last executing test programs: 4m19.131199847s ago: executing program 32 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) 4m4.084245677s ago: executing program 1 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000001200)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x7, 0x0, 0x8, {[@window={0x3, 0x3, 0x9}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1ac99ac123c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237e23ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea6a4606e8c8c9bc0e6f0717299215f563f462fda1"}}}}, 0xfce) 4m3.12996847s ago: executing program 1 (id=86): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x800440, &(0x7f00000001c0)=ANY=[], 0x85, 0x57d, &(0x7f0000001940)="$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") write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc/file0\x00', &(0x7f0000000080)='sysfs\x00', 0x84040, 0x0) 4m3.017356663s ago: executing program 1 (id=87): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m2.929386555s ago: executing program 1 (id=89): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x204031, 0xffffffffffffffff, 0xc9751000) futex(&(0x7f0000000300), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0xfffffffd, 0x0) 4m1.50604201s ago: executing program 1 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000140000001100"], 0x88}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008800) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='lz4hc', 0x5) 4m1.430874322s ago: executing program 1 (id=95): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4e82, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0x5, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0x9, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x3, 0x80000001, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0xc, 0x6, 0x1000, 0x6, 0xa, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x5, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x736f, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x8000, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x2, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x2000007, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3m46.077242968s ago: executing program 33 (id=95): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4e82, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0x5, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0x9, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x3, 0x80000001, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0xc, 0x6, 0x1000, 0x6, 0xa, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x5, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x736f, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x8000, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x2, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x2000007, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3m42.710697171s ago: executing program 0 (id=139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) 3m42.553777995s ago: executing program 0 (id=141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3m42.493512696s ago: executing program 0 (id=143): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x402d084) close(r0) 3m42.35734135s ago: executing program 0 (id=145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 3m41.521494231s ago: executing program 0 (id=147): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m41.313347886s ago: executing program 0 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000001200)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x7, 0x0, 0x8, {[@window={0x3, 0x3, 0x9}]}}, {"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"}}}}, 0xfce) 3m25.66808978s ago: executing program 34 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000001200)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x7, 0x0, 0x8, {[@window={0x3, 0x3, 0x9}]}}, {"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"}}}}, 0xfce) 2m24.908954882s ago: executing program 3 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 2m24.037866073s ago: executing program 3 (id=614): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="00214500002c00000000400600000a0000010a000002f24f0050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b0000000600000a0000010a00000200", 0x17}], 0x1, 0x0, 0x0) 2m23.915833516s ago: executing program 3 (id=615): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 2m23.526125335s ago: executing program 3 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 2m23.453348197s ago: executing program 3 (id=617): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0xfc}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x80044100, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = gettid() ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008014) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000004280)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r4) flock(0xffffffffffffffff, 0x8) 2m23.178093584s ago: executing program 3 (id=623): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002cfbe4dfc52d07fe6b9670e93117085d789a4c3b76a7c8b3d273fd5392199ca0f5b52546f6050830f5a3ad42abe1a3b5b20f6e31132b03caec94aad2851bd2e7926212"], 0x1, 0xdab, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 2m23.082901766s ago: executing program 35 (id=623): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002cfbe4dfc52d07fe6b9670e93117085d789a4c3b76a7c8b3d273fd5392199ca0f5b52546f6050830f5a3ad42abe1a3b5b20f6e31132b03caec94aad2851bd2e7926212"], 0x1, 0xdab, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 1m36.92316219s ago: executing program 6 (id=833): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="00214500002c00000000400600000a0000010a000002f24f0050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b0000000600000a0000010a000002005000500000000200000002601003e800000000010001", 0x2d}], 0x1, 0x0, 0x0) 1m36.850993812s ago: executing program 6 (id=835): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x9, 0xfffffffe}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x23, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x24}, 0x94) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)) ioctl$int_in(r1, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r1) 1m36.800754343s ago: executing program 6 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 1m36.764828014s ago: executing program 6 (id=838): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x101, 0x2, 0x2}) 1m36.474410371s ago: executing program 6 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x4a) 1m35.998560973s ago: executing program 6 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3, 0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) 1m35.998451053s ago: executing program 36 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3, 0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) 1m0.440868456s ago: executing program 5 (id=1124): r0 = io_uring_setup(0x759f, &(0x7f00000065c0)={0x0, 0x6f19, 0x10, 0x0, 0x382}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000008640)=[r0], 0x1) 1m0.440658566s ago: executing program 5 (id=1126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff8, @local}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m0.412486427s ago: executing program 5 (id=1127): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 1m0.391114477s ago: executing program 5 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m0.312752439s ago: executing program 5 (id=1130): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x23, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x24}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r2) 59.952135918s ago: executing program 5 (id=1134): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0xa, 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x4000800) 59.882991329s ago: executing program 37 (id=1134): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0xa, 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x4000800) 55.993033385s ago: executing program 8 (id=1180): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2800c844) 51.063420686s ago: executing program 8 (id=1185): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 50.190993958s ago: executing program 8 (id=1194): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}, {&(0x7f0000000000)='\v\x00', 0x2}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 50.08952702s ago: executing program 8 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 50.08926509s ago: executing program 8 (id=1198): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000700)="466c52b8875d7f9e3b51d567ce1dc2e5edfd56262bc4b89ed32cf057f1e7ccadb04e6e6c2d381199290063308284faa98737941f2b357f471a2ee76b702fb956f2d18b7c79b91d1a911b054e772171054c20c0b981b74a8e8b85d90a27951d922d110fe96a3b8a", 0x67, 0x4010, &(0x7f0000000800)={0x11, 0xf8, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) 50.001506442s ago: executing program 4 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) prctl$PR_SVE_SET_VL(0x32, 0x37605) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ab) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r1, &(0x7f0000000080)='0', 0x1) 49.606279432s ago: executing program 8 (id=1203): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000f74000/0x3000)=nil, 0x3) chdir(0x0) ioprio_set$pid(0x7, 0x0, 0x2004) 49.496939944s ago: executing program 38 (id=1203): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000f74000/0x3000)=nil, 0x3) chdir(0x0) ioprio_set$pid(0x7, 0x0, 0x2004) 49.491185375s ago: executing program 4 (id=1205): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 49.113290614s ago: executing program 4 (id=1208): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003dc0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 48.371436212s ago: executing program 4 (id=1210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000840)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 47.374209617s ago: executing program 4 (id=1217): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 47.169744022s ago: executing program 4 (id=1218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003dc0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 31.567389425s ago: executing program 39 (id=1218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003dc0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 19.215085139s ago: executing program 7 (id=1256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="0000000001000000", 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19.040597212s ago: executing program 7 (id=1257): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x100) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x4, 0x72, 0x4000006}) 18.885552956s ago: executing program 7 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 17.897764021s ago: executing program 7 (id=1261): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x100) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000300)={0x0, 0x2, 0xc6af, 0x4000006}) 17.773525454s ago: executing program 7 (id=1263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000000000000002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 16.371333558s ago: executing program 9 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 12.705518298s ago: executing program 7 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 12.693232128s ago: executing program 9 (id=1271): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xffffffffffffffff, 0x24020000) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240), 0x1, 0x11aa, &(0x7f0000001280)="$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") setns(0xffffffffffffffff, 0x20000) socketpair(0x23, 0x5, 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.184301196s ago: executing program 9 (id=1274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 10.059805893s ago: executing program 9 (id=1277): syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 9.924940056s ago: executing program 9 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5a}, 0x28) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 9.853089588s ago: executing program 9 (id=1279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 1.482616644s ago: executing program 2 (id=1316): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) close(r1) socket$kcm(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)='100002', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x9ddfa0d655910a74) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={[{@creator={'creator', 0x3d, "b771c5c7"}}, {@nobarrier}, {@gid}, {@nodecompose}]}, 0xff, 0x5e6, &(0x7f0000000640)="$eJzs3U9oHNcdB/DvrP7YcsBREjtJS6EiBtPG1Ja0Te1CoW4pRYdQDL3kKux1LLxWgrQpSihF/X/tMYcc0oN6yKnXlB5C01MPPfWuu6F39aQys7OrtaUoWlv2ruLPB96+9/bNe/Pm55mnnVnMBnhmLb2Vqc0UWbr05kZZ395qtre3mvd65SSnkjSSyW6WYjUpPk+up5vytfLNerjii/bzxv1PP7r44SfNbm2yTtX2jcP6Hc1mnTKXZKLOj2u8m489XtE/wjJgF3qBg1Hb3WdzmO6Ped0C46Do/t3cZzY5k+R0/Tkg9erQeLqzO35DrXIAAAAwev967hE6Pb+TnWzk7BOYDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxl1b//X9Sp0SvPpej9/v90/V7q8on22agnAAAAAAAAAADH4Js72clGzvbqu0X1nf9rVeVc9fpc3st6WlnL5WxkOZ10spaFJLMDA01vLHc6awtH6Ll4YM/Fp3O8AAAAAAAAAPAV9Zss7X3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA46BIJrpZlc71yrNpTCY5nWS63G4z+XuvfJJ9NuoJAAAAwFPw/E52spGzvfpuUd3zv1zd95/Oe1lNJyvppJ1WblXPArp3/Y3trWZ7e6t5r0z7x/3Rf4eaRjVius8eDt7zfLXF+X6Ppfw0P8+lzOVG1rKSX2Q5nbQyl59UpeUUma2fXsz25nnwfK8/ULvRL00dPNdXq5nM5HZWqrldzs28k3ZupVEdQ7XN4Xv8dRmd4oe1I8boVp2XR/SnOh8Ps1VEpvoRma9jX0bjhcMjMeR58vCeFtLoP4M69wRifqbOy1j/Yaxjvjhw9r18eCSSb//nHzfutFfv3rm9fml8DukRPRyJ5kAkXnmmIjFdR6O7ig63Wr5W9T2blfws7+RWWrma+SzkWubz/Sym+cAZdv4I11pjuGvtwrfqwkySP9b5eCjj+sJeXCcGV7rZqm3wnb0ovXj8K9Lk1+tCuY/f1vl4eDgSCwOReOnwSPx5t3xdb6/eXbuz/O4R93exzsvL9vdjtTaX58uL5T9WVXvw7CjbXjqwbaFqO9dva+xrO99v+7Irdbr+DLd/pG7bKwe2Nau2VwfaDvqUA8DYO/P6memZ+zP/nvl45nczd2bePP3jU9dOfWM6U/+c/NvEXxt/afygeD0f51d79/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjW3//g7vL7XZrbajC/3a7huuloKBwUgqjXpmAJ+1K5967V9bf/+A7K/eW32693VpdvHb12tXm9xa+e+X2Srs1330d9SyBJ2Hvj/6oZwIAAAAAAAAAAAAc1dP47wSjPkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZFt6K1ObKbIwf3m+rG9vNdtl6pX3tpxM0khS/DIpPk+up5syOzBc8UX7eeP+px9d/PCT5t5Yk73tG4f1O5rNOmUuyUSdH9d4Nx97vKJ/hGXALvQCB6P2/wAAAP//aXwUOQ==") io_setup(0x2e, &(0x7f0000000100)) 1.332242637s ago: executing program 2 (id=1317): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x109002) fadvise64(r0, 0x80000000, 0x400, 0x4) 1.20938502s ago: executing program 2 (id=1318): socket$netlink(0x10, 0x3, 0x12) socket$packet(0x11, 0x2, 0x300) socket$phonet(0x23, 0x2, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mq_open(&(0x7f00000004c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x10a, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x14, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 1.124313172s ago: executing program 2 (id=1319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/fdt', 0x149a82, 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 33.964309ms ago: executing program 2 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) write(0xffffffffffffffff, &(0x7f0000000240)='10000\x00', 0x5) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5\x00', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 2 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) kernel console output (not intermixed with test programs): 550][ T4690] kworker/u4:10 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 192.259299][ T4690] CPU: 0 PID: 4690 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 192.260932][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 192.263291][ T4690] Workqueue: loop5 loop_rootcg_workfn [ 192.264639][ T4690] Call trace: [ 192.265333][ T4690] dump_backtrace+0x1c4/0x1f0 [ 192.266327][ T4690] show_stack+0x2c/0x3c [ 192.267228][ T4690] __dump_stack+0x30/0x40 [ 192.268109][ T4690] dump_stack_lvl+0xf4/0x15c [ 192.269082][ T4690] dump_stack+0x1c/0x5c [ 192.269976][ T4690] dump_header+0xc0/0x724 [ 192.270863][ T4690] out_of_memory+0xc78/0xf70 [ 192.271793][ T4690] mem_cgroup_out_of_memory+0x228/0x2d0 [ 192.272897][ T4690] try_charge_memcg+0xa4c/0x1390 [ 192.273867][ T4690] charge_memcg+0xa4/0x1f0 [ 192.274613][ T4690] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 192.274630][ T4690] __read_swap_cache_async+0x378/0x688 [ 192.274643][ T4690] swap_cluster_readahead+0x6c0/0x818 [ 192.274651][ T4690] shmem_swapin_folio+0x5c4/0x1170 [ 192.274658][ T4690] shmem_get_folio_gfp+0x274/0x2038 [ 192.276731][ T4690] shmem_file_read_iter+0x210/0x954 [ 192.278863][ T4690] do_iter_read+0x4d4/0x8b4 [ 192.281008][ T4690] vfs_iter_read+0x88/0xac [ 192.282686][ T4690] loop_process_work+0xbf0/0x200c [ 192.282707][ T4690] loop_rootcg_workfn+0x28/0x38 [ 192.284727][ T4690] process_one_work+0x7e4/0x13bc [ 192.284749][ T4690] worker_thread+0x8cc/0xfe8 [ 192.284758][ T4690] kthread+0x254/0x2e0 [ 192.284768][ T4690] ret_from_fork+0x10/0x20 [ 192.299000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.319683][ T5496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.321148][ T5496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.323647][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.411727][ T8255] loop4: detected capacity change from 0 to 1024 [ 192.790460][ T4690] memory: usage 96kB, limit 96kB, failcnt 370 [ 192.801433][ T4690] memory+swap: usage 568kB, limit 9007199254740988kB, failcnt 0 [ 192.824222][ T4690] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 192.830990][ T4690] Memory cgroup stats for /syz5/test: [ 192.831091][ T4690] anon 0 [ 192.831091][ T4690] file 90112 [ 192.831091][ T4690] kernel 8192 [ 192.831091][ T4690] kernel_stack 0 [ 192.831091][ T4690] pagetables 0 [ 192.831091][ T4690] sec_pagetables 0 [ 192.831091][ T4690] percpu 0 [ 192.831091][ T4690] sock 0 [ 192.831091][ T4690] vmalloc 0 [ 192.831091][ T4690] shmem 90112 [ 192.831091][ T4690] zswap 0 [ 192.831091][ T4690] zswapped 0 [ 192.831091][ T4690] file_mapped 0 [ 192.831091][ T4690] file_dirty 0 [ 192.831091][ T4690] file_writeback 0 [ 192.831091][ T4690] swapcached 589824 [ 192.831091][ T4690] anon_thp 0 [ 192.831091][ T4690] file_thp 0 [ 192.831091][ T4690] shmem_thp 0 [ 192.831091][ T4690] inactive_anon 61440 [ 192.831091][ T4690] active_anon 28672 [ 192.831091][ T4690] inactive_file 0 [ 192.831091][ T4690] active_file 0 [ 192.831091][ T4690] unevictable 0 [ 192.831091][ T4690] slab_reclaimable 2520 [ 192.831091][ T4690] slab_unreclaimable 2272 [ 192.831091][ T4690] slab 4792 [ 192.973606][ T4690] Out of memory and no killable processes... [ 192.982037][ C1] I/O error, dev loop5, sector 196 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.984053][ C1] Buffer I/O error on dev loop5, logical block 98, async page read [ 192.994778][ T4690] kworker/u4:10 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 193.010641][ T4690] CPU: 1 PID: 4690 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 193.012063][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 193.014124][ T4690] Workqueue: loop5 loop_rootcg_workfn [ 193.015390][ T4690] Call trace: [ 193.016141][ T4690] dump_backtrace+0x1c4/0x1f0 [ 193.017259][ T4690] show_stack+0x2c/0x3c [ 193.018099][ T4690] __dump_stack+0x30/0x40 [ 193.019008][ T4690] dump_stack_lvl+0xf4/0x15c [ 193.019987][ T4690] dump_stack+0x1c/0x5c [ 193.020855][ T4690] dump_header+0xc0/0x724 [ 193.021722][ T4690] out_of_memory+0xc78/0xf70 [ 193.022720][ T4690] mem_cgroup_out_of_memory+0x228/0x2d0 [ 193.023920][ T4690] try_charge_memcg+0xa4c/0x1390 [ 193.024925][ T4690] charge_memcg+0xa4/0x1f0 [ 193.024944][ T4690] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 193.027090][ T4690] __read_swap_cache_async+0x378/0x688 [ 193.028249][ T4690] swap_cluster_readahead+0x6c0/0x818 [ 193.029369][ T4690] shmem_swapin_folio+0x5c4/0x1170 [ 193.030333][ T4690] shmem_get_folio_gfp+0x274/0x2038 [ 193.031373][ T4690] shmem_file_read_iter+0x210/0x954 [ 193.032389][ T4690] do_iter_read+0x4d4/0x8b4 [ 193.033286][ T4690] vfs_iter_read+0x88/0xac [ 193.034120][ T4690] loop_process_work+0xbf0/0x200c [ 193.035069][ T4690] loop_rootcg_workfn+0x28/0x38 [ 193.036093][ T4690] process_one_work+0x7e4/0x13bc [ 193.036109][ T4690] worker_thread+0x8cc/0xfe8 [ 193.036122][ T4690] kthread+0x254/0x2e0 [ 193.038723][ T4690] ret_from_fork+0x10/0x20 [ 193.078251][ T4690] memory: usage 96kB, limit 96kB, failcnt 389 [ 193.079954][ T4690] memory+swap: usage 568kB, limit 9007199254740988kB, failcnt 0 [ 193.082838][ T4690] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 193.085620][ T4690] Memory cgroup stats for /syz5/test: [ 193.085788][ T4690] anon 0 [ 193.085788][ T4690] file 90112 [ 193.085788][ T4690] kernel 8192 [ 193.085788][ T4690] kernel_stack 0 [ 193.085788][ T4690] pagetables 0 [ 193.085788][ T4690] sec_pagetables 0 [ 193.085788][ T4690] percpu 0 [ 193.085788][ T4690] sock 0 [ 193.085788][ T4690] vmalloc 0 [ 193.085788][ T4690] shmem 90112 [ 193.085788][ T4690] zswap 0 [ 193.085788][ T4690] zswapped 0 [ 193.085788][ T4690] file_mapped 0 [ 193.085788][ T4690] file_dirty 0 [ 193.085788][ T4690] file_writeback 0 [ 193.085788][ T4690] swapcached 589824 [ 193.085788][ T4690] anon_thp 0 [ 193.085788][ T4690] file_thp 0 [ 193.085788][ T4690] shmem_thp 0 [ 193.085788][ T4690] inactive_anon 61440 [ 193.085788][ T4690] active_anon 28672 [ 193.085788][ T4690] inactive_file 0 [ 193.085788][ T4690] active_file 0 [ 193.085788][ T4690] unevictable 0 [ 193.085788][ T4690] slab_reclaimable 2520 [ 193.085788][ T4690] slab_unreclaimable 2272 [ 193.085788][ T4690] slab 4792 [ 193.152442][ T4690] Out of memory and no killable processes... [ 193.156403][ C1] I/O error, dev loop5, sector 198 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.158446][ C1] Buffer I/O error on dev loop5, logical block 99, async page read [ 193.419474][ T8291] netlink: 36 bytes leftover after parsing attributes in process `syz.8.721'. [ 193.421513][ T8291] netlink: 36 bytes leftover after parsing attributes in process `syz.8.721'. [ 193.423307][ T8291] netlink: 31 bytes leftover after parsing attributes in process `syz.8.721'. [ 193.462956][ T8300] loop4: detected capacity change from 0 to 8 [ 193.823772][ T8327] loop8: detected capacity change from 0 to 512 [ 193.850368][ T8325] loop6: detected capacity change from 0 to 1024 [ 193.862410][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.864572][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 193.865910][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.872692][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.874699][ C0] Buffer I/O error on dev loop6, logical block 12, async page read [ 193.877890][ C0] I/O error, dev loop6, sector 26 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.879755][ C0] Buffer I/O error on dev loop6, logical block 13, async page read [ 193.886993][ C1] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.889034][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 193.890126][ T8327] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 193.893530][ C1] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.895666][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 193.897564][ T8325] hfsplus: failed to load extents file [ 193.899089][ T8327] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 193.912500][ T8327] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #13: comm syz.8.730: iget: bad i_size value: 12154757448730 [ 193.939732][ T8327] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.730: couldn't read orphan inode 13 (err -117) [ 193.972677][ T8327] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 194.567429][ T8355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.735'. [ 194.569495][ T8355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.735'. [ 194.572836][ T8355] netlink: 31 bytes leftover after parsing attributes in process `syz.5.735'. [ 194.708774][ T7753] EXT4-fs (loop8): unmounting filesystem. [ 194.790217][ T8378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.792113][ T8378] syz.4.742: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 194.798636][ T8378] CPU: 0 PID: 8378 Comm: syz.4.742 Not tainted syzkaller #0 [ 194.800242][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 194.802529][ T8378] Call trace: [ 194.803203][ T8378] dump_backtrace+0x1c4/0x1f0 [ 194.804232][ T8378] show_stack+0x2c/0x3c [ 194.805112][ T8378] __dump_stack+0x30/0x40 [ 194.805985][ T8378] dump_stack_lvl+0xf4/0x15c [ 194.807006][ T8378] dump_stack+0x1c/0x5c [ 194.807918][ T8378] warn_alloc+0x214/0x324 [ 194.808967][ T8378] __vmalloc_node_range+0x24c/0xe70 [ 194.810117][ T8378] vzalloc+0x9c/0xd4 [ 194.810933][ T8378] vidtv_mux_init+0x190/0x1554 [ 194.811804][ T8378] vidtv_start_feed+0x2e0/0x49c [ 194.812759][ T8378] dmx_ts_feed_start_filtering+0x124/0x1fc [ 194.813957][ T8378] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 194.814950][ T8378] dvb_demux_do_ioctl+0x438/0x4d8 [ 194.815814][ T8378] dvb_usercopy+0x248/0x45c [ 194.816727][ T8378] dvb_demux_ioctl+0x3c/0x54 [ 194.817624][ T8378] __arm64_sys_ioctl+0x14c/0x1c8 [ 194.818536][ T8378] invoke_syscall+0x98/0x290 [ 194.819439][ T8378] el0_svc_common+0x13c/0x258 [ 194.820284][ T8378] do_el0_svc+0x5c/0x134 [ 194.821101][ T8378] el0_svc+0x58/0x12c [ 194.821839][ T8378] el0t_64_sync_handler+0x84/0xf0 [ 194.822871][ T8378] el0t_64_sync+0x18c/0x190 [ 194.854839][ T8378] Mem-Info: [ 194.855475][ T8378] active_anon:9381 inactive_anon:0 isolated_anon:0 [ 194.855475][ T8378] active_file:5242 inactive_file:2177 isolated_file:0 [ 194.855475][ T8378] unevictable:768 dirty:120 writeback:0 [ 194.855475][ T8378] slab_reclaimable:15024 slab_unreclaimable:95781 [ 194.855475][ T8378] mapped:32199 shmem:3812 pagetables:897 [ 194.855475][ T8378] sec_pagetables:0 bounce:0 [ 194.855475][ T8378] kernel_misc_reclaimable:0 [ 194.855475][ T8378] free:1445081 free_pcp:2564 free_cma:7360 [ 194.874488][ T8378] Node 0 active_anon:37624kB inactive_anon:0kB active_file:20968kB inactive_file:8708kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:128796kB dirty:480kB writeback:0kB shmem:15248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10000kB pagetables:3588kB sec_pagetables:0kB all_unreclaimable? no [ 194.884205][ T8378] Node 0 DMA free:3076864kB boost:0kB min:20664kB low:25828kB high:30992kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 194.890054][ T8378] lowmem_reserve[]: 0 0 3550 3550 3550 [ 194.891246][ T8378] Node 0 Normal free:2703460kB boost:0kB min:24388kB low:30484kB high:36580kB reserved_highatomic:0KB active_anon:37724kB inactive_anon:0kB active_file:20968kB inactive_file:8708kB unevictable:3072kB writepending:480kB present:5242880kB managed:3639384kB mlocked:0kB bounce:0kB free_pcp:10276kB local_pcp:7904kB free_cma:0kB [ 194.918610][ T8380] loop7: detected capacity change from 0 to 1024 [ 194.936446][ T8378] lowmem_reserve[]: 0 0 0 0 0 [ 194.937600][ T8378] Node 0 DMA: [ 194.937674][ T8378] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 194.939359][ C1] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.942741][ T8378] Node 0 Normal: 445*4kB (UME) 16*8kB (UME) 177*16kB (UM) 795*32kB (UM) 254*64kB (UME) 90*128kB (UME) 54*256kB (UME) 24*512kB (UME) 12*1024kB (UME) 9*2048kB (ME) 632*4096kB (M) = 2703460kB [ 194.949693][ C1] Buffer I/O error on dev loop7, logical block 16, async page read [ 194.949798][ T8378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.963266][ T8378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 194.967017][ T8378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 194.970141][ T8378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 194.972798][ T8378] 11229 total pagecache pages [ 194.984775][ T8378] 0 pages in swap cache [ 194.985754][ T8378] Free swap = 123972kB [ 194.986690][ T8378] Total swap = 124996kB [ 194.993778][ T8378] 2097152 pages RAM [ 194.998619][ T8378] 0 pages HighMem/MovableOnly [ 194.999571][ T8378] 417258 pages reserved [ 195.001824][ T8378] 8192 pages cma reserved [ 195.002710][ T8378] 0 pages hwpoisoned [ 195.064496][ T4401] net_ratelimit: 85 callbacks suppressed [ 195.549046][ T8402] loop4: detected capacity change from 0 to 8 [ 195.702894][ T8427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.749'. [ 195.709463][ T8427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.749'. [ 195.711144][ T8427] netlink: 31 bytes leftover after parsing attributes in process `syz.7.749'. [ 196.042544][ T8446] loop6: detected capacity change from 0 to 512 [ 196.063860][ T8446] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 196.069036][ T8446] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 196.070953][ T8446] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #13: comm syz.6.754: iget: bad i_size value: 12154757448730 [ 196.073871][ T8446] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.754: couldn't read orphan inode 13 (err -117) [ 196.077160][ T8446] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 196.617699][ T8449] loop7: detected capacity change from 0 to 32768 [ 196.619523][ T8449] (syz.7.755,8449,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "hear [ 196.619523][ T8449] " or missing value [ 196.624576][ T8449] (syz.7.755,8449,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 196.721960][ T8475] netlink: 36 bytes leftover after parsing attributes in process `syz.5.761'. [ 196.902496][ T4935] EXT4-fs (loop6): unmounting filesystem. [ 197.047970][ T8498] loop6: detected capacity change from 0 to 8 [ 197.717971][ T8510] loop8: detected capacity change from 0 to 512 [ 197.754909][ T8510] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.771: iget: bad extended attribute block 134217728 [ 197.758141][ T8510] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.771: couldn't read orphan inode 15 (err -117) [ 197.830427][ T8510] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 198.055173][ T7753] EXT4-fs (loop8): unmounting filesystem. [ 198.170803][ T8542] FAULT_INJECTION: forcing a failure. [ 198.170803][ T8542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.173436][ T8542] CPU: 1 PID: 8542 Comm: syz.8.781 Not tainted syzkaller #0 [ 198.175015][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 198.177252][ T8542] Call trace: [ 198.177953][ T8542] dump_backtrace+0x1c4/0x1f0 [ 198.177978][ T8542] show_stack+0x2c/0x3c [ 198.179794][ T8542] __dump_stack+0x30/0x40 [ 198.180667][ T8542] dump_stack_lvl+0xf4/0x15c [ 198.181586][ T8542] dump_stack+0x1c/0x5c [ 198.181607][ T8542] should_fail_ex+0x3cc/0x524 [ 198.183270][ T8542] should_fail+0x14/0x24 [ 198.184157][ T8542] should_fail_usercopy+0x20/0x30 [ 198.184172][ T8542] put_timespec64+0xc8/0x20c [ 198.184187][ T8542] __arm64_sys_clock_gettime+0x1e0/0x250 [ 198.187248][ T8542] invoke_syscall+0x98/0x290 [ 198.188351][ T8542] el0_svc_common+0x13c/0x258 [ 198.189284][ T8542] do_el0_svc+0x5c/0x134 [ 198.189302][ T8542] el0_svc+0x58/0x12c [ 198.191036][ T8542] el0t_64_sync_handler+0x84/0xf0 [ 198.192230][ T8542] el0t_64_sync+0x18c/0x190 [ 198.341519][ T8558] loop6: detected capacity change from 0 to 8 [ 199.291800][ T8591] FAULT_INJECTION: forcing a failure. [ 199.291800][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.295714][ T8591] CPU: 0 PID: 8591 Comm: syz.8.798 Not tainted syzkaller #0 [ 199.297144][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 199.298941][ T8591] Call trace: [ 199.299591][ T8591] dump_backtrace+0x1c4/0x1f0 [ 199.300519][ T8591] show_stack+0x2c/0x3c [ 199.301284][ T8591] __dump_stack+0x30/0x40 [ 199.302085][ T8591] dump_stack_lvl+0xf4/0x15c [ 199.302877][ T8591] dump_stack+0x1c/0x5c [ 199.303616][ T8591] should_fail_ex+0x3cc/0x524 [ 199.304478][ T8591] should_fail+0x14/0x24 [ 199.305368][ T8591] should_fail_usercopy+0x20/0x30 [ 199.306426][ T8591] put_timespec64+0xc8/0x20c [ 199.307371][ T8591] __arm64_sys_clock_gettime+0x1e0/0x250 [ 199.308573][ T8591] invoke_syscall+0x98/0x290 [ 199.309528][ T8591] el0_svc_common+0x13c/0x258 [ 199.310580][ T8591] do_el0_svc+0x5c/0x134 [ 199.311561][ T8591] el0_svc+0x58/0x12c [ 199.312481][ T8591] el0t_64_sync_handler+0x84/0xf0 [ 199.313652][ T8591] el0t_64_sync+0x18c/0x190 [ 199.329676][ T8594] __nla_validate_parse: 8 callbacks suppressed [ 199.329682][ T8594] netlink: 36 bytes leftover after parsing attributes in process `syz.6.799'. [ 199.332686][ T8594] netlink: 36 bytes leftover after parsing attributes in process `syz.6.799'. [ 199.339028][ T8594] netlink: 31 bytes leftover after parsing attributes in process `syz.6.799'. [ 199.707560][ T8603] loop8: detected capacity change from 0 to 128 [ 199.728234][ T8603] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 199.746228][ T7753] EXT4-fs (loop8): unmounting filesystem. [ 199.774578][ T8449] block2mtd: error: cannot open device /dev/loop0 [ 200.007347][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.811'. [ 200.009566][ T8622] loop5: detected capacity change from 0 to 7 [ 200.010616][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.811'. [ 200.012934][ T8620] netlink: 31 bytes leftover after parsing attributes in process `syz.4.811'. [ 200.018507][ T7950] Dev loop5: unable to read RDB block 7 [ 200.019817][ T7950] loop5: AHDI p1 p2 p3 [ 200.020693][ T7950] loop5: partition table partially beyond EOD, truncated [ 200.024614][ T7950] loop5: p1 start 1818582900 is beyond EOD, truncated [ 200.029784][ T7950] loop5: p3 start 335544320 is beyond EOD, truncated [ 200.051854][ T8622] Dev loop5: unable to read RDB block 7 [ 200.053345][ T8622] loop5: AHDI p1 p2 p3 [ 200.057683][ T8622] loop5: partition table partially beyond EOD, truncated [ 200.062369][ T8622] loop5: p1 start 1818582900 is beyond EOD, truncated [ 200.066158][ T8622] loop5: p3 start 335544320 is beyond EOD, truncated [ 200.076474][ T8627] FAULT_INJECTION: forcing a failure. [ 200.076474][ T8627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.085191][ T8627] CPU: 0 PID: 8627 Comm: syz.7.812 Not tainted syzkaller #0 [ 200.086871][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 200.089220][ T8627] Call trace: [ 200.089958][ T8627] dump_backtrace+0x1c4/0x1f0 [ 200.091051][ T8627] show_stack+0x2c/0x3c [ 200.092009][ T8627] __dump_stack+0x30/0x40 [ 200.092033][ T8627] dump_stack_lvl+0xf4/0x15c [ 200.094017][ T8627] dump_stack+0x1c/0x5c [ 200.094176][ C1] net_ratelimit: 63 callbacks suppressed [ 200.094899][ T8627] should_fail_ex+0x3cc/0x524 [ 200.097038][ T8627] should_fail+0x14/0x24 [ 200.097874][ T8627] get_futex_key+0x904/0xfb0 [ 200.098834][ T8627] futex_wake+0x10c/0x458 [ 200.099652][ T8627] do_futex+0x2c4/0x340 [ 200.100518][ T8627] __arm64_sys_futex+0x390/0x414 [ 200.101497][ T8627] invoke_syscall+0x98/0x290 [ 200.102416][ T8627] el0_svc_common+0x13c/0x258 [ 200.103252][ T8627] do_el0_svc+0x5c/0x134 [ 200.103273][ T8627] el0_svc+0x58/0x12c [ 200.103283][ T8627] el0t_64_sync_handler+0x84/0xf0 [ 200.104897][ T8627] el0t_64_sync+0x18c/0x190 [ 200.139808][ T8630] loop8: detected capacity change from 0 to 512 [ 200.360002][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.816'. [ 200.361939][ T8638] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 200.372951][ T8632] loop7: detected capacity change from 0 to 32768 [ 200.382183][ T8632] (syz.7.815,8632,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "hear [ 200.382183][ T8632] " or missing value [ 200.384965][ T8632] (syz.7.815,8632,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 200.502268][ T8649] netlink: 36 bytes leftover after parsing attributes in process `syz.8.823'. [ 200.504113][ T8649] netlink: 36 bytes leftover after parsing attributes in process `syz.8.823'. [ 200.507002][ T8649] netlink: 31 bytes leftover after parsing attributes in process `syz.8.823'. [ 200.536092][ T8653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.552024][ T8655] FAULT_INJECTION: forcing a failure. [ 200.552024][ T8655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.555295][ T8655] CPU: 1 PID: 8655 Comm: syz.6.826 Not tainted syzkaller #0 [ 200.556715][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 200.556746][ T8655] Call trace: [ 200.559305][ T8655] dump_backtrace+0x1c4/0x1f0 [ 200.559324][ T8655] show_stack+0x2c/0x3c [ 200.560144][ T8655] __dump_stack+0x30/0x40 [ 200.561848][ T8655] dump_stack_lvl+0xf4/0x15c [ 200.562697][ T8655] dump_stack+0x1c/0x5c [ 200.563449][ T8655] should_fail_ex+0x3cc/0x524 [ 200.564436][ T8655] should_fail+0x14/0x24 [ 200.565179][ T8655] should_fail_usercopy+0x20/0x30 [ 200.566181][ T8655] put_timespec64+0xc8/0x20c [ 200.567150][ T8655] __arm64_sys_clock_gettime+0x1e0/0x250 [ 200.568356][ T8655] invoke_syscall+0x98/0x290 [ 200.569201][ T8655] el0_svc_common+0x13c/0x258 [ 200.570173][ T8655] do_el0_svc+0x5c/0x134 [ 200.570936][ T8655] el0_svc+0x58/0x12c [ 200.571776][ T8655] el0t_64_sync_handler+0x84/0xf0 [ 200.572702][ T8655] el0t_64_sync+0x18c/0x190 [ 201.274106][ T8710] loop6: detected capacity change from 0 to 1024 [ 201.329763][ T8710] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 201.354831][ T8710] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.838: lblock 3 mapped to illegal pblock 3 (length 3) [ 201.360927][ T8724] FAULT_INJECTION: forcing a failure. [ 201.360927][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.369789][ T8710] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 201.372222][ T8710] EXT4-fs (loop6): This should not happen!! Data will be lost [ 201.372222][ T8710] [ 201.375195][ T8724] CPU: 1 PID: 8724 Comm: syz.5.840 Not tainted syzkaller #0 [ 201.376529][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 201.378494][ T8724] Call trace: [ 201.379168][ T8724] dump_backtrace+0x1c4/0x1f0 [ 201.380009][ T8724] show_stack+0x2c/0x3c [ 201.380865][ T8724] __dump_stack+0x30/0x40 [ 201.381713][ T8724] dump_stack_lvl+0xf4/0x15c [ 201.382673][ T8724] dump_stack+0x1c/0x5c [ 201.383561][ T8724] should_fail_ex+0x3cc/0x524 [ 201.384556][ T8724] should_fail+0x14/0x24 [ 201.385452][ T8724] should_fail_usercopy+0x20/0x30 [ 201.386471][ T8724] put_timespec64+0xc8/0x20c [ 201.387332][ T8724] __arm64_sys_clock_gettime+0x1e0/0x250 [ 201.388307][ T8724] invoke_syscall+0x98/0x290 [ 201.389161][ T8724] el0_svc_common+0x13c/0x258 [ 201.389924][ T8724] do_el0_svc+0x5c/0x134 [ 201.390724][ T8724] el0_svc+0x58/0x12c [ 201.391467][ T8724] el0t_64_sync_handler+0x84/0xf0 [ 201.392294][ T8724] el0t_64_sync+0x18c/0x190 [ 201.541520][ T4935] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /155/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 201.559362][ T4935] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /155/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 201.563902][ T4935] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 201.569473][ T4935] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /155/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 201.573766][ T4935] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 201.578761][ T4935] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /155/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 201.583329][ T4935] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 201.588638][ T4935] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /155/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 201.592786][ T4935] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 201.597538][ T8743] loop8: detected capacity change from 0 to 8 [ 201.949207][ T7079] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 201.951362][ T7079] EXT4-fs (loop6): This should not happen!! Data will be lost [ 201.951362][ T7079] [ 201.956891][ T4935] EXT4-fs (loop6): unmounting filesystem. [ 202.073429][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.084340][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.086549][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.089747][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.092674][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.096119][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.468476][ T8831] FAULT_INJECTION: forcing a failure. [ 202.468476][ T8831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.472015][ T8831] CPU: 0 PID: 8831 Comm: syz.8.854 Not tainted syzkaller #0 [ 202.473493][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 202.475733][ T8831] Call trace: [ 202.476306][ T8831] dump_backtrace+0x1c4/0x1f0 [ 202.477096][ T8831] show_stack+0x2c/0x3c [ 202.477114][ T8831] __dump_stack+0x30/0x40 [ 202.478789][ T8831] dump_stack_lvl+0xf4/0x15c [ 202.479770][ T8831] dump_stack+0x1c/0x5c [ 202.480638][ T8831] should_fail_ex+0x3cc/0x524 [ 202.481516][ T8831] should_fail+0x14/0x24 [ 202.482488][ T8831] get_futex_key+0x904/0xfb0 [ 202.482508][ T8831] futex_wake+0x10c/0x458 [ 202.484230][ T8831] do_futex+0x2c4/0x340 [ 202.485019][ T8831] __arm64_sys_futex+0x390/0x414 [ 202.485971][ T8831] invoke_syscall+0x98/0x290 [ 202.486949][ T8831] el0_svc_common+0x13c/0x258 [ 202.486977][ T8831] do_el0_svc+0x5c/0x134 [ 202.488717][ T8831] el0_svc+0x58/0x12c [ 202.489523][ T8831] el0t_64_sync_handler+0x84/0xf0 [ 202.490430][ T8831] el0t_64_sync+0x18c/0x190 [ 202.677216][ T8789] chnl_net:caif_netlink_parms(): no params data found [ 202.780296][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.781781][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.783738][ T8789] device bridge_slave_0 entered promiscuous mode [ 202.786375][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.787931][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.790006][ T8789] device bridge_slave_1 entered promiscuous mode [ 202.824432][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.828237][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.851982][ T8789] team0: Port device team_slave_0 added [ 202.854660][ T8789] team0: Port device team_slave_1 added [ 202.876602][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.877982][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.882770][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.885920][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.887433][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.891939][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.027909][ T8789] device hsr_slave_0 entered promiscuous mode [ 203.055096][ T8789] device hsr_slave_1 entered promiscuous mode [ 203.114674][ T8789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.116188][ T8789] Cannot create hsr debugfs directory [ 203.227446][ T8867] device syzkaller0 entered promiscuous mode [ 203.657266][ T8632] block2mtd: error: cannot open device /dev/loop0 [ 203.677466][ T8789] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 203.703666][ T8875] FAULT_INJECTION: forcing a failure. [ 203.703666][ T8875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.706978][ T8875] CPU: 1 PID: 8875 Comm: syz.7.866 Not tainted syzkaller #0 [ 203.708187][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 203.710026][ T8875] Call trace: [ 203.710703][ T8875] dump_backtrace+0x1c4/0x1f0 [ 203.711735][ T8875] show_stack+0x2c/0x3c [ 203.712685][ T8875] __dump_stack+0x30/0x40 [ 203.713648][ T8875] dump_stack_lvl+0xf4/0x15c [ 203.714648][ T8875] dump_stack+0x1c/0x5c [ 203.715596][ T8875] should_fail_ex+0x3cc/0x524 [ 203.716629][ T8875] should_fail+0x14/0x24 [ 203.717575][ T8875] should_fail_usercopy+0x20/0x30 [ 203.718721][ T8875] put_timespec64+0xc8/0x20c [ 203.719742][ T8875] __arm64_sys_clock_gettime+0x1e0/0x250 [ 203.720896][ T8875] invoke_syscall+0x98/0x290 [ 203.721761][ T8875] el0_svc_common+0x13c/0x258 [ 203.722667][ T8875] do_el0_svc+0x5c/0x134 [ 203.723635][ T8875] el0_svc+0x58/0x12c [ 203.724559][ T8875] el0t_64_sync_handler+0x84/0xf0 [ 203.725693][ T8875] el0t_64_sync+0x18c/0x190 [ 203.732331][ T8789] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 203.767223][ T8789] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 203.807657][ T8789] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 203.892182][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.900191][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.902079][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.907555][ T8789] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.912006][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.914008][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.916546][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.918042][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.927504][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.950676][ T8789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.953050][ T8789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.998878][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.005001][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.010583][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.011949][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.021249][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.024084][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.027144][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.029827][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.031764][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.033990][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.037542][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.039489][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.041202][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.043003][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.046947][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.048621][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.088216][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.089769][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.095402][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.184300][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 204.296086][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.309607][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.329158][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.331288][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.333338][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.339671][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.349712][ T8789] device veth0_vlan entered promiscuous mode [ 204.362236][ T8789] device veth1_vlan entered promiscuous mode [ 204.440983][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.442753][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.444637][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.446903][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.457792][ T8789] device veth0_macvtap entered promiscuous mode [ 204.477070][ T8789] device veth1_macvtap entered promiscuous mode [ 204.503564][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.511844][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.522492][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.541991][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.550586][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.562708][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.570915][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.580193][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.594169][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.602730][ T8908] loop4: detected capacity change from 0 to 32768 [ 204.604933][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.610195][ T8920] FAULT_INJECTION: forcing a failure. [ 204.610195][ T8920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.621565][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.622564][ T8908] (syz.4.876,8908,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "hear [ 204.622564][ T8908] " or missing value [ 204.625446][ T8920] CPU: 0 PID: 8920 Comm: syz.5.878 Not tainted syzkaller #0 [ 204.627185][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 204.629285][ T8920] Call trace: [ 204.629911][ T8920] dump_backtrace+0x1c4/0x1f0 [ 204.630762][ T8920] show_stack+0x2c/0x3c [ 204.631679][ T8920] __dump_stack+0x30/0x40 [ 204.632661][ T8920] dump_stack_lvl+0xf4/0x15c [ 204.632684][ T8920] dump_stack+0x1c/0x5c [ 204.634560][ T8920] should_fail_ex+0x3cc/0x524 [ 204.634593][ T8920] should_fail+0x14/0x24 [ 204.634603][ T8920] should_fail_usercopy+0x20/0x30 [ 204.634611][ T8920] put_timespec64+0xc8/0x20c [ 204.634617][ T8920] __arm64_sys_clock_gettime+0x1e0/0x250 [ 204.634624][ T8920] invoke_syscall+0x98/0x290 [ 204.634631][ T8920] el0_svc_common+0x13c/0x258 [ 204.641382][ T8920] do_el0_svc+0x5c/0x134 [ 204.642311][ T8920] el0_svc+0x58/0x12c [ 204.643155][ T8920] el0t_64_sync_handler+0x84/0xf0 [ 204.644242][ T8920] el0t_64_sync+0x18c/0x190 [ 204.651456][ T8915] __nla_validate_parse: 10 callbacks suppressed [ 204.651464][ T8915] netlink: 36 bytes leftover after parsing attributes in process `syz.8.877'. [ 204.653288][ T8908] (syz.4.876,8908,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 204.654515][ T8915] netlink: 36 bytes leftover after parsing attributes in process `syz.8.877'. [ 204.654535][ T8915] netlink: 31 bytes leftover after parsing attributes in process `syz.8.877'. [ 204.659550][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.661927][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.672087][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.680619][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.704019][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.707477][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.710631][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.715080][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.719534][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.721765][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.726043][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.731133][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.741881][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.745761][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.749002][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.757043][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.758908][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.807956][ T8789] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.819495][ T8789] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.827977][ T8789] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.834892][ T8789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.294393][ C1] net_ratelimit: 110 callbacks suppressed [ 206.264252][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 207.854834][ T8908] block2mtd: error: cannot open device /dev/loop0 [ 208.015404][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.016746][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.018786][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.147967][ T4782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.149586][ T4782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.151320][ T7079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.166898][ T8984] netlink: 36 bytes leftover after parsing attributes in process `syz.5.890'. [ 208.169103][ T8984] netlink: 36 bytes leftover after parsing attributes in process `syz.5.890'. [ 208.170925][ T8984] netlink: 31 bytes leftover after parsing attributes in process `syz.5.890'. [ 208.175663][ T8985] netlink: 75 bytes leftover after parsing attributes in process `syz.8.888'. [ 208.180436][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.218718][ T8989] FAULT_INJECTION: forcing a failure. [ 208.218718][ T8989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.221836][ T8989] CPU: 0 PID: 8989 Comm: syz.5.891 Not tainted syzkaller #0 [ 208.223480][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 208.225398][ T8989] Call trace: [ 208.226071][ T8989] dump_backtrace+0x1c4/0x1f0 [ 208.227035][ T8989] show_stack+0x2c/0x3c [ 208.227905][ T8989] __dump_stack+0x30/0x40 [ 208.228868][ T8989] dump_stack_lvl+0xf4/0x15c [ 208.229882][ T8989] dump_stack+0x1c/0x5c [ 208.230826][ T8989] should_fail_ex+0x3cc/0x524 [ 208.231849][ T8989] should_fail+0x14/0x24 [ 208.232785][ T8989] get_futex_key+0x904/0xfb0 [ 208.233794][ T8989] futex_wake+0x10c/0x458 [ 208.234760][ T8989] do_futex+0x2c4/0x340 [ 208.235714][ T8989] __arm64_sys_futex+0x390/0x414 [ 208.236808][ T8989] invoke_syscall+0x98/0x290 [ 208.237788][ T8989] el0_svc_common+0x13c/0x258 [ 208.238823][ T8989] do_el0_svc+0x5c/0x134 [ 208.239604][ T8989] el0_svc+0x58/0x12c [ 208.240380][ T8989] el0t_64_sync_handler+0x84/0xf0 [ 208.241296][ T8989] el0t_64_sync+0x18c/0x190 [ 208.334304][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 209.357794][ T9039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.901'. [ 209.373538][ T9039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.901'. [ 209.380722][ T9039] netlink: 31 bytes leftover after parsing attributes in process `syz.4.901'. [ 209.401062][ T9016] loop5: detected capacity change from 0 to 32768 [ 209.403468][ T9042] loop8: detected capacity change from 0 to 2048 [ 209.417296][ T9016] (syz.5.897,9016,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "hear [ 209.417296][ T9016] " or missing value [ 209.427891][ T9016] (syz.5.897,9016,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 209.470389][ T9042] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 210.515852][ C1] net_ratelimit: 84 callbacks suppressed [ 210.574357][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 210.637884][ T7753] EXT4-fs (loop8): unmounting filesystem. [ 210.818283][ T9123] netlink: 36 bytes leftover after parsing attributes in process `syz.8.915'. [ 210.820537][ T9123] netlink: 36 bytes leftover after parsing attributes in process `syz.8.915'. [ 210.822526][ T9123] netlink: 31 bytes leftover after parsing attributes in process `syz.8.915'. [ 211.037960][ T9148] bond0: option slaves: interface -bond_s does not exist! [ 211.078221][ T9154] netlink: 'syz.7.923': attribute type 27 has an invalid length. [ 211.093027][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.221738][ T9239] bond0: option slaves: interface -bond_s does not exist! [ 212.307885][ T9250] capability: warning: `syz.4.940' uses deprecated v2 capabilities in a way that may be insecure [ 212.664411][ T9016] block2mtd: error: cannot open device /dev/loop0 [ 212.788667][ T9271] bond0: option slaves: interface -bond_s does not exist! [ 212.948552][ T9286] loop8: detected capacity change from 0 to 512 [ 213.003954][ T9286] FAT-fs (loop8): error, invalid FAT chain (i_pos 51, last_block 64) [ 213.632538][ T9300] loop9: detected capacity change from 0 to 32768 [ 213.634978][ T9300] (syz.9.958,9300,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "hear [ 213.634978][ T9300] " or missing value [ 213.637022][ T9300] (syz.9.958,9300,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 213.650530][ T9308] bond0: option slaves: interface -bond_slav does not exist! [ 213.669965][ T7950] blk_print_req_error: 1 callbacks suppressed [ 213.669982][ T7950] I/O error, dev loop9, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.675866][ T9310] tipc: Started in network mode [ 213.677020][ T9310] tipc: Node identity 1aa445d4d4c7, cluster identity 4711 [ 213.679694][ T9310] tipc: Enabled bearer , priority 0 [ 213.687517][ T9310] device syzkaller0 entered promiscuous mode [ 213.731455][ T9310] tipc: Resetting bearer [ 213.736433][ T9309] tipc: Resetting bearer [ 213.826058][ T9309] tipc: Disabling bearer [ 214.050323][ T9339] bond0: option slaves: interface -bond_slav does not exist! [ 214.596417][ T9362] netlink: 68 bytes leftover after parsing attributes in process `syz.4.982'. [ 215.070035][ T9374] bond0: option slaves: interface -bond_slav does not exist! [ 215.340689][ T9396] loop4: detected capacity change from 0 to 256 [ 215.806271][ T9404] bond0: option slaves: interface -bond_slave_ does not exist! [ 216.014174][ C1] net_ratelimit: 82 callbacks suppressed [ 216.065351][ T9415] loop4: detected capacity change from 0 to 256 [ 216.079722][ T9415] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.103771][ T9415] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.156909][ T9419] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1005'. [ 216.158614][ T9419] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1005'. [ 216.160256][ T9419] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1005'. [ 216.403879][ T9431] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1006'. [ 216.747805][ T9443] bond0: option slaves: interface -bond_slave_ does not exist! [ 217.157879][ T9295] block2mtd: error: cannot open device /dev/loop0 [ 217.163586][ T9334] zswap: compressor lz4h not available [ 217.247018][ T9461] mmap: syz.8.1018 (9461) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.293906][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1019'. [ 217.295888][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1019'. [ 217.297709][ T9463] netlink: 31 bytes leftover after parsing attributes in process `syz.9.1019'. [ 217.379664][ T9476] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1023'. [ 217.433786][ T9479] bond0: option slaves: interface -bond_slave_ does not exist! [ 217.596045][ T9490] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1027'. [ 217.955916][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1030'. [ 217.961548][ T9495] bond0: (slave bond_slave_0): Releasing backup interface [ 218.020793][ T9493] loop4: detected capacity change from 0 to 1024 [ 218.034258][ T9487] zswap: compressor lz4h not available [ 218.042160][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 218.076342][ T7079] CPU: 0 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 218.077995][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 218.080254][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 218.081414][ T7079] Call trace: [ 218.082178][ T7079] dump_backtrace+0x1c4/0x1f0 [ 218.083124][ T7079] show_stack+0x2c/0x3c [ 218.083990][ T7079] __dump_stack+0x30/0x40 [ 218.084882][ T7079] dump_stack_lvl+0xf4/0x15c [ 218.085841][ T7079] dump_stack+0x1c/0x5c [ 218.086667][ T7079] dump_header+0xc0/0x724 [ 218.087559][ T7079] oom_kill_process+0x35c/0x660 [ 218.088487][ T7079] out_of_memory+0xbf0/0xf70 [ 218.089475][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 218.090466][ T7079] try_charge_memcg+0xa4c/0x1390 [ 218.091475][ T7079] charge_memcg+0xa4/0x1f0 [ 218.092372][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 218.093571][ T7079] __read_swap_cache_async+0x378/0x688 [ 218.094612][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 218.095589][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 218.096645][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 218.097579][ T7079] shmem_file_read_iter+0x210/0x954 [ 218.098557][ T7079] do_iter_read+0x4d4/0x8b4 [ 218.099479][ T7079] vfs_iter_read+0x88/0xac [ 218.100428][ T7079] loop_process_work+0xbf0/0x200c [ 218.101612][ T7079] loop_rootcg_workfn+0x28/0x38 [ 218.102637][ T7079] process_one_work+0x7e4/0x13bc [ 218.103679][ T7079] worker_thread+0x8cc/0xfe8 [ 218.104677][ T7079] kthread+0x254/0x2e0 [ 218.105535][ T7079] ret_from_fork+0x10/0x20 [ 218.136902][ T7079] memory: usage 88kB, limit 96kB, failcnt 224 [ 218.138179][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 218.139993][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 218.141346][ T7079] Memory cgroup stats for /syz4/test: [ 218.141505][ T7079] anon 0 [ 218.141505][ T7079] file 53248 [ 218.141505][ T7079] kernel 36864 [ 218.141505][ T7079] kernel_stack 0 [ 218.141505][ T7079] pagetables 4096 [ 218.141505][ T7079] sec_pagetables 0 [ 218.141505][ T7079] percpu 0 [ 218.141505][ T7079] sock 0 [ 218.141505][ T7079] vmalloc 0 [ 218.141505][ T7079] shmem 53248 [ 218.141505][ T7079] zswap 0 [ 218.141505][ T7079] zswapped 0 [ 218.141505][ T7079] file_mapped 0 [ 218.141505][ T7079] file_dirty 0 [ 218.141505][ T7079] file_writeback 0 [ 218.141505][ T7079] swapcached 589824 [ 218.141505][ T7079] anon_thp 0 [ 218.141505][ T7079] file_thp 0 [ 218.141505][ T7079] shmem_thp 0 [ 218.141505][ T7079] inactive_anon 53248 [ 218.141505][ T7079] active_anon 0 [ 218.141505][ T7079] inactive_file 0 [ 218.141505][ T7079] active_file 0 [ 218.141505][ T7079] unevictable 0 [ 218.141505][ T7079] slab_reclaimable 14088 [ 218.141505][ T7079] slab_unreclaimable 16776 [ 218.141505][ T7079] slab 30864 [ 218.234517][ T7079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1029,pid=9492,uid=0 [ 218.239173][ T7079] Memory cgroup out of memory: Killed process 9492 (syz.4.1029) total-vm:102180kB, anon-rss:1408kB, file-rss:22664kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 218.252556][ T9515] loop7: detected capacity change from 0 to 512 [ 218.362420][ T9515] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 218.685739][ T5226] EXT4-fs (loop7): unmounting filesystem. [ 219.133703][ T9536] zswap: compressor lz4h not available [ 219.266371][ T9549] loop9: detected capacity change from 0 to 512 [ 219.397651][ T9549] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 219.448363][ T8789] EXT4-fs (loop9): unmounting filesystem. [ 220.256472][ T29] oom_reaper: reaped process 9492 (syz.4.1029), now anon-rss:0kB, file-rss:21700kB, shmem-rss:0kB [ 220.262378][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 220.272414][ T7079] CPU: 1 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 220.274060][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.276285][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 220.277594][ T7079] Call trace: [ 220.278326][ T7079] dump_backtrace+0x1c4/0x1f0 [ 220.279207][ T7079] show_stack+0x2c/0x3c [ 220.279962][ T7079] __dump_stack+0x30/0x40 [ 220.280736][ T7079] dump_stack_lvl+0xf4/0x15c [ 220.281621][ T7079] dump_stack+0x1c/0x5c [ 220.282481][ T7079] dump_header+0xc0/0x724 [ 220.283358][ T7079] out_of_memory+0xc78/0xf70 [ 220.284245][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 220.285311][ T7079] try_charge_memcg+0xa4c/0x1390 [ 220.286173][ T7079] charge_memcg+0xa4/0x1f0 [ 220.287053][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 220.288272][ T7079] __read_swap_cache_async+0x378/0x688 [ 220.289384][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 220.290490][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 220.291637][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 220.292745][ T7079] shmem_file_read_iter+0x210/0x954 [ 220.293873][ T7079] do_iter_read+0x4d4/0x8b4 [ 220.294720][ T7079] vfs_iter_read+0x88/0xac [ 220.295531][ T7079] loop_process_work+0xbf0/0x200c [ 220.296556][ T7079] loop_rootcg_workfn+0x28/0x38 [ 220.297515][ T7079] process_one_work+0x7e4/0x13bc [ 220.298493][ T7079] worker_thread+0x8cc/0xfe8 [ 220.299420][ T7079] kthread+0x254/0x2e0 [ 220.300202][ T7079] ret_from_fork+0x10/0x20 [ 220.360910][ T7079] memory: usage 96kB, limit 96kB, failcnt 5667 [ 220.362247][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 220.363718][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 220.376587][ T7079] Memory cgroup stats for /syz4/test: [ 220.376679][ T7079] anon 0 [ 220.376679][ T7079] file 61440 [ 220.376679][ T7079] kernel 36864 [ 220.376679][ T7079] kernel_stack 0 [ 220.376679][ T7079] pagetables 4096 [ 220.376679][ T7079] sec_pagetables 0 [ 220.376679][ T7079] percpu 0 [ 220.376679][ T7079] sock 0 [ 220.376679][ T7079] vmalloc 0 [ 220.376679][ T7079] shmem 61440 [ 220.376679][ T7079] zswap 0 [ 220.376679][ T7079] zswapped 0 [ 220.376679][ T7079] file_mapped 0 [ 220.376679][ T7079] file_dirty 0 [ 220.376679][ T7079] file_writeback 0 [ 220.376679][ T7079] swapcached 589824 [ 220.376679][ T7079] anon_thp 0 [ 220.376679][ T7079] file_thp 0 [ 220.376679][ T7079] shmem_thp 0 [ 220.376679][ T7079] inactive_anon 53248 [ 220.376679][ T7079] active_anon 8192 [ 220.376679][ T7079] inactive_file 0 [ 220.376679][ T7079] active_file 0 [ 220.376679][ T7079] unevictable 0 [ 220.376679][ T7079] slab_reclaimable 14088 [ 220.376679][ T7079] slab_unreclaimable 16776 [ 220.376679][ T7079] slab 30864 [ 220.420747][ T7079] Out of memory and no killable processes... [ 220.422049][ C0] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.433428][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 220.439216][ T7079] CPU: 0 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 220.440498][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.442470][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 220.443636][ T7079] Call trace: [ 220.444428][ T7079] dump_backtrace+0x1c4/0x1f0 [ 220.445410][ T7079] show_stack+0x2c/0x3c [ 220.446331][ T7079] __dump_stack+0x30/0x40 [ 220.447329][ T7079] dump_stack_lvl+0xf4/0x15c [ 220.448295][ T7079] dump_stack+0x1c/0x5c [ 220.449222][ T7079] dump_header+0xc0/0x724 [ 220.450182][ T7079] out_of_memory+0xc78/0xf70 [ 220.451230][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 220.452394][ T7079] try_charge_memcg+0xa4c/0x1390 [ 220.453304][ T7079] charge_memcg+0xa4/0x1f0 [ 220.454291][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 220.455525][ T7079] __read_swap_cache_async+0x378/0x688 [ 220.456759][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 220.457956][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 220.459114][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 220.460128][ T7079] shmem_file_read_iter+0x210/0x954 [ 220.461132][ T7079] do_iter_read+0x4d4/0x8b4 [ 220.462109][ T7079] vfs_iter_read+0x88/0xac [ 220.463084][ T7079] loop_process_work+0xbf0/0x200c [ 220.464243][ T7079] loop_rootcg_workfn+0x28/0x38 [ 220.465266][ T7079] process_one_work+0x7e4/0x13bc [ 220.466214][ T7079] worker_thread+0x8cc/0xfe8 [ 220.467117][ T7079] kthread+0x254/0x2e0 [ 220.467904][ T7079] ret_from_fork+0x10/0x20 [ 220.510000][ T7079] memory: usage 96kB, limit 96kB, failcnt 5686 [ 220.511062][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 220.512487][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 220.513774][ T7079] Memory cgroup stats for /syz4/test: [ 220.513885][ T7079] anon 0 [ 220.513885][ T7079] file 61440 [ 220.513885][ T7079] kernel 36864 [ 220.513885][ T7079] kernel_stack 0 [ 220.513885][ T7079] pagetables 4096 [ 220.513885][ T7079] sec_pagetables 0 [ 220.513885][ T7079] percpu 0 [ 220.513885][ T7079] sock 0 [ 220.513885][ T7079] vmalloc 0 [ 220.513885][ T7079] shmem 61440 [ 220.513885][ T7079] zswap 0 [ 220.513885][ T7079] zswapped 0 [ 220.513885][ T7079] file_mapped 0 [ 220.513885][ T7079] file_dirty 0 [ 220.513885][ T7079] file_writeback 0 [ 220.513885][ T7079] swapcached 589824 [ 220.513885][ T7079] anon_thp 0 [ 220.513885][ T7079] file_thp 0 [ 220.513885][ T7079] shmem_thp 0 [ 220.513885][ T7079] inactive_anon 53248 [ 220.513885][ T7079] active_anon 8192 [ 220.513885][ T7079] inactive_file 0 [ 220.513885][ T7079] active_file 0 [ 220.513885][ T7079] unevictable 0 [ 220.513885][ T7079] slab_reclaimable 14088 [ 220.513885][ T7079] slab_unreclaimable 16776 [ 220.513885][ T7079] slab 30864 [ 220.551936][ T7079] Out of memory and no killable processes... [ 220.553025][ C0] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.555013][ C0] Buffer I/O error on dev loop4, logical block 512, async page read [ 220.559287][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 220.562263][ T7079] CPU: 0 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 220.563589][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.565535][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 220.566496][ T7079] Call trace: [ 220.567129][ T7079] dump_backtrace+0x1c4/0x1f0 [ 220.568236][ T7079] show_stack+0x2c/0x3c [ 220.569244][ T7079] __dump_stack+0x30/0x40 [ 220.570249][ T7079] dump_stack_lvl+0xf4/0x15c [ 220.571249][ T7079] dump_stack+0x1c/0x5c [ 220.572025][ T7079] dump_header+0xc0/0x724 [ 220.572985][ T7079] out_of_memory+0xc78/0xf70 [ 220.573955][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 220.575196][ T7079] try_charge_memcg+0xa4c/0x1390 [ 220.576324][ T7079] charge_memcg+0xa4/0x1f0 [ 220.577272][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 220.578630][ T7079] __read_swap_cache_async+0x378/0x688 [ 220.579728][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 220.580806][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 220.581779][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 220.582666][ T7079] shmem_file_read_iter+0x210/0x954 [ 220.583699][ T7079] do_iter_read+0x4d4/0x8b4 [ 220.584715][ T7079] vfs_iter_read+0x88/0xac [ 220.585529][ T7079] loop_process_work+0xbf0/0x200c [ 220.586582][ T7079] loop_rootcg_workfn+0x28/0x38 [ 220.587607][ T7079] process_one_work+0x7e4/0x13bc [ 220.588515][ T7079] worker_thread+0x8cc/0xfe8 [ 220.589346][ T7079] kthread+0x254/0x2e0 [ 220.590208][ T7079] ret_from_fork+0x10/0x20 [ 220.622389][ T7079] memory: usage 96kB, limit 96kB, failcnt 5705 [ 220.623718][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 220.632512][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 220.633932][ T7079] Memory cgroup stats for /syz4/test: [ 220.634016][ T7079] anon 0 [ 220.634016][ T7079] file 61440 [ 220.634016][ T7079] kernel 36864 [ 220.634016][ T7079] kernel_stack 0 [ 220.634016][ T7079] pagetables 4096 [ 220.634016][ T7079] sec_pagetables 0 [ 220.634016][ T7079] percpu 0 [ 220.634016][ T7079] sock 0 [ 220.634016][ T7079] vmalloc 0 [ 220.634016][ T7079] shmem 61440 [ 220.634016][ T7079] zswap 0 [ 220.634016][ T7079] zswapped 0 [ 220.634016][ T7079] file_mapped 0 [ 220.634016][ T7079] file_dirty 0 [ 220.634016][ T7079] file_writeback 0 [ 220.634016][ T7079] swapcached 589824 [ 220.634016][ T7079] anon_thp 0 [ 220.634016][ T7079] file_thp 0 [ 220.634016][ T7079] shmem_thp 0 [ 220.634016][ T7079] inactive_anon 53248 [ 220.634016][ T7079] active_anon 8192 [ 220.634016][ T7079] inactive_file 0 [ 220.634016][ T7079] active_file 0 [ 220.634016][ T7079] unevictable 0 [ 220.634016][ T7079] slab_reclaimable 14088 [ 220.634016][ T7079] slab_unreclaimable 16776 [ 220.634016][ T7079] slab 30864 [ 220.673051][ T7079] Out of memory and no killable processes... [ 220.683182][ C0] I/O error, dev loop4, sector 513 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.685047][ C0] Buffer I/O error on dev loop4, logical block 513, async page read [ 220.689869][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 220.697226][ T7079] CPU: 0 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 220.698801][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.700928][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 220.702041][ T7079] Call trace: [ 220.702737][ T7079] dump_backtrace+0x1c4/0x1f0 [ 220.703775][ T7079] show_stack+0x2c/0x3c [ 220.704746][ T7079] __dump_stack+0x30/0x40 [ 220.705760][ T7079] dump_stack_lvl+0xf4/0x15c [ 220.706755][ T7079] dump_stack+0x1c/0x5c [ 220.707582][ T7079] dump_header+0xc0/0x724 [ 220.708398][ T7079] out_of_memory+0xc78/0xf70 [ 220.709311][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 220.710443][ T7079] try_charge_memcg+0xa4c/0x1390 [ 220.711405][ T7079] charge_memcg+0xa4/0x1f0 [ 220.712314][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 220.713678][ T7079] __read_swap_cache_async+0x378/0x688 [ 220.714950][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 220.716092][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 220.717204][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 220.718308][ T7079] shmem_file_read_iter+0x210/0x954 [ 220.719394][ T7079] do_iter_read+0x4d4/0x8b4 [ 220.720227][ T7079] vfs_iter_read+0x88/0xac [ 220.721115][ T7079] loop_process_work+0xbf0/0x200c [ 220.722145][ T7079] loop_rootcg_workfn+0x28/0x38 [ 220.723087][ T7079] process_one_work+0x7e4/0x13bc [ 220.724068][ T7079] worker_thread+0x8cc/0xfe8 [ 220.724861][ T7079] kthread+0x254/0x2e0 [ 220.725559][ T7079] ret_from_fork+0x10/0x20 [ 220.797702][ T7079] memory: usage 96kB, limit 96kB, failcnt 5724 [ 220.798974][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 220.800612][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 220.802148][ T7079] Memory cgroup stats for /syz4/test: [ 220.802253][ T7079] anon 0 [ 220.802253][ T7079] file 61440 [ 220.802253][ T7079] kernel 36864 [ 220.802253][ T7079] kernel_stack 0 [ 220.802253][ T7079] pagetables 4096 [ 220.802253][ T7079] sec_pagetables 0 [ 220.802253][ T7079] percpu 0 [ 220.802253][ T7079] sock 0 [ 220.802253][ T7079] vmalloc 0 [ 220.802253][ T7079] shmem 61440 [ 220.802253][ T7079] zswap 0 [ 220.802253][ T7079] zswapped 0 [ 220.802253][ T7079] file_mapped 0 [ 220.802253][ T7079] file_dirty 0 [ 220.802253][ T7079] file_writeback 0 [ 220.802253][ T7079] swapcached 589824 [ 220.802253][ T7079] anon_thp 0 [ 220.802253][ T7079] file_thp 0 [ 220.802253][ T7079] shmem_thp 0 [ 220.802253][ T7079] inactive_anon 53248 [ 220.802253][ T7079] active_anon 8192 [ 220.802253][ T7079] inactive_file 0 [ 220.802253][ T7079] active_file 0 [ 220.802253][ T7079] unevictable 0 [ 220.802253][ T7079] slab_reclaimable 14088 [ 220.802253][ T7079] slab_unreclaimable 16776 [ 220.802253][ T7079] slab 30864 [ 220.938717][ T7079] Out of memory and no killable processes... [ 220.942140][ C1] I/O error, dev loop4, sector 514 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.943998][ C1] Buffer I/O error on dev loop4, logical block 514, async page read [ 220.953792][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 220.967591][ T7079] CPU: 1 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 220.969075][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.971204][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 220.972466][ T7079] Call trace: [ 220.973240][ T7079] dump_backtrace+0x1c4/0x1f0 [ 220.974308][ T7079] show_stack+0x2c/0x3c [ 220.975278][ T7079] __dump_stack+0x30/0x40 [ 220.976234][ T7079] dump_stack_lvl+0xf4/0x15c [ 220.977261][ T7079] dump_stack+0x1c/0x5c [ 220.978009][ T7079] dump_header+0xc0/0x724 [ 220.978762][ T7079] out_of_memory+0xc78/0xf70 [ 220.979746][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 220.980937][ T7079] try_charge_memcg+0xa4c/0x1390 [ 220.981898][ T7079] charge_memcg+0xa4/0x1f0 [ 220.982828][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 220.984003][ T7079] __read_swap_cache_async+0x378/0x688 [ 220.985154][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 220.986289][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 220.987289][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 220.988473][ T7079] shmem_file_read_iter+0x210/0x954 [ 220.989622][ T7079] do_iter_read+0x4d4/0x8b4 [ 220.990669][ T7079] vfs_iter_read+0x88/0xac [ 220.991644][ T7079] loop_process_work+0xbf0/0x200c [ 220.992824][ T7079] loop_rootcg_workfn+0x28/0x38 [ 220.993957][ T7079] process_one_work+0x7e4/0x13bc [ 220.995085][ T7079] worker_thread+0x8cc/0xfe8 [ 220.996161][ T7079] kthread+0x254/0x2e0 [ 220.997176][ T7079] ret_from_fork+0x10/0x20 [ 221.134192][ C0] net_ratelimit: 68 callbacks suppressed [ 221.511131][ T7079] memory: usage 96kB, limit 96kB, failcnt 5743 [ 221.512737][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 221.519872][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 221.521495][ T7079] Memory cgroup stats for /syz4/test: [ 221.521567][ T7079] anon 0 [ 221.521567][ T7079] file 61440 [ 221.521567][ T7079] kernel 36864 [ 221.521567][ T7079] kernel_stack 0 [ 221.521567][ T7079] pagetables 4096 [ 221.521567][ T7079] sec_pagetables 0 [ 221.521567][ T7079] percpu 0 [ 221.521567][ T7079] sock 0 [ 221.521567][ T7079] vmalloc 0 [ 221.521567][ T7079] shmem 61440 [ 221.521567][ T7079] zswap 0 [ 221.521567][ T7079] zswapped 0 [ 221.521567][ T7079] file_mapped 0 [ 221.521567][ T7079] file_dirty 0 [ 221.521567][ T7079] file_writeback 0 [ 221.521567][ T7079] swapcached 589824 [ 221.521567][ T7079] anon_thp 0 [ 221.521567][ T7079] file_thp 0 [ 221.521567][ T7079] shmem_thp 0 [ 221.521567][ T7079] inactive_anon 53248 [ 221.521567][ T7079] active_anon 8192 [ 221.521567][ T7079] inactive_file 0 [ 221.521567][ T7079] active_file 0 [ 221.521567][ T7079] unevictable 0 [ 221.521567][ T7079] slab_reclaimable 14088 [ 221.521567][ T7079] slab_unreclaimable 16776 [ 221.521567][ T7079] slab 30864 [ 221.630485][ T7079] Out of memory and no killable processes... [ 221.631759][ C1] I/O error, dev loop4, sector 515 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.633728][ C1] Buffer I/O error on dev loop4, logical block 515, async page read [ 221.643921][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 221.654168][ T7079] CPU: 1 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 221.655417][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 221.657106][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 221.658082][ T7079] Call trace: [ 221.658561][ T7079] dump_backtrace+0x1c4/0x1f0 [ 221.659316][ T7079] show_stack+0x2c/0x3c [ 221.660073][ T7079] __dump_stack+0x30/0x40 [ 221.660827][ T7079] dump_stack_lvl+0xf4/0x15c [ 221.661665][ T7079] dump_stack+0x1c/0x5c [ 221.662371][ T7079] dump_header+0xc0/0x724 [ 221.663066][ T7079] out_of_memory+0xc78/0xf70 [ 221.663829][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 221.664921][ T7079] try_charge_memcg+0xa4c/0x1390 [ 221.665836][ T7079] charge_memcg+0xa4/0x1f0 [ 221.666641][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 221.667764][ T7079] __read_swap_cache_async+0x378/0x688 [ 221.668743][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 221.669699][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 221.670727][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 221.671788][ T7079] shmem_file_read_iter+0x210/0x954 [ 221.672802][ T7079] do_iter_read+0x4d4/0x8b4 [ 221.673739][ T7079] vfs_iter_read+0x88/0xac [ 221.674672][ T7079] loop_process_work+0xbf0/0x200c [ 221.675714][ T7079] loop_rootcg_workfn+0x28/0x38 [ 221.676744][ T7079] process_one_work+0x7e4/0x13bc [ 221.677792][ T7079] worker_thread+0x8cc/0xfe8 [ 221.678791][ T7079] kthread+0x254/0x2e0 [ 221.679680][ T7079] ret_from_fork+0x10/0x20 [ 221.712130][ T7079] memory: usage 96kB, limit 96kB, failcnt 5762 [ 221.714435][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 221.716852][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 221.718385][ T7079] Memory cgroup stats for /syz4/test: [ 221.718470][ T7079] anon 0 [ 221.718470][ T7079] file 61440 [ 221.718470][ T7079] kernel 36864 [ 221.718470][ T7079] kernel_stack 0 [ 221.718470][ T7079] pagetables 4096 [ 221.718470][ T7079] sec_pagetables 0 [ 221.718470][ T7079] percpu 0 [ 221.718470][ T7079] sock 0 [ 221.718470][ T7079] vmalloc 0 [ 221.718470][ T7079] shmem 61440 [ 221.718470][ T7079] zswap 0 [ 221.718470][ T7079] zswapped 0 [ 221.718470][ T7079] file_mapped 0 [ 221.718470][ T7079] file_dirty 0 [ 221.718470][ T7079] file_writeback 0 [ 221.718470][ T7079] swapcached 589824 [ 221.718470][ T7079] anon_thp 0 [ 221.718470][ T7079] file_thp 0 [ 221.718470][ T7079] shmem_thp 0 [ 221.718470][ T7079] inactive_anon 53248 [ 221.718470][ T7079] active_anon 8192 [ 221.718470][ T7079] inactive_file 0 [ 221.718470][ T7079] active_file 0 [ 221.718470][ T7079] unevictable 0 [ 221.718470][ T7079] slab_reclaimable 14088 [ 221.718470][ T7079] slab_unreclaimable 16776 [ 221.718470][ T7079] slab 30864 [ 221.742040][ T7079] Out of memory and no killable processes... [ 221.743155][ C1] I/O error, dev loop4, sector 516 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.745140][ C1] Buffer I/O error on dev loop4, logical block 516, async page read [ 221.762797][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 221.769647][ T7079] CPU: 1 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 221.771234][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 221.773391][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 221.774616][ T7079] Call trace: [ 221.775304][ T7079] dump_backtrace+0x1c4/0x1f0 [ 221.776303][ T7079] show_stack+0x2c/0x3c [ 221.777139][ T7079] __dump_stack+0x30/0x40 [ 221.777934][ T7079] dump_stack_lvl+0xf4/0x15c [ 221.778763][ T7079] dump_stack+0x1c/0x5c [ 221.779512][ T7079] dump_header+0xc0/0x724 [ 221.780419][ T7079] out_of_memory+0xc78/0xf70 [ 221.781387][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 221.782501][ T7079] try_charge_memcg+0xa4c/0x1390 [ 221.783476][ T7079] charge_memcg+0xa4/0x1f0 [ 221.784250][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 221.785347][ T7079] __read_swap_cache_async+0x378/0x688 [ 221.786317][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 221.787298][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 221.788216][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 221.789099][ T7079] shmem_file_read_iter+0x210/0x954 [ 221.790006][ T7079] do_iter_read+0x4d4/0x8b4 [ 221.790865][ T7079] vfs_iter_read+0x88/0xac [ 221.791725][ T7079] loop_process_work+0xbf0/0x200c [ 221.792697][ T7079] loop_rootcg_workfn+0x28/0x38 [ 221.793687][ T7079] process_one_work+0x7e4/0x13bc [ 221.794692][ T7079] worker_thread+0x8cc/0xfe8 [ 221.795515][ T7079] kthread+0x254/0x2e0 [ 221.796240][ T7079] ret_from_fork+0x10/0x20 [ 221.800176][ T7079] memory: usage 96kB, limit 96kB, failcnt 5781 [ 221.801412][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 221.803066][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 221.823288][ T7079] Memory cgroup stats for /syz4/test: [ 221.823379][ T7079] anon 0 [ 221.823379][ T7079] file 61440 [ 221.823379][ T7079] kernel 36864 [ 221.823379][ T7079] kernel_stack 0 [ 221.823379][ T7079] pagetables 4096 [ 221.823379][ T7079] sec_pagetables 0 [ 221.823379][ T7079] percpu 0 [ 221.823379][ T7079] sock 0 [ 221.823379][ T7079] vmalloc 0 [ 221.823379][ T7079] shmem 61440 [ 221.823379][ T7079] zswap 0 [ 221.823379][ T7079] zswapped 0 [ 221.823379][ T7079] file_mapped 0 [ 221.823379][ T7079] file_dirty 0 [ 221.823379][ T7079] file_writeback 0 [ 221.823379][ T7079] swapcached 589824 [ 221.823379][ T7079] anon_thp 0 [ 221.823379][ T7079] file_thp 0 [ 221.823379][ T7079] shmem_thp 0 [ 221.823379][ T7079] inactive_anon 53248 [ 221.823379][ T7079] active_anon 8192 [ 221.823379][ T7079] inactive_file 0 [ 221.823379][ T7079] active_file 0 [ 221.823379][ T7079] unevictable 0 [ 221.823379][ T7079] slab_reclaimable 14088 [ 221.823379][ T7079] slab_unreclaimable 16776 [ 221.823379][ T7079] slab 30864 [ 221.823653][ T9639] __nla_validate_parse: 15 callbacks suppressed [ 221.823675][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1078'. [ 221.826735][ T7079] Out of memory and no killable processes... [ 221.848452][ C1] I/O error, dev loop4, sector 517 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.850487][ C1] Buffer I/O error on dev loop4, logical block 517, async page read [ 221.856644][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 221.859775][ T7079] CPU: 1 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 221.861327][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 221.863231][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 221.864385][ T7079] Call trace: [ 221.865070][ T7079] dump_backtrace+0x1c4/0x1f0 [ 221.865962][ T7079] show_stack+0x2c/0x3c [ 221.866790][ T7079] __dump_stack+0x30/0x40 [ 221.867682][ T7079] dump_stack_lvl+0xf4/0x15c [ 221.868635][ T7079] dump_stack+0x1c/0x5c [ 221.869489][ T7079] dump_header+0xc0/0x724 [ 221.870392][ T7079] out_of_memory+0xc78/0xf70 [ 221.871348][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 221.872540][ T7079] try_charge_memcg+0xa4c/0x1390 [ 221.873572][ T7079] charge_memcg+0xa4/0x1f0 [ 221.874513][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 221.875879][ T7079] __read_swap_cache_async+0x378/0x688 [ 221.876969][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 221.878122][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 221.879027][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 221.879967][ T7079] shmem_file_read_iter+0x210/0x954 [ 221.880925][ T7079] do_iter_read+0x4d4/0x8b4 [ 221.881784][ T7079] vfs_iter_read+0x88/0xac [ 221.882607][ T7079] loop_process_work+0xbf0/0x200c [ 221.883542][ T7079] loop_rootcg_workfn+0x28/0x38 [ 221.884437][ T7079] process_one_work+0x7e4/0x13bc [ 221.885494][ T7079] worker_thread+0x8cc/0xfe8 [ 221.885694][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1078'. [ 221.886456][ T7079] kthread+0x254/0x2e0 [ 221.888918][ T7079] ret_from_fork+0x10/0x20 [ 221.897246][ T9639] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1078'. [ 221.902344][ T7079] memory: usage 96kB, limit 96kB, failcnt 5800 [ 221.903666][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 221.903689][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 221.906585][ T7079] Memory cgroup stats for [ 221.907418][ T7079] /syz4/test: [ 221.907505][ T7079] anon 0 [ 221.907505][ T7079] file 61440 [ 221.907505][ T7079] kernel 36864 [ 221.907505][ T7079] kernel_stack 0 [ 221.907505][ T7079] pagetables 4096 [ 221.907505][ T7079] sec_pagetables 0 [ 221.907505][ T7079] percpu 0 [ 221.907505][ T7079] sock 0 [ 221.907505][ T7079] vmalloc 0 [ 221.907505][ T7079] shmem 61440 [ 221.907505][ T7079] zswap 0 [ 221.907505][ T7079] zswapped 0 [ 221.907505][ T7079] file_mapped 0 [ 221.907505][ T7079] file_dirty 0 [ 221.907505][ T7079] file_writeback 0 [ 221.907505][ T7079] swapcached 589824 [ 221.907505][ T7079] anon_thp 0 [ 221.907505][ T7079] file_thp 0 [ 221.907505][ T7079] shmem_thp 0 [ 221.907505][ T7079] inactive_anon 53248 [ 221.907505][ T7079] active_anon 8192 [ 221.907505][ T7079] inactive_file 0 [ 221.907505][ T7079] active_file 0 [ 221.907505][ T7079] unevictable 0 [ 221.907505][ T7079] slab_reclaimable 14088 [ 221.907505][ T7079] slab_unreclaimable 16776 [ 221.907505][ T7079] slab 30864 [ 221.942691][ T7079] Out of memory and no killable processes... [ 221.951478][ C1] I/O error, dev loop4, sector 518 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.953310][ C1] Buffer I/O error on dev loop4, logical block 518, async page read [ 221.959190][ T7079] kworker/u4:17 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 221.962269][ T7079] CPU: 1 PID: 7079 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 221.963880][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 221.965609][ T7079] Workqueue: loop4 loop_rootcg_workfn [ 221.965651][ T7079] Call trace: [ 221.965657][ T7079] dump_backtrace+0x1c4/0x1f0 [ 221.965666][ T7079] show_stack+0x2c/0x3c [ 221.965671][ T7079] __dump_stack+0x30/0x40 [ 221.965682][ T7079] dump_stack_lvl+0xf4/0x15c [ 221.965688][ T7079] dump_stack+0x1c/0x5c [ 221.965694][ T7079] dump_header+0xc0/0x724 [ 221.965700][ T7079] out_of_memory+0xc78/0xf70 [ 221.965707][ T7079] mem_cgroup_out_of_memory+0x228/0x2d0 [ 221.965716][ T7079] try_charge_memcg+0xa4c/0x1390 [ 221.965721][ T7079] charge_memcg+0xa4/0x1f0 [ 221.965728][ T7079] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 221.965735][ T7079] __read_swap_cache_async+0x378/0x688 [ 221.965742][ T7079] swap_cluster_readahead+0x6c0/0x818 [ 221.965749][ T7079] shmem_swapin_folio+0x5c4/0x1170 [ 221.965754][ T7079] shmem_get_folio_gfp+0x274/0x2038 [ 221.965758][ T7079] shmem_file_read_iter+0x210/0x954 [ 221.965763][ T7079] do_iter_read+0x4d4/0x8b4 [ 221.965768][ T7079] vfs_iter_read+0x88/0xac [ 221.965773][ T7079] loop_process_work+0xbf0/0x200c [ 221.965778][ T7079] loop_rootcg_workfn+0x28/0x38 [ 221.965783][ T7079] process_one_work+0x7e4/0x13bc [ 221.965788][ T7079] worker_thread+0x8cc/0xfe8 [ 221.965793][ T7079] kthread+0x254/0x2e0 [ 221.965799][ T7079] ret_from_fork+0x10/0x20 [ 221.975849][ T7079] memory: usage 96kB, limit 96kB, failcnt 5819 [ 221.977944][ T7079] memory+swap: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 221.980123][ T7079] kmem: usage 36kB, limit 9007199254740988kB, failcnt 0 [ 221.982457][ T7079] Memory cgroup stats for [ 222.018865][ T7079] /syz4/test: [ 222.018937][ T7079] anon 0 [ 222.018937][ T7079] file 61440 [ 222.018937][ T7079] kernel 36864 [ 222.018937][ T7079] kernel_stack 0 [ 222.018937][ T7079] pagetables 4096 [ 222.018937][ T7079] sec_pagetables 0 [ 222.018937][ T7079] percpu 0 [ 222.018937][ T7079] sock 0 [ 222.018937][ T7079] vmalloc 0 [ 222.018937][ T7079] shmem 61440 [ 222.018937][ T7079] zswap 0 [ 222.018937][ T7079] zswapped 0 [ 222.018937][ T7079] file_mapped 0 [ 222.018937][ T7079] file_dirty 0 [ 222.018937][ T7079] file_writeback 0 [ 222.018937][ T7079] swapcached 589824 [ 222.018937][ T7079] anon_thp 0 [ 222.018937][ T7079] file_thp 0 [ 222.018937][ T7079] shmem_thp 0 [ 222.018937][ T7079] inactive_anon 53248 [ 222.018937][ T7079] active_anon 8192 [ 222.018937][ T7079] inactive_file 0 [ 222.018937][ T7079] active_file 0 [ 222.018937][ T7079] unevictable 0 [ 222.018937][ T7079] slab_reclaimable 14088 [ 222.018937][ T7079] slab_unreclaimable 16776 [ 222.018937][ T7079] slab 30864 [ 222.062437][ T9623] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 222.068019][ T9623] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 222.071551][ T9623] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 222.075481][ T9623] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 222.091197][ T9623] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 222.092542][ T9623] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 222.093893][ T9623] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 222.104100][ T4712] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 222.106524][ T4712] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:00:33 [ 222.107837][ T4712] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 222.109175][ T4712] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 222.209529][ T7079] Out of memory and no killable processes... [ 222.213487][ C1] I/O error, dev loop4, sector 519 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.215187][ C1] Buffer I/O error on dev loop4, logical block 519, async page read [ 222.379879][ T4712] gvnic 0000:00:00.0: GVE version 1.0.0 [ 222.381407][ T4712] gvnic 0000:00:00.0: GVE queue format 3 [ 222.398457][ T7957] gvnic 0000:00:00.0 enp0s0: renamed from eth16 [ 222.469497][ T7950] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.587486][ T9667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1084'. [ 223.526600][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.627531][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.660909][ T4401] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 223.667504][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 223.735421][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.856632][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.977590][ T39] device hsr_slave_0 left promiscuous mode [ 226.014641][ T39] device hsr_slave_1 left promiscuous mode [ 226.114237][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.115732][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.117680][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.119220][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.120994][ T39] device bridge_slave_1 left promiscuous mode [ 226.122258][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.155592][ T39] device bridge_slave_0 left promiscuous mode [ 226.156834][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.294296][ T39] device veth1_macvtap left promiscuous mode [ 226.295657][ T39] device veth0_macvtap left promiscuous mode [ 226.296929][ T39] device veth1_vlan left promiscuous mode [ 226.298052][ T39] device veth0_vlan left promiscuous mode [ 226.734145][ C1] net_ratelimit: 65 callbacks suppressed [ 228.480454][ T39] team0 (unregistering): Port device team_slave_1 removed [ 228.655822][ T39] team0 (unregistering): Port device team_slave_0 removed [ 228.835147][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.025766][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.596144][ T39] bond0 (unregistering): Released all slaves [ 231.944149][ C1] net_ratelimit: 74 callbacks suppressed [ 235.444429][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 235.450769][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 235.452633][ T9873] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1090'. [ 235.586239][ T9896] loop9: detected capacity change from 0 to 1024 [ 235.589693][ T9894] device-mapper: table: 248:0: zero-length target [ 235.591143][ T9894] device-mapper: ioctl: error adding target to table [ 236.043084][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1097'. [ 236.239604][ T9922] bonding: no command found in bonding_masters - use +ifname or -ifname [ 236.388697][ T9930] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(5) [ 236.477982][ T9939] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1105'. [ 236.480090][ T9939] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1105'. [ 236.509637][ T9939] netlink: 31 bytes leftover after parsing attributes in process `syz.8.1105'. [ 236.974153][ C0] net_ratelimit: 57 callbacks suppressed [ 237.047873][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1110'. [ 237.124598][ T9977] loop5: detected capacity change from 0 to 512 [ 237.155170][ T9977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.158389][ T9982] device batadv_slave_1 entered promiscuous mode [ 237.160234][ T9981] device batadv_slave_1 left promiscuous mode [ 237.174421][ T9977] EXT4-fs (loop5): 1 truncate cleaned up [ 237.175850][ T9977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 237.289751][ T4537] EXT4-fs (loop5): unmounting filesystem. [ 237.350974][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'. [ 237.352778][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'. [ 238.215389][T10081] loop8: detected capacity change from 0 to 128 [ 238.217753][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.220520][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.223240][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.225638][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.228111][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.229824][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.307895][ T7079] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.395281][ T7079] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.506534][ T7079] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.596398][ T7079] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.682289][T10105] FAULT_INJECTION: forcing a failure. [ 238.682289][T10105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.685274][T10105] CPU: 1 PID: 10105 Comm: syz.4.1146 Not tainted syzkaller #0 [ 238.686834][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 238.689085][T10105] Call trace: [ 238.689725][T10105] dump_backtrace+0x1c4/0x1f0 [ 238.690571][T10105] show_stack+0x2c/0x3c [ 238.691348][T10105] __dump_stack+0x30/0x40 [ 238.692139][T10105] dump_stack_lvl+0xf4/0x15c [ 238.693067][T10105] dump_stack+0x1c/0x5c [ 238.694019][T10105] should_fail_ex+0x3cc/0x524 [ 238.695092][T10105] should_fail_alloc_page+0x74/0xb8 [ 238.696295][T10105] prepare_alloc_pages+0x1b8/0x4f0 [ 238.697296][T10105] __alloc_pages+0x134/0x544 [ 238.698307][T10105] __folio_alloc+0x1c/0x44 [ 238.699276][T10105] vma_alloc_folio+0x37c/0x8ac [ 238.700305][T10105] shmem_alloc_and_acct_folio+0x3bc/0x948 [ 238.701439][T10105] shmem_get_folio_gfp+0xedc/0x2038 [ 238.702445][T10105] shmem_fallocate+0x6c4/0xb0c [ 238.703475][T10105] vfs_fallocate+0x4a4/0x5fc [ 238.704379][T10105] ioctl_preallocate+0x20c/0x2b0 [ 238.705485][T10105] do_vfs_ioctl+0x187c/0x202c [ 238.706396][T10105] __arm64_sys_ioctl+0xe4/0x1c8 [ 238.707369][T10105] invoke_syscall+0x98/0x290 [ 238.708250][T10105] el0_svc_common+0x13c/0x258 [ 238.709170][T10105] do_el0_svc+0x5c/0x134 [ 238.710076][T10105] el0_svc+0x58/0x12c [ 238.710959][T10105] el0t_64_sync_handler+0x84/0xf0 [ 238.712087][T10105] el0t_64_sync+0x18c/0x190 [ 238.779632][T10082] chnl_net:caif_netlink_parms(): no params data found [ 238.912538][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.920810][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.929781][T10082] device bridge_slave_0 entered promiscuous mode [ 238.947033][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.951827][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.959290][T10082] device bridge_slave_1 entered promiscuous mode [ 239.054932][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.058090][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.088327][T10082] team0: Port device team_slave_0 added [ 239.267935][T10082] team0: Port device team_slave_1 added [ 239.300422][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.301689][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.310084][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.378815][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.380130][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.386599][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.433502][ T9933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.499860][T10082] device hsr_slave_0 entered promiscuous mode [ 239.538416][T10082] device hsr_slave_1 entered promiscuous mode [ 239.594325][T10082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.595928][T10082] Cannot create hsr debugfs directory [ 240.254353][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 240.508982][T10186] __nla_validate_parse: 5 callbacks suppressed [ 240.508990][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1163'. [ 241.262527][T10247] loop7: detected capacity change from 0 to 512 [ 241.272171][T10247] EXT4-fs: Ignoring removed bh option [ 241.279345][T10247] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 241.307568][T10247] EXT4-fs (loop7): 1 truncate cleaned up [ 241.308801][T10247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 241.328416][T10247] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 241.358970][ T5226] EXT4-fs (loop7): unmounting filesystem. [ 241.704471][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1174'. [ 241.879087][ T7079] device hsr_slave_0 left promiscuous mode [ 241.914366][ T7079] device hsr_slave_1 left promiscuous mode [ 241.929648][ T27] audit: type=1326 audit(241.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.936269][ T27] audit: type=1326 audit(241.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.940309][ T27] audit: type=1326 audit(241.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.964571][ T27] audit: type=1326 audit(241.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.969839][ T27] audit: type=1326 audit(241.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.979425][ T27] audit: type=1326 audit(241.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.984649][ T27] audit: type=1326 audit(241.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 241.994511][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.996098][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.997942][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.999367][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.001139][ T7079] device bridge_slave_1 left promiscuous mode [ 242.002397][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.005956][ T27] audit: type=1326 audit(241.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 242.010533][ T27] audit: type=1326 audit(241.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 242.016522][ T27] audit: type=1326 audit(241.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.8.1177" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7178868 code=0x7ffc0000 [ 242.075005][ T7079] device bridge_slave_0 left promiscuous mode [ 242.076217][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.214403][ T7079] device veth1_macvtap left promiscuous mode [ 242.215978][ T7079] device veth0_macvtap left promiscuous mode [ 242.217450][ T7079] device veth1_vlan left promiscuous mode [ 242.218832][ T7079] device veth0_vlan left promiscuous mode [ 242.220330][ T7079] net_ratelimit: 59 callbacks suppressed [ 242.337437][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 243.585532][T10195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.414697][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 244.516901][ T7079] team0 (unregistering): Port device team_slave_1 removed [ 244.696480][ T7079] team0 (unregistering): Port device team_slave_0 removed [ 244.876272][ T7079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.074892][ T7079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.494675][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 246.608809][ T7079] bond0 (unregistering): Released all slaves [ 246.906318][T10283] device sit0 entered promiscuous mode [ 246.909248][T10283] netlink: 'syz.8.1180': attribute type 1 has an invalid length. [ 246.910780][T10283] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1180'. [ 246.931256][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 247.374174][ C1] net_ratelimit: 56 callbacks suppressed [ 248.320438][ T4412] psci: CPU1 killed (polled 0 ms) [ 248.589694][T10374] loop4: detected capacity change from 0 to 128 [ 248.616357][ T4400] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.672749][T10374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.748132][ T4339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.750999][ T4339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.752839][ T4339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.759363][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.761274][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.763005][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.815256][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.816546][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.826101][ T4400] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.877752][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 249.028943][ T4400] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.196596][ T4400] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.638979][ T4400] tipc: Left network mode [ 249.659263][T10378] chnl_net:caif_netlink_parms(): no params data found [ 250.140978][T10331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.266736][T10082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.288077][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.296316][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.309840][T10378] device bridge_slave_0 entered promiscuous mode [ 250.322471][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1212'. [ 250.390148][T10082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.419631][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.430023][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.442831][T10378] device bridge_slave_1 entered promiscuous mode [ 250.532216][T10082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.559271][T10082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.815339][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 250.929649][T10378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.062832][T10378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.021425][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1221'. [ 252.654242][ C0] net_ratelimit: 44 callbacks suppressed [ 252.894426][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 254.974366][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 255.062325][T10456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.054283][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 257.774339][ C0] net_ratelimit: 41 callbacks suppressed [ 263.134155][ C0] net_ratelimit: 45 callbacks suppressed [ 266.529534][ T4344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.532404][ T4344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.538121][ T4344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.541031][ T4344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.543490][ T4344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 266.558739][ T4339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.271639][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1223'. [ 267.279654][T10082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.374469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.376360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.481830][T10378] team0: Port device team_slave_0 added [ 267.495762][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.427285][ C0] net_ratelimit: 60 callbacks suppressed [ 268.575749][ T4339] Bluetooth: hci5: command 0x0409 tx timeout [ 268.707162][T10497] loop9: detected capacity change from 0 to 512 [ 268.735538][T10378] team0: Port device team_slave_1 added [ 268.750461][T10497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.777493][T10497] EXT4-fs (loop9): 1 truncate cleaned up [ 268.778639][T10497] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 268.908576][ T4400] device hsr_slave_0 left promiscuous mode [ 268.935263][ T4400] device hsr_slave_1 left promiscuous mode [ 268.989328][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.990754][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.994046][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.001545][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.013759][ T4400] device bridge_slave_1 left promiscuous mode [ 269.023496][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.069146][ T4400] device bridge_slave_0 left promiscuous mode [ 269.070608][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.186645][ T4400] device veth1_macvtap left promiscuous mode [ 269.188181][ T4400] device veth0_macvtap left promiscuous mode [ 269.189661][ T4400] device veth1_vlan left promiscuous mode [ 269.193609][ T4400] device veth0_vlan left promiscuous mode [ 269.522998][ T8789] EXT4-fs (loop9): unmounting filesystem. [ 270.654312][ T4339] Bluetooth: hci5: command 0x041b tx timeout [ 271.208979][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 271.346408][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 271.476366][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.705305][ T4400] bond0 (unregistering): Released all slaves [ 272.734277][ T4331] Bluetooth: hci5: command 0x040f tx timeout [ 272.904298][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.911023][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.917224][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.918669][ T5496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.930477][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.938155][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.943637][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.945120][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.957002][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.965479][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1233'. [ 273.073056][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.076794][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.078804][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.117273][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.151028][T10378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.152212][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.211334][T10378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.214357][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.216375][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.222067][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.260085][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.281530][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.290657][T10378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.292051][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.313708][T10378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.176934][ C0] net_ratelimit: 80 callbacks suppressed [ 274.277825][ T7079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.279891][ T7079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.378662][T10082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.674801][T10378] device hsr_slave_0 entered promiscuous mode [ 274.715121][T10378] device hsr_slave_1 entered promiscuous mode [ 274.744450][T10378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.752231][T10378] Cannot create hsr debugfs directory [ 274.814285][ T4331] Bluetooth: hci5: command 0x0419 tx timeout [ 275.082428][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.085596][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.379106][ T4400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.403832][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.536937][ T4400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.558967][T10479] chnl_net:caif_netlink_parms(): no params data found [ 275.657097][ T4400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.757070][ T4400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.768957][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.770922][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.913803][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.917976][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.932273][T10082] device veth0_vlan entered promiscuous mode [ 275.990759][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.993298][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.026934][T10082] device veth1_vlan entered promiscuous mode [ 276.250277][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1243'. [ 276.315420][T10479] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.341954][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.355145][T10479] device bridge_slave_0 entered promiscuous mode [ 276.467254][T10587] capability: warning: `syz.9.1245' uses 32-bit capabilities (legacy support in use) [ 276.849593][T10082] device veth0_macvtap entered promiscuous mode [ 276.856766][T10479] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.861335][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.870807][T10479] device bridge_slave_1 entered promiscuous mode [ 276.876316][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.878291][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.881698][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.892833][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.917442][T10082] device veth1_macvtap entered promiscuous mode [ 276.997762][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.078685][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.080687][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.082637][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.098716][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.109685][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.118694][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.132013][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.161709][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1251'. [ 277.167785][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.170870][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.230818][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.234767][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.242536][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.253619][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.263143][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.275288][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.288227][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.315711][T10479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.185720][T10605] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1252'. [ 278.227360][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.240115][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.377952][T10082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.379517][T10082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.381260][T10082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.398827][T10082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.437744][T10479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.473225][T10612] process 'syz.7.1255' launched '/dev/fd/5' with NULL argv: empty string added [ 278.488259][T10612] FAULT_INJECTION: forcing a failure. [ 278.488259][T10612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.490873][T10612] CPU: 0 PID: 10612 Comm: syz.7.1255 Not tainted syzkaller #0 [ 278.492283][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 278.494281][T10612] Call trace: [ 278.494954][T10612] dump_backtrace+0x1c4/0x1f0 [ 278.495966][T10612] show_stack+0x2c/0x3c [ 278.496884][T10612] __dump_stack+0x30/0x40 [ 278.497847][T10612] dump_stack_lvl+0xf4/0x15c [ 278.498844][T10612] dump_stack+0x1c/0x5c [ 278.499680][T10612] should_fail_ex+0x3cc/0x524 [ 278.500572][T10612] should_fail_alloc_page+0x74/0xb8 [ 278.501645][T10612] prepare_alloc_pages+0x1b8/0x4f0 [ 278.502733][T10612] __alloc_pages+0x134/0x544 [ 278.503660][T10612] alloc_pages+0x434/0x6fc [ 278.504657][T10612] pte_alloc_one+0x2c/0x254 [ 278.505648][T10612] __pte_alloc+0x30/0xac [ 278.506610][T10612] handle_mm_fault+0x25d8/0x3018 [ 278.507719][T10612] __get_user_pages+0x340/0x770 [ 278.508854][T10612] __get_user_pages_remote+0x188/0x684 [ 278.510070][T10612] get_user_pages_remote+0x80/0xbc [ 278.511134][T10612] get_arg_page+0x18c/0x3b4 [ 278.512109][T10612] copy_string_kernel+0x15c/0x254 [ 278.513252][T10612] do_execveat_common+0x508/0x7fc [ 278.514438][T10612] __arm64_sys_execveat+0xd8/0xf4 [ 278.515526][T10612] invoke_syscall+0x98/0x290 [ 278.516553][T10612] el0_svc_common+0x13c/0x258 [ 278.517653][T10612] do_el0_svc+0x5c/0x134 [ 278.518672][T10612] el0_svc+0x58/0x12c [ 278.519471][T10612] el0t_64_sync_handler+0x84/0xf0 [ 278.520439][T10612] el0t_64_sync+0x18c/0x190 [ 278.768364][T10479] team0: Port device team_slave_0 added [ 278.847307][T10479] team0: Port device team_slave_1 added [ 278.859456][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.860849][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.881045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.294211][ C0] net_ratelimit: 87 callbacks suppressed [ 279.343466][T10479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.345436][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.349465][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.351115][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.387006][T10479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.578386][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.614655][T10479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.616093][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.620846][T10479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.036078][T10628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1144'. [ 280.037930][T10628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1144'. [ 280.039661][T10628] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1144'. [ 280.101948][ T4400] device hsr_slave_0 left promiscuous mode [ 280.135138][ T4400] device hsr_slave_1 left promiscuous mode [ 280.186531][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.188361][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.193210][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.200562][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.103832][T10635] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1262'. [ 281.205633][ T4400] device veth1_macvtap left promiscuous mode [ 281.208547][ T4400] device veth0_macvtap left promiscuous mode [ 281.209974][ T4400] device veth1_vlan left promiscuous mode [ 281.213635][ T4400] device veth0_vlan left promiscuous mode [ 283.349536][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 283.486177][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 283.625341][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.786913][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.334183][ C0] net_ratelimit: 55 callbacks suppressed [ 284.917115][ T4400] bond0 (unregistering): Released all slaves [ 285.174090][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1263'. [ 285.177482][T10637] tipc: Invalid UDP bearer configuration [ 285.177501][T10637] tipc: Enabling of bearer rejected, failed to enable media [ 285.309318][T10479] device hsr_slave_0 entered promiscuous mode [ 285.346236][T10479] device hsr_slave_1 entered promiscuous mode [ 285.376310][T10479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.377659][T10479] Cannot create hsr debugfs directory [ 285.396312][T10664] loop9: detected capacity change from 0 to 128 [ 285.510057][T10667] loop2: detected capacity change from 0 to 2048 [ 285.586731][T10667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.633216][T10665] device syzkaller0 entered promiscuous mode [ 286.705798][T10082] EXT4-fs (loop2): unmounting filesystem. [ 287.809783][T10681] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1274'. [ 288.311435][T10686] device-mapper: ioctl: name not supplied when creating device [ 288.599034][T10699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.607087][T10699] syz.2.1281: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 288.617902][T10699] CPU: 0 PID: 10699 Comm: syz.2.1281 Not tainted syzkaller #0 [ 288.619393][T10699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 288.621689][T10699] Call trace: [ 288.622402][T10699] dump_backtrace+0x1c4/0x1f0 [ 288.623417][T10699] show_stack+0x2c/0x3c [ 288.624351][T10699] __dump_stack+0x30/0x40 [ 288.625177][T10699] dump_stack_lvl+0xf4/0x15c [ 288.626087][T10699] dump_stack+0x1c/0x5c [ 288.626797][T10699] warn_alloc+0x214/0x324 [ 288.627533][T10699] __vmalloc_node_range+0x24c/0xe70 [ 288.628524][T10699] vzalloc+0x9c/0xd4 [ 288.629276][T10699] vidtv_s302m_encoder_init+0xdc/0x630 [ 288.630388][T10699] vidtv_channel_s302m_init+0x334/0x78c [ 288.631454][T10699] vidtv_channels_init+0x4c/0x94 [ 288.632534][T10699] vidtv_mux_init+0x38c/0x1554 [ 288.633502][T10699] vidtv_start_feed+0x2e0/0x49c [ 288.634476][T10699] dmx_ts_feed_start_filtering+0x124/0x1fc [ 288.635750][T10699] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 288.636938][T10699] dvb_demux_do_ioctl+0x438/0x4d8 [ 288.637944][T10699] dvb_usercopy+0x248/0x45c [ 288.638928][T10699] dvb_demux_ioctl+0x3c/0x54 [ 288.639926][T10699] __arm64_sys_ioctl+0x14c/0x1c8 [ 288.641017][T10699] invoke_syscall+0x98/0x290 [ 288.642022][T10699] el0_svc_common+0x13c/0x258 [ 288.643036][T10699] do_el0_svc+0x5c/0x134 [ 288.643972][T10699] el0_svc+0x58/0x12c [ 288.644734][T10699] el0t_64_sync_handler+0x84/0xf0 [ 288.645802][T10699] el0t_64_sync+0x18c/0x190 [ 288.713853][T10699] Mem-Info: [ 288.715617][T10699] active_anon:7112 inactive_anon:0 isolated_anon:0 [ 288.715617][T10699] active_file:14829 inactive_file:2213 isolated_file:0 [ 288.715617][T10699] unevictable:768 dirty:141 writeback:0 [ 288.715617][T10699] slab_reclaimable:15304 slab_unreclaimable:96090 [ 288.715617][T10699] mapped:30297 shmem:955 pagetables:953 [ 288.715617][T10699] sec_pagetables:0 bounce:0 [ 288.715617][T10699] kernel_misc_reclaimable:0 [ 288.715617][T10699] free:1433524 free_pcp:6325 free_cma:7360 [ 288.731656][T10699] Node 0 active_anon:28448kB inactive_anon:0kB active_file:59316kB inactive_file:8852kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:121188kB dirty:564kB writeback:0kB shmem:3820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10240kB pagetables:3812kB sec_pagetables:0kB all_unreclaimable? no [ 288.739505][T10699] Node 0 DMA free:3076864kB boost:0kB min:20664kB low:25828kB high:30992kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 288.747327][T10699] lowmem_reserve[]: 0 0 3550 3550 3550 [ 288.748541][T10699] Node 0 Normal free:2657232kB boost:0kB min:24388kB low:30484kB high:36580kB reserved_highatomic:0KB active_anon:28448kB inactive_anon:0kB active_file:59316kB inactive_file:8852kB unevictable:3072kB writepending:564kB present:5242880kB managed:3639384kB mlocked:0kB bounce:0kB free_pcp:25244kB local_pcp:25244kB free_cma:0kB [ 288.761885][T10699] lowmem_reserve[]: 0 0 0 0 0 [ 288.762767][T10699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 288.767258][T10699] Node 0 Normal: 34*4kB (UME) 65*8kB (E) 62*16kB (ME) 889*32kB (UME) 415*64kB (UME) 95*128kB (UME) 41*256kB (UME) 25*512kB (UME) 11*1024kB (UE) 7*2048kB (UE) 620*4096kB (UM) = 2657232kB [ 288.771456][T10699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.773632][T10699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 288.777768][T10699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 288.779829][T10699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 288.781739][T10699] 17970 total pagecache pages [ 288.783365][T10699] 0 pages in swap cache [ 288.787804][T10699] Free swap = 124804kB [ 288.788698][T10699] Total swap = 124996kB [ 288.789790][T10699] 2097152 pages RAM [ 288.790588][T10699] 0 pages HighMem/MovableOnly [ 288.791713][T10699] 417258 pages reserved [ 288.792514][T10699] 8192 pages cma reserved [ 288.793507][T10699] 0 pages hwpoisoned [ 289.186304][T10715] FAULT_INJECTION: forcing a failure. [ 289.186304][T10715] name fail_futex, interval 1, probability 0, space 0, times 0 [ 289.188856][T10715] CPU: 0 PID: 10715 Comm: syz.2.1288 Not tainted syzkaller #0 [ 289.190315][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 289.192518][T10715] Call trace: [ 289.193273][T10715] dump_backtrace+0x1c4/0x1f0 [ 289.194366][T10715] show_stack+0x2c/0x3c [ 289.195240][T10715] __dump_stack+0x30/0x40 [ 289.196243][T10715] dump_stack_lvl+0xf4/0x15c [ 289.197208][T10715] dump_stack+0x1c/0x5c [ 289.197973][T10715] should_fail_ex+0x3cc/0x524 [ 289.198810][T10715] should_fail+0x14/0x24 [ 289.199733][T10715] should_fail_futex+0x48/0x5c [ 289.200790][T10715] futex_lock_pi_atomic+0x128/0xa78 [ 289.201978][T10715] futex_lock_pi+0x1dc/0x7cc [ 289.202989][T10715] do_futex+0x1d0/0x340 [ 289.203925][T10715] __arm64_sys_futex+0x390/0x414 [ 289.205051][T10715] invoke_syscall+0x98/0x290 [ 289.206079][T10715] el0_svc_common+0x13c/0x258 [ 289.206931][T10715] do_el0_svc+0x5c/0x134 [ 289.207816][T10715] el0_svc+0x58/0x12c [ 289.208641][T10715] el0t_64_sync_handler+0x84/0xf0 [ 289.209540][T10715] el0t_64_sync+0x18c/0x190 [ 289.289689][T10718] loop2: detected capacity change from 0 to 512 [ 289.309767][T10718] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 289.573616][T10733] loop2: detected capacity change from 0 to 512 [ 289.587197][T10733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 289.588734][T10733] System zones: 1-12 [ 289.595687][T10733] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1296: missing EA_INODE flag [ 289.603935][T10733] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1296: error while reading EA inode 12 err=-117 [ 289.615638][T10733] EXT4-fs (loop2): 1 orphan inode deleted [ 289.616804][T10733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 291.633901][ T7079] net_ratelimit: 38 callbacks suppressed [ 292.839367][T10082] EXT4-fs (loop2): unmounting filesystem. [ 292.921330][T10740] loop2: detected capacity change from 0 to 512 [ 292.933547][T10740] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 293.000452][ T4331] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 293.001857][ T4331] Bluetooth: unknown link type 128 [ 293.038101][T10744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.102500][T10748] loop2: detected capacity change from 0 to 512 [ 293.118720][T10748] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.133508][T10748] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 293.140818][T10748] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1302: bg 0: block 248: padding at end of block bitmap is not set [ 293.152150][T10748] __quota_error: 5 callbacks suppressed [ 293.152163][T10748] Quota error (device loop2): write_blk: dquota write failed [ 293.159413][T10748] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 293.161383][T10748] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1302: Failed to acquire dquot type 1 [ 293.169460][T10748] EXT4-fs (loop2): 1 truncate cleaned up [ 293.170576][T10748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 293.178422][T10748] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 293.180437][T10748] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 293.182416][T10748] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1302: Failed to acquire dquot type 1 [ 293.207203][T10082] EXT4-fs (loop2): unmounting filesystem. [ 293.208512][ T7079] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 293.210446][ T7079] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 1 [ 294.273751][T10763] loop2: detected capacity change from 0 to 512 [ 294.279464][T10763] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 294.402301][T10767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.488560][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 295.506188][T10776] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1314'. [ 296.593358][T10782] loop2: detected capacity change from 0 to 1024 [ 296.629749][ C0] I/O error, dev loop2, sector 192 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 296.632760][ C0] I/O error, dev loop2, sector 192 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.634719][ C0] Buffer I/O error on dev loop2, logical block 96, async page read [ 296.641157][ C0] I/O error, dev loop2, sector 194 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.643020][ C0] Buffer I/O error on dev loop2, logical block 97, async page read [ 296.644726][ C0] I/O error, dev loop2, sector 196 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.646493][ C0] Buffer I/O error on dev loop2, logical block 98, async page read [ 296.647945][ C0] I/O error, dev loop2, sector 198 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.649451][ C0] Buffer I/O error on dev loop2, logical block 99, async page read [ 297.818070][ C0] net_ratelimit: 47 callbacks suppressed [ 298.028263][T10793] ================================================================== [ 298.029658][T10793] BUG: KASAN: slab-out-of-bounds in string+0x1ec/0x278 [ 298.030980][T10793] Read of size 1 at addr ffff0000d6317150 by task syz.2.1321/10793 [ 298.032494][T10793] [ 298.032901][T10793] CPU: 0 PID: 10793 Comm: syz.2.1321 Not tainted syzkaller #0 [ 298.034194][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 298.035998][T10793] Call trace: [ 298.036650][T10793] dump_backtrace+0x1c4/0x1f0 [ 298.037455][T10793] show_stack+0x2c/0x3c [ 298.038273][T10793] __dump_stack+0x30/0x40 [ 298.039113][T10793] dump_stack_lvl+0xf4/0x15c [ 298.040041][T10793] print_address_description+0x88/0x218 [ 298.041173][T10793] print_report+0x50/0x68 [ 298.042038][T10793] kasan_report+0xa8/0xfc [ 298.042908][T10793] __asan_report_load1_noabort+0x2c/0x38 [ 298.044014][T10793] string+0x1ec/0x278 [ 298.044772][T10793] vsnprintf+0x10ec/0x18d8 [ 298.045605][T10793] pointer+0x7ac/0xdd8 [ 298.046410][T10793] vsnprintf+0xcc0/0x18d8 [ 298.047223][T10793] vprintk_store+0x36c/0xb60 [ 298.048025][T10793] vprintk_emit+0x118/0x2f0 [ 298.048867][T10793] vprintk_default+0x54/0x80 [ 298.049814][T10793] vprintk+0x200/0x2a0 [ 298.050685][T10793] _printk+0xe0/0x130 [ 298.051561][T10793] __dynamic_pr_debug+0x148/0x1e4 [ 298.052648][T10793] idletimer_tg_checkentry_v1+0xa44/0xbc4 [ 298.053864][T10793] xt_check_target+0x40c/0xa1c [ 298.054811][T10793] nft_target_init+0x508/0x7f8 [ 298.055897][T10793] nf_tables_newrule+0x11b8/0x1be4 [ 298.056997][T10793] nfnetlink_rcv+0xc7c/0x1c54 [ 298.057992][T10793] netlink_unicast+0x5fc/0x80c [ 298.059051][T10793] netlink_sendmsg+0x6f0/0x9d8 [ 298.059870][T10793] ____sys_sendmsg+0x588/0x90c [ 298.060829][T10793] __sys_sendmsg+0x288/0x374 [ 298.061967][T10793] __arm64_sys_sendmsg+0x80/0x94 [ 298.063169][T10793] invoke_syscall+0x98/0x290 [ 298.064281][T10793] el0_svc_common+0x13c/0x258 [ 298.065438][T10793] do_el0_svc+0x5c/0x134 [ 298.066438][T10793] el0_svc+0x58/0x12c [ 298.067394][T10793] el0t_64_sync_handler+0x84/0xf0 [ 298.068627][T10793] el0t_64_sync+0x18c/0x190 [ 298.069637][T10793] [ 298.070116][T10793] Allocated by task 10793: [ 298.071066][T10793] kasan_set_track+0x4c/0x80 [ 298.071954][T10793] kasan_save_alloc_info+0x24/0x30 [ 298.072964][T10793] __kasan_kmalloc+0xa0/0xb8 [ 298.073879][T10793] __kmalloc+0xd8/0x180 [ 298.074759][T10793] nf_tables_newrule+0x1004/0x1be4 [ 298.075831][T10793] nfnetlink_rcv+0xc7c/0x1c54 [ 298.076702][T10793] netlink_unicast+0x5fc/0x80c [ 298.077533][T10793] netlink_sendmsg+0x6f0/0x9d8 [ 298.078378][T10793] ____sys_sendmsg+0x588/0x90c [ 298.079305][T10793] __sys_sendmsg+0x288/0x374 [ 298.080227][T10793] __arm64_sys_sendmsg+0x80/0x94 [ 298.081187][T10793] invoke_syscall+0x98/0x290 [ 298.082091][T10793] el0_svc_common+0x13c/0x258 [ 298.083035][T10793] do_el0_svc+0x5c/0x134 [ 298.083769][T10793] el0_svc+0x58/0x12c [ 298.084538][T10793] el0t_64_sync_handler+0x84/0xf0 [ 298.085507][T10793] el0t_64_sync+0x18c/0x190 [ 298.086388][T10793] [ 298.086851][T10793] Last potentially related work creation: [ 298.087958][T10793] kasan_save_stack+0x40/0x70 [ 298.088888][T10793] __kasan_record_aux_stack+0xc0/0xdc [ 298.089885][T10793] kasan_record_aux_stack_noalloc+0x14/0x20 [ 298.090887][T10793] kvfree_call_rcu+0xb4/0x6f0 [ 298.091785][T10793] drop_sysctl_table+0x278/0x3c4 [ 298.092788][T10793] unregister_sysctl_table+0x90/0x134 [ 298.093902][T10793] unregister_net_sysctl_table+0x20/0x30 [ 298.094982][T10793] mpls_dev_sysctl_unregister+0x90/0xc8 [ 298.096098][T10793] mpls_dev_notify+0x4ec/0x728 [ 298.097087][T10793] raw_notifier_call_chain+0xd8/0x168 [ 298.098205][T10793] unregister_netdevice_many_notify+0xf18/0x1900 [ 298.099557][T10793] default_device_exit_batch+0x9d4/0xa70 [ 298.100566][T10793] cleanup_net+0x650/0xa90 [ 298.101355][T10793] process_one_work+0x7e4/0x13bc [ 298.102339][T10793] worker_thread+0x8cc/0xfe8 [ 298.103248][T10793] kthread+0x254/0x2e0 [ 298.104075][T10793] ret_from_fork+0x10/0x20 [ 298.104900][T10793] [ 298.105291][T10793] The buggy address belongs to the object at ffff0000d6317100 [ 298.105291][T10793] which belongs to the cache kmalloc-cg-128 of size 128 [ 298.108133][T10793] The buggy address is located 80 bytes inside of [ 298.108133][T10793] 128-byte region [ffff0000d6317100, ffff0000d6317180) [ 298.110581][T10793] [ 298.111013][T10793] The buggy address belongs to the physical page: [ 298.112158][T10793] page:000000009ccc8a2a refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116317 [ 298.114293][T10793] memcg:ffff0000c4df4b01 [ 298.115078][T10793] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 298.116580][T10793] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c0002d80 [ 298.118090][T10793] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff0000c4df4b01 [ 298.119610][T10793] page dumped because: kasan: bad access detected [ 298.120914][T10793] [ 298.121384][T10793] Memory state around the buggy address: [ 298.122535][T10793] ffff0000d6317000: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 298.124181][T10793] ffff0000d6317080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.125822][T10793] >ffff0000d6317100: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 298.127322][T10793] ^ [ 298.128532][T10793] ffff0000d6317180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.129953][T10793] ffff0000d6317200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 298.131342][T10793] ================================================================== [ 298.132874][T10793] Disabling lock debugging due to kernel taint [ 298.134103][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.801256][T10378] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.870950][T10378] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.920106][T10378] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.973197][T10378] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.338242][T10378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.439039][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.440683][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.449504][T10378] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.549473][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.551239][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.553311][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.554857][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.575703][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.577869][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.579997][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.581837][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.583288][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.591247][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.595096][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.612356][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.616052][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.617845][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.621195][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.627709][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.631887][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.638126][T10378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.643592][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.650003][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.651792][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.653853][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.763657][T10479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.808234][T10479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.830222][T10479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.869135][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.870634][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.879631][T10479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.919396][T10378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.950630][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.952388][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.981058][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.982981][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.000883][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.002266][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.007676][T10378] device veth0_vlan entered promiscuous mode [ 302.027914][T10378] device veth1_vlan entered promiscuous mode [ 302.073663][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.076830][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.078904][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.081972][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.090335][T10479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.099117][T10378] device veth0_macvtap entered promiscuous mode [ 302.107347][T10378] device veth1_macvtap entered promiscuous mode [ 302.118383][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.120404][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.122383][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.129429][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.138724][T10479] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.147454][T10378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.149641][T10378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.152828][T10378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.159607][T10378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.172213][T10378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.174855][T10378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.177723][T10378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.182226][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.186855][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.208417][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.210461][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.212268][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.213744][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.216789][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.220014][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.223689][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.225281][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.232119][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.239446][T10378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.247359][T10378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.251754][T10378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.253732][T10378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.266067][T10378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.268179][T10378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.270929][T10378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.272750][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.276013][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.280503][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.287218][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.297407][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.306956][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.308914][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.313245][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.326202][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.330442][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.336934][T10378] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.338979][T10378] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.346019][T10378] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.347981][T10378] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.357016][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.358899][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.361152][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.369575][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.457297][ T7163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.458942][ T7163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.460688][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.503250][ T7163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.510830][ T7163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.512405][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.548933][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.550642][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.567548][T10479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.579430][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.581194][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.599194][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.601054][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.608622][T10479] device veth0_vlan entered promiscuous mode [ 302.615873][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.617615][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.621264][T10479] device veth1_vlan entered promiscuous mode [ 302.649419][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.651219][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.653203][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.657129][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.660518][T10479] device veth0_macvtap entered promiscuous mode [ 302.663397][T10479] device veth1_macvtap entered promiscuous mode [ 302.678481][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.680540][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.683704][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.694355][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.701046][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.703258][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.708103][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.711556][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.723490][T10479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.727184][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.728905][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.730865][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.732678][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.739005][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.741260][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.748518][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.750756][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.753189][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.765814][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.767935][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.773323][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.779634][T10479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.782013][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.784086][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.797154][T10479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.798958][T10479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.800720][T10479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.806263][T10479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.827358][T10479] net_ratelimit: 69 callbacks suppressed [ 302.878863][ T4666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.880571][ T4666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.882264][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.927348][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.928877][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.930500][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.014153][ C0] net_ratelimit: 92 callbacks suppressed