last executing test programs: 1m16.626748426s ago: executing program 0 (id=1546): fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, r4, 0xf21, 0xfffffffd, 0x25dfdc01, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x7a}}}}}, 0x20}}, 0x48d0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000600)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) 1m14.553804397s ago: executing program 0 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 1m12.960363152s ago: executing program 0 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m11.122821502s ago: executing program 0 (id=1565): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000006c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004c0000440000000000069078ac141400ac1e0001440b08e0000002e0000002890bd7000000000000000089030000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000080780000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) sched_getattr(0x0, &(0x7f0000000400)={0x38}, 0x38, 0x0) mount(0x0, &(0x7f0000000e40)='./mysys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x822b01) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000500)='unconfined', &(0x7f0000000540)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 1m10.057939568s ago: executing program 0 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 1m8.918854192s ago: executing program 0 (id=1574): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x1000}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='*ub:*v', 0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) 1m8.315193573s ago: executing program 32 (id=1574): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x1000}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='*ub:*v', 0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) 1m8.299844744s ago: executing program 2 (id=1578): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000006c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004c0000440000000000069078ac141400ac1e0001440b08e0000002e0000002890bd7000000000000000089030000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000080780000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys\x00', 0x1ff) 1m6.925426352s ago: executing program 2 (id=1583): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m3.773696893s ago: executing program 2 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034400040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="6c00000000010104000000001408000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e0000001"], 0x64}}, 0x0) 1m3.357976644s ago: executing program 2 (id=1595): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000006c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004c0000440000000000069078ac141400ac1e0001440b08e0000002e0000002890bd7000000000000000089030000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000080780000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) sched_getattr(0x0, &(0x7f0000000400)={0x38}, 0x38, 0x0) mount(0x0, &(0x7f0000000e40)='./mysys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x822b01) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000500)='unconfined', &(0x7f0000000540)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 1m1.7299703s ago: executing program 2 (id=1601): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x81, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)="994b737243675441858251990625aa0582a76e21971299687301623edbac30c5bd29", 0x22}], 0x1) prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000440)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x3fffffffffffcb5, 0x2, 0x0) 57.0357485s ago: executing program 2 (id=1618): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80080, &(0x7f0000000180)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f00000004c0)="$eJzs3c1rXFUbAPBnZpo0SfO+/XhfpK1gCxXqB83kA2miLnSlLgpiwY1Cjck01kwyITOpTegi1V0XLkRREBfu/Qvc2JVFENe6FxdS0RpBBWFk7syk+Zp20HQGcn8/mM6599ze55wMz+HOuffODSC1Ttb+yUQMRsQ3EXGwvrh5g5P1t7XbV6dqr0xUq+d/ziTb1Zabmzb/34GIWI2Ivoh46bmI1zPb45aXV2Yni8XCYmM5X5lbyJeXV85cmpucKcwU5kfGz05MjA+PjU7sWl+vv/vm9XOfv9D72e/v3Lr53pdf1Jo12Kjb2I/dVO96TxzesG5fRDx9P4J1Qa7Rn/5uN4R/pPb5/S8iTiX5fzByyacJpEG1Wq3+Vd3fqnq1CuxZ2eQYOJMdioh6OZsdGqofw/8/BrLFUrny+MXS0vx0/Vj5UPRkL14qFoYb3xUORU+mtjySlO8sj25ZHotIjoHfz/Uny0NTpeJ0Z4c6YIsDW/L/t1w9/+8h25HGAfefr/yQXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DKr147lztVW3e/z59eXlptnT5zHShPDs0tzQ1NFVaXBiaKZVmknt25u61v2KptDDyRCxdyVcK5Uq+vLxyYa60NF+5kNzXf6HQ05FeAe04fOLGd5mIWH2yP3nV9Dbq5CrsbdVqJrp9DzLQHbluD0BA15j6g/TyHR/Y4Sd6N+lrVbGw+20BOsMPeUF6nT7m/B+klfl/SC/z/5BejvEB8/+QPub/Ib0GWzz/6z8bnt01HBH/jYhvcz37m8/6AvaC7I+ZxvH/6YMPD26t7c38kZwi6I2Itz4+/+GVyUplcaS2/pf19ZWPGutHu9F+oF3NPG3mMQCQXmu3r041X52M+9Oz9YsQtsff15ib7EvOUQ6sZTZdq5DZpWsXVq9FxNGd4mcazzuvn/kYWMtti3+k8Z6p7yJp777kuemdiX9sQ/yHNsQ//q//KpAON2rjz/BO+ZdNcjrW82/z+DO4S9dOtB7/suvjX67F+Hdi++52HBLf+OTtH1rGvxZxfMf4zXh9Sayt8WttO91mH2+9+vIDreqqn9b3s1P8plopX5lbyJeXV84kvyM3U5gfGT87MTE+PDY6kU/mqPPNmertnjr69c279X+gRfxW/X+m0aZH2+z/nw9+9crJu8R/5NTOn/+RFvFr+iPisTbj/zr6/Wut6mrxp1v0P3uX+LV1Y23GL3/w/P42NwUAOqC8vDI7WSwWFhUUFBTWC90emYD77U7Sd7slAAAAAAAAAAAAQLs6cTlxt/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAX/B0AAP//KpzWoQ==") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x2) syz_open_procfs(0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="740100001000130700000000fbdbdf25ff01000000000000000000000000000100000000000000000000000000000001000900000002ffff0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) 56.876155439s ago: executing program 33 (id=1618): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80080, &(0x7f0000000180)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x2) syz_open_procfs(0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="740100001000130700000000fbdbdf25ff01000000000000000000000000000100000000000000000000000000000001000900000002ffff0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) 5.844334654s ago: executing program 5 (id=2015): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffffb]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8010}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x411}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="0000a700000000"], &(0x7f00000003c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000400)=""/152}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) readv(r3, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000640)=ANY=[]) keyctl$chown(0x4, r4, 0x0, 0x0) 5.716761341s ago: executing program 5 (id=2016): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) 4.209238126s ago: executing program 5 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0xfffffffe) writev(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 3.574293214s ago: executing program 1 (id=2033): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001c00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001f40)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001f80)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001fc0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x40, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x2c, 0x0, @wg=@data={0x4, 0x9, 0x5, "53fdbafe1792a546f81ec54c7053253df5b87a76"}}}}, 0x4e) close(0x3) 3.323855677s ago: executing program 5 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d80)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000dc0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000fc0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, '\x00!', "c02d2cd53c1fefe9b933987a9203485a416abf47a91a3fdce4a70162515eedcf000000"}}}}, 0x35) 3.306916446s ago: executing program 1 (id=2035): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x18d}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a88674", 0xb4}], 0x2}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)='?', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1cea19dd296b4de3625a95ea0ee82efc84379be3125e84d8183ebce42f98654f44f86d49b13529b6cec5acbe93af52987080df30eed17685881b67777877226704091bd1f07b76c3af968b6afc17751d27756d8df673ee1cc756cbc9ef90ee5477c529105548e84a9fa4cba55b8fe48ef33e206952e5be378ef8df0c7c024080b8961d49a6b863cd8f4e29dd1c66fd9f93ea18010b541133f792fde35c33b0bd8ef50f205193ac4c223f6f5e9659ff679a132fee9cf1769ecef53bc2ed1b3feaa0306025a68e87a88f7bf740a457024963ef1dac67dbd1bae5aec6604b8440e5f3cf21d1c4187db1a1f205054ec1f9dd4d86977bdd6c4c30ef70e2f96fca9ad0cd08dd057286fb658aa836f5a0b1e0c0b86e5e4ab951fd85fa9bc1fa58696b69b2a423a9da883ea945955840c11ae26af5a08cf7d8ce3eda8eef541ba114e0614a0e864424df8aaab36a8abcacf52adddd298c11557f6948215b809e817fefbba3c2fdd96b2c3f23c20bb3c04ccf92c570db4a1555907a79c1ea7fe4085356dbf1d892d86691fcb6ad8b9a7b4b3703afe7e2c2d0da56e31f7d724aa1ece518602235cccf491bc282195054dfebb630b0cbbf7c2a9b82ea6999316dff165c06df46731d1e6a8424cfabac225c32e1fee0a82bcc954f56e5c92da2a1f5d5dc6f6f0b6cf207f0b5986459f5f56643e7b147056c3186753749e6d4ba51a594429a9b4a99b4885fc1888ef784025ad07afe5e7aa8a50dd0d4981905b7f11198b983eb0437ca00e0e642644e63d9d87d64ae75915230887fa8a6e9b446bd4c1d0200a4d77d63782b8d00448849aac5a152df21ef03665", 0x410}], 0x1) 3.172361583s ago: executing program 1 (id=2036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x1b7}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a88674", 0xb4}], 0x2}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)='?', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x410}], 0x1) 3.115996552s ago: executing program 5 (id=2037): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000a010101000000000000000000000000ac1414aa0000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000001f80)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000002040)="b9ff0300600d698cff9e13f008004de7f9c764360000003a00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.069283318s ago: executing program 1 (id=2038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000000380), 0x400000000000046, 0x40000122, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) read(r1, &(0x7f00000003c0)=""/234, 0xea) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000200)=0xa40, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000004c0)={@void, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@val={0x88a8, 0x1, 0x1, 0x6}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "e71366", 0x9, 0x11, 0x1, @mcast1, @loopback, {[], {0x4f19, 0x4e20, 0x9, 0x0, @opaque='\x00'}}}}}}}, 0x47) 2.582675445s ago: executing program 1 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000340)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)=@deltaction={0x50, 0x31, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad9}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) setsockopt(r1, 0x0, 0x483, &(0x7f0000000400), 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14001}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000640)={0x8604, 0x794, 0x5}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000800)={0xffe00000}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001140)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.555467504s ago: executing program 4 (id=2042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) 2.537953083s ago: executing program 6 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000880)}, 0xfff}], 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9", 0x33}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.486473199s ago: executing program 4 (id=2044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) close(r2) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000009c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000a80)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000c40)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.452394162s ago: executing program 6 (id=2045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) 2.397960854s ago: executing program 6 (id=2046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x20028090}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.187443088s ago: executing program 1 (id=2047): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48844) write$nci(r0, &(0x7f0000000300)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 2.181264359s ago: executing program 4 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 2.142467195s ago: executing program 5 (id=2050): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)={[], [{@appraise}]}, 0x0, 0x236, &(0x7f0000000400)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000008c0)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) connect$vsock_stream(r4, &(0x7f0000000900)={0x28, 0x0, 0x2710, @local}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8, 0x1c0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x443, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0xf5, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x80, 0x8, {0x7, 0x25, 0x1, 0xc, 0xe1, 0xf90b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x97, 0x60, {0x7, 0x25, 0x1, 0x4, 0x4, 0x4}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 2.039359856s ago: executing program 4 (id=2051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000000380), 0x400000000000046, 0x40000122, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) read(r1, &(0x7f00000003c0)=""/234, 0xea) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000200)=0xa40, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@val={0x88a8, 0x1, 0x1, 0x6}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "e71366", 0x9, 0x11, 0x1, @mcast1, @loopback, {[], {0x4f19, 0x4e20, 0x9, 0x0, @opaque='\x00'}}}}}}}, 0x47) 2.026566047s ago: executing program 6 (id=2052): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1f, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.555058589s ago: executing program 6 (id=2053): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.287687772s ago: executing program 3 (id=2054): userfaultfd(0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.083823124s ago: executing program 4 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x2791}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write(r1, &(0x7f0000000380)="000008004500001c123400004011e5c8", 0x10) 787.569185ms ago: executing program 4 (id=2056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) 362.932604ms ago: executing program 3 (id=2057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000900)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000940)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000040)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x22, 0x18, 0x65, 0x0, 0x5f, 0x2, 0x0, @empty, @broadcast, {[@noop]}}}}, 0x26) 181.512971ms ago: executing program 6 (id=2058): fstatfs(0xffffffffffffffff, &(0x7f00000004c0)=""/166) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, r4, 0xf21, 0xfffffffd, 0x25dfdc01, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x7a}}}}}, 0x20}}, 0x48d0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000005c0)={'NETMAP\x00'}, &(0x7f0000000600)=0x1e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) 165.129901ms ago: executing program 3 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) close(r2) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000009c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000a80)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000c40)={'syzkaller0\x00', @random='\x00\a\x00'}) 141.330508ms ago: executing program 3 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r1, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r1, @ANYBLOB="08001b"], 0x30}}, 0x0) 61.06987ms ago: executing program 3 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @remote}, 0x1dd, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)='bridge_slave_0\x00', 0x4, 0x1000, 0x5}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007", @ANYRESOCT=r0], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 3 (id=2062): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r0, @ANYBLOB="14000180080001000000"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): z.0.1380), now anon-rss:0kB, file-rss:20480kB, shmem-rss:34928kB [ 278.273272][ T32] oom_reaper: reaped process 9917 (syz.3.1362), now anon-rss:0kB, file-rss:14948kB, shmem-rss:0kB [ 278.466360][T10082] loop2: detected capacity change from 0 to 256 [ 278.669276][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1402'. [ 278.751736][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1402'. [ 278.756302][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1402'. [ 279.035204][T10088] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1405'. [ 279.249797][T10099] loop3: detected capacity change from 0 to 256 [ 279.774376][T10107] loop4: detected capacity change from 0 to 256 [ 279.894577][T10109] loop2: detected capacity change from 0 to 256 [ 279.896481][T10109] vfat: Bad value for 'shortname' [ 280.669629][T10119] loop3: detected capacity change from 0 to 256 [ 280.693638][T10121] loop2: detected capacity change from 0 to 256 [ 280.832615][T10123] loop4: detected capacity change from 0 to 512 [ 281.111222][T10123] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 281.111247][T10123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 281.121469][T10123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 281.121520][T10123] System zones: 1-12 [ 281.127732][T10123] EXT4-fs (loop4): 1 truncate cleaned up [ 281.139261][T10123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.688439][T10131] EXT4-fs error (device loop4): __ext4_expand_extra_isize:7479: inode #12: comm syz.4.1415: bad extra_isize 62 (inode size 256) [ 281.691573][T10131] EXT4-fs (loop4): Remounting filesystem read-only [ 281.761366][T10141] loop2: detected capacity change from 0 to 256 [ 281.763138][T10135] siw: device registration error -23 [ 281.771546][T10135] FAULT_INJECTION: forcing a failure. [ 281.771546][T10135] name fail_futex, interval 1, probability 0, space 0, times 0 [ 281.771562][T10135] CPU: 0 UID: 0 PID: 10135 Comm: syz.1.1417 Not tainted syzkaller #0 PREEMPT [ 281.771573][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 281.771579][T10135] Call trace: [ 281.771582][T10135] show_stack+0x2c/0x3c (C) [ 281.771597][T10135] __dump_stack+0x30/0x40 [ 281.771606][T10135] dump_stack_lvl+0xd8/0x12c [ 281.771614][T10135] dump_stack+0x1c/0x28 [ 281.771622][T10135] should_fail_ex+0x3fc/0x570 [ 281.771635][T10135] should_fail+0x14/0x24 [ 281.771648][T10135] get_futex_key+0x1e0/0x118c [ 281.771659][T10135] futex_wait_setup+0x58/0x674 [ 281.771670][T10135] __futex_wait+0x11c/0x2b8 [ 281.771682][T10135] futex_wait+0x108/0x2c0 [ 281.771693][T10135] do_futex+0x320/0x378 [ 281.771704][T10135] __arm64_sys_futex+0x2e4/0x418 [ 281.771715][T10135] invoke_syscall+0x98/0x244 [ 281.771723][T10135] el0_svc_common+0xec/0x23c [ 281.771731][T10135] do_el0_svc+0x4c/0x5c [ 281.771739][T10135] el0_svc+0x60/0x1d8 [ 281.771749][T10135] el0t_64_sync_handler+0x44/0x104 [ 281.771759][T10135] el0t_64_sync+0x198/0x19c [ 281.779277][T10138] loop3: detected capacity change from 0 to 512 [ 281.791860][T10138] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 281.791880][T10138] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.798675][T10138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 281.798714][T10138] System zones: 1-12 [ 281.799040][T10138] EXT4-fs (loop3): 1 truncate cleaned up [ 281.799414][T10138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.293270][T10146] EXT4-fs error (device loop3): __ext4_expand_extra_isize:7479: inode #12: comm syz.3.1419: bad extra_isize 62 (inode size 256) [ 282.293571][T10146] EXT4-fs (loop3): Remounting filesystem read-only [ 282.301676][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.453855][T10150] loop4: detected capacity change from 0 to 128 [ 282.461985][T10150] ext4: Unknown parameter 'appraise' [ 282.739699][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.880103][T10155] loop1: detected capacity change from 0 to 256 [ 282.987660][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.987828][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.176939][T10161] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 283.176960][T10161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.279575][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1425'. [ 283.302472][T10161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 283.302516][T10161] System zones: 1-12 [ 283.307143][T10161] EXT4-fs (loop3): 1 truncate cleaned up [ 283.352211][T10161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.858435][T10171] EXT4-fs error (device loop3): __ext4_expand_extra_isize:7479: inode #12: comm syz.3.1424: bad extra_isize 62 (inode size 256) [ 283.858707][T10171] EXT4-fs (loop3): Remounting filesystem read-only [ 284.010883][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.582752][T10185] set_capacity_and_notify: 3 callbacks suppressed [ 284.582768][T10185] loop3: detected capacity change from 0 to 256 [ 284.619901][T10184] FAULT_INJECTION: forcing a failure. [ 284.619901][T10184] name failslab, interval 1, probability 0, space 0, times 0 [ 284.619927][T10184] CPU: 0 UID: 0 PID: 10184 Comm: syz.2.1429 Not tainted syzkaller #0 PREEMPT [ 284.619939][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 284.619944][T10184] Call trace: [ 284.619947][T10184] show_stack+0x2c/0x3c (C) [ 284.619963][T10184] __dump_stack+0x30/0x40 [ 284.619971][T10184] dump_stack_lvl+0xd8/0x12c [ 284.619979][T10184] dump_stack+0x1c/0x28 [ 284.619987][T10184] should_fail_ex+0x3fc/0x570 [ 284.620001][T10184] should_failslab+0xc4/0x120 [ 284.620009][T10184] kmem_cache_alloc_noprof+0x94/0x5d4 [ 284.620018][T10184] skb_clone+0x1ac/0x320 [ 284.620030][T10184] __netlink_deliver_tap+0x304/0x5c4 [ 284.620041][T10184] netlink_deliver_tap+0x1d8/0x1dc [ 284.620056][T10184] netlink_unicast+0x718/0x934 [ 284.620066][T10184] netlink_sendmsg+0x670/0x98c [ 284.620077][T10184] __sock_sendmsg+0xc8/0x188 [ 284.620086][T10184] ____sys_sendmsg+0x3d0/0x6c8 [ 284.620096][T10184] ___sys_sendmsg+0x198/0x224 [ 284.620106][T10184] __sys_sendmsg+0x158/0x204 [ 284.620116][T10184] __arm64_sys_sendmsg+0x88/0x9c [ 284.620126][T10184] invoke_syscall+0x98/0x244 [ 284.620135][T10184] el0_svc_common+0xec/0x23c [ 284.620143][T10184] do_el0_svc+0x4c/0x5c [ 284.620156][T10184] el0_svc+0x60/0x1d8 [ 284.620168][T10184] el0t_64_sync_handler+0x44/0x104 [ 284.620178][T10184] el0t_64_sync+0x198/0x19c [ 285.119544][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 285.164593][T10192] loop0: detected capacity change from 0 to 256 [ 285.950651][T10205] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 286.059900][T10207] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 286.345163][T10209] loop4: detected capacity change from 0 to 256 [ 286.392818][T10213] loop1: detected capacity change from 0 to 512 [ 286.393512][T10213] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 286.393521][T10213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.468476][T10213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 286.468523][T10213] System zones: 1-12 [ 286.472797][T10213] EXT4-fs (loop1): 1 truncate cleaned up [ 286.475383][T10213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.838608][T10220] EXT4-fs error (device loop1): __ext4_expand_extra_isize:7479: inode #12: comm syz.1.1438: bad extra_isize 62 (inode size 256) [ 286.838950][T10220] EXT4-fs (loop1): Remounting filesystem read-only [ 287.292722][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.624031][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 287.677894][T10244] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 288.162779][T10248] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 288.522103][T10252] loop3: detected capacity change from 0 to 256 [ 289.183610][T10256] loop0: detected capacity change from 0 to 512 [ 289.188562][T10256] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 289.188582][T10256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 289.213246][T10256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 289.213290][T10256] System zones: 1-12 [ 289.223333][T10256] EXT4-fs (loop0): 1 truncate cleaned up [ 289.223734][T10256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.680453][T10265] EXT4-fs error (device loop0): __ext4_expand_extra_isize:7479: inode #12: comm syz.0.1448: bad extra_isize 62 (inode size 256) [ 289.680922][T10265] EXT4-fs (loop0): Remounting filesystem read-only [ 289.730795][T10275] loop3: detected capacity change from 0 to 256 [ 290.039217][T10280] loop1: detected capacity change from 0 to 256 [ 290.041410][T10280] vfat: Bad value for 'shortname' [ 290.369060][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.500887][T10288] siw: device registration error -23 [ 291.354104][T10304] loop3: detected capacity change from 0 to 256 [ 291.565357][T10306] loop2: detected capacity change from 0 to 256 [ 291.576383][T10075] syz.0.1401 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 291.577432][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT [ 291.577452][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 291.577458][T10075] Call trace: [ 291.577461][T10075] show_stack+0x2c/0x3c (C) [ 291.577477][T10075] __dump_stack+0x30/0x40 [ 291.577485][T10075] dump_stack_lvl+0xd8/0x12c [ 291.577492][T10075] dump_stack+0x1c/0x28 [ 291.577499][T10075] dump_header+0xbc/0x3f0 [ 291.577507][T10075] oom_kill_process+0x248/0x864 [ 291.577516][T10075] out_of_memory+0xcf8/0x101c [ 291.577523][T10075] mem_cgroup_out_of_memory+0xe8/0x170 [ 291.577532][T10075] try_charge_memcg+0x9d0/0xd88 [ 291.577539][T10075] charge_memcg+0x19c/0x2a0 [ 291.577546][T10075] __mem_cgroup_charge+0x38/0x98 [ 291.577553][T10075] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 291.577564][T10075] shmem_get_folio_gfp+0x4c4/0x1108 [ 291.577573][T10075] shmem_fault+0x15c/0x32c [ 291.577583][T10075] __do_fault+0xf4/0x4a8 [ 291.577590][T10075] do_pte_missing+0x1764/0x28bc [ 291.577598][T10075] handle_mm_fault+0x14d0/0x2b58 [ 291.577608][T10075] __get_user_pages+0x82c/0x13b0 [ 291.577616][T10075] get_dump_page+0x16c/0x374 [ 291.577624][T10075] dump_user_range+0x160/0x83c [ 291.577635][T10075] elf_core_dump+0x2ab8/0x3100 [ 291.577643][T10075] do_coredump+0x4b9c/0x53ac [ 291.577653][T10075] vfs_coredump+0x878/0xe20 [ 291.577662][T10075] get_signal+0xe24/0x1130 [ 291.577670][T10075] arch_do_signal_or_restart+0x1c8/0x444c [ 291.577678][T10075] exit_to_user_mode_loop+0x70/0x17c [ 291.577688][T10075] el0_da+0x14c/0x1d4 [ 291.577697][T10075] el0t_64_sync_handler+0xd8/0x104 [ 291.577705][T10075] el0t_64_sync+0x198/0x19c [ 291.817849][T10075] memory: usage 307012kB, limit 307200kB, failcnt 23184 [ 291.817876][T10075] memory+swap: usage 407068kB, limit 9007199254740988kB, failcnt 0 [ 291.817884][T10075] kmem: usage 2584kB, limit 9007199254740988kB, failcnt 0 [ 291.817890][T10075] Memory cgroup stats for /syz0: [ 291.874040][T10075] cache 311152640 [ 291.874050][T10075] rss 581632 [ 291.874055][T10075] rss_huge 0 [ 291.874060][T10075] shmem 311152640 [ 291.874065][T10075] mapped_file 191799296 [ 291.874069][T10075] dirty 0 [ 291.874072][T10075] writeback 0 [ 291.874075][T10075] workingset_refault_anon 259 [ 291.874078][T10075] workingset_refault_file 1095 [ 291.874082][T10075] swap 102457344 [ 291.874085][T10075] swapcached 0 [ 291.874088][T10075] pgpgin 911663 [ 291.874091][T10075] pgpgout 835556 [ 291.874094][T10075] pgfault 677018 [ 291.874097][T10075] pgmajfault 237 [ 291.874100][T10075] inactive_anon 311689216 [ 291.874103][T10075] active_anon 45056 [ 291.874106][T10075] inactive_file 0 [ 291.874109][T10075] active_file 0 [ 291.874112][T10075] unevictable 0 [ 291.874115][T10075] hierarchical_memory_limit 314572800 [ 291.874118][T10075] hierarchical_memsw_limit 9223372036854771712 [ 291.874122][T10075] total_cache 311152640 [ 291.874125][T10075] total_rss 581632 [ 291.874128][T10075] total_rss_huge 0 [ 291.874131][T10075] total_shmem 311152640 [ 291.874134][T10075] total_mapped_file 191799296 [ 291.874137][T10075] total_dirty 0 [ 291.874140][T10075] total_writeback 0 [ 291.874144][T10075] total_workingset_refault_anon 259 [ 291.874147][T10075] total_workingset_refault_file 1095 [ 291.874150][T10075] total_swap 102457344 [ 291.874153][T10075] total_swapcached 0 [ 291.874156][T10075] total_pgpgin 911663 [ 291.874165][T10075] total_pgpgout 835556 [ 291.874168][T10075] total_pgfault 677018 [ 291.874171][T10075] total_pgmajfault 237 [ 291.874174][T10075] total_inactive_anon 311689216 [ 291.874178][T10075] total_active_anon 45056 [ 291.874181][T10075] total_inactive_file 0 [ 291.874184][T10075] total_active_file 0 [ 291.874187][T10075] total_unevictable 0 [ 291.874190][T10075] anon_cost 15286 [ 291.874193][T10075] file_cost 13 [ 291.874197][T10075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1416,pid=10139,uid=0 [ 291.874265][T10075] Memory cgroup out of memory: Killed process 10139 (syz.0.1416) total-vm:202568kB, anon-rss:1240kB, file-rss:20868kB, shmem-rss:77000kB, UID:0 pgtables:280kB oom_score_adj:1000 [ 291.930725][T10289] syz.0.1455 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 291.930745][T10289] CPU: 1 UID: 0 PID: 10289 Comm: syz.0.1455 Not tainted syzkaller #0 PREEMPT [ 291.930754][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 291.930760][T10289] Call trace: [ 291.930762][T10289] show_stack+0x2c/0x3c (C) [ 291.930776][T10289] __dump_stack+0x30/0x40 [ 291.930783][T10289] dump_stack_lvl+0xd8/0x12c [ 291.930791][T10289] dump_stack+0x1c/0x28 [ 291.930797][T10289] dump_header+0xbc/0x3f0 [ 291.930805][T10289] oom_kill_process+0x248/0x864 [ 291.930814][T10289] out_of_memory+0xcf8/0x101c [ 291.930821][T10289] mem_cgroup_out_of_memory+0xe8/0x170 [ 291.930830][T10289] try_charge_memcg+0x9d0/0xd88 [ 291.930837][T10289] charge_memcg+0x19c/0x2a0 [ 291.930844][T10289] __mem_cgroup_charge+0x38/0x98 [ 291.930851][T10289] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 291.930861][T10289] shmem_get_folio_gfp+0x4c4/0x1108 [ 291.930870][T10289] shmem_write_begin+0x160/0x448 [ 291.930879][T10289] generic_perform_write+0x23c/0x7a4 [ 291.930889][T10289] shmem_file_write_iter+0x10c/0x134 [ 291.930899][T10289] __kernel_write_iter+0x334/0x740 [ 291.930907][T10289] dump_write_iter+0xf0/0x1cc [ 291.930918][T10289] dump_user_range+0x63c/0x83c [ 291.930927][T10289] elf_core_dump+0x2ab8/0x3100 [ 291.930936][T10289] do_coredump+0x4b9c/0x53ac [ 291.930945][T10289] vfs_coredump+0x878/0xe20 [ 291.930955][T10289] get_signal+0xe24/0x1130 [ 291.930962][T10289] arch_do_signal_or_restart+0x1c8/0x444c [ 291.930970][T10289] exit_to_user_mode_loop+0x70/0x17c [ 291.930980][T10289] el0_da+0x14c/0x1d4 [ 291.930989][T10289] el0t_64_sync_handler+0xd8/0x104 [ 291.930997][T10289] el0t_64_sync+0x198/0x19c [ 291.931006][T10289] memory: usage 307200kB, limit 307200kB, failcnt 23389 [ 291.931012][T10289] memory+swap: usage 407256kB, limit 9007199254740988kB, failcnt 0 [ 291.931017][T10289] kmem: usage 2680kB, limit 9007199254740988kB, failcnt 0 [ 291.931022][T10289] Memory cgroup stats for /syz0: [ 291.931147][T10289] cache 311246848 [ 291.931151][T10289] rss 581632 [ 291.931154][T10289] rss_huge 0 [ 291.931157][T10289] shmem 311246848 [ 291.931164][T10289] mapped_file 191758336 [ 291.931168][T10289] dirty 0 [ 291.931171][T10289] writeback 0 [ 291.931174][T10289] workingset_refault_anon 259 [ 291.931177][T10289] workingset_refault_file 1095 [ 291.931181][T10289] swap 102457344 [ 291.931184][T10289] swapcached 0 [ 291.931187][T10289] pgpgin 911731 [ 291.931190][T10289] pgpgout 835601 [ 291.931193][T10289] pgfault 677053 [ 291.931196][T10289] pgmajfault 237 [ 291.931199][T10289] inactive_anon 311459840 [ 291.931203][T10289] active_anon 368640 [ 291.931206][T10289] inactive_file 0 [ 291.931209][T10289] active_file 0 [ 291.931212][T10289] unevictable 0 [ 291.931215][T10289] hierarchical_memory_limit 314572800 [ 291.931218][T10289] hierarchical_memsw_limit 9223372036854771712 [ 291.931222][T10289] total_cache 311246848 [ 291.931225][T10289] total_rss 581632 [ 291.931228][T10289] total_rss_huge 0 [ 291.931231][T10289] total_shmem 311246848 [ 291.931234][T10289] total_mapped_file 191758336 [ 291.931237][T10289] total_dirty 0 [ 291.931240][T10289] total_writeback 0 [ 291.931243][T10289] total_workingset_refault_anon 259 [ 291.931247][T10289] total_workingset_refault_file 1095 [ 291.931250][T10289] total_swap 102457344 [ 291.931253][T10289] total_swapcached 0 [ 291.931256][T10289] total_pgpgin 911731 [ 291.931259][T10289] total_pgpgout 835601 [ 291.931262][T10289] total_pgfault 677053 [ 291.931265][T10289] total_pgmajfault 237 [ 291.931269][T10289] total_inactive_anon 311459840 [ 291.931272][T10289] total_active_anon 368640 [ 291.931275][T10289] total_inactive_file 0 [ 291.931278][T10289] total_active_file 0 [ 291.931281][T10289] total_unevictable 0 [ 291.931284][T10289] anon_cost 15286 [ 291.931287][T10289] file_cost 18 [ 291.931291][T10289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1401,pid=10075,uid=0 [ 291.931343][T10289] Memory cgroup out of memory: Killed process 10075 (syz.0.1401) total-vm:202568kB, anon-rss:1236kB, file-rss:20868kB, shmem-rss:72828kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 292.240655][T10216] syz.0.1437 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 292.240679][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.0.1437 Not tainted syzkaller #0 PREEMPT [ 292.240688][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 292.240693][T10216] Call trace: [ 292.240696][T10216] show_stack+0x2c/0x3c (C) [ 292.240710][T10216] __dump_stack+0x30/0x40 [ 292.240718][T10216] dump_stack_lvl+0xd8/0x12c [ 292.240725][T10216] dump_stack+0x1c/0x28 [ 292.240732][T10216] dump_header+0xbc/0x3f0 [ 292.240739][T10216] oom_kill_process+0x248/0x864 [ 292.240748][T10216] out_of_memory+0xcf8/0x101c [ 292.240754][T10216] mem_cgroup_out_of_memory+0xe8/0x170 [ 292.240763][T10216] try_charge_memcg+0x9d0/0xd88 [ 292.240771][T10216] charge_memcg+0x19c/0x2a0 [ 292.240777][T10216] __mem_cgroup_charge+0x38/0x98 [ 292.240784][T10216] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 292.240794][T10216] shmem_get_folio_gfp+0x4c4/0x1108 [ 292.240803][T10216] shmem_fault+0x15c/0x32c [ 292.240813][T10216] __do_fault+0xf4/0x4a8 [ 292.240820][T10216] do_pte_missing+0x1764/0x28bc [ 292.240828][T10216] handle_mm_fault+0x14d0/0x2b58 [ 292.240838][T10216] __get_user_pages+0x82c/0x13b0 [ 292.240846][T10216] get_dump_page+0x16c/0x374 [ 292.240853][T10216] dump_user_range+0x160/0x83c [ 292.240864][T10216] elf_core_dump+0x2ab8/0x3100 [ 292.240872][T10216] do_coredump+0x4b9c/0x53ac [ 292.240882][T10216] vfs_coredump+0x878/0xe20 [ 292.240891][T10216] get_signal+0xe24/0x1130 [ 292.240899][T10216] arch_do_signal_or_restart+0x1c8/0x444c [ 292.240906][T10216] exit_to_user_mode_loop+0x70/0x17c [ 292.240916][T10216] el0_da+0x14c/0x1d4 [ 292.240926][T10216] el0t_64_sync_handler+0xd8/0x104 [ 292.240934][T10216] el0t_64_sync+0x198/0x19c [ 292.240943][T10216] memory: usage 307200kB, limit 307200kB, failcnt 23486 [ 292.240949][T10216] memory+swap: usage 407256kB, limit 9007199254740988kB, failcnt 0 [ 292.240954][T10216] kmem: usage 2728kB, limit 9007199254740988kB, failcnt 0 [ 292.240959][T10216] Memory cgroup stats for /syz0: [ 292.241022][T10216] cache 311197696 [ 292.249591][T10216] rss 581632 [ 292.249609][T10216] rss_huge 0 [ 292.249621][T10216] shmem 311197696 [ 292.249629][T10216] mapped_file 114909184 [ 292.249635][T10216] dirty 0 [ 292.249640][T10216] writeback 0 [ 292.249645][T10216] workingset_refault_anon 259 [ 292.249650][T10216] workingset_refault_file 1095 [ 292.249654][T10216] swap 102457344 [ 292.249658][T10216] swapcached 0 [ 292.249661][T10216] pgpgin 911752 [ 292.249664][T10216] pgpgout 835634 [ 292.249667][T10216] pgfault 677064 [ 292.249670][T10216] pgmajfault 237 [ 292.249673][T10216] inactive_anon 311283712 [ 292.249676][T10216] active_anon 495616 [ 292.249679][T10216] inactive_file 0 [ 292.249682][T10216] active_file 0 [ 292.249685][T10216] unevictable 0 [ 292.249688][T10216] hierarchical_memory_limit 314572800 [ 292.249692][T10216] hierarchical_memsw_limit 9223372036854771712 [ 292.249695][T10216] total_cache 311197696 [ 292.249698][T10216] total_rss 581632 [ 292.249701][T10216] total_rss_huge 0 [ 292.249704][T10216] total_shmem 311197696 [ 292.249707][T10216] total_mapped_file 114909184 [ 292.249711][T10216] total_dirty 0 [ 292.249714][T10216] total_writeback 0 [ 292.249717][T10216] total_workingset_refault_anon 259 [ 292.249720][T10216] total_workingset_refault_file 1095 [ 292.249723][T10216] total_swap 102457344 [ 292.249726][T10216] total_swapcached 0 [ 292.249729][T10216] total_pgpgin 911752 [ 292.249732][T10216] total_pgpgout 835634 [ 292.249736][T10216] total_pgfault 677064 [ 292.249739][T10216] total_pgmajfault 237 [ 292.249742][T10216] total_inactive_anon 311283712 [ 292.249745][T10216] total_active_anon 495616 [ 292.249748][T10216] total_inactive_file 0 [ 292.249751][T10216] total_active_file 0 [ 292.249754][T10216] total_unevictable 0 [ 292.249757][T10216] anon_cost 15433 [ 292.249760][T10216] file_cost 18 [ 292.249764][T10216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1437,pid=10216,uid=0 [ 292.249826][T10216] Memory cgroup out of memory: Killed process 10216 (syz.0.1437) total-vm:202568kB, anon-rss:1464kB, file-rss:20868kB, shmem-rss:28376kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 292.708232][T10330] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 293.143551][T10337] siw: device registration error -23 [ 293.683396][T10346] loop3: detected capacity change from 0 to 256 [ 293.719313][T10348] loop2: detected capacity change from 0 to 512 [ 293.729173][T10348] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 293.729189][T10348] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.747069][T10348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 293.747124][T10348] System zones: 1-12 [ 293.747833][T10348] EXT4-fs (loop2): 1 truncate cleaned up [ 293.748228][T10348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.114156][T10355] EXT4-fs error (device loop2): __ext4_expand_extra_isize:7479: inode #12: comm syz.2.1470: bad extra_isize 62 (inode size 256) [ 294.114721][T10355] EXT4-fs (loop2): Remounting filesystem read-only [ 294.586935][T10362] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 294.795981][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.297853][T10370] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 295.311688][T10371] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 295.646321][T10380] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 296.727497][T10397] loop4: detected capacity change from 0 to 512 [ 296.776207][T10397] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 296.776230][T10397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 296.796841][T10397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 296.796900][T10397] System zones: 1-12 [ 296.801429][T10397] EXT4-fs (loop4): 1 truncate cleaned up [ 296.801994][T10397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.287825][T10407] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 297.566898][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.617268][T10412] loop0: detected capacity change from 0 to 256 [ 297.868200][T10417] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 298.362447][T10422] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.746257][T10434] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 299.397587][T10446] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 300.300447][T10457] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1495'. [ 301.292463][T10473] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 301.854080][T10479] loop3: detected capacity change from 0 to 256 [ 302.986222][T10500] loop2: detected capacity change from 0 to 256 [ 303.129125][T10503] loop0: detected capacity change from 0 to 512 [ 303.135472][T10503] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 303.135499][T10503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 303.228631][T10503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 303.228696][T10503] System zones: 1-12 [ 303.270986][T10503] EXT4-fs (loop0): 1 truncate cleaned up [ 303.271377][T10503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.725403][T10517] EXT4-fs error (device loop0): __ext4_expand_extra_isize:7479: inode #12: comm syz.0.1506: bad extra_isize 62 (inode size 256) [ 303.725891][T10517] EXT4-fs (loop0): Remounting filesystem read-only [ 303.955213][T10518] siw: device registration error -23 [ 303.982509][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.988061][T10519] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 304.357329][T10531] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 304.466274][T10534] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 305.187441][T10542] siw: device registration error -23 [ 305.253259][T10542] FAULT_INJECTION: forcing a failure. [ 305.253259][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 305.253285][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.4.1514 Not tainted syzkaller #0 PREEMPT [ 305.253296][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 305.253302][T10542] Call trace: [ 305.253306][T10542] show_stack+0x2c/0x3c (C) [ 305.253321][T10542] __dump_stack+0x30/0x40 [ 305.253330][T10542] dump_stack_lvl+0xd8/0x12c [ 305.253338][T10542] dump_stack+0x1c/0x28 [ 305.253346][T10542] should_fail_ex+0x3fc/0x570 [ 305.253360][T10542] should_failslab+0xc4/0x120 [ 305.253368][T10542] kmem_cache_alloc_noprof+0x94/0x5d4 [ 305.253378][T10542] skb_clone+0x1ac/0x320 [ 305.253390][T10542] netlink_trim+0x15c/0x2b8 [ 305.253401][T10542] netlink_broadcast_filtered+0x7c/0xebc [ 305.253411][T10542] nlmsg_notify+0xf8/0x1dc [ 305.253422][T10542] rtnetlink_send+0x6c/0x84 [ 305.253435][T10542] qdisc_notify+0x29c/0x3c8 [ 305.253447][T10542] tc_modify_qdisc+0x1480/0x17a8 [ 305.253460][T10542] rtnetlink_rcv_msg+0x630/0x9bc [ 305.253468][T10542] netlink_rcv_skb+0x238/0x414 [ 305.253479][T10542] rtnetlink_rcv+0x28/0x38 [ 305.253488][T10542] netlink_unicast+0x73c/0x934 [ 305.253498][T10542] netlink_sendmsg+0x670/0x98c [ 305.253508][T10542] __sock_sendmsg+0xc8/0x188 [ 305.253517][T10542] ____sys_sendmsg+0x3d0/0x6c8 [ 305.253528][T10542] ___sys_sendmsg+0x198/0x224 [ 305.253538][T10542] __sys_sendmsg+0x158/0x204 [ 305.253548][T10542] __arm64_sys_sendmsg+0x88/0x9c [ 305.253558][T10542] invoke_syscall+0x98/0x244 [ 305.253567][T10542] el0_svc_common+0xec/0x23c [ 305.253575][T10542] do_el0_svc+0x4c/0x5c [ 305.253582][T10542] el0_svc+0x60/0x1d8 [ 305.253593][T10542] el0t_64_sync_handler+0x44/0x104 [ 305.253603][T10542] el0t_64_sync+0x198/0x19c [ 305.259273][T10540] FAULT_INJECTION: forcing a failure. [ 305.259273][T10540] name fail_futex, interval 1, probability 0, space 0, times 0 [ 305.259291][T10540] CPU: 0 UID: 0 PID: 10540 Comm: syz.3.1512 Not tainted syzkaller #0 PREEMPT [ 305.259301][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 305.259307][T10540] Call trace: [ 305.259309][T10540] show_stack+0x2c/0x3c (C) [ 305.259321][T10540] __dump_stack+0x30/0x40 [ 305.259330][T10540] dump_stack_lvl+0xd8/0x12c [ 305.259337][T10540] dump_stack+0x1c/0x28 [ 305.259345][T10540] should_fail_ex+0x3fc/0x570 [ 305.259358][T10540] should_fail+0x14/0x24 [ 305.259370][T10540] get_futex_key+0x1e0/0x118c [ 305.259381][T10540] futex_wait_setup+0x58/0x674 [ 305.259392][T10540] __futex_wait+0x11c/0x2b8 [ 305.259404][T10540] futex_wait+0x108/0x2c0 [ 305.259415][T10540] do_futex+0x320/0x378 [ 305.259426][T10540] __arm64_sys_futex+0x2e4/0x418 [ 305.259437][T10540] invoke_syscall+0x98/0x244 [ 305.259445][T10540] el0_svc_common+0xec/0x23c [ 305.259453][T10540] do_el0_svc+0x4c/0x5c [ 305.259460][T10540] el0_svc+0x60/0x1d8 [ 305.259471][T10540] el0t_64_sync_handler+0x44/0x104 [ 305.259480][T10540] el0t_64_sync+0x198/0x19c [ 305.673021][T10299] syz.1.1458 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 305.673043][T10299] CPU: 0 UID: 0 PID: 10299 Comm: syz.1.1458 Not tainted syzkaller #0 PREEMPT [ 305.673053][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 305.673058][T10299] Call trace: [ 305.673061][T10299] show_stack+0x2c/0x3c (C) [ 305.673076][T10299] __dump_stack+0x30/0x40 [ 305.673084][T10299] dump_stack_lvl+0xd8/0x12c [ 305.673092][T10299] dump_stack+0x1c/0x28 [ 305.673099][T10299] dump_header+0xbc/0x3f0 [ 305.673107][T10299] oom_kill_process+0x248/0x864 [ 305.673115][T10299] out_of_memory+0xcf8/0x101c [ 305.673122][T10299] mem_cgroup_out_of_memory+0xe8/0x170 [ 305.673131][T10299] try_charge_memcg+0x9d0/0xd88 [ 305.673139][T10299] charge_memcg+0x19c/0x2a0 [ 305.673148][T10299] __mem_cgroup_charge+0x38/0x98 [ 305.673157][T10299] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 305.673168][T10299] shmem_get_folio_gfp+0x4c4/0x1108 [ 305.673177][T10299] shmem_fault+0x15c/0x32c [ 305.673186][T10299] __do_fault+0xf4/0x4a8 [ 305.673194][T10299] do_pte_missing+0x1764/0x28bc [ 305.673201][T10299] handle_mm_fault+0x14d0/0x2b58 [ 305.673212][T10299] __get_user_pages+0x82c/0x13b0 [ 305.673220][T10299] get_dump_page+0x16c/0x374 [ 305.673227][T10299] dump_user_range+0x160/0x83c [ 305.673238][T10299] elf_core_dump+0x2ab8/0x3100 [ 305.673246][T10299] do_coredump+0x4b9c/0x53ac [ 305.673256][T10299] vfs_coredump+0x878/0xe20 [ 305.673265][T10299] get_signal+0xe24/0x1130 [ 305.673273][T10299] arch_do_signal_or_restart+0x1c8/0x444c [ 305.673281][T10299] exit_to_user_mode_loop+0x70/0x17c [ 305.673290][T10299] el0_da+0x14c/0x1d4 [ 305.673300][T10299] el0t_64_sync_handler+0xd8/0x104 [ 305.673308][T10299] el0t_64_sync+0x198/0x19c [ 305.673318][T10299] memory: usage 307200kB, limit 307200kB, failcnt 32411 [ 305.673324][T10299] memory+swap: usage 364744kB, limit 9007199254740988kB, failcnt 0 [ 305.673329][T10299] kmem: usage 2768kB, limit 9007199254740988kB, failcnt 0 [ 305.673335][T10299] Memory cgroup stats for /syz1: [ 305.673397][T10299] cache 311087104 [ 305.673401][T10299] rss 651264 [ 305.673404][T10299] rss_huge 0 [ 305.673407][T10299] shmem 311087104 [ 305.673411][T10299] mapped_file 184369152 [ 305.673414][T10299] dirty 0 [ 305.673417][T10299] writeback 0 [ 305.673420][T10299] workingset_refault_anon 240 [ 305.673423][T10299] workingset_refault_file 1091 [ 305.673426][T10299] swap 58925056 [ 305.673429][T10299] swapcached 0 [ 305.673432][T10299] pgpgin 1082284 [ 305.673435][T10299] pgpgout 1006176 [ 305.673438][T10299] pgfault 801341 [ 305.673441][T10299] pgmajfault 230 [ 305.673444][T10299] inactive_anon 311631872 [ 305.673448][T10299] active_anon 102400 [ 305.673451][T10299] inactive_file 0 [ 305.673454][T10299] active_file 0 [ 305.673457][T10299] unevictable 0 [ 305.673460][T10299] hierarchical_memory_limit 314572800 [ 305.673463][T10299] hierarchical_memsw_limit 9223372036854771712 [ 305.673467][T10299] total_cache 311087104 [ 305.673470][T10299] total_rss 651264 [ 305.673473][T10299] total_rss_huge 0 [ 305.673476][T10299] total_shmem 311087104 [ 305.673480][T10299] total_mapped_file 184369152 [ 305.673483][T10299] total_dirty 0 [ 305.673486][T10299] total_writeback 0 [ 305.673489][T10299] total_workingset_refault_anon 240 [ 305.673492][T10299] total_workingset_refault_file 1091 [ 305.673496][T10299] total_swap 58925056 [ 305.673499][T10299] total_swapcached 0 [ 305.673502][T10299] total_pgpgin 1082284 [ 305.673505][T10299] total_pgpgout 1006176 [ 305.673508][T10299] total_pgfault 801341 [ 305.673511][T10299] total_pgmajfault 230 [ 305.673515][T10299] total_inactive_anon 311631872 [ 305.673518][T10299] total_active_anon 102400 [ 305.673521][T10299] total_inactive_file 0 [ 305.673524][T10299] total_active_file 0 [ 305.673528][T10299] total_unevictable 0 [ 305.673531][T10299] anon_cost 9537 [ 305.673533][T10299] file_cost 0 [ 305.673537][T10299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1458,pid=10299,uid=0 [ 305.673584][T10299] Memory cgroup out of memory: Killed process 10299 (syz.1.1458) total-vm:202568kB, anon-rss:1244kB, file-rss:20868kB, shmem-rss:88928kB, UID:0 pgtables:284kB oom_score_adj:1000 [ 306.236538][T10335] syz.1.1468 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 306.236561][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.1.1468 Not tainted syzkaller #0 PREEMPT [ 306.236571][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 306.236577][T10335] Call trace: [ 306.236579][T10335] show_stack+0x2c/0x3c (C) [ 306.236594][T10335] __dump_stack+0x30/0x40 [ 306.236602][T10335] dump_stack_lvl+0xd8/0x12c [ 306.236610][T10335] dump_stack+0x1c/0x28 [ 306.236616][T10335] dump_header+0xbc/0x3f0 [ 306.236625][T10335] oom_kill_process+0x248/0x864 [ 306.236634][T10335] out_of_memory+0xcf8/0x101c [ 306.236640][T10335] mem_cgroup_out_of_memory+0xe8/0x170 [ 306.236650][T10335] try_charge_memcg+0x9d0/0xd88 [ 306.236657][T10335] charge_memcg+0x19c/0x2a0 [ 306.236664][T10335] __mem_cgroup_charge+0x38/0x98 [ 306.236670][T10335] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 306.236681][T10335] shmem_get_folio_gfp+0x4c4/0x1108 [ 306.236691][T10335] shmem_fault+0x15c/0x32c [ 306.236700][T10335] __do_fault+0xf4/0x4a8 [ 306.236708][T10335] do_pte_missing+0x1764/0x28bc [ 306.236715][T10335] handle_mm_fault+0x14d0/0x2b58 [ 306.236726][T10335] __get_user_pages+0x82c/0x13b0 [ 306.236734][T10335] get_dump_page+0x16c/0x374 [ 306.236742][T10335] dump_user_range+0x160/0x83c [ 306.236753][T10335] elf_core_dump+0x2ab8/0x3100 [ 306.236761][T10335] do_coredump+0x4b9c/0x53ac [ 306.236771][T10335] vfs_coredump+0x878/0xe20 [ 306.236780][T10335] get_signal+0xe24/0x1130 [ 306.236788][T10335] arch_do_signal_or_restart+0x1c8/0x444c [ 306.236795][T10335] exit_to_user_mode_loop+0x70/0x17c [ 306.236805][T10335] el0_da+0x14c/0x1d4 [ 306.236814][T10335] el0t_64_sync_handler+0xd8/0x104 [ 306.236822][T10335] el0t_64_sync+0x198/0x19c [ 306.236832][T10335] memory: usage 307200kB, limit 307200kB, failcnt 32536 [ 306.236838][T10335] memory+swap: usage 364744kB, limit 9007199254740988kB, failcnt 0 [ 306.236844][T10335] kmem: usage 2764kB, limit 9007199254740988kB, failcnt 0 [ 306.236849][T10335] Memory cgroup stats for /syz1: [ 306.236912][T10335] cache 311091200 [ 306.236916][T10335] rss 651264 [ 306.236919][T10335] rss_huge 0 [ 306.236922][T10335] shmem 311091200 [ 306.236925][T10335] mapped_file 174940160 [ 306.236928][T10335] dirty 0 [ 306.236931][T10335] writeback 0 [ 306.236934][T10335] workingset_refault_anon 240 [ 306.236937][T10335] workingset_refault_file 1091 [ 306.236941][T10335] swap 58925056 [ 306.236944][T10335] swapcached 0 [ 306.236947][T10335] pgpgin 1082288 [ 306.236950][T10335] pgpgout 1006179 [ 306.236953][T10335] pgfault 801344 [ 306.236956][T10335] pgmajfault 230 [ 306.236959][T10335] inactive_anon 311640064 [ 306.236962][T10335] active_anon 102400 [ 306.236965][T10335] inactive_file 0 [ 306.236969][T10335] active_file 0 [ 306.236971][T10335] unevictable 0 [ 306.236975][T10335] hierarchical_memory_limit 314572800 [ 306.236978][T10335] hierarchical_memsw_limit 9223372036854771712 [ 306.236982][T10335] total_cache 311091200 [ 306.236985][T10335] total_rss 651264 [ 306.236988][T10335] total_rss_huge 0 [ 306.236991][T10335] total_shmem 311091200 [ 306.236994][T10335] total_mapped_file 174940160 [ 306.236998][T10335] total_dirty 0 [ 306.237001][T10335] total_writeback 0 [ 306.237004][T10335] total_workingset_refault_anon 240 [ 306.237007][T10335] total_workingset_refault_file 1091 [ 306.237010][T10335] total_swap 58925056 [ 306.237014][T10335] total_swapcached 0 [ 306.237017][T10335] total_pgpgin 1082288 [ 306.237020][T10335] total_pgpgout 1006179 [ 306.237023][T10335] total_pgfault 801344 [ 306.237026][T10335] total_pgmajfault 230 [ 306.237029][T10335] total_inactive_anon 311640064 [ 306.237033][T10335] total_active_anon 102400 [ 306.237036][T10335] total_inactive_file 0 [ 306.237039][T10335] total_active_file 0 [ 306.237042][T10335] total_unevictable 0 [ 306.237045][T10335] anon_cost 10181 [ 306.237048][T10335] file_cost 0 [ 306.237052][T10335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1468,pid=10335,uid=0 [ 306.237100][T10335] Memory cgroup out of memory: Killed process 10335 (syz.1.1468) total-vm:202568kB, anon-rss:1372kB, file-rss:20868kB, shmem-rss:59024kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 306.640131][T10558] loop3: detected capacity change from 0 to 512 [ 306.642562][T10558] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 306.642579][T10558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 306.656255][T10558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 306.656887][T10558] System zones: 1-12 [ 306.657533][T10558] EXT4-fs (loop3): 1 truncate cleaned up [ 306.657910][T10558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.206865][T10573] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 307.427170][T10574] EXT4-fs error (device loop3): __ext4_expand_extra_isize:7479: inode #12: comm syz.3.1518: bad extra_isize 62 (inode size 256) [ 307.427450][T10574] EXT4-fs (loop3): Remounting filesystem read-only [ 307.569287][T10577] loop0: detected capacity change from 0 to 256 [ 307.710261][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.195066][T10594] loop3: detected capacity change from 0 to 256 [ 309.205047][T10273] syz.2.1452 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 309.205065][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.2.1452 Not tainted syzkaller #0 PREEMPT [ 309.205075][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 309.205080][T10273] Call trace: [ 309.205083][T10273] show_stack+0x2c/0x3c (C) [ 309.205099][T10273] __dump_stack+0x30/0x40 [ 309.205107][T10273] dump_stack_lvl+0xd8/0x12c [ 309.205114][T10273] dump_stack+0x1c/0x28 [ 309.205121][T10273] dump_header+0xbc/0x3f0 [ 309.205129][T10273] oom_kill_process+0x248/0x864 [ 309.205138][T10273] out_of_memory+0xcf8/0x101c [ 309.205145][T10273] mem_cgroup_out_of_memory+0xe8/0x170 [ 309.205157][T10273] try_charge_memcg+0x9d0/0xd88 [ 309.205165][T10273] charge_memcg+0x19c/0x2a0 [ 309.205173][T10273] __mem_cgroup_charge+0x38/0x98 [ 309.205180][T10273] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 309.205190][T10273] shmem_get_folio_gfp+0x4c4/0x1108 [ 309.205199][T10273] shmem_fault+0x15c/0x32c [ 309.205209][T10273] __do_fault+0xf4/0x4a8 [ 309.205216][T10273] do_pte_missing+0x1764/0x28bc [ 309.205224][T10273] handle_mm_fault+0x14d0/0x2b58 [ 309.205234][T10273] __get_user_pages+0x82c/0x13b0 [ 309.205242][T10273] get_dump_page+0x16c/0x374 [ 309.205250][T10273] dump_user_range+0x160/0x83c [ 309.205260][T10273] elf_core_dump+0x2ab8/0x3100 [ 309.205269][T10273] do_coredump+0x4b9c/0x53ac [ 309.205278][T10273] vfs_coredump+0x878/0xe20 [ 309.205288][T10273] get_signal+0xe24/0x1130 [ 309.205296][T10273] arch_do_signal_or_restart+0x1c8/0x444c [ 309.205303][T10273] exit_to_user_mode_loop+0x70/0x17c [ 309.205313][T10273] el0_da+0x14c/0x1d4 [ 309.205322][T10273] el0t_64_sync_handler+0xd8/0x104 [ 309.205331][T10273] el0t_64_sync+0x198/0x19c [ 309.205340][T10273] memory: usage 307200kB, limit 307200kB, failcnt 703 [ 309.205346][T10273] memory+swap: usage 358712kB, limit 9007199254740988kB, failcnt 0 [ 309.205352][T10273] kmem: usage 2996kB, limit 9007199254740988kB, failcnt 0 [ 309.205357][T10273] Memory cgroup stats for /syz2: [ 309.205420][T10273] cache 311062528 [ 309.205424][T10273] rss 389120 [ 309.205427][T10273] rss_huge 0 [ 309.205430][T10273] shmem 311062528 [ 309.205433][T10273] mapped_file 172969984 [ 309.205436][T10273] dirty 0 [ 309.205439][T10273] writeback 0 [ 309.205442][T10273] workingset_refault_anon 307 [ 309.205445][T10273] workingset_refault_file 975 [ 309.205449][T10273] swap 52748288 [ 309.205452][T10273] swapcached 61440 [ 309.205455][T10273] pgpgin 782124 [ 309.205458][T10273] pgpgout 706073 [ 309.205461][T10273] pgfault 663731 [ 309.205464][T10273] pgmajfault 264 [ 309.205467][T10273] inactive_anon 311443456 [ 309.205470][T10273] active_anon 61440 [ 309.205473][T10273] inactive_file 0 [ 309.205476][T10273] active_file 0 [ 309.205479][T10273] unevictable 0 [ 309.205482][T10273] hierarchical_memory_limit 314572800 [ 309.205486][T10273] hierarchical_memsw_limit 9223372036854771712 [ 309.205489][T10273] total_cache 311062528 [ 309.205492][T10273] total_rss 389120 [ 309.205495][T10273] total_rss_huge 0 [ 309.205498][T10273] total_shmem 311062528 [ 309.205502][T10273] total_mapped_file 172969984 [ 309.205505][T10273] total_dirty 0 [ 309.205508][T10273] total_writeback 0 [ 309.205511][T10273] total_workingset_refault_anon 307 [ 309.205514][T10273] total_workingset_refault_file 975 [ 309.205517][T10273] total_swap 52748288 [ 309.205521][T10273] total_swapcached 61440 [ 309.205524][T10273] total_pgpgin 782124 [ 309.205527][T10273] total_pgpgout 706073 [ 309.205530][T10273] total_pgfault 663731 [ 309.205533][T10273] total_pgmajfault 264 [ 309.205536][T10273] total_inactive_anon 311443456 [ 309.205539][T10273] total_active_anon 61440 [ 309.205543][T10273] total_inactive_file 0 [ 309.205546][T10273] total_active_file 0 [ 309.205549][T10273] total_unevictable 0 [ 309.205552][T10273] anon_cost 12980 [ 309.205555][T10273] file_cost 7 [ 309.205558][T10273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1452,pid=10273,uid=0 [ 309.205607][T10273] Memory cgroup out of memory: Killed process 10273 (syz.2.1452) total-vm:202760kB, anon-rss:1232kB, file-rss:20868kB, shmem-rss:91852kB, UID:0 pgtables:344kB oom_score_adj:1000 [ 309.299180][T10595] siw: device registration error -23 [ 309.637817][ T4722] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 309.637839][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 309.637849][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 309.637854][ T4722] Call trace: [ 309.637857][ T4722] show_stack+0x2c/0x3c (C) [ 309.637871][ T4722] __dump_stack+0x30/0x40 [ 309.637879][ T4722] dump_stack_lvl+0xd8/0x12c [ 309.637886][ T4722] dump_stack+0x1c/0x28 [ 309.637893][ T4722] dump_header+0xbc/0x3f0 [ 309.637901][ T4722] oom_kill_process+0x248/0x864 [ 309.637909][ T4722] out_of_memory+0xcf8/0x101c [ 309.637916][ T4722] mem_cgroup_out_of_memory+0xe8/0x170 [ 309.637925][ T4722] try_charge_memcg+0x9d0/0xd88 [ 309.637932][ T4722] charge_memcg+0x19c/0x2a0 [ 309.637939][ T4722] __mem_cgroup_charge+0x38/0x98 [ 309.637946][ T4722] filemap_add_folio+0x164/0x54c [ 309.637955][ T4722] __filemap_get_folio_mpol+0x534/0x1054 [ 309.637964][ T4722] filemap_fault+0xa90/0x1370 [ 309.637973][ T4722] __do_fault+0xf4/0x4a8 [ 309.637980][ T4722] do_pte_missing+0x1764/0x28bc [ 309.637988][ T4722] handle_mm_fault+0x14d0/0x2b58 [ 309.637998][ T4722] do_page_fault+0x7e8/0xc00 [ 309.638008][ T4722] do_translation_fault+0xc4/0x114 [ 309.638018][ T4722] do_mem_abort+0x70/0x194 [ 309.638028][ T4722] el0_da+0x78/0x1d4 [ 309.638037][ T4722] el0t_64_sync_handler+0xd8/0x104 [ 309.638046][ T4722] el0t_64_sync+0x198/0x19c [ 309.638055][ T4722] memory: usage 307200kB, limit 307200kB, failcnt 890 [ 309.638060][ T4722] memory+swap: usage 358712kB, limit 9007199254740988kB, failcnt 0 [ 309.638066][ T4722] kmem: usage 2984kB, limit 9007199254740988kB, failcnt 0 [ 309.638071][ T4722] Memory cgroup stats for /syz2: [ 309.638129][ T4722] cache 311066624 [ 309.638133][ T4722] rss 389120 [ 309.638136][ T4722] rss_huge 0 [ 309.638139][ T4722] shmem 311066624 [ 309.638142][ T4722] mapped_file 124129280 [ 309.638146][ T4722] dirty 0 [ 309.638149][ T4722] writeback 0 [ 309.638152][ T4722] workingset_refault_anon 307 [ 309.638155][ T4722] workingset_refault_file 975 [ 309.638158][ T4722] swap 52748288 [ 309.638166][ T4722] swapcached 61440 [ 309.638169][ T4722] pgpgin 782157 [ 309.638172][ T4722] pgpgout 706105 [ 309.638175][ T4722] pgfault 663748 [ 309.638178][ T4722] pgmajfault 264 [ 309.638182][ T4722] inactive_anon 311382016 [ 309.638185][ T4722] active_anon 126976 [ 309.638188][ T4722] inactive_file 0 [ 309.638191][ T4722] active_file 0 [ 309.638194][ T4722] unevictable 0 [ 309.638197][ T4722] hierarchical_memory_limit 314572800 [ 309.638201][ T4722] hierarchical_memsw_limit 9223372036854771712 [ 309.638204][ T4722] total_cache 311066624 [ 309.638207][ T4722] total_rss 389120 [ 309.638210][ T4722] total_rss_huge 0 [ 309.638213][ T4722] total_shmem 311066624 [ 309.638216][ T4722] total_mapped_file 124129280 [ 309.638220][ T4722] total_dirty 0 [ 309.638223][ T4722] total_writeback 0 [ 309.638226][ T4722] total_workingset_refault_anon 307 [ 309.638229][ T4722] total_workingset_refault_file 975 [ 309.638232][ T4722] total_swap 52748288 [ 309.638236][ T4722] total_swapcached 61440 [ 309.638239][ T4722] total_pgpgin 782157 [ 309.638242][ T4722] total_pgpgout 706105 [ 309.638245][ T4722] total_pgfault 663748 [ 309.638248][ T4722] total_pgmajfault 264 [ 309.638251][ T4722] total_inactive_anon 311382016 [ 309.638254][ T4722] total_active_anon 126976 [ 309.638258][ T4722] total_inactive_file 0 [ 309.638261][ T4722] total_active_file 0 [ 309.638264][ T4722] total_unevictable 0 [ 309.638267][ T4722] anon_cost 15258 [ 309.638270][ T4722] file_cost 9 [ 309.638274][ T4722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1480,pid=10388,uid=0 [ 309.638322][ T4722] Memory cgroup out of memory: Killed process 10388 (syz.2.1480) total-vm:202568kB, anon-rss:1388kB, file-rss:20868kB, shmem-rss:65648kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 309.791908][T10595] FAULT_INJECTION: forcing a failure. [ 309.791908][T10595] name failslab, interval 1, probability 0, space 0, times 0 [ 309.791931][T10595] CPU: 0 UID: 0 PID: 10595 Comm: syz.4.1526 Not tainted syzkaller #0 PREEMPT [ 309.791942][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 309.791948][T10595] Call trace: [ 309.791951][T10595] show_stack+0x2c/0x3c (C) [ 309.791967][T10595] __dump_stack+0x30/0x40 [ 309.791976][T10595] dump_stack_lvl+0xd8/0x12c [ 309.791984][T10595] dump_stack+0x1c/0x28 [ 309.791991][T10595] should_fail_ex+0x3fc/0x570 [ 309.792006][T10595] should_failslab+0xc4/0x120 [ 309.792015][T10595] kmem_cache_alloc_noprof+0x94/0x5d4 [ 309.792025][T10595] skb_clone+0x1ac/0x320 [ 309.792037][T10595] netlink_trim+0x15c/0x2b8 [ 309.792048][T10595] netlink_broadcast_filtered+0x7c/0xebc [ 309.792059][T10595] nlmsg_notify+0xf8/0x1dc [ 309.792070][T10595] rtnetlink_send+0x6c/0x84 [ 309.792083][T10595] qdisc_notify+0x29c/0x3c8 [ 309.792096][T10595] tc_modify_qdisc+0x1480/0x17a8 [ 309.792108][T10595] rtnetlink_rcv_msg+0x630/0x9bc [ 309.792117][T10595] netlink_rcv_skb+0x238/0x414 [ 309.792128][T10595] rtnetlink_rcv+0x28/0x38 [ 309.792136][T10595] netlink_unicast+0x73c/0x934 [ 309.792152][T10595] netlink_sendmsg+0x670/0x98c [ 309.792163][T10595] __sock_sendmsg+0xc8/0x188 [ 309.792172][T10595] ____sys_sendmsg+0x3d0/0x6c8 [ 309.792183][T10595] ___sys_sendmsg+0x198/0x224 [ 309.792193][T10595] __sys_sendmsg+0x158/0x204 [ 309.792203][T10595] __arm64_sys_sendmsg+0x88/0x9c [ 309.792214][T10595] invoke_syscall+0x98/0x244 [ 309.792223][T10595] el0_svc_common+0xec/0x23c [ 309.792231][T10595] do_el0_svc+0x4c/0x5c [ 309.792238][T10595] el0_svc+0x60/0x1d8 [ 309.792249][T10595] el0t_64_sync_handler+0x44/0x104 [ 309.792259][T10595] el0t_64_sync+0x198/0x19c [ 310.257745][T10611] siw: device registration error -23 [ 310.271972][ T1616] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.272005][ T1616] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.893322][T10619] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 311.201360][T10620] loop2: detected capacity change from 0 to 256 [ 311.843943][T10626] loop4: detected capacity change from 0 to 256 [ 313.344994][T10435] syz.3.1489 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 313.345017][T10435] CPU: 0 UID: 0 PID: 10435 Comm: syz.3.1489 Not tainted syzkaller #0 PREEMPT [ 313.345027][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 313.345032][T10435] Call trace: [ 313.345035][T10435] show_stack+0x2c/0x3c (C) [ 313.345049][T10435] __dump_stack+0x30/0x40 [ 313.345057][T10435] dump_stack_lvl+0xd8/0x12c [ 313.345065][T10435] dump_stack+0x1c/0x28 [ 313.345072][T10435] dump_header+0xbc/0x3f0 [ 313.345080][T10435] oom_kill_process+0x248/0x864 [ 313.345088][T10435] out_of_memory+0xcf8/0x101c [ 313.345095][T10435] mem_cgroup_out_of_memory+0xe8/0x170 [ 313.345104][T10435] try_charge_memcg+0x9d0/0xd88 [ 313.345111][T10435] charge_memcg+0x19c/0x2a0 [ 313.345118][T10435] __mem_cgroup_charge+0x38/0x98 [ 313.345125][T10435] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 313.345135][T10435] shmem_get_folio_gfp+0x4c4/0x1108 [ 313.345144][T10435] shmem_write_begin+0x160/0x448 [ 313.345160][T10435] generic_perform_write+0x23c/0x7a4 [ 313.345171][T10435] shmem_file_write_iter+0x10c/0x134 [ 313.345181][T10435] __kernel_write_iter+0x334/0x740 [ 313.345189][T10435] dump_write_iter+0xf0/0x1cc [ 313.345199][T10435] dump_user_range+0x63c/0x83c [ 313.345209][T10435] elf_core_dump+0x2ab8/0x3100 [ 313.345217][T10435] do_coredump+0x4b9c/0x53ac [ 313.345227][T10435] vfs_coredump+0x878/0xe20 [ 313.345236][T10435] get_signal+0xe24/0x1130 [ 313.345244][T10435] arch_do_signal_or_restart+0x1c8/0x444c [ 313.345251][T10435] exit_to_user_mode_loop+0x70/0x17c [ 313.345261][T10435] el0_da+0x14c/0x1d4 [ 313.345270][T10435] el0t_64_sync_handler+0xd8/0x104 [ 313.345279][T10435] el0t_64_sync+0x198/0x19c [ 313.345288][T10435] memory: usage 307200kB, limit 307200kB, failcnt 24594 [ 313.345293][T10435] memory+swap: usage 352224kB, limit 9007199254740988kB, failcnt 0 [ 313.345299][T10435] kmem: usage 2396kB, limit 9007199254740988kB, failcnt 0 [ 313.345304][T10435] Memory cgroup stats for /syz3: [ 313.345366][T10435] cache 311631872 [ 313.345370][T10435] rss 487424 [ 313.345373][T10435] rss_huge 0 [ 313.345376][T10435] shmem 311631872 [ 313.345379][T10435] mapped_file 182222848 [ 313.345382][T10435] dirty 0 [ 313.345385][T10435] writeback 0 [ 313.345388][T10435] workingset_refault_anon 238 [ 313.345392][T10435] workingset_refault_file 941 [ 313.345395][T10435] swap 46104576 [ 313.345398][T10435] swapcached 0 [ 313.345401][T10435] pgpgin 916579 [ 313.345404][T10435] pgpgout 840378 [ 313.345407][T10435] pgfault 730010 [ 313.345410][T10435] pgmajfault 206 [ 313.345413][T10435] inactive_anon 311971840 [ 313.345416][T10435] active_anon 90112 [ 313.345419][T10435] inactive_file 0 [ 313.345422][T10435] active_file 0 [ 313.345425][T10435] unevictable 0 [ 313.345428][T10435] hierarchical_memory_limit 314572800 [ 313.345431][T10435] hierarchical_memsw_limit 9223372036854771712 [ 313.345435][T10435] total_cache 311631872 [ 313.345438][T10435] total_rss 487424 [ 313.345441][T10435] total_rss_huge 0 [ 313.345444][T10435] total_shmem 311631872 [ 313.345447][T10435] total_mapped_file 182222848 [ 313.345451][T10435] total_dirty 0 [ 313.345454][T10435] total_writeback 0 [ 313.345457][T10435] total_workingset_refault_anon 238 [ 313.345460][T10435] total_workingset_refault_file 941 [ 313.345464][T10435] total_swap 46104576 [ 313.345467][T10435] total_swapcached 0 [ 313.345470][T10435] total_pgpgin 916579 [ 313.345473][T10435] total_pgpgout 840378 [ 313.345476][T10435] total_pgfault 730010 [ 313.345479][T10435] total_pgmajfault 206 [ 313.345482][T10435] total_inactive_anon 311971840 [ 313.345485][T10435] total_active_anon 90112 [ 313.345489][T10435] total_inactive_file 0 [ 313.345492][T10435] total_active_file 0 [ 313.345495][T10435] total_unevictable 0 [ 313.345498][T10435] anon_cost 11209 [ 313.345501][T10435] file_cost 0 [ 313.345505][T10435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1479,pid=10387,uid=0 [ 313.345553][T10435] Memory cgroup out of memory: Killed process 10387 (syz.3.1479) total-vm:202568kB, anon-rss:1236kB, file-rss:20868kB, shmem-rss:61616kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 315.411733][T10659] loop1: detected capacity change from 0 to 256 [ 315.485393][T10660] loop0: detected capacity change from 0 to 256 [ 317.026532][T10679] loop2: detected capacity change from 0 to 256 [ 317.212630][T10289] syz.0.1455 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 317.212654][T10289] CPU: 1 UID: 0 PID: 10289 Comm: syz.0.1455 Not tainted syzkaller #0 PREEMPT [ 317.212664][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 317.212669][T10289] Call trace: [ 317.212672][T10289] show_stack+0x2c/0x3c (C) [ 317.212686][T10289] __dump_stack+0x30/0x40 [ 317.212694][T10289] dump_stack_lvl+0xd8/0x12c [ 317.212701][T10289] dump_stack+0x1c/0x28 [ 317.212708][T10289] dump_header+0xbc/0x3f0 [ 317.212716][T10289] oom_kill_process+0x248/0x864 [ 317.212725][T10289] out_of_memory+0xcf8/0x101c [ 317.212731][T10289] mem_cgroup_out_of_memory+0xe8/0x170 [ 317.212741][T10289] try_charge_memcg+0x9d0/0xd88 [ 317.212748][T10289] charge_memcg+0x19c/0x2a0 [ 317.212755][T10289] __mem_cgroup_charge+0x38/0x98 [ 317.212762][T10289] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 317.212773][T10289] shmem_get_folio_gfp+0x4c4/0x1108 [ 317.212782][T10289] shmem_fault+0x15c/0x32c [ 317.212791][T10289] __do_fault+0xf4/0x4a8 [ 317.212799][T10289] do_pte_missing+0x1764/0x28bc [ 317.212806][T10289] handle_mm_fault+0x14d0/0x2b58 [ 317.212817][T10289] __get_user_pages+0x82c/0x13b0 [ 317.212825][T10289] get_dump_page+0x16c/0x374 [ 317.212832][T10289] dump_user_range+0x160/0x83c [ 317.212844][T10289] elf_core_dump+0x2ab8/0x3100 [ 317.212852][T10289] do_coredump+0x4b9c/0x53ac [ 317.212862][T10289] vfs_coredump+0x878/0xe20 [ 317.212871][T10289] get_signal+0xe24/0x1130 [ 317.212879][T10289] arch_do_signal_or_restart+0x1c8/0x444c [ 317.212886][T10289] exit_to_user_mode_loop+0x70/0x17c [ 317.212897][T10289] el0_da+0x14c/0x1d4 [ 317.212906][T10289] el0t_64_sync_handler+0xd8/0x104 [ 317.212914][T10289] el0t_64_sync+0x198/0x19c [ 317.212924][T10289] memory: usage 307200kB, limit 307200kB, failcnt 37225 [ 317.212929][T10289] memory+swap: usage 380580kB, limit 9007199254740988kB, failcnt 0 [ 317.212935][T10289] kmem: usage 2316kB, limit 9007199254740988kB, failcnt 0 [ 317.212940][T10289] Memory cgroup stats for /syz0: [ 317.213001][T10289] cache 311435264 [ 317.213005][T10289] rss 765952 [ 317.213008][T10289] rss_huge 0 [ 317.213011][T10289] shmem 311431168 [ 317.213015][T10289] mapped_file 193110016 [ 317.213018][T10289] dirty 0 [ 317.213021][T10289] writeback 0 [ 317.213024][T10289] workingset_refault_anon 259 [ 317.213027][T10289] workingset_refault_file 1250 [ 317.213030][T10289] swap 75141120 [ 317.213033][T10289] swapcached 0 [ 317.213036][T10289] pgpgin 1036576 [ 317.213039][T10289] pgpgout 960355 [ 317.213042][T10289] pgfault 763654 [ 317.213046][T10289] pgmajfault 243 [ 317.213049][T10289] inactive_anon 311873536 [ 317.213052][T10289] active_anon 323584 [ 317.213055][T10289] inactive_file 4096 [ 317.213058][T10289] active_file 0 [ 317.213061][T10289] unevictable 0 [ 317.213064][T10289] hierarchical_memory_limit 314572800 [ 317.213068][T10289] hierarchical_memsw_limit 9223372036854771712 [ 317.213071][T10289] total_cache 311435264 [ 317.213074][T10289] total_rss 765952 [ 317.213077][T10289] total_rss_huge 0 [ 317.213080][T10289] total_shmem 311431168 [ 317.213083][T10289] total_mapped_file 193110016 [ 317.213086][T10289] total_dirty 0 [ 317.213090][T10289] total_writeback 0 [ 317.213093][T10289] total_workingset_refault_anon 259 [ 317.213096][T10289] total_workingset_refault_file 1250 [ 317.213099][T10289] total_swap 75141120 [ 317.213102][T10289] total_swapcached 0 [ 317.213105][T10289] total_pgpgin 1036576 [ 317.213109][T10289] total_pgpgout 960355 [ 317.213112][T10289] total_pgfault 763654 [ 317.213115][T10289] total_pgmajfault 243 [ 317.213118][T10289] total_inactive_anon 311873536 [ 317.213121][T10289] total_active_anon 323584 [ 317.213124][T10289] total_inactive_file 4096 [ 317.213127][T10289] total_active_file 0 [ 317.213130][T10289] total_unevictable 0 [ 317.213133][T10289] anon_cost 11033 [ 317.213136][T10289] file_cost 0 [ 317.213140][T10289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1455,pid=10289,uid=0 [ 317.213193][T10289] Memory cgroup out of memory: Killed process 10289 (syz.0.1455) total-vm:202568kB, anon-rss:1364kB, file-rss:20868kB, shmem-rss:121136kB, UID:0 pgtables:352kB oom_score_adj:1000 [ 317.478520][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1547'. [ 317.514641][T10562] syz.0.1519 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 317.514666][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.0.1519 Not tainted syzkaller #0 PREEMPT [ 317.514676][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 317.514682][T10562] Call trace: [ 317.514685][T10562] show_stack+0x2c/0x3c (C) [ 317.514699][T10562] __dump_stack+0x30/0x40 [ 317.514707][T10562] dump_stack_lvl+0xd8/0x12c [ 317.514714][T10562] dump_stack+0x1c/0x28 [ 317.514721][T10562] dump_header+0xbc/0x3f0 [ 317.514729][T10562] oom_kill_process+0x248/0x864 [ 317.514738][T10562] out_of_memory+0xcf8/0x101c [ 317.514744][T10562] mem_cgroup_out_of_memory+0xe8/0x170 [ 317.514753][T10562] try_charge_memcg+0x9d0/0xd88 [ 317.514763][T10562] charge_memcg+0x19c/0x2a0 [ 317.514771][T10562] __mem_cgroup_charge+0x38/0x98 [ 317.514778][T10562] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 317.514789][T10562] shmem_get_folio_gfp+0x4c4/0x1108 [ 317.514798][T10562] shmem_fault+0x15c/0x32c [ 317.514808][T10562] __do_fault+0xf4/0x4a8 [ 317.514816][T10562] do_pte_missing+0x1764/0x28bc [ 317.514823][T10562] handle_mm_fault+0x14d0/0x2b58 [ 317.514833][T10562] __get_user_pages+0x82c/0x13b0 [ 317.514841][T10562] get_dump_page+0x16c/0x374 [ 317.514849][T10562] dump_user_range+0x160/0x83c [ 317.514859][T10562] elf_core_dump+0x2ab8/0x3100 [ 317.514867][T10562] do_coredump+0x4b9c/0x53ac [ 317.514877][T10562] vfs_coredump+0x878/0xe20 [ 317.514886][T10562] get_signal+0xe24/0x1130 [ 317.514894][T10562] arch_do_signal_or_restart+0x1c8/0x444c [ 317.514901][T10562] exit_to_user_mode_loop+0x70/0x17c [ 317.514911][T10562] el0_da+0x14c/0x1d4 [ 317.514921][T10562] el0t_64_sync_handler+0xd8/0x104 [ 317.514929][T10562] el0t_64_sync+0x198/0x19c [ 317.589171][T10562] memory: usage 307200kB, limit 307200kB, failcnt 37417 [ 317.589979][T10562] memory+swap: usage 380580kB, limit 9007199254740988kB, failcnt 0 [ 317.590000][T10562] kmem: usage 2260kB, limit 9007199254740988kB, failcnt 0 [ 317.590006][T10562] Memory cgroup stats for /syz0: [ 317.590076][T10562] cache 311431168 [ 317.590081][T10562] rss 765952 [ 317.590084][T10562] rss_huge 0 [ 317.590087][T10562] shmem 311431168 [ 317.590090][T10562] mapped_file 174436352 [ 317.590094][T10562] dirty 0 [ 317.590097][T10562] writeback 0 [ 317.590100][T10562] workingset_refault_anon 259 [ 317.590103][T10562] workingset_refault_file 1251 [ 317.590106][T10562] swap 75141120 [ 317.590110][T10562] swapcached 0 [ 317.590113][T10562] pgpgin 1036642 [ 317.590116][T10562] pgpgout 960422 [ 317.590119][T10562] pgfault 763689 [ 317.590122][T10562] pgmajfault 243 [ 317.590125][T10562] inactive_anon 311803904 [ 317.590128][T10562] active_anon 393216 [ 317.590131][T10562] inactive_file 0 [ 317.590134][T10562] active_file 0 [ 317.590138][T10562] unevictable 0 [ 317.590141][T10562] hierarchical_memory_limit 314572800 [ 317.590144][T10562] hierarchical_memsw_limit 9223372036854771712 [ 317.590148][T10562] total_cache 311431168 [ 317.590151][T10562] total_rss 765952 [ 317.590154][T10562] total_rss_huge 0 [ 317.590157][T10562] total_shmem 311431168 [ 317.590165][T10562] total_mapped_file 174436352 [ 317.590169][T10562] total_dirty 0 [ 317.590172][T10562] total_writeback 0 [ 317.590175][T10562] total_workingset_refault_anon 259 [ 317.590179][T10562] total_workingset_refault_file 1251 [ 317.590182][T10562] total_swap 75141120 [ 317.590185][T10562] total_swapcached 0 [ 317.590188][T10562] total_pgpgin 1036642 [ 317.590192][T10562] total_pgpgout 960422 [ 317.590195][T10562] total_pgfault 763689 [ 317.590198][T10562] total_pgmajfault 243 [ 317.590201][T10562] total_inactive_anon 311803904 [ 317.590205][T10562] total_active_anon 393216 [ 317.590208][T10562] total_inactive_file 0 [ 317.590211][T10562] total_active_file 0 [ 317.590214][T10562] total_unevictable 0 [ 317.590217][T10562] anon_cost 11033 [ 317.590220][T10562] file_cost 52 [ 317.590224][T10562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1519,pid=10562,uid=0 [ 317.590280][T10562] Memory cgroup out of memory: Killed process 10562 (syz.0.1519) total-vm:202568kB, anon-rss:1504kB, file-rss:20868kB, shmem-rss:41764kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 317.618299][ T4712] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 317.618323][ T4712] CPU: 1 UID: 0 PID: 4712 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 317.618333][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 317.618340][ T4712] Call trace: [ 317.618343][ T4712] show_stack+0x2c/0x3c (C) [ 317.618359][ T4712] __dump_stack+0x30/0x40 [ 317.618369][ T4712] dump_stack_lvl+0xd8/0x12c [ 317.618376][ T4712] dump_stack+0x1c/0x28 [ 317.618383][ T4712] dump_header+0xbc/0x3f0 [ 317.618392][ T4712] oom_kill_process+0x248/0x864 [ 317.618400][ T4712] out_of_memory+0xcf8/0x101c [ 317.618407][ T4712] mem_cgroup_out_of_memory+0xe8/0x170 [ 317.618416][ T4712] try_charge_memcg+0x9d0/0xd88 [ 317.618423][ T4712] obj_cgroup_charge_pages+0x44/0xc8 [ 317.618433][ T4712] __memcg_slab_post_alloc_hook+0x498/0x824 [ 317.618444][ T4712] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 317.618452][ T4712] __d_alloc+0x50/0x654 [ 317.618461][ T4712] d_alloc_pseudo+0x2c/0xd8 [ 317.618470][ T4712] alloc_path_pseudo+0xe8/0x1d4 [ 317.618479][ T4712] alloc_file_pseudo+0xb0/0x198 [ 317.618487][ T4712] sock_alloc_file+0xb4/0x1ac [ 317.618496][ T4712] __sys_socket+0x90/0xec [ 317.618504][ T4712] __arm64_sys_socket+0x84/0x9c [ 317.618511][ T4712] invoke_syscall+0x98/0x244 [ 317.618519][ T4712] el0_svc_common+0xec/0x23c [ 317.618526][ T4712] do_el0_svc+0x4c/0x5c [ 317.618533][ T4712] el0_svc+0x60/0x1d8 [ 317.618543][ T4712] el0t_64_sync_handler+0x44/0x104 [ 317.618551][ T4712] el0t_64_sync+0x198/0x19c [ 317.618561][ T4712] memory: usage 307200kB, limit 307200kB, failcnt 37417 [ 317.618567][ T4712] memory+swap: usage 380580kB, limit 9007199254740988kB, failcnt 0 [ 317.618572][ T4712] kmem: usage 2260kB, limit 9007199254740988kB, failcnt 0 [ 317.618578][ T4712] Memory cgroup stats for /syz0: [ 317.618673][ T4712] cache 311435264 [ 317.618677][ T4712] rss 761856 [ 317.618680][ T4712] rss_huge 0 [ 317.618683][ T4712] shmem 311435264 [ 317.618686][ T4712] mapped_file 164319232 [ 317.618689][ T4712] dirty 0 [ 317.618692][ T4712] writeback 0 [ 317.618695][ T4712] workingset_refault_anon 259 [ 317.618698][ T4712] workingset_refault_file 1251 [ 317.618701][ T4712] swap 75141120 [ 317.618704][ T4712] swapcached 0 [ 317.618707][ T4712] pgpgin 1036643 [ 317.618710][ T4712] pgpgout 960422 [ 317.618713][ T4712] pgfault 763690 [ 317.618716][ T4712] pgmajfault 243 [ 317.618719][ T4712] inactive_anon 311808000 [ 317.618723][ T4712] active_anon 393216 [ 317.618726][ T4712] inactive_file 0 [ 317.618729][ T4712] active_file 0 [ 317.618732][ T4712] unevictable 0 [ 317.618735][ T4712] hierarchical_memory_limit 314572800 [ 317.618738][ T4712] hierarchical_memsw_limit 9223372036854771712 [ 317.618742][ T4712] total_cache 311435264 [ 317.618745][ T4712] total_rss 761856 [ 317.618748][ T4712] total_rss_huge 0 [ 317.618751][ T4712] total_shmem 311435264 [ 317.618754][ T4712] total_mapped_file 164319232 [ 317.618757][ T4712] total_dirty 0 [ 317.618760][ T4712] total_writeback 0 [ 317.618763][ T4712] total_workingset_refault_anon 259 [ 317.619969][ T4712] total_workingset_refault_file 1251 [ 317.619984][ T4712] total_swap 75141120 [ 317.619989][ T4712] total_swapcached 0 [ 317.619992][ T4712] total_pgpgin 1036643 [ 317.619996][ T4712] total_pgpgout 960422 [ 317.620000][ T4712] total_pgfault 763690 [ 317.620003][ T4712] total_pgmajfault 243 [ 317.620007][ T4712] total_inactive_anon 311808000 [ 317.620010][ T4712] total_active_anon 393216 [ 317.620014][ T4712] total_inactive_file 0 [ 317.620017][ T4712] total_active_file 0 [ 317.620021][ T4712] total_unevictable 0 [ 317.620024][ T4712] anon_cost 11096 [ 317.620027][ T4712] file_cost 55 [ 317.620031][ T4712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1524,pid=10596,uid=0 [ 317.620197][ T4712] Memory cgroup out of memory: Killed process 10596 (syz.0.1524) total-vm:202568kB, anon-rss:1524kB, file-rss:20868kB, shmem-rss:25812kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 317.732789][T10689] loop1: detected capacity change from 0 to 256 [ 317.738792][T10689] vfat: Bad value for 'shortname' [ 318.410200][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1549'. [ 318.418676][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1549'. [ 318.426642][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1549'. [ 318.752479][T10705] loop4: detected capacity change from 0 to 128 [ 318.811263][T10705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.854218][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 318.854238][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 319.625565][T10727] loop3: detected capacity change from 0 to 512 [ 319.641647][T10727] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 319.829628][T10727] EXT4-fs (loop3): 1 truncate cleaned up [ 319.830243][T10727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.635637][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.044778][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1559'. [ 322.563493][T10761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1564'. [ 322.563862][T10761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1564'. [ 322.564092][T10761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1564'. [ 322.633005][T10762] loop3: detected capacity change from 0 to 512 [ 322.649889][T10764] loop0: detected capacity change from 0 to 512 [ 322.663177][T10764] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 322.669434][T10403] syz.3.1483 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 322.669455][T10403] CPU: 0 UID: 0 PID: 10403 Comm: syz.3.1483 Not tainted syzkaller #0 PREEMPT [ 322.669465][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 322.669469][T10403] Call trace: [ 322.669472][T10403] show_stack+0x2c/0x3c (C) [ 322.669486][T10403] __dump_stack+0x30/0x40 [ 322.669494][T10403] dump_stack_lvl+0xd8/0x12c [ 322.669501][T10403] dump_stack+0x1c/0x28 [ 322.669508][T10403] dump_header+0xbc/0x3f0 [ 322.669516][T10403] oom_kill_process+0x248/0x864 [ 322.669524][T10403] out_of_memory+0xcf8/0x101c [ 322.669531][T10403] mem_cgroup_out_of_memory+0xe8/0x170 [ 322.669540][T10403] try_charge_memcg+0x9d0/0xd88 [ 322.669547][T10403] charge_memcg+0x19c/0x2a0 [ 322.669554][T10403] __mem_cgroup_charge+0x38/0x98 [ 322.669561][T10403] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 322.669571][T10403] shmem_get_folio_gfp+0x4c4/0x1108 [ 322.669581][T10403] shmem_write_begin+0x160/0x448 [ 322.669590][T10403] generic_perform_write+0x23c/0x7a4 [ 322.669600][T10403] shmem_file_write_iter+0x10c/0x134 [ 322.669609][T10403] __kernel_write_iter+0x334/0x740 [ 322.669617][T10403] dump_write_iter+0xf0/0x1cc [ 322.669628][T10403] dump_user_range+0x63c/0x83c [ 322.669638][T10403] elf_core_dump+0x2ab8/0x3100 [ 322.669646][T10403] do_coredump+0x4b9c/0x53ac [ 322.669655][T10403] vfs_coredump+0x878/0xe20 [ 322.669665][T10403] get_signal+0xe24/0x1130 [ 322.669672][T10403] arch_do_signal_or_restart+0x1c8/0x444c [ 322.669679][T10403] exit_to_user_mode_loop+0x70/0x17c [ 322.669689][T10403] el0_da+0x14c/0x1d4 [ 322.669699][T10403] el0t_64_sync_handler+0xd8/0x104 [ 322.669707][T10403] el0t_64_sync+0x198/0x19c [ 322.669717][T10403] memory: usage 307200kB, limit 307200kB, failcnt 24823 [ 322.669722][T10403] memory+swap: usage 329008kB, limit 9007199254740988kB, failcnt 0 [ 322.669728][T10403] kmem: usage 2140kB, limit 9007199254740988kB, failcnt 0 [ 322.669733][T10403] Memory cgroup stats for /syz3: [ 322.669793][T10403] cache 311910400 [ 322.669797][T10403] rss 471040 [ 322.669800][T10403] rss_huge 0 [ 322.669803][T10403] shmem 311910400 [ 322.669806][T10403] mapped_file 166821888 [ 322.669809][T10403] dirty 0 [ 322.669812][T10403] writeback 0 [ 322.669815][T10403] workingset_refault_anon 238 [ 322.669818][T10403] workingset_refault_file 942 [ 322.669822][T10403] swap 22331392 [ 322.669825][T10403] swapcached 0 [ 322.669828][T10403] pgpgin 948802 [ 322.669831][T10403] pgpgout 872537 [ 322.669834][T10403] pgfault 748096 [ 322.669837][T10403] pgmajfault 206 [ 322.669840][T10403] inactive_anon 310792192 [ 322.669843][T10403] active_anon 1515520 [ 322.669846][T10403] inactive_file 0 [ 322.669849][T10403] active_file 0 [ 322.669852][T10403] unevictable 0 [ 322.669855][T10403] hierarchical_memory_limit 314572800 [ 322.669859][T10403] hierarchical_memsw_limit 9223372036854771712 [ 322.669862][T10403] total_cache 311910400 [ 322.669865][T10403] total_rss 471040 [ 322.669868][T10403] total_rss_huge 0 [ 322.669871][T10403] total_shmem 311910400 [ 322.669874][T10403] total_mapped_file 166821888 [ 322.669878][T10403] total_dirty 0 [ 322.669881][T10403] total_writeback 0 [ 322.669884][T10403] total_workingset_refault_anon 238 [ 322.669887][T10403] total_workingset_refault_file 942 [ 322.669890][T10403] total_swap 22331392 [ 322.669893][T10403] total_swapcached 0 [ 322.669896][T10403] total_pgpgin 948802 [ 322.669899][T10403] total_pgpgout 872537 [ 322.669903][T10403] total_pgfault 748096 [ 322.669906][T10403] total_pgmajfault 206 [ 322.669909][T10403] total_inactive_anon 310792192 [ 322.669912][T10403] total_active_anon 1515520 [ 322.669915][T10403] total_inactive_file 0 [ 322.669918][T10403] total_active_file 0 [ 322.669921][T10403] total_unevictable 0 [ 322.669924][T10403] anon_cost 9584 [ 322.669927][T10403] file_cost 38 [ 322.669931][T10403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 322.681665][T10764] EXT4-fs (loop0): 1 truncate cleaned up [ 322.682067][T10764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.720232][T10403] ,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1489,pid=10435,uid=0 [ 322.720373][T10403] Memory cgroup out of memory: Killed process 10435 (syz.3.1489) total-vm:202568kB, anon-rss:1368kB, file-rss:20868kB, shmem-rss:85968kB, UID:0 pgtables:280kB oom_score_adj:1000 [ 322.819015][T10762] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 322.819104][T10762] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 323.083765][T10762] syz.3.1566 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 323.083790][T10762] CPU: 1 UID: 0 PID: 10762 Comm: syz.3.1566 Not tainted syzkaller #0 PREEMPT [ 323.083802][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 323.083808][T10762] Call trace: [ 323.083811][T10762] show_stack+0x2c/0x3c (C) [ 323.083827][T10762] __dump_stack+0x30/0x40 [ 323.083836][T10762] dump_stack_lvl+0xd8/0x12c [ 323.083843][T10762] dump_stack+0x1c/0x28 [ 323.083850][T10762] dump_header+0xbc/0x3f0 [ 323.083858][T10762] oom_kill_process+0x248/0x864 [ 323.083867][T10762] out_of_memory+0xcf8/0x101c [ 323.083874][T10762] mem_cgroup_out_of_memory+0xe8/0x170 [ 323.083883][T10762] try_charge_memcg+0x9d0/0xd88 [ 323.083891][T10762] charge_memcg+0x19c/0x2a0 [ 323.083898][T10762] __mem_cgroup_charge+0x38/0x98 [ 323.083905][T10762] shmem_alloc_and_add_folio+0x4e4/0xb30 [ 323.083915][T10762] shmem_get_folio_gfp+0x4c4/0x1108 [ 323.083924][T10762] shmem_fault+0x15c/0x32c [ 323.083934][T10762] __do_fault+0xf4/0x4a8 [ 323.083941][T10762] do_pte_missing+0x1764/0x28bc [ 323.083949][T10762] handle_mm_fault+0x14d0/0x2b58 [ 323.083959][T10762] __get_user_pages+0x82c/0x13b0 [ 323.083967][T10762] populate_vma_page_range+0x2a4/0x388 [ 323.083975][T10762] __mm_populate+0x204/0x328 [ 323.083983][T10762] vm_mmap_pgoff+0x37c/0x4a4 [ 323.083991][T10762] ksys_mmap_pgoff+0xd0/0x5b4 [ 323.083999][T10762] __arm64_sys_mmap+0x110/0x12c [ 323.084006][T10762] invoke_syscall+0x98/0x244 [ 323.084014][T10762] el0_svc_common+0xec/0x23c [ 323.084021][T10762] do_el0_svc+0x4c/0x5c [ 323.084028][T10762] el0_svc+0x60/0x1d8 [ 323.084037][T10762] el0t_64_sync_handler+0x44/0x104 [ 323.084045][T10762] el0t_64_sync+0x198/0x19c [ 323.084055][T10762] memory: usage 307200kB, limit 307200kB, failcnt 27694 [ 323.084061][T10762] memory+swap: usage 337568kB, limit 9007199254740988kB, failcnt 0 [ 323.084066][T10762] kmem: usage 2168kB, limit 9007199254740988kB, failcnt 0 [ 323.084072][T10762] Memory cgroup stats for /syz3: [ 323.084134][T10762] cache 311885824 [ 323.084138][T10762] rss 466944 [ 323.084142][T10762] rss_huge 0 [ 323.084145][T10762] shmem 311885824 [ 323.084148][T10762] mapped_file 117760000 [ 323.084151][T10762] dirty 0 [ 323.084154][T10762] writeback 0 [ 323.084157][T10762] workingset_refault_anon 238 [ 323.084163][T10762] workingset_refault_file 942 [ 323.084167][T10762] swap 31096832 [ 323.084170][T10762] swapcached 4096 [ 323.084173][T10762] pgpgin 951882 [ 323.084176][T10762] pgpgout 875624 [ 323.084179][T10762] pgfault 750893 [ 323.084182][T10762] pgmajfault 206 [ 323.084186][T10762] inactive_anon 310697984 [ 323.084189][T10762] active_anon 1519616 [ 323.084192][T10762] inactive_file 0 [ 323.084195][T10762] active_file 0 [ 323.084198][T10762] unevictable 0 [ 323.084201][T10762] hierarchical_memory_limit 314572800 [ 323.084205][T10762] hierarchical_memsw_limit 9223372036854771712 [ 323.084208][T10762] total_cache 311885824 [ 323.084212][T10762] total_rss 466944 [ 323.084215][T10762] total_rss_huge 0 [ 323.084218][T10762] total_shmem 311885824 [ 323.084221][T10762] total_mapped_file 117760000 [ 323.084224][T10762] total_dirty 0 [ 323.084228][T10762] total_writeback 0 [ 323.084231][T10762] total_workingset_refault_anon 238 [ 323.084234][T10762] total_workingset_refault_file 942 [ 323.084238][T10762] total_swap 31096832 [ 323.084241][T10762] total_swapcached 4096 [ 323.084244][T10762] total_pgpgin 951882 [ 323.084247][T10762] total_pgpgout 875624 [ 323.084251][T10762] total_pgfault 750893 [ 323.084254][T10762] total_pgmajfault 206 [ 323.084257][T10762] total_inactive_anon 310697984 [ 323.084260][T10762] total_active_anon 1519616 [ 323.084264][T10762] total_inactive_file 0 [ 323.084267][T10762] total_active_file 0 [ 323.084270][T10762] total_unevictable 0 [ 323.084273][T10762] anon_cost 9584 [ 323.084276][T10762] file_cost 38 [ 323.084280][T10762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1483,pid=10403,uid=0 [ 323.084330][T10762] Memory cgroup out of memory: Killed process 10403 (syz.3.1483) total-vm:202568kB, anon-rss:1364kB, file-rss:20868kB, shmem-rss:78144kB, UID:0 pgtables:264kB oom_score_adj:1000 [ 323.720358][ T4712] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 323.735593][ T4712] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 323.886343][T10781] loop3: detected capacity change from 0 to 512 [ 323.978444][T10781] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 323.985871][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.988746][T10781] EXT4-fs (loop3): 1 truncate cleaned up [ 323.989245][T10781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.117334][T10787] loop1: detected capacity change from 0 to 256 [ 324.697513][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.874304][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.322174][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.714665][T10807] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 325.733136][T10809] loop2: detected capacity change from 0 to 512 [ 325.765104][T10809] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 325.783024][T10809] EXT4-fs (loop2): 1 truncate cleaned up [ 325.783421][T10809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.848516][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.894832][ T4728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.896467][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.896740][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.897056][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.897301][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.979520][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1577'. [ 326.226372][T10820] loop4: detected capacity change from 0 to 512 [ 326.230326][T10820] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 326.238457][T10820] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 326.412893][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.610853][T10831] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 326.762958][T10828] loop1: detected capacity change from 0 to 128 [ 326.762956][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.795844][T10828] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.871651][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.931607][T10840] loop4: detected capacity change from 0 to 128 [ 327.050943][T10840] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.381538][T10815] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.945842][ T4728] Bluetooth: hci0: command tx timeout [ 328.123182][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.177957][ T40] bridge_slave_1: left allmulticast mode [ 328.177983][ T40] bridge_slave_1: left promiscuous mode [ 328.179648][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.253038][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.948417][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.964999][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.972886][ T40] bond0 (unregistering): Released all slaves [ 328.988247][ T40] bond1 (unregistering): (slave lo): Releasing backup interface [ 328.992715][ T40] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 328.993705][ T40] bond1 (unregistering): Released all slaves [ 329.726476][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 330.020392][ T4728] Bluetooth: hci0: command tx timeout [ 330.123914][T10904] loop4: detected capacity change from 0 to 512 [ 330.282001][T10908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1593'. [ 330.282020][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 330.359432][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.366457][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.367944][T10815] bridge_slave_0: entered allmulticast mode [ 330.375289][T10815] bridge_slave_0: entered promiscuous mode [ 330.389808][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 330.612695][T10917] loop2: detected capacity change from 0 to 512 [ 330.632496][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.632530][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.632627][T10815] bridge_slave_1: entered allmulticast mode [ 330.650422][T10815] bridge_slave_1: entered promiscuous mode [ 330.713072][T10921] loop3: detected capacity change from 0 to 8 [ 331.071679][T10921] Filesystem uses "lzo" compression. This is not supported [ 331.086057][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.089670][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.101105][T10815] team0: Port device team_slave_0 added [ 331.101894][T10815] team0: Port device team_slave_1 added [ 331.118448][T10917] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 331.132824][T10917] EXT4-fs (loop2): 1 truncate cleaned up [ 331.145635][T10917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.213033][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.213050][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.213065][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.305285][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.305301][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.305316][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.929031][T10944] loop1: detected capacity change from 0 to 8 [ 331.932434][T10944] Filesystem uses "lzo" compression. This is not supported [ 331.946717][ T4722] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 331.955924][ T4722] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 332.099740][ T4728] Bluetooth: hci0: command tx timeout [ 332.119657][T10815] hsr_slave_0: entered promiscuous mode [ 332.137245][T10815] hsr_slave_1: entered promiscuous mode [ 332.137453][T10815] debugfs: 'hsr0' already exists in 'hsr' [ 332.137462][T10815] Cannot create hsr debugfs directory [ 332.280923][T10952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1602'. [ 332.436350][T10953] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1602'. [ 332.500965][T10952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1602'. [ 332.515683][ T40] hsr_slave_0: left promiscuous mode [ 332.518469][ T40] hsr_slave_1: left promiscuous mode [ 332.523020][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.523042][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.524636][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.524647][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.621420][ T40] veth1_macvtap: left promiscuous mode [ 332.621459][ T40] veth0_macvtap: left promiscuous mode [ 332.621536][ T40] veth1_vlan: left promiscuous mode [ 332.621576][ T40] veth0_vlan: left promiscuous mode [ 332.731132][T10961] loop1: detected capacity change from 0 to 8 [ 332.913955][T10962] loop3: detected capacity change from 0 to 8 [ 332.915671][T10961] Filesystem uses "lzo" compression. This is not supported [ 332.930925][T10962] Filesystem uses "lzo" compression. This is not supported [ 333.102869][ T40] team0 (unregistering): Port device team_slave_1 removed [ 333.108041][ T40] team0 (unregistering): Port device team_slave_0 removed [ 333.259475][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 333.295426][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'. [ 333.333096][T10708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.358090][T10815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.380398][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.380811][T10815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.403764][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.404752][T10815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.458413][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.458886][T10815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.512657][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.646358][ T40] IPVS: stop unused estimator thread 0... [ 333.761820][T10981] loop3: detected capacity change from 0 to 512 [ 334.395270][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 334.479151][ T4728] Bluetooth: hci0: command tx timeout [ 334.599439][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.602577][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.605775][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.605808][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.606390][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.606412][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.643906][T10998] loop1: detected capacity change from 0 to 512 [ 334.663268][T10995] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.760786][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 335.008499][T11003] Bluetooth: MGMT ver 1.23 [ 335.401704][T11008] loop3: detected capacity change from 0 to 8 [ 335.410009][T11008] Filesystem uses "lzo" compression. This is not supported [ 335.992642][T11023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1614'. [ 336.000328][T11023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1614'. [ 336.003628][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 336.007903][T11023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1614'. [ 336.578980][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.872909][T10815] veth0_vlan: entered promiscuous mode [ 336.886231][T10815] veth1_vlan: entered promiscuous mode [ 336.943771][T10815] veth0_macvtap: entered promiscuous mode [ 336.951229][T10815] veth1_macvtap: entered promiscuous mode [ 336.986876][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.000272][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.263125][ T1250] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.279275][ T5019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.279312][ T5019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.279333][ T5019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.286680][ T4717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.288900][ T4717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.289350][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.289708][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.289914][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.325658][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.325670][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.345595][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.345613][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.382653][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 337.505419][T11081] loop5: detected capacity change from 0 to 512 [ 337.574365][T11081] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 337.754576][T11081] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 337.877397][T11065] rxe_eth0 speed is unknown, defaulting to 1000 [ 338.310301][T11097] syzkaller0: entered promiscuous mode [ 338.310318][T11097] syzkaller0: entered allmulticast mode [ 338.691052][T11103] tipc: Enabling of bearer rejected, failed to enable media [ 338.923475][T11113] loop5: detected capacity change from 0 to 8 [ 338.953686][T11113] Filesystem uses "lzo" compression. This is not supported [ 339.103408][T11065] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.103475][T11065] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.103531][T11065] bridge_slave_0: entered allmulticast mode [ 339.103916][T11065] bridge_slave_0: entered promiscuous mode [ 339.104876][T11065] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.104921][T11065] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.104969][T11065] bridge_slave_1: entered allmulticast mode [ 339.105318][T11065] bridge_slave_1: entered promiscuous mode [ 339.119879][T11065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.121491][T11065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.135862][T11065] team0: Port device team_slave_0 added [ 339.136751][T11065] team0: Port device team_slave_1 added [ 339.143485][T11065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.143496][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.143510][T11065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.144058][T11065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.144064][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.144076][T11065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.165881][T11065] hsr_slave_0: entered promiscuous mode [ 339.166189][T11065] hsr_slave_1: entered promiscuous mode [ 339.301906][ T4717] Bluetooth: hci4: command tx timeout [ 339.329854][T11065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.334649][T11065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.336529][T11065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.356691][T11065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.357821][T11065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.367579][T11065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.369848][T11065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.376820][T11065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.459207][T11065] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.459237][T11065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.459308][T11065] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.459336][T11065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.846973][T11065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.860206][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.860600][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.876846][T11065] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.885294][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.885327][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.890274][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.890310][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.214143][T11148] syzkaller1: entered promiscuous mode [ 340.214166][T11148] syzkaller1: entered allmulticast mode [ 340.266262][T11153] loop1: detected capacity change from 0 to 128 [ 340.295100][T11153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.228538][T11175] loop5: detected capacity change from 0 to 8 [ 341.353442][T11175] Filesystem uses "lzo" compression. This is not supported [ 341.380596][ T4717] Bluetooth: hci4: command tx timeout [ 341.826099][T11065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.959838][T11065] veth0_vlan: entered promiscuous mode [ 343.049129][T11065] veth1_vlan: entered promiscuous mode [ 343.183374][T11065] veth0_macvtap: entered promiscuous mode [ 343.224619][T11065] veth1_macvtap: entered promiscuous mode [ 343.245567][T11065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.253993][T11065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.289165][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.289198][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.289215][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.289230][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.345659][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.345676][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.365994][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.366010][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.393058][T11216] loop5: detected capacity change from 0 to 512 [ 343.439800][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.462175][ T4717] Bluetooth: hci4: command tx timeout [ 343.530578][T11222] loop1: detected capacity change from 0 to 512 [ 343.569130][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1647'. [ 343.651864][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 344.465002][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 344.465022][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 344.979853][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1654'. [ 345.600848][ T4717] Bluetooth: hci4: command tx timeout [ 346.303934][T11272] loop5: detected capacity change from 0 to 128 [ 346.312511][T11272] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.327481][T11273] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 346.340362][T11271] loop6: detected capacity change from 0 to 512 [ 346.363580][T11273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.510003][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1660'. [ 347.355091][T11293] batman_adv: batadv0: Adding interface: veth0 [ 347.355106][T11293] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.355127][T11293] batman_adv: batadv0: Interface activated: veth0 [ 347.382753][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.382775][T11293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.386339][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.386351][T11293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.387104][T11293] batman_adv: batadv0: Interface deactivated: veth0 [ 347.387114][T11293] batman_adv: batadv0: Removing interface: veth0 [ 347.408402][T10815] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.769537][T11301] loop4: detected capacity change from 0 to 8 [ 347.828101][T11301] Filesystem uses "lzo" compression. This is not supported [ 347.996235][T11303] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1669'. [ 347.997873][T11303] syzkaller1: entered promiscuous mode [ 347.997885][T11303] syzkaller1: entered allmulticast mode [ 348.813901][T11322] loop4: detected capacity change from 0 to 128 [ 348.839665][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1675'. [ 348.876719][T11322] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.960166][T11335] netlink: 'syz.6.1679': attribute type 1 has an invalid length. [ 349.084284][T11346] loop6: detected capacity change from 0 to 512 [ 349.128666][T11348] loop5: detected capacity change from 0 to 512 [ 349.146816][T11352] loop3: detected capacity change from 0 to 512 [ 349.764912][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1681'. [ 350.133928][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.279311][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1682'. [ 350.281126][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 350.494869][T11361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1685'. [ 350.543789][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1689'. [ 351.013383][T11385] syzkaller0: entered promiscuous mode [ 351.013401][T11385] syzkaller0: entered allmulticast mode [ 351.052909][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1693'. [ 351.188108][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1696'. [ 351.262476][T11409] tun0: tun_chr_ioctl cmd 1074025681 [ 351.847645][T11427] loop3: detected capacity change from 0 to 128 [ 351.875312][T11427] ext4: Unknown parameter 'appraise' [ 352.118418][T11429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.118600][T11429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.530426][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1704'. [ 354.468269][T11442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.471303][T11442] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.479847][T11442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.537286][T11442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.550060][T11442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.985564][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1709'. [ 356.184986][T11511] loop4: detected capacity change from 0 to 128 [ 356.220947][T11511] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.894443][T11531] loop6: detected capacity change from 0 to 128 [ 356.895412][T11531] ext4: Unknown parameter 'appraise' [ 356.918658][T11523] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 357.069947][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.070131][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.234045][T11539] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 357.234236][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.273128][T11539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.367599][T11546] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 357.385761][T11546] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.461161][T11546] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 357.470528][T11546] bond4: (slave wlan1): Enslaving as an active interface with a down link [ 357.511680][T11556] loop3: detected capacity change from 0 to 128 [ 357.512486][T11554] ip_tables: iptables: counters copy to user failed while replacing table [ 357.533218][T11556] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.961244][T11567] loop1: detected capacity change from 0 to 128 [ 357.970630][T11567] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.978271][T11563] tipc: Enabling of bearer rejected, failed to enable media [ 358.089680][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1732'. [ 358.089707][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1732'. [ 358.479843][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.635908][T11574] xt_hashlimit: max too large, truncated to 1048576 [ 358.636349][T11574] warning: `syz.5.1733' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 358.664287][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1735'. [ 358.722134][T11594] loop5: detected capacity change from 0 to 128 [ 358.736636][T11594] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.849831][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.483306][T11610] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 359.551258][T11614] loop4: detected capacity change from 0 to 512 [ 359.603774][T10815] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.718388][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 360.895422][T11632] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 361.029615][T11639] syzkaller0: entered promiscuous mode [ 361.029632][T11639] syzkaller0: entered allmulticast mode [ 361.052892][T11646] ip_tables: iptables: counters copy to user failed while replacing table [ 361.225249][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1759'. [ 361.247577][T11653] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 361.303397][T11655] bond3: entered promiscuous mode [ 361.303533][T11655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.828637][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1769'. [ 362.882309][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1769'. [ 363.459602][T11682] infiniband syz0: set active [ 363.459618][T11682] infiniband syz0: added bridge_slave_1 [ 363.493016][T11682] RDS/IB: syz0: added [ 363.493042][T11682] smc: adding ib device syz0 with port count 1 [ 363.493055][T11682] smc: ib device syz0 port 1 has no pnetid [ 363.589384][T11705] ip_tables: iptables: counters copy to user failed while replacing table [ 363.743751][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1776'. [ 365.125284][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1787'. [ 365.192942][T11741] xt_hashlimit: size too large, truncated to 1048576 [ 365.540881][T11761] syzkaller0: entered promiscuous mode [ 365.540898][T11761] syzkaller0: entered allmulticast mode [ 365.819384][T11774] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 366.000672][T11776] batman_adv: batadv0: Adding interface: veth0 [ 366.000688][T11776] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.000705][T11776] batman_adv: batadv0: Interface activated: veth0 [ 366.002724][T11776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.002736][T11776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.003177][T11776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.003187][T11776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.003568][T11776] batman_adv: batadv0: Interface deactivated: veth0 [ 366.003578][T11776] batman_adv: batadv0: Removing interface: veth0 [ 366.267392][T11786] loop3: detected capacity change from 0 to 128 [ 366.282347][T11786] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.297548][T11790] loop4: detected capacity change from 0 to 128 [ 366.314409][T11790] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.934891][T11805] syzkaller0: entered promiscuous mode [ 366.934909][T11805] syzkaller0: entered allmulticast mode [ 367.190525][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.207217][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.256746][T11816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 367.626244][T11814] xt_hashlimit: size too large, truncated to 1048576 [ 368.287986][T11832] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 368.904036][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 369.504326][T11853] loop1: detected capacity change from 0 to 128 [ 369.588986][T11853] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.640494][T11856] netlink: 'syz.5.1826': attribute type 1 has an invalid length. [ 369.728629][T11856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.742974][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.814285][T11858] bond1: (slave veth3): Enslaving as an active interface with an up link [ 369.881382][T11856] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 369.908305][T11880] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1834'. [ 369.913587][T11880] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1834'. [ 369.941806][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 370.010008][T11893] loop1: detected capacity change from 0 to 128 [ 370.031010][T11893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.190701][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.314357][ T5018] IPVS: starting estimator thread 0... [ 370.365860][T11908] xt_hashlimit: size too large, truncated to 1048576 [ 370.419399][T11909] IPVS: using max 59 ests per chain, 141600 per kthread [ 370.434705][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.456847][T11916] bridge_slave_0 (unregistering): left allmulticast mode [ 370.456868][T11916] bridge_slave_0 (unregistering): left promiscuous mode [ 370.456894][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.525641][T11922] veth0: left allmulticast mode [ 370.525666][T11922] veth0: left promiscuous mode [ 370.525773][T11922] bridge0: port 1(veth0) entered disabled state [ 370.532077][T11922] batman_adv: batadv0: Adding interface: veth0 [ 370.532091][T11922] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.532106][T11922] batman_adv: batadv0: Interface activated: veth0 [ 370.567971][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.567992][T11922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.571576][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.571588][T11922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.574536][T11922] batman_adv: batadv0: Interface deactivated: veth0 [ 370.574548][T11922] batman_adv: batadv0: Removing interface: veth0 [ 370.794115][T11941] loop5: detected capacity change from 0 to 8 [ 370.797373][T11941] Filesystem uses "lzo" compression. This is not supported [ 371.511784][T11953] loop3: detected capacity change from 0 to 128 [ 371.512125][T11953] ext4: Unknown parameter 'appraise' [ 371.559013][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1863'. [ 371.700382][ T1616] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.700419][ T1616] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.746324][T11961] loop1: detected capacity change from 0 to 2048 [ 371.769667][T11961] EXT4-fs: Invalid want_extra_isize 65535 [ 372.017666][T11968] loop6: detected capacity change from 0 to 512 [ 372.152646][T11971] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1865'. [ 372.817362][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 373.110540][T11989] veth0: left allmulticast mode [ 373.110561][T11989] veth0: left promiscuous mode [ 373.110651][T11989] bridge0: port 1(veth0) entered disabled state [ 373.113332][T11989] batman_adv: batadv0: Adding interface: veth0 [ 373.113343][T11989] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.113360][T11989] batman_adv: batadv0: Interface activated: veth0 [ 373.123829][T11989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.123848][T11989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.125807][T11989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.125821][T11989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.126211][T11989] batman_adv: batadv0: Interface deactivated: veth0 [ 373.126219][T11989] batman_adv: batadv0: Removing interface: veth0 [ 373.328472][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1873'. [ 373.373923][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1874'. [ 373.420145][T11995] xt_hashlimit: size too large, truncated to 1048576 [ 373.446557][T11991] bond4: (slave wlan1): Releasing active interface [ 373.766684][T12006] loop3: detected capacity change from 0 to 8 [ 373.906818][T12006] Filesystem uses "lzo" compression. This is not supported [ 373.954438][T12010] loop4: detected capacity change from 0 to 128 [ 373.971893][T12010] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.331980][T12028] tipc: Enabling of bearer rejected, failed to enable media [ 374.547820][T12043] xt_hashlimit: size too large, truncated to 1048576 [ 374.559167][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 374.699571][T12056] loop1: detected capacity change from 0 to 512 [ 374.825473][T12062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 374.866022][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.163151][T12064] loop6: detected capacity change from 0 to 512 [ 375.218475][T12068] batman_adv: batadv0: Adding interface: veth0 [ 375.218489][T12068] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.227083][T12068] batman_adv: batadv0: Interface activated: veth0 [ 375.283884][T12070] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1899'. [ 375.629561][T12076] syzkaller0: entered promiscuous mode [ 375.629578][T12076] syzkaller0: entered allmulticast mode [ 375.638252][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1904'. [ 375.638274][T12078] netlink: 'syz.5.1904': attribute type 12 has an invalid length. [ 375.638284][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1904'. [ 375.763308][T12086] syzkaller0: entered promiscuous mode [ 375.763330][T12086] syzkaller0: entered allmulticast mode [ 375.809318][T12094] loop1: detected capacity change from 0 to 128 [ 375.822683][T12094] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.675454][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.757498][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 376.901516][T12097] tipc: Enabling of bearer rejected, failed to enable media [ 376.921616][T12116] bond3: entered promiscuous mode [ 376.921781][T12116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.082448][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.082623][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.098493][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 377.103728][T12135] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 377.147712][T12135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.148857][ T264] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.148884][ T264] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.148900][ T264] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.148916][ T264] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.638188][T12148] loop3: detected capacity change from 0 to 128 [ 377.702099][T12148] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.936505][T12155] loop5: detected capacity change from 0 to 128 [ 377.956320][T12155] ext4: Unknown parameter 'appraise' [ 378.270430][T12159] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 378.299712][T12159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.353789][T12159] bond2: (slave wlan1): Enslaving as an active interface with a down link [ 378.509923][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.510104][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.658539][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.736418][T12166] syzkaller0: entered promiscuous mode [ 378.736438][T12166] syzkaller0: entered allmulticast mode [ 379.091371][T12180] netlink: 'syz.6.1933': attribute type 1 has an invalid length. [ 379.146775][T12181] __nla_validate_parse: 2 callbacks suppressed [ 379.146791][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1933'. [ 379.208188][T12183] loop5: detected capacity change from 0 to 512 [ 379.329633][T12185] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1934'. [ 379.952586][T12180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.992830][T12216] loop1: detected capacity change from 0 to 128 [ 381.048868][T12216] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.181802][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 381.183684][T12229] loop6: detected capacity change from 0 to 128 [ 381.186040][T12229] ext4: Unknown parameter 'appraise' [ 381.615854][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.616058][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.647576][T12239] ip_tables: iptables: counters copy to user failed while replacing table [ 381.824260][T12247] loop5: detected capacity change from 0 to 128 [ 381.824616][T12247] ext4: Unknown parameter 'appraise' [ 381.888470][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.921299][T12253] loop1: detected capacity change from 0 to 128 [ 381.921657][T12253] ext4: Unknown parameter 'appraise' [ 381.925114][T12249] xt_hashlimit: size too large, truncated to 1048576 [ 382.011951][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.012135][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.280771][T12318] loop5: detected capacity change from 0 to 128 [ 384.283615][T12318] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.728919][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 384.742210][ T5018] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.742273][ T5018] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.742288][ T5018] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.742305][ T5018] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.483718][T12343] ip_tables: iptables: counters copy to user failed while replacing table [ 385.737345][T10815] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.201078][T12388] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 386.202363][T12388] bond1: (slave lo): Enslaving as an active interface with an up link [ 386.208259][T12388] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 386.283981][T12392] loop6: detected capacity change from 0 to 128 [ 386.297312][T12392] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.687961][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 386.710624][ T944] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.710657][ T944] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.710674][ T944] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.710690][ T944] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.898665][T12407] bridge0: port 3(veth0) entered blocking state [ 386.898704][T12407] bridge0: port 3(veth0) entered disabled state [ 386.898810][T12407] veth0: entered allmulticast mode [ 386.899280][T12407] veth0: entered promiscuous mode [ 386.899458][T12407] bridge0: port 3(veth0) entered blocking state [ 386.899480][T12407] bridge0: port 3(veth0) entered forwarding state [ 387.022081][T12414] netlink: 'syz.5.2006': attribute type 1 has an invalid length. [ 387.051865][T12414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.136076][T12414] bond2: (slave veth5): Enslaving as an active interface with a down link [ 387.245435][T11065] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.283015][T12424] loop6: detected capacity change from 0 to 128 [ 387.302384][T12424] ext4: Unknown parameter 'appraise' [ 387.433403][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2012'. [ 387.456255][T12431] ip_tables: iptables: counters copy to user failed while replacing table [ 387.533476][T12433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.533651][T12433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.982930][T12439] loop4: detected capacity change from 0 to 2048 [ 387.985585][T12439] EXT4-fs: Invalid want_extra_isize 65535 [ 388.801154][T12360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.881310][T12350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.507805][T12476] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2028'. [ 389.985320][T12483] loop6: detected capacity change from 0 to 128 [ 390.022050][T12483] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.143827][T12494] ip_tables: iptables: counters copy to user failed while replacing table [ 390.593382][T12506] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2037'. [ 391.026544][T11065] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.131811][T12518] xt_hashlimit: size too large, truncated to 1048576 [ 391.320282][T12513] bond1: (slave lo): Releasing backup interface [ 391.449723][T12513] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 391.450186][T12513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.609970][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 391.655781][T12551] loop5: detected capacity change from 0 to 128 [ 391.656149][T12551] ext4: Unknown parameter 'appraise' [ 391.934397][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.936842][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.452355][T12579] syzkaller1: entered promiscuous mode [ 393.452373][T12579] syzkaller1: entered allmulticast mode [ 393.599322][T12585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.682607][ T40] ------------[ cut here ]------------ [ 393.682621][ T40] conntrack cleanup blocked for 60s [ 393.682819][ T40] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x1e8/0x308, CPU#0: kworker/u8:2/40 [ 393.687463][ T40] Modules linked in: [ 393.688265][ T40] CPU: 0 UID: 0 PID: 40 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT [ 393.690016][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 393.691995][ T40] Workqueue: netns cleanup_net [ 393.692873][ T40] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 393.694268][ T40] pc : nf_conntrack_cleanup_net_list+0x1e8/0x308 [ 393.695555][ T40] lr : nf_conntrack_cleanup_net_list+0x1e8/0x308 [ 393.696962][ T40] sp : ffff800090f978d0 [ 393.697822][ T40] x29: ffff800090f978f0 x28: 1ffff00011311c50 x27: 1ffff000121f2f56 [ 393.699476][ T40] x26: dfff800000000000 x25: 0000000000000001 x24: 0000000000000001 [ 393.701157][ T40] x23: fffffffffffffffd x22: ffff0000dc3727c0 x21: ffff8000850d9880 [ 393.702836][ T40] x20: 0000000100002493 x19: ffff800090f97ab0 x18: 1fffe000359cf228 [ 393.704601][ T40] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b2a0 [ 393.706249][ T40] x14: 000000000116b3c9 x13: 0000000000000001 x12: 0000000000000003 [ 393.707790][ T40] x11: ffff80008b386328 x10: ffff7000121f2ec0 x9 : 6cf3e95da1c7af00 [ 393.709462][ T40] x8 : 6cf3e95da1c7af00 x7 : 0000000000000000 x6 : 0000000000000000 [ 393.710983][ T40] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000801548e4 [ 393.712622][ T40] x2 : 0000000000000007 x1 : ffff0000c24c3b00 x0 : 0000000000000001 [ 393.714272][ T40] Call trace: [ 393.714938][ T40] nf_conntrack_cleanup_net_list+0x1e8/0x308 (P) [ 393.716216][ T40] nf_conntrack_pernet_exit+0xac/0xc0 [ 393.717267][ T40] ops_undo_list+0x434/0x81c [ 393.718217][ T40] cleanup_net+0x474/0x6c4 [ 393.719122][ T40] process_scheduled_works+0x91c/0x1250 [ 393.720242][ T40] worker_thread+0x798/0xbd0 [ 393.721238][ T40] kthread+0x304/0x3d4 [ 393.722046][ T40] ret_from_fork+0x10/0x20 [ 393.722978][ T40] irq event stamp: 4892160 [ 393.723866][ T40] hardirqs last enabled at (4892159): [] finish_task_switch+0x234/0x858 [ 393.725772][ T40] hardirqs last disabled at (4892160): [] el1_brk64+0x20/0x54 [ 393.727643][ T40] softirqs last enabled at (4891942): [] __do_softirq+0x14/0x20 [ 393.729576][ T40] softirqs last disabled at (4891907): [] __do_softirq+0x14/0x20 [ 393.731541][ T40] ---[ end trace 0000000000000000 ]--- [ 394.540243][T12555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.541652][T12539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512