ T2781] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.666739][ T2781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.681912][ T2781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.724197][ T2781] bond0 (unregistering): Released all slaves [ 309.746071][ T2781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.756946][ T2781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.759962][ T2781] bond0 (unregistering): Released all slaves [ 309.785421][ T2781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.820760][ T2781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.863147][ T2781] bond0 (unregistering): Released all slaves [ 309.865081][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10 [ 309.865265][ T4836] syz2: Port: 1 Link DOWN [ 309.963531][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11 [ 310.066920][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12 [ 310.195170][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13 [ 310.284089][ T4404] 8021q: adding VLAN 0 to HW filter on device eth16 [ 310.398654][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15 [ 310.510801][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14 [ 310.599642][ T2781] hsr_slave_0: left promiscuous mode [ 310.601084][ T2781] hsr_slave_1: left promiscuous mode [ 310.602278][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.602303][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.603932][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.603941][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.609035][ T2781] hsr_slave_0: left promiscuous mode [ 310.610062][ T2781] hsr_slave_1: left promiscuous mode [ 310.610277][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.610288][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.611577][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.611588][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.627355][ T2781] hsr_slave_0: left promiscuous mode [ 310.628481][ T2781] hsr_slave_1: left promiscuous mode [ 310.628867][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.629826][ T2781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.629836][ T2781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.637079][ T2781] veth1_macvtap: left promiscuous mode [ 310.637115][ T2781] veth0_macvtap: left promiscuous mode [ 310.637151][ T2781] veth1_vlan: left promiscuous mode [ 310.637179][ T2781] veth0_vlan: left promiscuous mode [ 310.641267][ T2781] veth1_macvtap: left promiscuous mode [ 310.641626][ T2781] veth0_macvtap: left promiscuous mode [ 310.641663][ T2781] veth1_vlan: left promiscuous mode [ 310.641690][ T2781] veth0_vlan: left promiscuous mode [ 310.645409][ T2781] veth1_macvtap: left promiscuous mode [ 310.645438][ T2781] veth0_macvtap: left promiscuous mode [ 310.645601][ T2781] veth1_vlan: left promiscuous mode [ 310.645623][ T2781] veth0_vlan: left promiscuous mode [ 310.756103][ T2781] team0 (unregistering): Port device team_slave_1 removed [ 310.758916][ T2781] team0 (unregistering): Port device team_slave_0 removed [ 310.899492][ T2781] team0 (unregistering): Port device team_slave_1 removed [ 310.905414][ T2781] team0 (unregistering): Port device team_slave_0 removed [ 310.910269][ T1211] smc: removing ib device syz2 [ 311.783099][ T2781] IPVS: stop unused estimator thread 0... [ 311.783274][ T2781] IPVS: stop unused estimator thread 0...