last executing test programs: 11m22.108595413s ago: executing program 2 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create(0x200) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r7, &(0x7f0000006e00)=[{{&(0x7f00000004c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc8}}], 0x1, 0x8040) r8 = getpid() r9 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x432e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r9, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000008}) epoll_wait(r6, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) close(r4) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000180)=[0xf, 0x1, 0x1], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) 11m20.590170506s ago: executing program 2 (id=137): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) lseek(r2, 0x9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = socket$inet(0x2, 0x80000, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@newchain={0x13c4, 0x64, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {0xf, 0xa}, {0xfff3, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xb4c, 0x2, [@TCA_BPF_ACT={0x110, 0x1, [@m_simple={0x10c, 0x3, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0xfff, 0x100}}, @TCA_DEF_DATA={0xc, 0x3, 'ethtool\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x2, 0x6, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x4, 0x5, 0x4}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x82, 0x6, "7d4bf02c164e5a53cb2f8634a66edc52c9cd0be5467c43b0fe37c448d3cd60dee5e0e9d80539a3f1b2a50ea8ed850b15d531c7f3bb35fa5f505a857a5da7f900b89aed14020b73e7582cc8e978eb8267db17fb944e2a2c74fb716606dbcaad5b823fe57a4c52f082265c62eedc4a6199b7f9a6d908b5121b3be02cb8990a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x72606fdcf15672bb, 0x3}}}}]}, @TCA_BPF_ACT={0xa14, 0x1, [@m_skbedit={0x120, 0xe, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000001, 0x6, 0x20000000, 0xc0b, 0x999}}]}, {0xcc, 0x6, "0eddf071c0bdb19dd676a13f1a8c7969b95aacc0dfbe18b797acea5bdeaed936a5a7dd582b05f3b6634066dd01b08383d94307ae5ed66d4df69b9d7ce70d075840d3f381e16409872faf904edde212220e5c6fef43d3506e7972cb00777da7ab4766e948d79dd754f3b7128ff9d2596d4769ef93188cc8a72216834b068005188a27555fd6c3de3a80d825041ab1ef684db967897f981d75f1df9125494604a540f0844b8b208e086da4427054f4f814a2d1fa460c3badf5868863888c0cb8888d89f18706d85f7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x184, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x80000000, 0x3, 0x5, 0x2}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x11b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x64, 0x4, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x3, 0x4, 0x1, 0xfffffffc}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x1c, 0x6, "6eb370ca58ce0d28e3fe1a657a5e506642008c9ed7ea8608"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x108, 0x19, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x875122ed2d7c6e74, 0xa46, 0x7fff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x7fffffff, 0x8, 0x1, 0x5}, 0x2}}]}, {0x9b, 0x6, "0097e470dd2025fe93670a701af752d751410ffe762b99589a54e86d189358e44703c71d13b19a9d6334cfe0043c4968ac88611dd06fdee9ae9bb605de158c84297f20f750746689411515c52cf5009e7408a26a3862b4b6bc8cd525b42fcd190319d8c2201300401d9fd4337f6cdf28b93ea75a06608e9fdea59008e603d5d600c360d989ac98025c677ddf241410e057a5ced131a8b8"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x84, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6986195}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x1, 0x3, 0xd724, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5d}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x5, 0x6, '}'}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x11c, 0x1b, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x6, 0x1, 0x4, 0x7f}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x7590, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x85, 0x6, "265a4b6e23348cbf2b0fe3423c57a9ed9bcc60e6dc398ab21e83d30f425b40929ae8c8d627fbb9ea50a64c0d4e341c39e41d79593632ae997c95ac39a079d99bc2cd0d0d7314aaada599df75bdb1e7ea7b66ed54caeaf9d44b3b03ce821426be62c05dce9d8c19239ce6aee54df8774c6ab45b83297c0e887948500324115a1077"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x170, 0x1b, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x63be, 0x8, 0x1, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff9090, 0xd, 0x3, 0x7, 0x7}}, @TCA_DEF_DATA={0x1d, 0x3, '/proc/asound/seq/clients\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x1, 0x7, 0x10001}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xcc, 0x6, "e541de025dbb7bbb1ff21c8c77a9d212bf2943c4c7fa75e624e4f093e377ceab1df571fb60a6afa4aba490bdc6e46ec14c07abf511861fec4e63b74c2ecfc32613984a02bdb9a9a89f46c05b5d2db7c1f1f44b253a0175b51a9e33479deb732e08fde9b00e28394bb6d7af8f9ab90c911317b5765b11a504cb01997d961f4eb0519f839223349761377f0cad68702555f9c69bad51b8e99fda41a9c3695e0c19b21cdc57ed71f6f62caed4d96d3bc176dd0ce96d267d3c6ce6919dafaea1ad75a753f5c48d8da40a"}, {0xc}, {0xc}}}, @m_skbmod={0x1f0, 0x18, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3136, 0x4, 0x4, 0xfc4, 0x5}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0x0, 0x4, 0x722c7593, 0x7fff}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400, 0x8, 0x4, 0x9, 0xa40}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffc00, 0x4, 0x3, 0x400, 0x2}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x103, 0x6, "62aadc79a44f39f2bb75f560f735c5705a67c6de60b4f3a84ab9b054bee97d53a6c697ce27de1c2eede677c6c3844b150c11a365bb04714f9f6885db71e57568dc301063d16f1394de497dc8efb401aa10b03db72c614e3faa2512d1ad1469dafe9119bef5c0cd0f8606ba3b22228b4de8eeaa2783238719b07ca8a3716201299d81a17f557b06d4db53dab6a582d451eabadce55506f66045a890ee464f00967e160d0f797e3b1521ef9f62147a5c8c5547fe3fc283a9e2799f205d6dc047f28721432edcd1c4c625f3a4a2839c2af2b5ec7ba3448bb6fc2112bffd999b716a3ab67920130faf13186a6b507e8afc04e1ab58dc879b8c1a5d74a2d8f98d09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x100, 0xb, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\\$:&#\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x146, 0x6, 0x20000000, 0x6, 0x2d50}}, @TCA_DEF_DATA={0xf, 0x3, '!%\xaf^:*%-:)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x1ff, 0xd8e6}}, @TCA_DEF_DATA={0xc, 0x3, 'ethtool\x00'}]}, {0x69, 0x6, "bde9eab048fe44e6ef2751f1b2c227c14b4fa23cfe699e4a9c06dc132b74f00cbab464f15c2f54dd54de3efdfb00a15de59cffeddaeb8109ff8926efb01fa99f2f6874a331da1532be7547846c1ada8b7a3a691fff417e4c2b7fb759ab876d60a59d2b2bb0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x8, 0xd1, 0x3, 0x5}, {0xac8, 0x7, 0x3, 0x7}, {0x4, 0xd3, 0x8, 0x6}]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_ACT={0x3c0, 0x9, 0x0, 0x1, [@m_csum={0x170, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x12, 0x1b, 0x2, 0x6, 0x5}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2ded, 0x1, 0x2, 0x7, 0xffffffc0}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1db, 0x5, 0x4, 0x0, 0x7fff}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x6, 0x7fff, 0x3}, 0x35}}]}, {0xd1, 0x6, "d8a322b02075a9f927ae77e61e0594e67a07cc2bc4ab5a09c8cd9ebb907240f8c82a7b88480490962c113e0029f50ccd304efbb30e80514711fdcba8b38b9227d7ac41bec9e0ddc22d670e7cd87541eb388e8d90c0bf6f67ff9f320e66ee52fdeefb33639565c94d037915e3209684e51343faccb586f237919ca44a42f38a6eb71015cba69739922be23d8d11b2fa2e716199006aecca8ea5bbda5394bc34ccfb5f884a27aaaa0828704b25f55ddad24b625b5461b7e99af0706ffc324fa8570a88fd98e33c8226addbd51efe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x70, 0x1a, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xbb44}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x0, 0x5, 0xfffffffa, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0x1c, 0x6, "c74f08f3ae89d88c0ea3997e9e669499ef2c7c8ab90f9471"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0xb4, 0xf, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x10, 0x6, "a046f7ec56c3c6e8741247c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x128, 0x1a, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x100, 0x7ff, 0x20000000, 0x3, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff6, 0x4, 0xffffffffffffffff, 0x10, 0xcf}}]}, {0xc2, 0x6, "d68187750f38563d694b16e89277a403c9af67cd647135c6b359fe3d1c78a6ee81a0d767b54196eb481e80c34c46e715ca57823e69ea6e690376df0acec4a1e272694d503f3536c92cb0848ed550f4560aae419d7f944cbf541e15a12458c0d1348b1e347c649041665783ec6181fa160607e86d39a835d5b91deb7f78f2b787bc4b4c7c20b8d574176e6aad60bac3620ded52e41e5b37e8a88b22f9f1b643e9e093e4c273fa8fec9a761a70a70d6af6dac743dd3b48a906e480ec8b912c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0x6}}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x0, 0x80000000, 0x9, {0x60, 0x2, 0xcbc, 0x3, 0x5, 0x1a5}, {0x61, 0x1, 0x6, 0x100, 0xa4f4, 0xdd}, 0x3, 0x8, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3ff, 0x7, 0x3, 0x7, 0x5f, 0x5, 0x455, 0x265, 0x0, 0x9f38, 0x3, 0x7, 0x7a, 0xfff, 0x9, 0x623, 0x4, 0x9, 0x0, 0x1ff, 0x800, 0x359, 0xffff, 0x3dce, 0xa, 0x0, 0x6, 0x6, 0x25153f6e, 0x4, 0xec1, 0xfffd, 0x22, 0x2, 0x8, 0x80000001, 0x5d8bb1a2, 0xfffffff2, 0x81, 0x56b, 0x9, 0x0, 0x6, 0x0, 0x9, 0xe13, 0x7cd, 0x2, 0x0, 0xfffffffd, 0x8001, 0x1, 0x1, 0x80, 0xba39, 0x4, 0x9, 0x8, 0x7, 0x3, 0x6, 0x1, 0x1, 0x7, 0x3ff, 0x0, 0x5, 0x10000, 0xb, 0x0, 0xffffffff, 0x80000001, 0x10001, 0x3, 0x8, 0xfff, 0x5, 0x0, 0x9, 0x6, 0x6, 0x5, 0x7, 0x3ea4, 0xff, 0x9697, 0x1, 0x0, 0xffffff27, 0x4, 0x0, 0x7dfe, 0xfffffff5, 0x40, 0x20b, 0x7, 0x95c, 0x6, 0x10001, 0x91, 0x8, 0xfffffffa, 0x3, 0x100, 0x80000001, 0x1, 0x5, 0x3, 0x22472293, 0x20, 0xf, 0x3ff, 0x81, 0x1, 0x3, 0x3, 0x9, 0x84c, 0x0, 0xffff, 0x0, 0x5, 0xbc9, 0x4, 0x5, 0x5, 0x40, 0x8, 0xfffffffc, 0x4, 0x8, 0xd2f, 0x1200, 0x3, 0x2, 0x9, 0x6, 0xacd4, 0xc7, 0x7, 0x30, 0x629, 0x1000, 0x7f, 0xfffffff9, 0xf3b, 0x3, 0x5, 0xfffffff1, 0x3, 0x8000, 0x6, 0xfffffffa, 0x9, 0x10001, 0x8, 0x5, 0x3, 0x200, 0x457, 0xffffffff, 0xe23e, 0x2, 0xf, 0x800, 0x2, 0x224, 0x5, 0x4c, 0x2, 0x9, 0x9d6, 0x0, 0xf8d44c38, 0x6, 0x6, 0x6, 0x7, 0x6, 0x6, 0x4, 0xffffffff, 0x8, 0x5, 0x8171, 0x5, 0x8, 0x9, 0xd63d, 0xfffff480, 0x2, 0xfff, 0x5, 0x6, 0x9, 0x6, 0x8, 0x9, 0x2, 0x4, 0x9, 0x2a6f, 0x7fff, 0x5, 0x9, 0x1, 0x100, 0x4, 0x80000000, 0xffffffff, 0x1, 0xffffffff, 0x0, 0x9, 0x8, 0x4, 0x7, 0x5, 0x1, 0x7, 0x9, 0x7, 0x7f, 0x9, 0x0, 0x10000, 0x7, 0x6, 0x2, 0x10001, 0xffffffff, 0x4, 0x7, 0x5, 0xc92, 0x63, 0x5, 0x25c, 0x7fffffff, 0x0, 0x2e17, 0x2, 0x7cc0, 0x1, 0x7212, 0x1, 0xb185, 0xa, 0x6, 0x8, 0x6, 0x1, 0x7, 0x200, 0xfffffffc]}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x9}}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x2) syz_emit_ethernet(0x56, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000086a05"], 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x10026, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1121769e, 0x7, @perf_bp={0x0, 0xb}, 0x1a1ed, 0x3, 0x11000, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800456800280068000040019078ac1e0101e00000010d009078"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r11, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063112000000000008510000002000095000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 11m19.068808219s ago: executing program 2 (id=143): syz_io_uring_setup(0x4159, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r1, &(0x7f00000022c0)=""/4066, 0xfe2, 0x1fb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000006680)) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6ba]}, 0x8) socket$inet(0x2, 0x3, 0x52) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x3}, 0x10f4c8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e26, 0x5, 0xa, 0x20, 0x80, 0x23, 0x0, r4}, {0x10, 0x7, 0x1, 0xb0, 0x5, 0x2, 0x1, 0xffffffffffffffff}, {0x5, 0xfffffffffffffffd, 0x80, 0x5}, 0x3, 0x6e6bbe, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d3, 0x2b}, 0xa, @in=@local, 0x3506, 0x0, 0x1, 0x4, 0x1, 0x20426, 0x55d}}, 0xe8) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001c40)={{r5, 0xa37f, 0x6, 0x2, 0x8, 0x7, 0x9, 0x2000000, 0x4, 0x5, 0x4, 0x20004, 0xa7b1, 0x8, 0x100000001}, 0x18, [0x0, 0x0, 0x0]}) r6 = getpid() r7 = socket(0xf, 0x3, 0x7) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r8, 0x0) prlimit64(r6, 0x8, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/250, 0xfa) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0) 11m18.08613308s ago: executing program 2 (id=145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40048, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x2, @perf_config_ext={0x3f1, 0x1ff}, 0x440, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240), 0x0, 0x7800, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) setuid(0xee01) r6 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000012, 0x20010, r5, 0x0) 11m3.477566977s ago: executing program 2 (id=165): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r9 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 10m54.800726646s ago: executing program 2 (id=176): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000007c0)="29b1", 0x2}], 0x1}, 0x20004004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000080000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/217], 0x140}}, 0x844) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe88}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000500)={'gre0\x00', r1, 0x0, 0x7, 0x10, 0x0, {{0xb, 0x4, 0x0, 0x10, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, {[@timestamp={0x44, 0xc, 0x43, 0x0, 0x7, [0x28, 0x9]}, @lsrr={0x83, 0xb, 0x5c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x90c440, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="7f7229b4269b1863967c0b93dab526976bff419062c428278cf1678ed94fb8b393221083806b5f9574b87acadf748fa6f10549d6c5b69b0b1619ea325b615e95d298c5172418e65aeb12176dbfc414611187cc61bd9426ca478d31a9558a327e9323ee1953d64d8a0482294d83cc81c7e74a5c74e5c77d31a116c7689fbd36eca318746f4a18fd2c3b1be47033ee0d8d40202488ac5148fd533d861ceb56d86a848bbb27345d01a9cdac110aaa32eff7d58c9da1bd94e9021de305367fb5f019a68a6e27984a3e41cd6ce804204d90945784e6859104b02eb507fbb4447f7bcc78b7e6daf61df4b0"]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000001c0)=0x6) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x810) 10m54.793000156s ago: executing program 32 (id=176): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000007c0)="29b1", 0x2}], 0x1}, 0x20004004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000080000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/217], 0x140}}, 0x844) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe88}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000500)={'gre0\x00', r1, 0x0, 0x7, 0x10, 0x0, {{0xb, 0x4, 0x0, 0x10, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, {[@timestamp={0x44, 0xc, 0x43, 0x0, 0x7, [0x28, 0x9]}, @lsrr={0x83, 0xb, 0x5c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x90c440, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="7f7229b4269b1863967c0b93dab526976bff419062c428278cf1678ed94fb8b393221083806b5f9574b87acadf748fa6f10549d6c5b69b0b1619ea325b615e95d298c5172418e65aeb12176dbfc414611187cc61bd9426ca478d31a9558a327e9323ee1953d64d8a0482294d83cc81c7e74a5c74e5c77d31a116c7689fbd36eca318746f4a18fd2c3b1be47033ee0d8d40202488ac5148fd533d861ceb56d86a848bbb27345d01a9cdac110aaa32eff7d58c9da1bd94e9021de305367fb5f019a68a6e27984a3e41cd6ce804204d90945784e6859104b02eb507fbb4447f7bcc78b7e6daf61df4b0"]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000001c0)=0x6) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x810) 7m11.121213615s ago: executing program 1 (id=1097): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x9d, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) 7m11.089181935s ago: executing program 1 (id=1098): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9}, 0x10) 7m10.977857298s ago: executing program 1 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000300)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x25, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}]}]}, 0x50}}, 0x0) 7m10.928260789s ago: executing program 1 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 7m10.865281231s ago: executing program 1 (id=1101): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r9 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 7m9.435184593s ago: executing program 1 (id=1102): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8008550e, 0x0) 7m9.390478865s ago: executing program 33 (id=1102): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8008550e, 0x0) 7m0.45613376s ago: executing program 5 (id=1195): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r7 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 6m59.264843277s ago: executing program 5 (id=1203): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) 6m59.14844791s ago: executing program 5 (id=1208): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="02", 0x1}, {&(0x7f0000000040)="28bbae38ecbe626b9e7d0e1ac8166e", 0xf}], 0x2}, 0x400c010) 6m58.894923326s ago: executing program 5 (id=1211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f9f1956065425baa794a469", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m58.876034816s ago: executing program 5 (id=1214): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r9 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 6m56.268120126s ago: executing program 5 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000b0026bd7000004000000300000018000180"], 0x2c}}, 0x4040080) 6m56.167736528s ago: executing program 34 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000b0026bd7000004000000300000018000180"], 0x2c}}, 0x4040080) 4m38.080638628s ago: executing program 3 (id=2021): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0xfcd8) 4m38.01186744s ago: executing program 3 (id=2023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x80000000}, 0x99, 0x4, 0x0, 0x2, 0x10, 'syz1\x00', "910ba0dfd7307011edc459f0330c2b5a426ddb9ecf99f6f594d57ec725d1a787", "c75a7a6377035610cc69227ae09edf27063edeb9d31df12b93fe9c894e437577", [{0x70, 0x1, {0x2, 0x101}}, {0x4, 0x7, {0x1, 0x3}}, {0x3, 0x81, {0x3, 0x91d}}, {0x5, 0xff3b, {0x1, 0xb03e}}, {0x8, 0x67, {0x1, 0x1db8cce0}}, {0x80, 0x6, {0x3}}, {0xfffd, 0xe01e, {0x1, 0x6}}, {0x7ff, 0x3, {0x3, 0x3}}, {0x4, 0x4, {0x1, 0x2ab}}, {0x9, 0x0, {0x1, 0x6}}, {0x1, 0x1, {0x1, 0x272}}, {0xa, 0x7, {0x2, 0x1ff}}, {0x8, 0x400, {0x0, 0x3c18}}, {0x1ff, 0xa0, {0x0, 0xdeb}}, {0xa3a, 0x2, {0x3, 0x8}}, {0x6, 0x6, {0x1, 0x9}}, {0x9622, 0xf, {0x0, 0x15}}, {0x0, 0x7, {0x1, 0x4}}, {0x1, 0x7, {0x0, 0x6}}, {0x8000, 0x9, {0x1, 0xfe0000}}, {0x0, 0x9c95, {0x0, 0x7}}, {0x0, 0x6ef, {0x0, 0x6}}, {0x8001, 0xfffb, {0x1, 0x3186dc43}}, {0x8, 0xfffc, {0x1, 0x4}}, {0x2, 0x800}, {0x4332, 0x7, {0x3, 0x1}}, {0x8000, 0xf, {0x2, 0xfff}}, {0x1, 0x7, {0x3, 0xffffff80}}, {0x2, 0x9, {0x2, 0x9}}, {0x36, 0x77, {0x2, 0x1000}}, {0x5, 0x3, {0x2, 0xffff0001}}, {0x0, 0x0, {0x0, 0x7b}}, {0x1, 0x8, {0x1, 0x831}}, {0x4d, 0x8, {0x3, 0x793}}, {0x0, 0x4, {0x1, 0x2}}, {0xe, 0x280, {0x2, 0x4}}, {0x0, 0xfffd, {0x3, 0x3}}, {0x6, 0x1, {0x2, 0x1}}, {0x1000, 0x7, {0x2, 0x5}}, {0x6, 0xdccb, {0x2, 0xdd21}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4m37.916607062s ago: executing program 3 (id=2025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m37.832610994s ago: executing program 3 (id=2028): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11, 0x6}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 4m37.767315066s ago: executing program 3 (id=2030): r0 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) 4m37.60439108s ago: executing program 3 (id=2039): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xfffffe78, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f00000000c0)=""/124, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x7, 0x8000}, 0x24) 4m37.531454551s ago: executing program 35 (id=2039): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xfffffe78, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f00000000c0)=""/124, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x7, 0x8000}, 0x24) 7.887180099s ago: executing program 7 (id=4599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001980)=""/4103, 0x1007}], 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 7.408605349s ago: executing program 8 (id=4609): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1d8) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x7) 6.239824966s ago: executing program 8 (id=4612): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xaa, 0x100000000}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x4, 0x0, 0x80000001, 0x6a024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200, 0x200000000001ff}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)="c8", 0x1, 0xe7c) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00', 0x6, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x138) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001040)={r0, 0x20, &(0x7f0000001000)={&(0x7f0000000f00)=""/82, 0x52, 0x0, &(0x7f0000000f80)=""/122, 0x7a}}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x80}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x1d, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @generic={0xf8, 0x5, 0x7, 0x5, 0x7fffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xa8a, 0x14, &(0x7f0000000e40)=""/20, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x3, 0x1, 0x54, 0x7}, 0x10, r2, r1, 0x2, 0x0, &(0x7f0000001080)=[{0x4, 0x4, 0x8, 0x2}, {0x3, 0x4, 0xe, 0x5}], 0x10, 0xe5d}, 0x94) fallocate(r1, 0x11, 0x100000007fc, 0x8000a000) lremovexattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c616c6c6fe08a775f7574696d653d30313737373737373737373737373737373737373737372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370b499d0cb476cc07157313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d30"], 0x6, 0x2e6, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006d0001000000000000000000023c0000", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000018400000050000000000000000000000956d8578334400"/45], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x39, &(0x7f0000000500)=""/57, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000480)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50000000000000079102800000000006900360000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) 5.865642705s ago: executing program 7 (id=4616): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) dup2(r1, r2) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0x3c, 0x67) 5.823550956s ago: executing program 0 (id=4617): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x4, 0x4, "1afa86d32101b52ddf370cbdb2b64700", 0x200}) setresuid(0x0, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x2, 0x4, 0x6, 0x1fd}) 5.779393147s ago: executing program 0 (id=4618): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) epoll_create(0x4) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.779122867s ago: executing program 4 (id=4619): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x1, 0x1, 0x7ff, 0xffd}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.735354488s ago: executing program 0 (id=4620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088be"], 0xfdef) 5.734676158s ago: executing program 7 (id=4621): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 5.64140429s ago: executing program 4 (id=4622): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 5.595160441s ago: executing program 0 (id=4623): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 5.581779572s ago: executing program 7 (id=4624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) 5.531435152s ago: executing program 0 (id=4625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x22f0}, @void, @eth={@random="414f670bc70e", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x2c, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x2f}]}}}}}}, 0x42) 5.511255243s ago: executing program 6 (id=4627): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x81) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.497876713s ago: executing program 0 (id=4628): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r9 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 5.429901725s ago: executing program 6 (id=4629): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2a060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.414404225s ago: executing program 6 (id=4630): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7d3, &(0x7f00000007c0)="$eJzs3c1rHOcZAPBnVp+W3UqFQuueBIVWYLyqXNVuwVCXHkqhBkN7ti1Wa+FqpTXalbGEwDalkEsOCTkE4ovPceLcfMglH9fkkr8hh2DjJLKJQw5BYXZn7V1JK0uRduVYvx+M9n1nZ/d5n3nn49XOsBvAgTWa/slFHI3oS4vD2fwkshnRG3GmvtyT1ZVCOiWxtvbvr5LaMo9XVwrR9JrU4azy64j46P8Rx3Ib41aWlmenSqXiQlYfr85dGa8sLR+/PDc1U5wpzp+cmJw8cepPp07uXa7ffLp85MFr//j9u2e++9+v7r76cRJn4kj2XHMee2U0RrN10peuwhZ/3+tg+yzZ7wbwo6S7Zk99L4+jMRw9W/TkX7vaMgCgU65HxBoAcMAkzv8AcMA0Pgd4vLpSaExRv55z43mfHZzu9IcTXfDwbxExWM+/cX2z/kxv/ZrdZ4O166BDj5PaNZKGJCJG9iD+aETcunf+TjpFh65DAmzmxs2IuDgyuv74nx7h1t+zsFN/2MYyo43C+/UHxz/ong/S8c+fN47/InLZ/j9Y+7t+/DNQ23f7dh1/dF194/6fu99S3X3IFun473TTvW1PmvLPjPRktZ/Vxnx9yaXLpWJ6bPt5RIxF30Ban6gtenbTGGOPvn/ULn7z+O/r1//7dho/fXy2RO5+70Dra6anqlO7zbvh4c2I3/Ruln/ytP+TNuPfc9uM8c+/vPJWu+fS/NN8G9PG/Dtr7XbE7zbt/2f3QSVb3p84XtscxhsbxSbb53ufvznULn5z/9+6l0ZaKTT+F+iGtP+Hts5/JGm+X7Oy8xif3B7+sN1zrfmfv5PGb81/8+2/P/lPrdyfzbs2Va0uTET0J//aOP/Es9c26o3l0/zHftuSf9aDuS23/3Shi1l57Tk3P/Y++PKd1jnJDvLvrDT/6bT/k6xNz+3/nRfuPpntaRd/e/0/WSuNZXM2Hv96N7xvFjyNu2UDd7XyAAAAAAAAAAAAAAAAAAAAAAAAAGCbchFxJJJc/mk5l8vn67/h/csYypXKleqxS+XF+emo/Vb2SPTlGl91Odz0fagT2ffhN+on1tX/GBG/iIg3Bg7V6vlCuTS938kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOZwm9//T30xsN+tAwA6ZnC/GwAAdN2Ozv8GCwDwUmhzSu/ffPahjrYFAOiO2vk/6d3vZgAAXeQjfQA4eJz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LBzZ8+m09q3qyuFtD59dWlxtnz1+HSxMpufWyzkC+WFK/mZcnmmVMwXynNt3+hG/aFULl+ZjPnFa+PVYqU6XllavjBXXpyvXrg8NzVTvFDs61pmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB9laXl2alSqbigsHXh+gvRjJtZt+332niZChezdfqitGcHhYGI6FSI5qPEoe4fmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+In4IAAD//9mLHCE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x10, 0x6d}}, &(0x7f0000000140), 0x1400) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x1000000) 5.382208296s ago: executing program 7 (id=4631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86d9, 0x8}}}}}}, 0x2e) 5.353167056s ago: executing program 4 (id=4632): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000007000000060001000500000008000b000000000008000c00a80e00000800090002000000050012"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.121867052s ago: executing program 4 (id=4633): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.799056569s ago: executing program 4 (id=4634): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.745546321s ago: executing program 6 (id=4635): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) 4.694833432s ago: executing program 8 (id=4636): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000670000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x6, 0x2030, 0x4}, 0x20) 4.693875002s ago: executing program 7 (id=4637): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.621368654s ago: executing program 4 (id=4638): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) lseek(r2, 0x9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = socket$inet(0x2, 0x80000, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@newchain={0xb98, 0x64, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {0xf, 0xa}, {0xfff3, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xb4c, 0x2, [@TCA_BPF_ACT={0x110, 0x1, [@m_simple={0x10c, 0x3, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0xfff, 0x100}}, @TCA_DEF_DATA={0xc, 0x3, 'ethtool\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x2, 0x6, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x4, 0x5, 0x4}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x82, 0x6, "7d4bf02c164e5a53cb2f8634a66edc52c9cd0be5467c43b0fe37c448d3cd60dee5e0e9d80539a3f1b2a50ea8ed850b15d531c7f3bb35fa5f505a857a5da7f900b89aed14020b73e7582cc8e978eb8267db17fb944e2a2c74fb716606dbcaad5b823fe57a4c52f082265c62eedc4a6199b7f9a6d908b5121b3be02cb8990a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x72606fdcf15672bb, 0x3}}}}]}, @TCA_BPF_ACT={0xa14, 0x1, [@m_skbedit={0x120, 0xe, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000001, 0x6, 0x20000000, 0xc0b, 0x999}}]}, {0xcc, 0x6, "0eddf071c0bdb19dd676a13f1a8c7969b95aacc0dfbe18b797acea5bdeaed936a5a7dd582b05f3b6634066dd01b08383d94307ae5ed66d4df69b9d7ce70d075840d3f381e16409872faf904edde212220e5c6fef43d3506e7972cb00777da7ab4766e948d79dd754f3b7128ff9d2596d4769ef93188cc8a72216834b068005188a27555fd6c3de3a80d825041ab1ef684db967897f981d75f1df9125494604a540f0844b8b208e086da4427054f4f814a2d1fa460c3badf5868863888c0cb8888d89f18706d85f7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x184, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x80000000, 0x3, 0x5, 0x2}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x11b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x64, 0x4, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x3, 0x4, 0x1, 0xfffffffc}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x1c, 0x6, "6eb370ca58ce0d28e3fe1a657a5e506642008c9ed7ea8608"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x108, 0x19, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x875122ed2d7c6e74, 0xa46, 0x7fff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x7fffffff, 0x8, 0x1, 0x5}, 0x2}}]}, {0x9b, 0x6, "0097e470dd2025fe93670a701af752d751410ffe762b99589a54e86d189358e44703c71d13b19a9d6334cfe0043c4968ac88611dd06fdee9ae9bb605de158c84297f20f750746689411515c52cf5009e7408a26a3862b4b6bc8cd525b42fcd190319d8c2201300401d9fd4337f6cdf28b93ea75a06608e9fdea59008e603d5d600c360d989ac98025c677ddf241410e057a5ced131a8b8"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x84, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6986195}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x1, 0x3, 0xd724, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5d}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x5, 0x6, '}'}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x11c, 0x1b, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x6, 0x1, 0x4, 0x7f}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x7590, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x85, 0x6, "265a4b6e23348cbf2b0fe3423c57a9ed9bcc60e6dc398ab21e83d30f425b40929ae8c8d627fbb9ea50a64c0d4e341c39e41d79593632ae997c95ac39a079d99bc2cd0d0d7314aaada599df75bdb1e7ea7b66ed54caeaf9d44b3b03ce821426be62c05dce9d8c19239ce6aee54df8774c6ab45b83297c0e887948500324115a1077"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x170, 0x1b, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x63be, 0x8, 0x1, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff9090, 0xd, 0x3, 0x7, 0x7}}, @TCA_DEF_DATA={0x1d, 0x3, '/proc/asound/seq/clients\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x1, 0x7, 0x10001}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xcc, 0x6, "e541de025dbb7bbb1ff21c8c77a9d212bf2943c4c7fa75e624e4f093e377ceab1df571fb60a6afa4aba490bdc6e46ec14c07abf511861fec4e63b74c2ecfc32613984a02bdb9a9a89f46c05b5d2db7c1f1f44b253a0175b51a9e33479deb732e08fde9b00e28394bb6d7af8f9ab90c911317b5765b11a504cb01997d961f4eb0519f839223349761377f0cad68702555f9c69bad51b8e99fda41a9c3695e0c19b21cdc57ed71f6f62caed4d96d3bc176dd0ce96d267d3c6ce6919dafaea1ad75a753f5c48d8da40a"}, {0xc}, {0xc}}}, @m_skbmod={0x1f0, 0x18, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3136, 0x4, 0x4, 0xfc4, 0x5}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0x0, 0x4, 0x722c7593, 0x7fff}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400, 0x8, 0x4, 0x9, 0xa40}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffc00, 0x4, 0x3, 0x400, 0x2}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x100, 0xb, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\\$:&#\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x146, 0x6, 0x20000000, 0x6, 0x2d50}}, @TCA_DEF_DATA={0xf, 0x3, '!%\xaf^:*%-:)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x1ff, 0xd8e6}}, @TCA_DEF_DATA={0xc, 0x3, 'ethtool\x00'}]}, {0x69, 0x6, "bde9eab048fe44e6ef2751f1b2c227c14b4fa23cfe699e4a9c06dc132b74f00cbab464f15c2f54dd54de3efdfb00a15de59cffeddaeb8109ff8926efb01fa99f2f6874a331da1532be7547846c1ada8b7a3a691fff417e4c2b7fb759ab876d60a59d2b2bb0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x8, 0xd1, 0x3, 0x5}, {0xac8, 0x7, 0x3, 0x7}, {0x4, 0xd3, 0x8, 0x6}]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0xb98}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x2) syz_emit_ethernet(0x56, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000086a05"], 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x10026, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1121769e, 0x7, @perf_bp={0x0, 0xb}, 0x1a1ed, 0x3, 0x11000, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800456800280068000040019078ac1e0101e00000010d009078"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r11, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063112000000000008510000002000095000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 3.693197945s ago: executing program 6 (id=4639): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) rseq(0xfffffffffffffffc, 0xffffffffffffff91, 0x0, 0x0) 3.692956575s ago: executing program 8 (id=4640): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)='>J', 0x2}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x182, 0xffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 88.264368ms ago: executing program 6 (id=4641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = socket(0x400000010, 0x3, 0x0) write(r1, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) 21.908199ms ago: executing program 8 (id=4642): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 0s ago: executing program 8 (id=4643): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) kernel console output (not intermixed with test programs): .845799][T16537] RSP: 002b:00007faae0942028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 726.845826][T16537] RAX: ffffffffffffffda RBX: 00007faae25d6270 RCX: 00007faae234de99 [ 726.845845][T16537] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 726.845870][T16537] RBP: 00007faae23e3eaf R08: 0000000000000000 R09: 0000000000000000 [ 726.845900][T16537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.845914][T16537] R13: 00007faae25d6308 R14: 00007faae25d6270 R15: 00007ffe77ac80e8 [ 726.845937][T16537] [ 726.845947][T16537] memory: usage 307200kB, limit 307200kB, failcnt 6342 [ 726.936537][T16555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.941626][T16537] memory+swap: usage 312012kB, limit 9007199254740988kB, failcnt 0 [ 726.941650][T16537] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 726.973676][T16555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.118661][T16537] Memory cgroup stats for /syz6: [ 727.119001][T16537] cache 0 [ 727.127022][T16537] rss 4096 [ 727.130185][T16537] shmem 0 [ 727.133221][T16537] mapped_file 0 [ 727.136695][T16537] dirty 0 [ 727.139649][T16537] writeback 0 [ 727.143046][T16537] workingset_refault_anon 1582 [ 727.147875][T16537] workingset_refault_file 2806 [ 727.152737][T16537] swap 5021696 [ 727.156195][T16537] swapcached 107225088 [ 727.160364][T16537] pgpgin 256823 [ 727.163882][T16537] pgpgout 256822 [ 727.167583][T16537] pgfault 320250 [ 727.171173][T16537] pgmajfault 994 [ 727.174760][T16537] inactive_anon 0 [ 727.178504][T16537] active_anon 4096 [ 727.182236][T16537] inactive_file 0 [ 727.185904][T16537] active_file 0 [ 727.189407][T16537] unevictable 0 [ 727.192885][T16537] hierarchical_memory_limit 314572800 [ 727.198310][T16537] hierarchical_memsw_limit 9223372036854771712 [ 727.204604][T16537] total_cache 0 [ 727.208117][T16537] total_rss 4096 [ 727.211676][T16537] total_shmem 0 [ 727.215181][T16537] total_mapped_file 0 [ 727.219279][T16537] total_dirty 0 [ 727.222750][T16537] total_writeback 0 [ 727.226773][T16537] total_workingset_refault_anon 1582 [ 727.232073][T16537] total_workingset_refault_file 2806 [ 727.237421][T16537] total_swap 5021696 [ 727.241331][T16537] total_swapcached 107225088 [ 727.245963][T16537] total_pgpgin 256823 [ 727.249962][T16537] total_pgpgout 256822 [ 727.254074][T16537] total_pgfault 320250 [ 727.258159][T16537] total_pgmajfault 994 [ 727.262303][T16537] total_inactive_anon 0 [ 727.266534][T16537] total_active_anon 4096 [ 727.270789][T16537] total_inactive_file 0 [ 727.275050][T16537] total_active_file 0 [ 727.279049][T16537] total_unevictable 0 [ 727.283135][T16537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4275,pid=16523,uid=0 [ 727.298029][T16537] Memory cgroup out of memory: Killed process 16523 (syz.6.4275) total-vm:86264kB, anon-rss:1240kB, file-rss:26336kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 727.788111][T16566] bio_check_eod: 32 callbacks suppressed [ 727.788131][T16566] syz.0.4292: attempt to access beyond end of device [ 727.788131][T16566] loop0: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 727.807406][T16566] syz.0.4292: attempt to access beyond end of device [ 727.807406][T16566] loop0: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 727.820944][T16566] syz.0.4292: attempt to access beyond end of device [ 727.820944][T16566] loop0: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 727.891651][T16569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.901245][T16569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.007282][ T5291] kworker/u8:13: attempt to access beyond end of device [ 728.007282][ T5291] loop0: rw=1, sector=688, nr_sectors = 896 limit=512 [ 728.878566][T16577] syz.0.4294 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 728.889969][T16577] CPU: 0 UID: 0 PID: 16577 Comm: syz.0.4294 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 728.890004][T16577] Tainted: [W]=WARN [ 728.890011][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.890023][T16577] Call Trace: [ 728.890031][T16577] [ 728.890040][T16577] __dump_stack+0x1d/0x30 [ 728.890222][T16577] dump_stack_lvl+0x95/0xd0 [ 728.890302][T16577] dump_stack+0x15/0x1b [ 728.890322][T16577] dump_header+0x80/0x240 [ 728.890345][T16577] oom_kill_process+0x295/0x350 [ 728.890379][T16577] out_of_memory+0x981/0xbc0 [ 728.890475][T16577] try_charge_memcg+0x621/0xa00 [ 728.890501][T16577] charge_memcg+0x6d/0x120 [ 728.890534][T16577] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 728.890643][T16577] swap_cache_alloc_folio+0x47b/0x5e0 [ 728.890721][T16577] swap_cluster_readahead+0x2b1/0x460 [ 728.890761][T16577] swapin_readahead+0xd8/0x8a0 [ 728.890814][T16577] ? _raw_spin_unlock+0x9/0x30 [ 728.890843][T16577] ? swap_put_entries_cluster+0x49c/0x4c0 [ 728.890947][T16577] ? __entry_text_end+0xf208/0x102179 [ 728.890975][T16577] ? __rcu_read_unlock+0x4e/0x70 [ 728.891006][T16577] ? swap_cache_get_folio+0x1f7/0x200 [ 728.891056][T16577] do_swap_page+0x2a2/0x1ec0 [ 728.891099][T16577] ? __css_rstat_updated+0xbb/0x280 [ 728.891201][T16577] ? __rcu_read_lock+0x36/0x50 [ 728.891231][T16577] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 728.891322][T16577] handle_mm_fault+0xb3c/0x2da0 [ 728.891366][T16577] do_user_addr_fault+0x634/0x1060 [ 728.891477][T16577] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 728.891513][T16577] ? trace_page_fault_user+0x1f/0xa0 [ 728.891545][T16577] exc_page_fault+0x62/0xa0 [ 728.891576][T16577] asm_exc_page_fault+0x26/0x30 [ 728.891669][T16577] RIP: 0033:0x7f1d1bdf8ffe [ 728.891689][T16577] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 728.891720][T16577] RSP: 002b:00007ffcf70d54c0 EFLAGS: 00010246 [ 728.891813][T16577] RAX: 0000000000000000 RBX: 000055555e7bd500 RCX: 00007f1d1bdfe6ce [ 728.891830][T16577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.891876][T16577] RBP: 00007f1d1c0c7da0 R08: 0000000000000000 R09: 0000000000000000 [ 728.891894][T16577] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000b1f31 [ 728.891911][T16577] R13: 00007f1d1c0c618c R14: 00000000000b1e1e R15: 00007ffcf70d5640 [ 728.891932][T16577] [ 728.891960][T16577] memory: usage 307200kB, limit 307200kB, failcnt 20406 [ 729.142019][T16577] memory+swap: usage 319364kB, limit 9007199254740988kB, failcnt 0 [ 729.162556][T16577] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 729.170039][T16577] Memory cgroup stats for /syz0: [ 729.170335][T16577] cache 0 [ 729.178331][T16577] rss 0 [ 729.181140][T16577] shmem 0 [ 729.184402][T16577] mapped_file 0 [ 729.187877][T16577] dirty 0 [ 729.190824][T16577] writeback 0 [ 729.194143][T16577] workingset_refault_anon 2830 [ 729.198967][T16577] workingset_refault_file 7619 [ 729.203813][T16577] swap 12460032 [ 729.207293][T16577] swapcached 205815808 [ 729.211374][T16577] pgpgin 508567 [ 729.214880][T16577] pgpgout 508566 [ 729.218428][T16577] pgfault 613697 [ 729.221998][T16577] pgmajfault 1875 [ 729.225685][T16577] inactive_anon 0 [ 729.229325][T16577] active_anon 4096 [ 729.233083][T16577] inactive_file 0 [ 729.236835][T16577] active_file 0 [ 729.240306][T16577] unevictable 0 [ 729.243807][T16577] hierarchical_memory_limit 314572800 [ 729.249185][T16577] hierarchical_memsw_limit 9223372036854771712 [ 729.255456][T16577] total_cache 0 [ 729.258928][T16577] total_rss 0 [ 729.262217][T16577] total_shmem 0 [ 729.265722][T16577] total_mapped_file 0 [ 729.269753][T16577] total_dirty 0 [ 729.273246][T16577] total_writeback 0 [ 729.277060][T16577] total_workingset_refault_anon 2830 [ 729.282351][T16577] total_workingset_refault_file 7619 [ 729.287658][T16577] total_swap 12460032 [ 729.291715][T16577] total_swapcached 205815808 [ 729.296344][T16577] total_pgpgin 508567 [ 729.300343][T16577] total_pgpgout 508566 [ 729.304573][T16577] total_pgfault 613697 [ 729.308901][T16577] total_pgmajfault 1875 [ 729.313093][T16577] total_inactive_anon 0 [ 729.317373][T16577] total_active_anon 4096 [ 729.321711][T16577] total_inactive_file 0 [ 729.325977][T16577] total_active_file 0 [ 729.329960][T16577] total_unevictable 0 [ 729.333977][T16577] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4294,pid=16577,uid=0 [ 729.348852][T16577] Memory cgroup out of memory: Killed process 16577 (syz.0.4294) total-vm:82028kB, anon-rss:1236kB, file-rss:22036kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 729.554587][T16586] set_capacity_and_notify: 2 callbacks suppressed [ 729.554631][T16586] loop8: detected capacity change from 0 to 1024 [ 729.609992][T16586] EXT4-fs: Ignoring removed bh option [ 729.628605][T16586] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 729.753021][T16586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.773303][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 729.773390][ T28] audit: type=1400 audit(1784454251.164:1220): avc: denied { write } for pid=16585 comm="syz.8.4296" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.934134][T16598] loop4: detected capacity change from 0 to 8192 [ 729.966549][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.000454][T16598] syz.4.4300: attempt to access beyond end of device [ 730.000454][T16598] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 730.175946][ T28] audit: type=1400 audit(1784454251.574:1221): avc: denied { accept } for pid=16614 comm="syz.8.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 730.820981][T16619] syz.0.4306 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 730.829533][T16626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.835293][T16619] CPU: 1 UID: 0 PID: 16619 Comm: syz.0.4306 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 730.835362][T16619] Tainted: [W]=WARN [ 730.835370][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 730.835384][T16619] Call Trace: [ 730.835393][T16619] [ 730.835441][T16619] __dump_stack+0x1d/0x30 [ 730.835468][T16619] dump_stack_lvl+0x95/0xd0 [ 730.835492][T16619] dump_stack+0x15/0x1b [ 730.835514][T16619] dump_header+0x80/0x240 [ 730.835551][T16619] oom_kill_process+0x295/0x350 [ 730.835587][T16619] out_of_memory+0x981/0xbc0 [ 730.835624][T16619] try_charge_memcg+0x621/0xa00 [ 730.835640][T16619] ? __rcu_read_unlock+0x4e/0x70 [ 730.835671][T16619] __memcg_kmem_charge_page+0x199/0x3a0 [ 730.835762][T16619] __alloc_frozen_pages_noprof+0x18a/0x350 [ 730.835796][T16619] alloc_pages_mpol+0xa9/0x1d0 [ 730.835830][T16619] alloc_pages_noprof+0x8f/0x140 [ 730.835893][T16619] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 730.835932][T16619] __kvmalloc_node_noprof+0x3a0/0x590 [ 730.835961][T16619] ? futex_hash_allocate+0x192/0x920 [ 730.835989][T16619] ? futex_hash_allocate+0x192/0x920 [ 730.836013][T16619] ? futex_hash_allocate+0x192/0x920 [ 730.836039][T16619] futex_hash_allocate+0x192/0x920 [ 730.836064][T16619] ? cap_task_prctl+0x13f/0x6b0 [ 730.836144][T16619] futex_hash_prctl+0xd8/0xf0 [ 730.836168][T16619] __se_sys_prctl+0x4f4/0x13b0 [ 730.836199][T16619] __x64_sys_prctl+0x67/0x80 [ 730.836228][T16619] x64_sys_call+0x2533/0x3020 [ 730.836302][T16619] do_syscall_64+0x136/0x3c0 [ 730.836329][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.836354][T16619] RIP: 0033:0x7f1d1be3de99 [ 730.836375][T16619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.836397][T16619] RSP: 002b:00007f1d1a432028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 730.836550][T16619] RAX: ffffffffffffffda RBX: 00007f1d1c0c6270 RCX: 00007f1d1be3de99 [ 730.836656][T16619] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 730.836672][T16619] RBP: 00007f1d1bed3eaf R08: 0000000000000000 R09: 0000000000000000 [ 730.836688][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.836703][T16619] R13: 00007f1d1c0c6308 R14: 00007f1d1c0c6270 R15: 00007ffcf70d53d8 [ 730.836724][T16619] [ 730.836733][T16619] memory: usage 307200kB, limit 307200kB, failcnt 20773 [ 730.843704][T16626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.855042][T16619] memory+swap: usage 323468kB, limit 9007199254740988kB, failcnt 0 [ 731.117176][T16619] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 731.124528][T16619] Memory cgroup stats for /syz0: [ 731.124810][T16619] cache 0 [ 731.132780][T16619] rss 0 [ 731.135905][T16619] shmem 0 [ 731.138859][T16619] mapped_file 0 [ 731.142341][T16619] dirty 0 [ 731.145358][T16619] writeback 0 [ 731.148751][T16619] workingset_refault_anon 2888 [ 731.154600][T16619] workingset_refault_file 7619 [ 731.159486][T16619] swap 16658432 [ 731.163029][T16619] swapcached 210411520 [ 731.168107][T16619] pgpgin 511645 [ 731.171737][T16619] pgpgout 511643 [ 731.176366][T16619] pgfault 616982 [ 731.179999][T16619] pgmajfault 1900 [ 731.185051][T16619] inactive_anon 4096 [ 731.188984][T16619] active_anon 4096 [ 731.192772][T16619] inactive_file 0 [ 731.197475][T16619] active_file 0 [ 731.200966][T16619] unevictable 0 [ 731.205421][T16619] hierarchical_memory_limit 314572800 [ 731.206999][T16633] syzkaller1: entered promiscuous mode [ 731.210884][T16619] hierarchical_memsw_limit 9223372036854771712 [ 731.210899][T16619] total_cache 0 [ 731.217120][T16633] syzkaller1: entered allmulticast mode [ 731.222842][T16619] total_rss 0 [ 731.222934][T16619] total_shmem 0 [ 731.240493][T16619] total_mapped_file 0 [ 731.245383][T16619] total_dirty 0 [ 731.248963][T16619] total_writeback 0 [ 731.252793][T16619] total_workingset_refault_anon 2888 [ 731.258192][T16619] total_workingset_refault_file 7619 [ 731.263589][T16619] total_swap 16658432 [ 731.267704][T16619] total_swapcached 210411520 [ 731.272527][T16619] total_pgpgin 511645 [ 731.277461][T16619] total_pgpgout 511643 [ 731.281615][T16619] total_pgfault 616982 [ 731.286520][T16619] total_pgmajfault 1900 [ 731.290812][T16619] total_inactive_anon 4096 [ 731.296077][T16619] total_active_anon 4096 [ 731.300407][T16619] total_inactive_file 0 [ 731.305387][T16619] total_active_file 0 [ 731.309410][T16619] total_unevictable 0 [ 731.314175][T16619] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4306,pid=16606,uid=0 [ 731.329644][T16619] Memory cgroup out of memory: Killed process 16606 (syz.0.4306) total-vm:86264kB, anon-rss:1236kB, file-rss:26128kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 731.575339][T16637] loop6: detected capacity change from 0 to 1024 [ 731.589898][T16637] EXT4-fs: Ignoring removed bh option [ 731.733322][T16637] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 731.883793][T16637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.104187][ T28] audit: type=1400 audit(1784454253.494:1222): avc: denied { write } for pid=16636 comm="syz.6.4314" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 733.184952][T16666] loop7: detected capacity change from 0 to 512 [ 733.196446][T16666] EXT4-fs: Ignoring removed bh option [ 733.661088][T16666] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 734.214752][T16666] EXT4-fs (loop7): 1 truncate cleaned up [ 734.221751][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.231710][T16666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.252630][T16679] loop4: detected capacity change from 0 to 512 [ 735.270507][T16679] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4328: corrupted in-inode xattr: e_value out of bounds [ 735.581936][T16679] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 735.582235][ T28] audit: type=1400 audit(1784454256.664:1223): avc: denied { write } for pid=16665 comm="syz.7.4324" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 735.591439][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 735.591462][ C1] EXT4-fs (loop4): initial error at time 1784454256: ext4_iget_extra_inode:5180: inode 15 [ 735.591496][ C1] EXT4-fs (loop4): last error at time 1784454256: ext4_iget_extra_inode:5180: inode 15 [ 736.278127][ T28] audit: type=1400 audit(1784454256.664:1224): avc: denied { map } for pid=16665 comm="syz.7.4324" path="/669/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 736.439520][ T28] audit: type=1400 audit(1784454256.664:1225): avc: denied { execute } for pid=16665 comm="syz.7.4324" path="/669/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 736.464092][T16679] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4328: couldn't read orphan inode 15 (err -117) [ 736.465895][ T8196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.477313][T16679] loop4: lost filesystem error report for type 5 error -117 [ 736.496095][T16679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.518127][ T28] audit: type=1400 audit(1784454257.884:1226): avc: denied { mounton } for pid=16689 comm="syz.0.4331" path="/proc/2183/task" dev="proc" ino=43579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 736.711881][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.803021][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.811717][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.821130][T16699] loop0: detected capacity change from 0 to 128 [ 737.151099][T16706] syz.6.4333 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 737.166445][T16706] CPU: 1 UID: 0 PID: 16706 Comm: syz.6.4333 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 737.166496][T16706] Tainted: [W]=WARN [ 737.166566][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.166592][T16706] Call Trace: [ 737.166599][T16706] [ 737.166609][T16706] __dump_stack+0x1d/0x30 [ 737.166634][T16706] dump_stack_lvl+0x95/0xd0 [ 737.166655][T16706] dump_stack+0x15/0x1b [ 737.166717][T16706] dump_header+0x80/0x240 [ 737.166740][T16706] oom_kill_process+0x295/0x350 [ 737.166820][T16706] out_of_memory+0x981/0xbc0 [ 737.166906][T16706] try_charge_memcg+0x621/0xa00 [ 737.166992][T16706] ? __rcu_read_unlock+0x4e/0x70 [ 737.167111][T16706] __memcg_kmem_charge_page+0x199/0x3a0 [ 737.167235][T16706] __alloc_frozen_pages_noprof+0x18a/0x350 [ 737.167273][T16706] alloc_pages_mpol+0xa9/0x1d0 [ 737.167304][T16706] alloc_pages_noprof+0x8f/0x140 [ 737.167410][T16706] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 737.167447][T16706] __kvmalloc_node_noprof+0x3a0/0x590 [ 737.167475][T16706] ? futex_hash_allocate+0x192/0x920 [ 737.167538][T16706] ? futex_hash_allocate+0x192/0x920 [ 737.167566][T16706] ? futex_hash_allocate+0x192/0x920 [ 737.167589][T16706] futex_hash_allocate+0x192/0x920 [ 737.167611][T16706] ? cap_task_prctl+0x13f/0x6b0 [ 737.167699][T16706] futex_hash_prctl+0xd8/0xf0 [ 737.167721][T16706] __se_sys_prctl+0x4f4/0x13b0 [ 737.167756][T16706] __x64_sys_prctl+0x67/0x80 [ 737.167817][T16706] x64_sys_call+0x2533/0x3020 [ 737.167842][T16706] do_syscall_64+0x136/0x3c0 [ 737.167935][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.167958][T16706] RIP: 0033:0x7faae234de99 [ 737.167990][T16706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.168011][T16706] RSP: 002b:00007faae0942028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 737.168039][T16706] RAX: ffffffffffffffda RBX: 00007faae25d6270 RCX: 00007faae234de99 [ 737.168067][T16706] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 737.168081][T16706] RBP: 00007faae23e3eaf R08: 0000000000000000 R09: 0000000000000000 [ 737.168095][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.168109][T16706] R13: 00007faae25d6308 R14: 00007faae25d6270 R15: 00007ffe77ac80e8 [ 737.168128][T16706] [ 737.168135][T16706] memory: usage 307200kB, limit 307200kB, failcnt 6574 [ 737.430434][T16706] memory+swap: usage 311560kB, limit 9007199254740988kB, failcnt 0 [ 737.439341][T16706] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 737.447690][T16706] Memory cgroup stats for /syz6: [ 737.447951][T16706] cache 0 [ 737.456735][T16706] rss 0 [ 737.459540][T16706] shmem 0 [ 737.462482][T16706] mapped_file 0 [ 737.466954][T16706] dirty 0 [ 737.469945][T16706] writeback 0 [ 737.474203][T16706] workingset_refault_anon 1610 [ 737.478974][T16706] workingset_refault_file 2934 [ 737.484786][T16706] swap 4464640 [ 737.488169][T16706] swapcached 112111616 [ 737.492448][T16706] pgpgin 267468 [ 737.496944][T16706] pgpgout 267467 [ 737.500582][T16706] pgfault 332460 [ 737.505206][T16706] pgmajfault 1014 [ 737.508839][T16706] inactive_anon 0 [ 737.512474][T16706] active_anon 4096 [ 737.517180][T16706] inactive_file 0 [ 737.520844][T16706] active_file 0 [ 737.525308][T16706] unevictable 0 [ 737.528859][T16706] hierarchical_memory_limit 314572800 [ 737.535252][T16706] hierarchical_memsw_limit 9223372036854771712 [ 737.541557][T16706] total_cache 0 [ 737.546096][T16706] total_rss 0 [ 737.549474][T16706] total_shmem 0 [ 737.552971][T16706] total_mapped_file 0 [ 737.557967][T16706] total_dirty 0 [ 737.561428][T16706] total_writeback 0 [ 737.566349][T16706] total_workingset_refault_anon 1610 [ 737.571725][T16706] total_workingset_refault_file 2934 [ 737.578102][T16706] total_swap 4464640 [ 737.582000][T16706] total_swapcached 112111616 [ 737.587684][T16706] total_pgpgin 267468 [ 737.591753][T16706] total_pgpgout 267467 [ 737.596821][T16706] total_pgfault 332460 [ 737.600950][T16706] total_pgmajfault 1014 [ 737.606103][T16706] total_inactive_anon 0 [ 737.610261][T16706] total_active_anon 4096 [ 737.615687][T16706] total_inactive_file 0 [ 737.619873][T16706] total_active_file 0 [ 737.625030][T16706] total_unevictable 0 [ 737.629059][T16706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4333,pid=16691,uid=0 [ 737.644971][T16706] Memory cgroup out of memory: Killed process 16691 (syz.6.4333) total-vm:86264kB, anon-rss:1240kB, file-rss:26080kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 737.758502][T16710] IPv6: addrconf: prefix option has invalid lifetime [ 737.801614][T16711] loop0: detected capacity change from 0 to 4096 [ 737.856496][T16711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.884135][T16719] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4341' sets config #1869440365 [ 737.884970][T16705] loop4: detected capacity change from 0 to 1024 [ 737.930637][ T28] audit: type=1400 audit(1784454259.304:1227): avc: denied { write } for pid=16708 comm="syz.0.4337" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 737.935971][T16705] EXT4-fs: Ignoring removed bh option [ 738.038982][T16705] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 738.144261][T16705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.194186][ T28] audit: type=1400 audit(1784454259.564:1228): avc: denied { write } for pid=16703 comm="syz.4.4336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 738.228280][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.261157][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.311068][T16738] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 738.394554][ T28] audit: type=1400 audit(1784454259.784:1229): avc: denied { connect } for pid=16741 comm="syz.4.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 738.481819][T16745] loop4: detected capacity change from 0 to 4096 [ 738.517118][T16734] loop8: detected capacity change from 0 to 32768 [ 738.541580][T16745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.562640][ T28] audit: type=1400 audit(1784454259.954:1230): avc: denied { write } for pid=16744 comm="syz.4.4350" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 738.595279][T16734] loop8: p1 p3 < > [ 738.636371][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.644068][T16752] loop0: detected capacity change from 0 to 512 [ 738.646588][T16754] netlink: 'syz.8.4355': attribute type 10 has an invalid length. [ 738.657109][T16755] loop7: detected capacity change from 0 to 256 [ 738.666120][T16752] EXT4-fs: Ignoring removed bh option [ 738.682207][T16752] EXT4-fs (loop0): 1 truncate cleaned up [ 738.707061][T16752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.748912][T16755] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 738.764625][T16759] loop6: detected capacity change from 0 to 128 [ 738.776937][T16755] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2048) [ 738.785796][T16755] FAT-fs (loop7): Filesystem has been set read-only [ 738.792802][T16755] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 8200) [ 738.794878][ T7709] udevd[7709]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 738.818240][ T4906] udevd[4906]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 738.828174][ T28] audit: type=1400 audit(1784454260.194:1231): avc: denied { write } for pid=16751 comm="syz.0.4353" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 738.869243][T16759] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 738.877107][ T28] audit: type=1400 audit(1784454260.194:1232): avc: denied { map } for pid=16751 comm="syz.0.4353" path="/831/file0/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 738.914775][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.924586][T16759] ext4 filesystem being mounted at /698/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 739.016118][T16772] loop0: detected capacity change from 0 to 1024 [ 739.040357][T16772] EXT4-fs: Ignoring removed bh option [ 739.047691][ T7771] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 739.092590][T16772] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 739.103735][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.144697][T16779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 739.165070][T16772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.184430][T16779] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.200202][T16779] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.4364: Freeing blocks not in datazone - block = 0, count = 16 [ 739.223011][T16779] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4364: bg 0: block 112: padding at end of block bitmap is not set [ 739.528550][ T8196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 739.627402][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.679279][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.954973][T16802] xt_hashlimit: size too large, truncated to 1048576 [ 740.137378][ T5291] tipc: Subscription rejected, illegal request [ 740.484808][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4377'. [ 740.497514][T16825] vlan2: entered allmulticast mode [ 740.502945][T16825] bridge0: port 4(vlan2) entered blocking state [ 740.511377][T16825] bridge0: port 4(vlan2) entered disabled state [ 740.519500][T16825] vlan2: entered promiscuous mode [ 740.634091][T16827] set_capacity_and_notify: 1 callbacks suppressed [ 740.634131][T16827] loop4: detected capacity change from 0 to 1024 [ 740.677411][T16827] EXT4-fs: Ignoring removed bh option [ 740.687470][T16827] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 740.707358][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 740.707395][ T28] audit: type=1400 audit(1784454262.104:1241): avc: denied { map } for pid=16835 comm="syz.7.4383" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 741.280717][T16827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.298171][ T28] audit: type=1400 audit(1784454262.694:1242): avc: denied { write } for pid=16826 comm="syz.4.4379" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 741.403841][T16828] syz.0.4380 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 741.414878][T16828] CPU: 1 UID: 0 PID: 16828 Comm: syz.0.4380 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 741.414938][T16828] Tainted: [W]=WARN [ 741.414945][T16828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.414958][T16828] Call Trace: [ 741.414965][T16828] [ 741.414973][T16828] __dump_stack+0x1d/0x30 [ 741.414999][T16828] dump_stack_lvl+0x95/0xd0 [ 741.415037][T16828] dump_stack+0x15/0x1b [ 741.415056][T16828] dump_header+0x80/0x240 [ 741.415078][T16828] oom_kill_process+0x295/0x350 [ 741.415111][T16828] out_of_memory+0x981/0xbc0 [ 741.415215][T16828] try_charge_memcg+0x621/0xa00 [ 741.415241][T16828] charge_memcg+0x6d/0x120 [ 741.415334][T16828] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 741.415420][T16828] swap_cache_alloc_folio+0x47b/0x5e0 [ 741.415453][T16828] swap_cluster_readahead+0x3d2/0x460 [ 741.415514][T16828] swapin_readahead+0xd8/0x8a0 [ 741.415542][T16828] ? _raw_spin_unlock+0x9/0x30 [ 741.415566][T16828] ? swap_put_entries_cluster+0x49c/0x4c0 [ 741.415699][T16828] ? __entry_text_end+0xf208/0x102179 [ 741.415725][T16828] ? __rcu_read_unlock+0x4e/0x70 [ 741.415751][T16828] ? swap_cache_get_folio+0x1f7/0x200 [ 741.415857][T16828] do_swap_page+0x2a2/0x1ec0 [ 741.415886][T16828] ? __css_rstat_updated+0xbb/0x280 [ 741.415914][T16828] ? __rcu_read_lock+0x36/0x50 [ 741.415956][T16828] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 741.415985][T16828] handle_mm_fault+0xb3c/0x2da0 [ 741.416030][T16828] do_user_addr_fault+0x634/0x1060 [ 741.416060][T16828] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 741.416090][T16828] ? trace_page_fault_user+0x1f/0xa0 [ 741.416133][T16828] exc_page_fault+0x62/0xa0 [ 741.416164][T16828] asm_exc_page_fault+0x26/0x30 [ 741.416235][T16828] RIP: 0033:0x7f1d1bcf17f0 [ 741.416252][T16828] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 741.416272][T16828] RSP: 002b:00007ffcf70d5468 EFLAGS: 00010246 [ 741.416290][T16828] RAX: 00000000847180b7 RBX: ffffffff847180b7 RCX: ffffffff847180b7 [ 741.416346][T16828] RDX: 00000000000000b7 RSI: ffffffff847180b7 RDI: 000000000000000e [ 741.416360][T16828] RBP: 0000000000000000 R08: 00007f1d1c0b0000 R09: 00007f1d1c0b2000 [ 741.416374][T16828] R10: 00000000847180bb R11: 000000000000000e R12: 00007f1d1c0c6038 [ 741.416388][T16828] R13: 0000000000000006 R14: ffffffff847181c5 R15: 00007f1d1cbf5720 [ 741.416402][T16828] ? ___sys_sendmsg+0x45/0x1e0 [ 741.416488][T16828] ? __sys_sendmsg+0x97/0x150 [ 741.416525][T16828] ? __sys_sendmsg+0x97/0x150 [ 741.416554][T16828] ? __sys_sendmsg+0x97/0x150 [ 741.416585][T16828] [ 741.416592][T16828] memory: usage 307200kB, limit 307200kB, failcnt 20938 [ 741.705923][T16828] memory+swap: usage 323472kB, limit 9007199254740988kB, failcnt 0 [ 741.714905][T16828] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 741.722193][T16828] Memory cgroup stats for /syz0: [ 741.722464][T16828] cache 0 [ 741.731263][T16828] rss 0 [ 741.735014][T16828] shmem 0 [ 741.738037][T16828] mapped_file 0 [ 741.741496][T16828] dirty 0 [ 741.745345][T16828] writeback 0 [ 741.748695][T16828] workingset_refault_anon 2971 [ 741.754466][T16828] workingset_refault_file 7779 [ 741.759410][T16828] swap 16662528 [ 741.762931][T16828] swapcached 215101440 [ 741.768032][T16828] pgpgin 521414 [ 741.771499][T16828] pgpgout 521413 [ 741.776066][T16828] pgfault 627922 [ 741.779662][T16828] pgmajfault 1950 [ 741.784366][T16828] inactive_anon 0 [ 741.788078][T16828] active_anon 4096 [ 741.791798][T16828] inactive_file 0 [ 741.796450][T16828] active_file 0 [ 741.800462][T16828] unevictable 0 [ 741.804877][T16828] hierarchical_memory_limit 314572800 [ 741.810297][T16828] hierarchical_memsw_limit 9223372036854771712 [ 741.817451][T16828] total_cache 0 [ 741.820920][T16828] total_rss 0 [ 741.825177][T16828] total_shmem 0 [ 741.828691][T16828] total_mapped_file 0 [ 741.832668][T16828] total_dirty 0 [ 741.837120][T16828] total_writeback 0 [ 741.841643][T16828] total_workingset_refault_anon 2971 [ 741.847938][T16828] total_workingset_refault_file 7779 [ 741.854223][T16828] total_swap 16662528 [ 741.858282][T16828] total_swapcached 215101440 [ 741.863062][T16828] total_pgpgin 521414 [ 741.868024][T16828] total_pgpgout 521413 [ 741.872102][T16828] total_pgfault 627922 [ 741.877172][T16828] total_pgmajfault 1950 [ 741.881336][T16828] total_inactive_anon 0 [ 741.886565][T16828] total_active_anon 4096 [ 741.890856][T16828] total_inactive_file 0 [ 741.895986][T16828] total_active_file 0 [ 741.899979][T16828] total_unevictable 0 [ 741.905014][T16828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4380,pid=16828,uid=0 [ 741.920978][T16828] Memory cgroup out of memory: Killed process 16828 (syz.0.4380) total-vm:86264kB, anon-rss:1236kB, file-rss:26128kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 742.128122][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.374311][T16865] loop0: detected capacity change from 0 to 128 [ 742.408061][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.439237][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.486885][T16865] syz.0.4391: attempt to access beyond end of device [ 742.486885][T16865] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 742.823074][T16917] loop7: detected capacity change from 0 to 512 [ 742.847015][T16917] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 742.876345][T16917] EXT4-fs (loop7): 1 truncate cleaned up [ 742.890800][T16917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.948269][ T28] audit: type=1400 audit(1784454264.344:1243): avc: denied { write } for pid=16916 comm="syz.7.4397" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.997476][T16924] loop8: detected capacity change from 0 to 4096 [ 743.037690][T16924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.078278][ T28] audit: type=1400 audit(1784454264.474:1244): avc: denied { write } for pid=16923 comm="syz.8.4400" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.166561][T16932] loop0: detected capacity change from 0 to 1024 [ 743.191620][T16932] EXT4-fs: Ignoring removed bh option [ 743.220026][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.225774][T16932] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 743.247684][ T8196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.274142][T16946] loop8: detected capacity change from 0 to 512 [ 743.285538][T16946] EXT4-fs: Ignoring removed orlov option [ 743.370190][T16959] loop6: detected capacity change from 0 to 128 [ 743.382654][T16946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.399161][ T28] audit: type=1400 audit(1784454264.794:1245): avc: denied { associate } for pid=16958 comm="syz.7.4404" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 743.430860][T16932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.622859][ T28] audit: type=1400 audit(1784454264.824:1246): avc: denied { write } for pid=16945 comm="syz.8.4402" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.673194][ T28] audit: type=1400 audit(1784454264.884:1247): avc: denied { write } for pid=16930 comm="syz.0.4401" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 744.663787][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.692008][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.229319][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.267240][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.092858][T17053] loop0: detected capacity change from 0 to 1024 [ 746.114918][T17053] EXT4-fs: Ignoring removed bh option [ 746.129920][T17053] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 746.171925][T17053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.228525][ T28] audit: type=1400 audit(1784454267.624:1248): avc: denied { write } for pid=17052 comm="syz.0.4417" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 746.661951][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.906821][T17088] loop4: detected capacity change from 0 to 256 [ 747.203296][T17081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.211817][T17081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.290185][T17110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.331131][T17110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.656696][T17128] loop8: detected capacity change from 0 to 1024 [ 747.680189][T17128] EXT4-fs: Ignoring removed bh option [ 747.746060][T17128] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 747.766396][ T28] audit: type=1400 audit(1784454269.154:1249): avc: denied { ioctl } for pid=17096 comm="syz.4.4432" path="socket:[44532]" dev="sockfs" ino=44532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 747.811526][T17128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.831389][ T28] audit: type=1400 audit(1784454269.224:1250): avc: denied { write } for pid=17127 comm="syz.8.4444" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.838325][T17128] dns_resolver: Unsupported server list version (0) [ 747.986006][T17140] loop7: detected capacity change from 0 to 256 [ 748.153483][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.308528][ T28] audit: type=1400 audit(1784454271.594:1251): avc: denied { transition } for pid=17158 comm="syz.8.4454" path="/467/file1" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 750.814205][ T28] audit: type=1400 audit(1784454271.594:1252): avc: denied { entrypoint } for pid=17158 comm="syz.8.4454" path="/467/file1" dev="tmpfs" ino=2419 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 750.910143][T17160] syz.0.4451 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 750.924426][T17160] CPU: 0 UID: 0 PID: 17160 Comm: syz.0.4451 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 750.924515][T17160] Tainted: [W]=WARN [ 750.924549][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 750.924564][T17160] Call Trace: [ 750.924572][T17160] [ 750.924598][T17160] __dump_stack+0x1d/0x30 [ 750.924627][T17160] dump_stack_lvl+0x95/0xd0 [ 750.924649][T17160] dump_stack+0x15/0x1b [ 750.924673][T17160] dump_header+0x80/0x240 [ 750.924721][T17160] oom_kill_process+0x295/0x350 [ 750.924760][T17160] out_of_memory+0x981/0xbc0 [ 750.924811][T17160] try_charge_memcg+0x621/0xa00 [ 750.924836][T17160] ? __rcu_read_unlock+0x4e/0x70 [ 750.924873][T17160] __memcg_kmem_charge_page+0x199/0x3a0 [ 750.924924][T17160] __alloc_frozen_pages_noprof+0x18a/0x350 [ 750.924984][T17160] alloc_pages_mpol+0xa9/0x1d0 [ 750.925064][T17160] alloc_pages_noprof+0x8f/0x140 [ 750.925095][T17160] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 750.925144][T17160] __kvmalloc_node_noprof+0x3a0/0x590 [ 750.925172][T17160] ? futex_hash_allocate+0x192/0x920 [ 750.925197][T17160] ? futex_hash_allocate+0x192/0x920 [ 750.925234][T17160] ? futex_hash_allocate+0x192/0x920 [ 750.925260][T17160] futex_hash_allocate+0x192/0x920 [ 750.925287][T17160] ? cap_task_prctl+0x13f/0x6b0 [ 750.925330][T17160] futex_hash_prctl+0xd8/0xf0 [ 750.925393][T17160] __se_sys_prctl+0x4f4/0x13b0 [ 750.925431][T17160] __x64_sys_prctl+0x67/0x80 [ 750.925501][T17160] x64_sys_call+0x2533/0x3020 [ 750.925556][T17160] do_syscall_64+0x136/0x3c0 [ 750.925586][T17160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.925613][T17160] RIP: 0033:0x7f1d1be3de99 [ 750.925633][T17160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.925658][T17160] RSP: 002b:00007f1d1a855028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 750.925743][T17160] RAX: ffffffffffffffda RBX: 00007f1d1c0c6180 RCX: 00007f1d1be3de99 [ 750.925759][T17160] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 750.925840][T17160] RBP: 00007f1d1bed3eaf R08: 0000000000000000 R09: 0000000000000000 [ 750.925854][T17160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.925871][T17160] R13: 00007f1d1c0c6218 R14: 00007f1d1c0c6180 R15: 00007ffcf70d53d8 [ 750.925895][T17160] [ 750.925961][T17160] memory: usage 307200kB, limit 307200kB, failcnt 21313 [ 751.165192][T17160] memory+swap: usage 319336kB, limit 9007199254740988kB, failcnt 0 [ 751.173123][T17160] kmem: usage 306932kB, limit 9007199254740988kB, failcnt 0 [ 751.180476][T17160] Memory cgroup stats for /syz0: [ 751.180917][T17160] cache 0 [ 751.188903][T17160] rss 0 [ 751.191672][T17160] shmem 0 [ 751.194647][T17160] mapped_file 0 [ 751.198239][T17160] dirty 0 [ 751.201213][T17160] writeback 0 [ 751.204533][T17160] workingset_refault_anon 3002 [ 751.209305][T17160] workingset_refault_file 7907 [ 751.214094][T17160] swap 12427264 [ 751.217571][T17160] swapcached 215396352 [ 751.221805][T17160] pgpgin 529448 [ 751.225315][T17160] pgpgout 529438 [ 751.228876][T17160] pgfault 636667 [ 751.232430][T17160] pgmajfault 1971 [ 751.236125][T17160] inactive_anon 12288 [ 751.240116][T17160] active_anon 28672 [ 751.243974][T17160] inactive_file 0 [ 751.247612][T17160] active_file 0 [ 751.251080][T17160] unevictable 0 [ 751.254603][T17160] hierarchical_memory_limit 314572800 [ 751.260018][T17160] hierarchical_memsw_limit 9223372036854771712 [ 751.266241][T17160] total_cache 0 [ 751.269726][T17160] total_rss 0 [ 751.273013][T17160] total_shmem 0 [ 751.276555][T17160] total_mapped_file 0 [ 751.280569][T17160] total_dirty 0 [ 751.284114][T17160] total_writeback 0 [ 751.288174][T17160] total_workingset_refault_anon 3002 [ 751.293601][T17160] total_workingset_refault_file 7907 [ 751.298906][T17160] total_swap 12427264 [ 751.303033][T17160] total_swapcached 215396352 [ 751.307653][T17160] total_pgpgin 529448 [ 751.311643][T17160] total_pgpgout 529438 [ 751.315745][T17160] total_pgfault 636667 [ 751.319848][T17160] total_pgmajfault 1971 [ 751.324036][T17160] total_inactive_anon 12288 [ 751.328550][T17160] total_active_anon 28672 [ 751.332947][T17160] total_inactive_file 0 [ 751.337278][T17160] total_active_file 0 [ 751.341262][T17160] total_unevictable 0 [ 751.345267][T17160] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4451,pid=17145,uid=0 [ 751.360071][T17160] Memory cgroup out of memory: Killed process 17145 (syz.0.4451) total-vm:82028kB, anon-rss:1236kB, file-rss:22032kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 751.424111][T17165] loop4: detected capacity change from 0 to 128 [ 751.439443][ T28] audit: type=1400 audit(1784454271.594:1253): avc: denied { noatsecure } for pid=17158 comm="syz.8.4454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 751.482994][T17165] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 751.521539][T17165] ext4 filesystem being mounted at /852/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 751.636956][T17170] netlink: 'syz.8.4458': attribute type 1 has an invalid length. [ 751.669274][ T28] audit: type=1400 audit(1784454273.064:1254): avc: denied { write } for pid=17164 comm="syz.4.4456" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.700668][T17165] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 34: comm syz.4.4456: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 751.704127][ T28] audit: type=1400 audit(1784454273.094:1255): avc: denied { write } for pid=17164 comm="syz.4.4456" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.746257][T17165] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 751.760687][ T28] audit: type=1400 audit(1784454273.094:1256): avc: denied { write } for pid=17164 comm="syz.4.4456" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.848037][T17165] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 34: comm syz.4.4456: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 751.867667][ T28] audit: type=1400 audit(1784454273.094:1257): avc: denied { write } for pid=17164 comm="syz.4.4456" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.891106][ T28] audit: type=1400 audit(1784454273.244:1258): avc: denied { write } for pid=17164 comm="syz.4.4456" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.914177][T17165] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 751.923549][ T28] audit: type=1400 audit(1784454273.314:1259): avc: denied { mount } for pid=17168 comm="syz.6.4457" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 751.988997][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.044749][T17187] loop6: detected capacity change from 0 to 512 [ 752.077530][T17187] EXT4-fs (loop6): 1 truncate cleaned up [ 752.103533][T17187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.145097][T17187] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4464: bg 0: block 465: padding at end of block bitmap is not set [ 752.146179][ T28] audit: type=1400 audit(1784454273.524:1260): avc: denied { open } for pid=17191 comm="syz.4.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 752.181933][T17187] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 752.206289][T17187] EXT4-fs (loop6): This should not happen!! Data will be lost [ 752.206289][T17187] [ 752.269944][T17187] EXT4-fs (loop6): Total free blocks count 0 [ 752.275984][T17187] EXT4-fs (loop6): Free/Dirty block details [ 752.281915][T17187] EXT4-fs (loop6): free_blocks=0 [ 752.286862][T17187] EXT4-fs (loop6): dirty_blocks=4 [ 752.291899][T17187] EXT4-fs (loop6): Block reservation details [ 752.297891][T17187] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 752.305290][ T28] audit: type=1400 audit(1784454273.524:1261): avc: denied { kernel } for pid=17191 comm="syz.4.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 752.324819][ T28] audit: type=1400 audit(1784454273.534:1262): avc: denied { write } for pid=17186 comm="syz.6.4464" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.368857][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.378396][ T7771] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 752.390367][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.420703][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.566203][T17210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.580766][T17210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.362492][T17212] syz.7.4469 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 753.376651][T17212] CPU: 0 UID: 0 PID: 17212 Comm: syz.7.4469 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 753.376768][T17212] Tainted: [W]=WARN [ 753.376853][T17212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 753.376868][T17212] Call Trace: [ 753.376877][T17212] [ 753.376887][T17212] __dump_stack+0x1d/0x30 [ 753.376916][T17212] dump_stack_lvl+0x95/0xd0 [ 753.376943][T17212] dump_stack+0x15/0x1b [ 753.376974][T17212] dump_header+0x80/0x240 [ 753.377059][T17212] oom_kill_process+0x295/0x350 [ 753.377097][T17212] out_of_memory+0x981/0xbc0 [ 753.377143][T17212] try_charge_memcg+0x621/0xa00 [ 753.377168][T17212] ? __rcu_read_unlock+0x4e/0x70 [ 753.377206][T17212] __memcg_kmem_charge_page+0x199/0x3a0 [ 753.377314][T17212] __alloc_frozen_pages_noprof+0x18a/0x350 [ 753.377387][T17212] alloc_pages_mpol+0xa9/0x1d0 [ 753.377422][T17212] alloc_pages_noprof+0x8f/0x140 [ 753.377458][T17212] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 753.377534][T17212] __kvmalloc_node_noprof+0x3a0/0x590 [ 753.377646][T17212] ? futex_hash_allocate+0x192/0x920 [ 753.377672][T17212] ? futex_hash_allocate+0x192/0x920 [ 753.377697][T17212] ? futex_hash_allocate+0x192/0x920 [ 753.377800][T17212] futex_hash_allocate+0x192/0x920 [ 753.377827][T17212] ? cap_task_prctl+0x13f/0x6b0 [ 753.377868][T17212] futex_hash_prctl+0xd8/0xf0 [ 753.377893][T17212] __se_sys_prctl+0x4f4/0x13b0 [ 753.377969][T17212] __x64_sys_prctl+0x67/0x80 [ 753.378000][T17212] x64_sys_call+0x2533/0x3020 [ 753.378100][T17212] do_syscall_64+0x136/0x3c0 [ 753.378128][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.378210][T17212] RIP: 0033:0x7f6c4036de99 [ 753.378231][T17212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.378275][T17212] RSP: 002b:00007f6c3e962028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 753.378301][T17212] RAX: ffffffffffffffda RBX: 00007f6c405f6270 RCX: 00007f6c4036de99 [ 753.378318][T17212] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 753.378434][T17212] RBP: 00007f6c40403eaf R08: 0000000000000000 R09: 0000000000000000 [ 753.378450][T17212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.378465][T17212] R13: 00007f6c405f6308 R14: 00007f6c405f6270 R15: 00007ffd9819d0c8 [ 753.378489][T17212] [ 753.378499][T17212] memory: usage 307200kB, limit 307200kB, failcnt 9608 [ 753.617489][T17212] memory+swap: usage 319440kB, limit 9007199254740988kB, failcnt 0 [ 753.625466][T17212] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 753.632879][T17212] Memory cgroup stats for /syz7: [ 753.633200][T17212] cache 0 [ 753.641108][T17212] rss 8192 [ 753.644175][T17212] shmem 0 [ 753.647183][T17212] mapped_file 0 [ 753.650661][T17212] dirty 0 [ 753.653633][T17212] writeback 0 [ 753.656934][T17212] workingset_refault_anon 1796 [ 753.661795][T17212] workingset_refault_file 2318 [ 753.666618][T17212] swap 12660736 [ 753.670122][T17212] swapcached 80297984 [ 753.674141][T17212] pgpgin 282805 [ 753.677614][T17212] pgpgout 282798 [ 753.681174][T17212] pgfault 337477 [ 753.684853][T17212] pgmajfault 1029 [ 753.688549][T17212] inactive_anon 28672 [ 753.692653][T17212] active_anon 0 [ 753.696140][T17212] inactive_file 0 [ 753.699923][T17212] active_file 0 [ 753.703504][T17212] unevictable 0 [ 753.706986][T17212] hierarchical_memory_limit 314572800 [ 753.712362][T17212] hierarchical_memsw_limit 9223372036854771712 [ 753.718546][T17212] total_cache 0 [ 753.722019][T17212] total_rss 8192 [ 753.725590][T17212] total_shmem 0 [ 753.729084][T17212] total_mapped_file 0 [ 753.733173][T17212] total_dirty 0 [ 753.736707][T17212] total_writeback 0 [ 753.740560][T17212] total_workingset_refault_anon 1796 [ 753.745887][T17212] total_workingset_refault_file 2318 [ 753.751186][T17212] total_swap 12660736 [ 753.755218][T17212] total_swapcached 80297984 [ 753.759729][T17212] total_pgpgin 282805 [ 753.763811][T17212] total_pgpgout 282798 [ 753.767911][T17212] total_pgfault 337477 [ 753.772014][T17212] total_pgmajfault 1029 [ 753.776206][T17212] total_inactive_anon 28672 [ 753.780820][T17212] total_active_anon 0 [ 753.784838][T17212] total_inactive_file 0 [ 753.789013][T17212] total_active_file 0 [ 753.793008][T17212] total_unevictable 0 [ 753.797060][T17212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4469,pid=17201,uid=0 [ 753.811864][T17212] Memory cgroup out of memory: Killed process 17201 (syz.7.4469) total-vm:86264kB, anon-rss:1236kB, file-rss:26128kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 755.355128][T17238] netlink: 'syz.6.4479': attribute type 26 has an invalid length. [ 755.473204][T17240] syz.7.4477 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 755.473298][T17240] CPU: 0 UID: 0 PID: 17240 Comm: syz.7.4477 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 755.473352][T17240] Tainted: [W]=WARN [ 755.473361][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.473376][T17240] Call Trace: [ 755.473385][T17240] [ 755.473396][T17240] __dump_stack+0x1d/0x30 [ 755.473424][T17240] dump_stack_lvl+0x95/0xd0 [ 755.473451][T17240] dump_stack+0x15/0x1b [ 755.473524][T17240] dump_header+0x80/0x240 [ 755.473630][T17240] oom_kill_process+0x295/0x350 [ 755.473670][T17240] out_of_memory+0x981/0xbc0 [ 755.473758][T17240] try_charge_memcg+0x621/0xa00 [ 755.473780][T17240] ? __rcu_read_unlock+0x4e/0x70 [ 755.473866][T17240] __memcg_kmem_charge_page+0x199/0x3a0 [ 755.473910][T17240] __alloc_frozen_pages_noprof+0x18a/0x350 [ 755.474002][T17240] alloc_pages_mpol+0xa9/0x1d0 [ 755.474040][T17240] alloc_pages_noprof+0x8f/0x140 [ 755.474153][T17240] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 755.474194][T17240] __kvmalloc_node_noprof+0x3a0/0x590 [ 755.474226][T17240] ? futex_hash_allocate+0x192/0x920 [ 755.474273][T17240] ? futex_hash_allocate+0x192/0x920 [ 755.474298][T17240] ? futex_hash_allocate+0x192/0x920 [ 755.474326][T17240] futex_hash_allocate+0x192/0x920 [ 755.474394][T17240] ? cap_task_prctl+0x13f/0x6b0 [ 755.474515][T17240] futex_hash_prctl+0xd8/0xf0 [ 755.474542][T17240] __se_sys_prctl+0x4f4/0x13b0 [ 755.474576][T17240] __x64_sys_prctl+0x67/0x80 [ 755.474661][T17240] x64_sys_call+0x2533/0x3020 [ 755.474691][T17240] do_syscall_64+0x136/0x3c0 [ 755.474720][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.474824][T17240] RIP: 0033:0x7f6c4036de99 [ 755.474845][T17240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.474869][T17240] RSP: 002b:00007f6c3e962028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 755.474902][T17240] RAX: ffffffffffffffda RBX: 00007f6c405f6270 RCX: 00007f6c4036de99 [ 755.474922][T17240] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 755.475010][T17240] RBP: 00007f6c40403eaf R08: 0000000000000000 R09: 0000000000000000 [ 755.475072][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.475088][T17240] R13: 00007f6c405f6308 R14: 00007f6c405f6270 R15: 00007ffd9819d0c8 [ 755.475111][T17240] [ 755.475120][T17240] memory: usage 307200kB, limit 307200kB, failcnt 9674 [ 755.475137][T17240] memory+swap: usage 319532kB, limit 9007199254740988kB, failcnt 0 [ 755.475153][T17240] kmem: usage 306952kB, limit 9007199254740988kB, failcnt 0 [ 755.475169][T17240] Memory cgroup stats for /syz7: [ 755.475504][T17240] cache 0 [ 755.475514][T17240] rss 4096 [ 755.475522][T17240] shmem 0 [ 755.475529][T17240] mapped_file 0 [ 755.475537][T17240] dirty 0 [ 755.475546][T17240] writeback 0 [ 755.475557][T17240] workingset_refault_anon 1849 [ 755.475567][T17240] workingset_refault_file 2318 [ 755.475649][T17240] swap 12627968 [ 755.475658][T17240] swapcached 80654336 [ 755.475668][T17240] pgpgin 285805 [ 755.475678][T17240] pgpgout 285791 [ 755.475687][T17240] pgfault 340585 [ 755.475696][T17240] pgmajfault 1051 [ 755.475705][T17240] inactive_anon 45056 [ 755.475715][T17240] active_anon 8192 [ 755.475725][T17240] inactive_file 0 [ 755.475734][T17240] active_file 0 [ 755.475807][T17240] unevictable 0 [ 755.475817][T17240] hierarchical_memory_limit 314572800 [ 755.475828][T17240] hierarchical_memsw_limit 9223372036854771712 [ 755.475883][T17240] total_cache 0 [ 755.475892][T17240] total_rss 4096 [ 755.475902][T17240] total_shmem 0 [ 755.475911][T17240] total_mapped_file 0 [ 755.475921][T17240] total_dirty 0 [ 755.475930][T17240] total_writeback 0 [ 755.475939][T17240] total_workingset_refault_anon 1849 [ 755.475950][T17240] total_workingset_refault_file 2318 [ 755.475960][T17240] total_swap 12627968 [ 755.475970][T17240] total_swapcached 80654336 [ 755.475980][T17240] total_pgpgin 285805 [ 755.476021][T17240] total_pgpgout 285791 [ 755.476031][T17240] total_pgfault 340585 [ 755.476040][T17240] total_pgmajfault 1051 [ 755.476051][T17240] total_inactive_anon 45056 [ 755.476061][T17240] total_active_anon 8192 [ 755.476071][T17240] total_inactive_file 0 [ 755.476081][T17240] total_active_file 0 [ 755.476091][T17240] total_unevictable 0 [ 755.476101][T17240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4477,pid=17231,uid=0 [ 755.476213][T17240] Memory cgroup out of memory: Killed process 17231 (syz.7.4477) total-vm:86264kB, anon-rss:1240kB, file-rss:26132kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 756.394879][T17264] loop4: detected capacity change from 0 to 512 [ 756.411869][T17264] EXT4-fs: Ignoring removed bh option [ 756.433427][T17264] EXT4-fs (loop4): 1 truncate cleaned up [ 756.508543][T17264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.536138][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 756.536156][ T28] audit: type=1400 audit(1784454277.934:1266): avc: denied { write } for pid=17263 comm="syz.4.4490" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 756.820156][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.840042][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.948732][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.089407][T17280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4494'. [ 757.248391][T17288] loop6: detected capacity change from 0 to 512 [ 757.283496][T17288] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 757.309409][T17288] EXT4-fs (loop6): 1 truncate cleaned up [ 757.320801][T17288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.420691][ T28] audit: type=1400 audit(1784454278.744:1267): avc: denied { write } for pid=17286 comm="syz.6.4497" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.480664][T17292] loop4: detected capacity change from 0 to 4096 [ 757.492874][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.592217][T17292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.614990][ T28] audit: type=1400 audit(1784454279.004:1268): avc: denied { write } for pid=17291 comm="syz.4.4498" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.701753][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.816454][T17309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17309 comm=syz.6.4505 [ 757.844756][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4505'. [ 757.899201][T17313] loop6: detected capacity change from 0 to 2048 [ 757.916441][T17313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.932055][T17313] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.4507: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 757.963017][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.994226][ T28] audit: type=1400 audit(1784454279.394:1269): avc: denied { tracepoint } for pid=17316 comm="syz.6.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 758.035624][T17284] syz.7.4496 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 758.046787][T17284] CPU: 0 UID: 0 PID: 17284 Comm: syz.7.4496 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 758.046865][T17284] Tainted: [W]=WARN [ 758.046916][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.046930][T17284] Call Trace: [ 758.046946][T17284] [ 758.046956][T17284] __dump_stack+0x1d/0x30 [ 758.046981][T17284] dump_stack_lvl+0x95/0xd0 [ 758.047004][T17284] dump_stack+0x15/0x1b [ 758.047079][T17284] dump_header+0x80/0x240 [ 758.047104][T17284] oom_kill_process+0x295/0x350 [ 758.047137][T17284] out_of_memory+0x981/0xbc0 [ 758.047172][T17284] try_charge_memcg+0x621/0xa00 [ 758.047269][T17284] charge_memcg+0x6d/0x120 [ 758.047306][T17284] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 758.047481][T17284] swap_cache_alloc_folio+0x47b/0x5e0 [ 758.047589][T17284] swap_cluster_readahead+0x3d2/0x460 [ 758.047627][T17284] swapin_readahead+0xd8/0x8a0 [ 758.047659][T17284] ? _raw_spin_unlock+0x9/0x30 [ 758.047728][T17284] ? swap_put_entries_cluster+0x49c/0x4c0 [ 758.047761][T17284] ? __entry_text_end+0xf208/0x102179 [ 758.047788][T17284] ? __rcu_read_unlock+0x4e/0x70 [ 758.047818][T17284] ? swap_cache_get_folio+0x1f7/0x200 [ 758.047876][T17284] do_swap_page+0x2a2/0x1ec0 [ 758.047947][T17284] ? __css_rstat_updated+0xbb/0x280 [ 758.048044][T17284] ? __rcu_read_lock+0x36/0x50 [ 758.048087][T17284] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 758.048118][T17284] handle_mm_fault+0xb3c/0x2da0 [ 758.048160][T17284] do_user_addr_fault+0x634/0x1060 [ 758.048207][T17284] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 758.048238][T17284] ? trace_page_fault_user+0x1f/0xa0 [ 758.048411][T17284] exc_page_fault+0x62/0xa0 [ 758.048442][T17284] asm_exc_page_fault+0x26/0x30 [ 758.048492][T17284] RIP: 0033:0x7f6c40234750 [ 758.048584][T17284] Code: 31 c0 e8 d3 ec fe ff 48 8d 35 25 f0 1c 00 48 8b 94 24 c8 03 00 00 48 8d 3d a4 01 1d 00 31 c0 e8 b6 ec fe ff 66 0f 1f 44 00 00 <0f> b6 05 8e 0f ef 00 84 c0 74 0b 0f b6 05 71 0f ef 00 84 c0 74 0a [ 758.048607][T17284] RSP: 002b:00007ffd9819d228 EFLAGS: 00010202 [ 758.048627][T17284] RAX: 00000000000b90e0 RBX: 00007f6c405f5fa0 RCX: 00000000000b8d08 [ 758.048642][T17284] RDX: 00000000000003d8 RSI: 00007ffd9819d210 RDI: 0000000000000001 [ 758.048716][T17284] RBP: 00007f6c405f7da0 R08: 00007f6c405f5fa0 R09: 3fffffffffffffff [ 758.048734][T17284] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000b90d6 [ 758.048751][T17284] R13: 00007f6c405f609c R14: 00000000000b8f0e R15: 00007ffd9819d330 [ 758.048774][T17284] [ 758.048783][T17284] memory: usage 307200kB, limit 307200kB, failcnt 10058 [ 758.297141][T17284] memory+swap: usage 106784kB, limit 9007199254740988kB, failcnt 0 [ 758.305097][T17284] kmem: usage 99124kB, limit 9007199254740988kB, failcnt 0 [ 758.312318][T17284] Memory cgroup stats for /syz7: [ 758.312634][T17284] cache 0 [ 758.320774][T17284] rss 4096 [ 758.323864][T17284] shmem 0 [ 758.326817][T17284] mapped_file 0 [ 758.330396][T17284] dirty 0 [ 758.333638][T17284] writeback 4096 [ 758.337203][T17284] workingset_refault_anon 1944 [ 758.342033][T17284] workingset_refault_file 2345 [ 758.347051][T17284] swap 12668928 [ 758.350589][T17284] swapcached 81145856 [ 758.354625][T17284] pgpgin 289016 [ 758.358188][T17284] pgpgout 289014 [ 758.361809][T17284] pgfault 344125 [ 758.365495][T17284] pgmajfault 1120 [ 758.369147][T17284] inactive_anon 0 [ 758.372816][T17284] active_anon 4096 [ 758.376667][T17284] inactive_file 0 [ 758.380493][T17284] active_file 0 [ 758.384072][T17284] unevictable 0 [ 758.387598][T17284] hierarchical_memory_limit 314572800 [ 758.393079][T17284] hierarchical_memsw_limit 9223372036854771712 [ 758.399384][T17284] total_cache 0 [ 758.402954][T17284] total_rss 4096 [ 758.406544][T17284] total_shmem 0 [ 758.410093][T17284] total_mapped_file 0 [ 758.414124][T17284] total_dirty 0 [ 758.417594][T17284] total_writeback 4096 [ 758.421678][T17284] total_workingset_refault_anon 1944 [ 758.427014][T17284] total_workingset_refault_file 2345 [ 758.432339][T17284] total_swap 12668928 [ 758.436384][T17284] total_swapcached 81145856 [ 758.440911][T17284] total_pgpgin 289016 [ 758.444939][T17284] total_pgpgout 289014 [ 758.449030][T17284] total_pgfault 344125 [ 758.453210][T17284] total_pgmajfault 1120 [ 758.457559][T17284] total_inactive_anon 0 [ 758.461750][T17284] total_active_anon 4096 [ 758.466081][T17284] total_inactive_file 0 [ 758.470248][T17284] total_active_file 0 [ 758.474288][T17284] total_unevictable 0 [ 758.478295][T17284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4496,pid=17284,uid=0 [ 758.493100][T17284] Memory cgroup out of memory: Killed process 17284 (syz.7.4496) total-vm:82028kB, anon-rss:1240kB, file-rss:22036kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 758.634373][T17324] loop8: detected capacity change from 0 to 512 [ 758.646248][T17324] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 758.668526][T17324] EXT4-fs (loop8): 1 truncate cleaned up [ 758.701641][T17324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.816533][T17327] loop4: detected capacity change from 0 to 512 [ 758.918246][ T28] audit: type=1400 audit(1784454280.314:1270): avc: denied { bind } for pid=17329 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 758.956574][T17327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.104334][ T28] audit: type=1400 audit(1784454280.384:1271): avc: denied { write } for pid=17323 comm="syz.8.4511" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.215653][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.241888][ T28] audit: type=1400 audit(1784454280.494:1272): avc: denied { write } for pid=17326 comm="syz.4.4513" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.284412][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.294043][ T28] audit: type=1400 audit(1784454280.524:1273): avc: denied { write } for pid=17326 comm="syz.4.4513" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.657888][T17338] loop8: detected capacity change from 0 to 512 [ 759.797673][T17338] EXT4-fs: Ignoring removed bh option [ 759.806268][T17338] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 760.627765][T17338] EXT4-fs (loop8): 1 truncate cleaned up [ 760.660114][T17338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.712499][T17356] loop0: detected capacity change from 0 to 512 [ 760.754534][ T28] audit: type=1400 audit(1784454282.144:1274): avc: denied { watch_reads } for pid=17337 comm="syz.8.4516" path="/473/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 760.809727][T17356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.851022][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.880479][T17356] ext4 filesystem being mounted at /864/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.896385][ T28] audit: type=1400 audit(1784454282.264:1275): avc: denied { ioctl } for pid=17361 comm="syz.6.4522" path="socket:[45259]" dev="sockfs" ino=45259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 761.629990][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.423666][T17373] loop4: detected capacity change from 0 to 1024 [ 762.442219][T17373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.471215][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 762.471232][ T28] audit: type=1400 audit(1784454283.864:1277): avc: denied { cpu } for pid=17372 comm="syz.0.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 762.500589][ T28] audit: type=1400 audit(1784454283.894:1278): avc: denied { write } for pid=17371 comm="syz.4.4526" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 762.509035][T17373] EXT4-fs (loop4): shut down requested (0) [ 762.556004][T17378] loop8: detected capacity change from 0 to 4096 [ 762.584115][T17378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.631099][ T28] audit: type=1400 audit(1784454284.024:1279): avc: denied { write } for pid=17376 comm="syz.8.4527" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 762.898659][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.123650][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.304072][T17394] loop0: detected capacity change from 0 to 512 [ 763.444431][T17394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.464076][ T28] audit: type=1400 audit(1784454284.864:1280): avc: denied { write } for pid=17393 comm="syz.0.4534" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 763.503972][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.017100][T17417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.040733][T17417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.082727][T17426] loop0: detected capacity change from 0 to 128 [ 765.112727][T17426] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 765.271300][T17426] ext4 filesystem being mounted at /869/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 765.323533][ T5325] Bluetooth: hci0: Frame reassembly failed (-84) [ 765.351861][ T28] audit: type=1400 audit(1784454286.744:1281): avc: denied { write } for pid=17425 comm="syz.0.4542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 765.375942][ T28] audit: type=1400 audit(1784454286.744:1282): avc: denied { create } for pid=17425 comm="syz.0.4542" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 765.420638][ T28] audit: type=1400 audit(1784454286.744:1283): avc: denied { write } for pid=17425 comm="syz.0.4542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 765.492832][ T28] audit: type=1400 audit(1784454286.744:1284): avc: denied { write } for pid=17425 comm="syz.0.4542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 765.838185][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 765.874482][ T28] audit: type=1400 audit(1784454286.744:1285): avc: denied { write } for pid=17425 comm="syz.0.4542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 765.897630][ T28] audit: type=1400 audit(1784454286.744:1286): avc: denied { write } for pid=17425 comm="syz.0.4542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 765.980711][T17439] syz.6.4543 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 765.995100][T17439] CPU: 0 UID: 0 PID: 17439 Comm: syz.6.4543 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 765.995143][T17439] Tainted: [W]=WARN [ 765.995151][T17439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 765.995201][T17439] Call Trace: [ 765.995211][T17439] [ 765.995222][T17439] __dump_stack+0x1d/0x30 [ 765.995286][T17439] dump_stack_lvl+0x95/0xd0 [ 765.995309][T17439] dump_stack+0x15/0x1b [ 765.995329][T17439] dump_header+0x80/0x240 [ 765.995404][T17439] oom_kill_process+0x295/0x350 [ 765.995446][T17439] out_of_memory+0x981/0xbc0 [ 765.995491][T17439] try_charge_memcg+0x621/0xa00 [ 765.995512][T17439] ? __rcu_read_unlock+0x4e/0x70 [ 765.995577][T17439] __memcg_kmem_charge_page+0x199/0x3a0 [ 765.995616][T17439] __alloc_frozen_pages_noprof+0x18a/0x350 [ 765.995652][T17439] alloc_pages_mpol+0xa9/0x1d0 [ 765.995718][T17439] alloc_pages_noprof+0x8f/0x140 [ 765.995754][T17439] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 765.995847][T17439] __kvmalloc_node_noprof+0x3a0/0x590 [ 765.995881][T17439] ? futex_hash_allocate+0x192/0x920 [ 765.995905][T17439] ? futex_hash_allocate+0x192/0x920 [ 765.995997][T17439] ? futex_hash_allocate+0x192/0x920 [ 765.996021][T17439] futex_hash_allocate+0x192/0x920 [ 765.996045][T17439] ? cap_task_prctl+0x13f/0x6b0 [ 765.996154][T17439] futex_hash_prctl+0xd8/0xf0 [ 765.996182][T17439] __se_sys_prctl+0x4f4/0x13b0 [ 765.996217][T17439] __x64_sys_prctl+0x67/0x80 [ 765.996323][T17439] x64_sys_call+0x2533/0x3020 [ 765.996348][T17439] do_syscall_64+0x136/0x3c0 [ 765.996434][T17439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.996462][T17439] RIP: 0033:0x7faae234de99 [ 765.996496][T17439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.996521][T17439] RSP: 002b:00007faae0942028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 765.996548][T17439] RAX: ffffffffffffffda RBX: 00007faae25d6270 RCX: 00007faae234de99 [ 765.996568][T17439] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 765.996582][T17439] RBP: 00007faae23e3eaf R08: 0000000000000000 R09: 0000000000000000 [ 765.996596][T17439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.996652][T17439] R13: 00007faae25d6308 R14: 00007faae25d6270 R15: 00007ffe77ac80e8 [ 765.996677][T17439] [ 765.996695][T17439] memory: usage 307200kB, limit 307200kB, failcnt 6757 [ 766.236610][T17439] memory+swap: usage 312068kB, limit 9007199254740988kB, failcnt 0 [ 766.244633][T17439] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 766.252033][T17439] Memory cgroup stats for /syz6: [ 766.252380][T17439] cache 0 [ 766.260368][T17439] rss 4096 [ 766.263442][T17439] shmem 0 [ 766.266389][T17439] mapped_file 0 [ 766.269857][T17439] dirty 0 [ 766.272829][T17439] writeback 0 [ 766.276152][T17439] workingset_refault_anon 1745 [ 766.280967][T17439] workingset_refault_file 3190 [ 766.285759][T17439] swap 4993024 [ 766.289183][T17439] swapcached 121282560 [ 766.293320][T17439] pgpgin 290462 [ 766.296789][T17439] pgpgout 290454 [ 766.300352][T17439] pgfault 362006 [ 766.303927][T17439] pgmajfault 1081 [ 766.307578][T17439] inactive_anon 16384 [ 766.311562][T17439] active_anon 12288 [ 766.315387][T17439] inactive_file 0 [ 766.319025][T17439] active_file 0 [ 766.322495][T17439] unevictable 0 [ 766.325982][T17439] hierarchical_memory_limit 314572800 [ 766.331367][T17439] hierarchical_memsw_limit 9223372036854771712 [ 766.337573][T17439] total_cache 0 [ 766.341076][T17439] total_rss 4096 [ 766.344687][T17439] total_shmem 0 [ 766.348167][T17439] total_mapped_file 0 [ 766.352420][T17439] total_dirty 0 [ 766.356007][T17439] total_writeback 0 [ 766.360001][T17439] total_workingset_refault_anon 1745 [ 766.365307][T17439] total_workingset_refault_file 3190 [ 766.370629][T17439] total_swap 4993024 [ 766.374629][T17439] total_swapcached 121282560 [ 766.379244][T17439] total_pgpgin 290462 [ 766.383253][T17439] total_pgpgout 290454 [ 766.387446][T17439] total_pgfault 362006 [ 766.391521][T17439] total_pgmajfault 1081 [ 766.395705][T17439] total_inactive_anon 16384 [ 766.400227][T17439] total_active_anon 12288 [ 766.404588][T17439] total_inactive_file 0 [ 766.408796][T17439] total_active_file 0 [ 766.412778][T17439] total_unevictable 0 [ 766.416813][T17439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4543,pid=17430,uid=0 [ 766.431661][T17439] Memory cgroup out of memory: Killed process 17430 (syz.6.4543) total-vm:86264kB, anon-rss:1244kB, file-rss:26144kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 767.082050][T17440] syz.0.4546 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 767.093323][T17440] CPU: 0 UID: 0 PID: 17440 Comm: syz.0.4546 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 767.093423][T17440] Tainted: [W]=WARN [ 767.093431][T17440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.093446][T17440] Call Trace: [ 767.093459][T17440] [ 767.093469][T17440] __dump_stack+0x1d/0x30 [ 767.093498][T17440] dump_stack_lvl+0x95/0xd0 [ 767.093523][T17440] dump_stack+0x15/0x1b [ 767.093563][T17440] dump_header+0x80/0x240 [ 767.093594][T17440] oom_kill_process+0x295/0x350 [ 767.093631][T17440] out_of_memory+0x981/0xbc0 [ 767.093668][T17440] try_charge_memcg+0x621/0xa00 [ 767.093778][T17440] charge_memcg+0x6d/0x120 [ 767.093819][T17440] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 767.093861][T17440] swap_cache_alloc_folio+0x47b/0x5e0 [ 767.093897][T17440] swap_cluster_readahead+0x2b1/0x460 [ 767.093964][T17440] swapin_readahead+0xd8/0x8a0 [ 767.093997][T17440] ? _raw_spin_unlock+0x9/0x30 [ 767.094024][T17440] ? swap_put_entries_cluster+0x49c/0x4c0 [ 767.094110][T17440] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 767.094169][T17440] ? __rcu_read_unlock+0x4e/0x70 [ 767.094200][T17440] ? swap_cache_get_folio+0x1f7/0x200 [ 767.094235][T17440] do_swap_page+0x2a2/0x1ec0 [ 767.094271][T17440] ? ttwu_do_activate+0x201/0x230 [ 767.094333][T17440] ? __rcu_read_lock+0x36/0x50 [ 767.094361][T17440] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 767.094415][T17440] handle_mm_fault+0xb3c/0x2da0 [ 767.094484][T17440] do_user_addr_fault+0x634/0x1060 [ 767.094515][T17440] ? irqentry_exit+0x40/0x610 [ 767.094545][T17440] ? trace_page_fault_user+0x1f/0xa0 [ 767.094596][T17440] exc_page_fault+0x62/0xa0 [ 767.094670][T17440] asm_exc_page_fault+0x26/0x30 [ 767.094692][T17440] RIP: 0033:0x7f1d1bd125f3 [ 767.094717][T17440] Code: 01 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff <41> 80 7f 60 00 0f 84 4a 02 00 00 49 83 7f 68 03 41 c6 47 60 00 0f [ 767.094792][T17440] RSP: 002b:00007ffcf70d5470 EFLAGS: 00010246 [ 767.094891][T17440] RAX: 0000000000000001 RBX: ffffffff85997486 RCX: ffffffff85997486 [ 767.094907][T17440] RDX: 0000000000001486 RSI: ffffffff85997486 RDI: 000000000000000e [ 767.094921][T17440] RBP: 0000000000000000 R08: 00007f1d1c0b0000 R09: 00007f1d1c0b2000 [ 767.094960][T17440] R10: 000000008599748a R11: 000000000000000e R12: 00007f1d1c0c6038 [ 767.094974][T17440] R13: 000000000007ffff R14: ffffffff859973c4 R15: 00007f1d1cbf5720 [ 767.094989][T17440] ? plist_check_list+0x1a4/0x1c0 [ 767.095067][T17440] ? radix_tree_preload+0x6/0x50 [ 767.095098][T17440] ? radix_tree_preload+0x6/0x50 [ 767.095126][T17440] ? radix_tree_preload+0x6/0x50 [ 767.095162][T17440] [ 767.095170][T17440] memory: usage 307200kB, limit 307200kB, failcnt 21502 [ 767.361467][T17440] memory+swap: usage 323468kB, limit 9007199254740988kB, failcnt 0 [ 767.369437][T17440] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 767.376753][T17440] Memory cgroup stats for /syz0: [ 767.377106][T17440] cache 0 [ 767.385133][T17440] rss 0 [ 767.387900][T17440] shmem 0 [ 767.390909][T17440] mapped_file 0 [ 767.394494][T17440] dirty 0 [ 767.397502][T17440] writeback 0 [ 767.400834][T17440] workingset_refault_anon 3171 [ 767.405611][T17440] workingset_refault_file 8163 [ 767.410375][T17440] swap 16658432 [ 767.413945][T17440] swapcached 224722944 [ 767.418107][T17440] pgpgin 536694 [ 767.421569][T17440] pgpgout 536692 [ 767.425244][T17440] pgfault 644795 [ 767.428790][T17440] pgmajfault 2065 [ 767.432422][T17440] inactive_anon 4096 [ 767.436344][T17440] active_anon 4096 [ 767.440150][T17440] inactive_file 0 [ 767.443888][T17440] active_file 0 [ 767.447357][T17440] unevictable 0 [ 767.450860][T17440] hierarchical_memory_limit 314572800 [ 767.456406][T17440] hierarchical_memsw_limit 9223372036854771712 [ 767.462612][T17440] total_cache 0 [ 767.466167][T17440] total_rss 0 [ 767.469527][T17440] total_shmem 0 [ 767.472985][T17440] total_mapped_file 0 [ 767.476980][T17440] total_dirty 0 [ 767.480438][T17440] total_writeback 0 [ 767.484265][T17440] total_workingset_refault_anon 3171 [ 767.489553][T17440] total_workingset_refault_file 8163 [ 767.495031][T17440] total_swap 16658432 [ 767.499029][T17440] total_swapcached 224722944 [ 767.503635][T17440] total_pgpgin 536694 [ 767.507707][T17440] total_pgpgout 536692 [ 767.511785][T17440] total_pgfault 644795 [ 767.515873][T17440] total_pgmajfault 2065 [ 767.520123][T17440] total_inactive_anon 4096 [ 767.524752][T17440] total_active_anon 4096 [ 767.529014][T17440] total_inactive_file 0 [ 767.533251][T17440] total_active_file 0 [ 767.537243][T17440] total_unevictable 0 [ 767.541224][T17440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4546,pid=17440,uid=0 [ 767.556444][T17440] Memory cgroup out of memory: Killed process 17440 (syz.0.4546) total-vm:86264kB, anon-rss:1236kB, file-rss:26128kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 767.564743][T17437] Bluetooth: hci0: command 0x1003 tx timeout [ 767.668478][ T3653] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 767.735311][T17450] loop6: detected capacity change from 0 to 1024 [ 767.744899][T17450] EXT4-fs: Ignoring removed bh option [ 767.828232][T17450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.886372][T17460] program syz.7.4552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.907504][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 767.907524][ T28] audit: type=1400 audit(1784454289.304:1290): avc: denied { write } for pid=17448 comm="syz.6.4548" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 768.006590][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.019118][T17463] netlink: 'syz.7.4555': attribute type 4 has an invalid length. [ 768.034949][T17463] netlink: 'syz.7.4555': attribute type 4 has an invalid length. [ 768.139985][T17474] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 768.139985][T17474] program syz.7.4559 not setting count and/or reply_len properly [ 768.281471][T17478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.290098][T17478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.366906][T17490] loop6: detected capacity change from 0 to 512 [ 768.399157][T17489] loop8: detected capacity change from 0 to 1024 [ 768.407531][T17493] loop4: detected capacity change from 0 to 512 [ 768.414535][T17489] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.444162][ T28] audit: type=1400 audit(1784454289.844:1291): avc: denied { write } for pid=17488 comm="syz.8.4565" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 768.477230][T17489] EXT4-fs (loop8): shut down requested (0) [ 768.496146][T17493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.515908][T17490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.530388][T17490] ext4 filesystem being mounted at /746/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.542894][ T28] audit: type=1400 audit(1784454289.914:1292): avc: denied { write } for pid=17492 comm="syz.4.4566" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 769.068690][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.115183][T17504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4567'. [ 769.141264][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.155975][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.340725][T17484] syz.7.4563 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 769.351872][T17484] CPU: 0 UID: 0 PID: 17484 Comm: syz.7.4563 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 769.351922][T17484] Tainted: [W]=WARN [ 769.351976][T17484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 769.351989][T17484] Call Trace: [ 769.351997][T17484] [ 769.352006][T17484] __dump_stack+0x1d/0x30 [ 769.352108][T17484] dump_stack_lvl+0x95/0xd0 [ 769.352188][T17484] dump_stack+0x15/0x1b [ 769.352207][T17484] dump_header+0x80/0x240 [ 769.352356][T17484] oom_kill_process+0x295/0x350 [ 769.352389][T17484] out_of_memory+0x981/0xbc0 [ 769.352421][T17484] try_charge_memcg+0x621/0xa00 [ 769.352447][T17484] charge_memcg+0x6d/0x120 [ 769.352499][T17484] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 769.352534][T17484] swap_cache_alloc_folio+0x47b/0x5e0 [ 769.352635][T17484] swap_cluster_readahead+0x3d2/0x460 [ 769.352716][T17484] swapin_readahead+0xd8/0x8a0 [ 769.352807][T17484] ? _raw_spin_unlock+0x9/0x30 [ 769.352832][T17484] ? swap_put_entries_cluster+0x49c/0x4c0 [ 769.352863][T17484] ? __entry_text_end+0xf208/0x102179 [ 769.352900][T17484] ? __rcu_read_unlock+0x4e/0x70 [ 769.352950][T17484] ? swap_cache_get_folio+0x1f7/0x200 [ 769.352980][T17484] do_swap_page+0x2a2/0x1ec0 [ 769.353048][T17484] ? __css_rstat_updated+0xbb/0x280 [ 769.353075][T17484] ? __rcu_read_lock+0x36/0x50 [ 769.353104][T17484] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 769.353138][T17484] handle_mm_fault+0xb3c/0x2da0 [ 769.353177][T17484] do_user_addr_fault+0x634/0x1060 [ 769.353234][T17484] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 769.353268][T17484] ? trace_page_fault_user+0x1f/0xa0 [ 769.353300][T17484] exc_page_fault+0x62/0xa0 [ 769.353353][T17484] asm_exc_page_fault+0x26/0x30 [ 769.353455][T17484] RIP: 0033:0x7f6c40242660 [ 769.353475][T17484] Code: 30 04 48 8d 50 fc 49 89 57 40 89 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00 00 44 24 0e 01 e9 0f ff ff ff 66 0f 1f 44 00 00 4c 89 f6 48 c1 e0 [ 769.353498][T17484] RSP: 002b:00007ffd9819d160 EFLAGS: 00010246 [ 769.353519][T17484] RAX: 0000000000019f7a RBX: ffffffff85997535 RCX: ffffffff85997486 [ 769.353565][T17484] RDX: ffffffff85997236 RSI: ffffffff85997486 RDI: 00007f6c3fdcf008 [ 769.353592][T17484] RBP: 0000000000000000 R08: 00007f6c405e0000 R09: 00007f6c405e2000 [ 769.353608][T17484] R10: 000000008599748a R11: 000000000000000e R12: 00007f6c405f6038 [ 769.353681][T17484] R13: 000000000004f82c R14: ffffffff85997236 R15: 00007f6c41125720 [ 769.353699][T17484] ? plist_check_list+0x16/0x1c0 [ 769.353734][T17484] ? __radix_tree_preload+0x55/0x190 [ 769.353769][T17484] ? radix_tree_preload+0x6/0x50 [ 769.353809][T17484] ? plist_check_list+0x16/0x1c0 [ 769.353843][T17484] ? radix_tree_preload+0x6/0x50 [ 769.353879][T17484] [ 769.622719][T17484] memory: usage 307200kB, limit 307200kB, failcnt 10224 [ 769.629703][T17484] memory+swap: usage 323680kB, limit 9007199254740988kB, failcnt 0 [ 769.637682][T17484] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 769.645211][T17484] Memory cgroup stats for /syz7: [ 769.645422][T17484] cache 0 [ 769.653346][T17484] rss 0 [ 769.656117][T17484] shmem 0 [ 769.659095][T17484] mapped_file 0 [ 769.662555][T17484] dirty 0 [ 769.665557][T17484] writeback 0 [ 769.668932][T17484] workingset_refault_anon 2101 [ 769.673861][T17484] workingset_refault_file 2372 [ 769.678631][T17484] swap 16875520 [ 769.682097][T17484] swapcached 86134784 [ 769.686122][T17484] pgpgin 295707 [ 769.689602][T17484] pgpgout 295706 [ 769.693167][T17484] pgfault 352506 [ 769.696720][T17484] pgmajfault 1231 [ 769.700499][T17484] inactive_anon 0 [ 769.704191][T17484] active_anon 4096 [ 769.707950][T17484] inactive_file 0 [ 769.711659][T17484] active_file 0 [ 769.715144][T17484] unevictable 0 [ 769.718716][T17484] hierarchical_memory_limit 314572800 [ 769.724254][T17484] hierarchical_memsw_limit 9223372036854771712 [ 769.730406][T17484] total_cache 0 [ 769.733987][T17484] total_rss 0 [ 769.737289][T17484] total_shmem 0 [ 769.740776][T17484] total_mapped_file 0 [ 769.744883][T17484] total_dirty 0 [ 769.748418][T17484] total_writeback 0 [ 769.752226][T17484] total_workingset_refault_anon 2101 [ 769.757595][T17484] total_workingset_refault_file 2372 [ 769.762876][T17484] total_swap 16875520 [ 769.766874][T17484] total_swapcached 86134784 [ 769.771376][T17484] total_pgpgin 295707 [ 769.775402][T17484] total_pgpgout 295706 [ 769.779470][T17484] total_pgfault 352506 [ 769.783995][T17484] total_pgmajfault 1231 [ 769.788245][T17484] total_inactive_anon 0 [ 769.792424][T17484] total_active_anon 4096 [ 769.796797][T17484] total_inactive_file 0 [ 769.800956][T17484] total_active_file 0 [ 769.805034][T17484] total_unevictable 0 [ 769.809048][T17484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4563,pid=17484,uid=0 [ 769.824000][T17484] Memory cgroup out of memory: Killed process 17484 (syz.7.4563) total-vm:86264kB, anon-rss:1236kB, file-rss:26128kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 769.969765][ T28] audit: type=1400 audit(1784454291.364:1293): avc: denied { write } for pid=17513 comm="syz.0.4572" path="socket:[45461]" dev="sockfs" ino=45461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 770.060238][ T28] audit: type=1400 audit(1784454291.454:1294): avc: denied { name_bind } for pid=17522 comm="syz.8.4576" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 770.130462][T17530] loop4: detected capacity change from 0 to 512 [ 770.141960][T17530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.164325][ T28] audit: type=1400 audit(1784454291.554:1295): avc: denied { sys_module } for pid=17525 comm="syz.0.4577" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 770.200138][T17535] bond0: entered promiscuous mode [ 770.226288][T17535] bond_slave_0: entered promiscuous mode [ 770.244521][T17535] bond_slave_1: entered promiscuous mode [ 770.271685][ T28] audit: type=1400 audit(1784454291.564:1296): avc: denied { write } for pid=17529 comm="syz.4.4578" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.294816][T17535] bond0: left promiscuous mode [ 770.294930][T17519] loop6: detected capacity change from 0 to 1024 [ 770.309312][T17535] bond_slave_0: left promiscuous mode [ 770.311733][T17519] EXT4-fs: Ignoring removed bh option [ 770.328106][T17535] bond_slave_1: left promiscuous mode [ 770.342695][T17519] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 770.370112][T17519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.405966][T17541] loop8: detected capacity change from 0 to 512 [ 770.429147][T17543] loop0: detected capacity change from 0 to 512 [ 770.438453][ T28] audit: type=1400 audit(1784454291.814:1297): avc: denied { write } for pid=17518 comm="syz.6.4573" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.438718][T17519] dns_resolver: Unsupported server list version (0) [ 770.483458][T17543] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 1: comm syz.0.4590: invalid block [ 770.501016][T17541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.505780][T17543] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 770.522677][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.533146][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 770.533169][ C0] EXT4-fs (loop0): initial error at time 1784454291: __ext4_iget:5533: inode 11: block 1 [ 770.533214][ C0] EXT4-fs (loop0): last error at time 1784454291: __ext4_iget:5533: inode 11: block 1 [ 770.536830][T17543] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4590: couldn't read orphan inode 11 (err -117) [ 770.565654][ T28] audit: type=1400 audit(1784454291.954:1298): avc: denied { write } for pid=17540 comm="syz.8.4580" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.570132][T17543] loop0: lost filesystem error report for type 5 error -117 [ 770.607780][T17543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.634847][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.763710][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.785687][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.834778][T17558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.843271][T17558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.049843][ T28] audit: type=1400 audit(1784454292.314:1299): avc: denied { create } for pid=17572 comm="syz.0.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 771.071001][T17576] loop6: detected capacity change from 0 to 512 [ 771.102533][T17581] loop0: detected capacity change from 0 to 128 [ 771.114696][T17576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.128468][T17576] ext4 filesystem being mounted at /750/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 771.687628][T17561] syz.7.4585 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 771.698792][T17561] CPU: 0 UID: 0 PID: 17561 Comm: syz.7.4585 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 771.698830][T17561] Tainted: [W]=WARN [ 771.698840][T17561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 771.698855][T17561] Call Trace: [ 771.698865][T17561] [ 771.698876][T17561] __dump_stack+0x1d/0x30 [ 771.698911][T17561] dump_stack_lvl+0x95/0xd0 [ 771.698963][T17561] dump_stack+0x15/0x1b [ 771.698988][T17561] dump_header+0x80/0x240 [ 771.699016][T17561] oom_kill_process+0x295/0x350 [ 771.699052][T17561] out_of_memory+0x981/0xbc0 [ 771.699090][T17561] try_charge_memcg+0x621/0xa00 [ 771.699119][T17561] charge_memcg+0x6d/0x120 [ 771.699226][T17561] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 771.699266][T17561] swap_cache_alloc_folio+0x47b/0x5e0 [ 771.699306][T17561] swap_cluster_readahead+0x2b1/0x460 [ 771.699450][T17561] swapin_readahead+0xd8/0x8a0 [ 771.699485][T17561] ? _raw_spin_unlock+0x9/0x30 [ 771.699600][T17561] ? swap_put_entries_cluster+0x49c/0x4c0 [ 771.699690][T17561] ? __entry_text_end+0xf208/0x102179 [ 771.699722][T17561] ? __rcu_read_unlock+0x4e/0x70 [ 771.699827][T17561] ? swap_cache_get_folio+0x1f7/0x200 [ 771.699863][T17561] do_swap_page+0x2a2/0x1ec0 [ 771.699900][T17561] ? __css_rstat_updated+0xbb/0x280 [ 771.699970][T17561] ? __rcu_read_lock+0x36/0x50 [ 771.700000][T17561] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 771.700062][T17561] handle_mm_fault+0xb3c/0x2da0 [ 771.700102][T17561] do_user_addr_fault+0x634/0x1060 [ 771.700136][T17561] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 771.700222][T17561] ? trace_page_fault_user+0x1f/0xa0 [ 771.700253][T17561] exc_page_fault+0x62/0xa0 [ 771.700291][T17561] asm_exc_page_fault+0x26/0x30 [ 771.700387][T17561] RIP: 0033:0x7f6c40328ffe [ 771.700407][T17561] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 771.700427][T17561] RSP: 002b:00007ffd9819d1b0 EFLAGS: 00010246 [ 771.700446][T17561] RAX: 0000000000000000 RBX: 0000555592413500 RCX: 00007f6c4032e6ce [ 771.700463][T17561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.700478][T17561] RBP: 00007f6c405f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 771.700563][T17561] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000bc5b8 [ 771.700580][T17561] R13: 00007f6c405f609c R14: 00000000000bc477 R15: 00007ffd9819d330 [ 771.700603][T17561] [ 771.700626][T17561] memory: usage 307200kB, limit 307200kB, failcnt 10805 [ 771.983895][T17561] memory+swap: usage 319568kB, limit 9007199254740988kB, failcnt 0 [ 771.992186][T17561] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 771.999639][T17561] Memory cgroup stats for /syz7: [ 772.000325][T17561] cache 0 [ 772.008316][T17561] rss 0 [ 772.011262][T17561] shmem 0 [ 772.014252][T17561] mapped_file 0 [ 772.017769][T17561] dirty 0 [ 772.020837][T17561] writeback 0 [ 772.024235][T17561] workingset_refault_anon 2223 [ 772.029161][T17561] workingset_refault_file 2399 [ 772.034075][T17561] swap 12664832 [ 772.037587][T17561] swapcached 86822912 [ 772.041666][T17561] pgpgin 298875 [ 772.045254][T17561] pgpgout 298869 [ 772.048848][T17561] pgfault 355897 [ 772.052496][T17561] pgmajfault 1301 [ 772.056182][T17561] inactive_anon 8192 [ 772.060176][T17561] active_anon 16384 [ 772.064273][T17561] inactive_file 0 [ 772.068044][T17561] active_file 0 [ 772.071668][T17561] unevictable 0 [ 772.075257][T17561] hierarchical_memory_limit 314572800 [ 772.081353][T17561] hierarchical_memsw_limit 9223372036854771712 [ 772.087560][T17561] total_cache 0 [ 772.091053][T17561] total_rss 0 [ 772.094430][T17561] total_shmem 0 [ 772.097943][T17561] total_mapped_file 0 [ 772.102066][T17561] total_dirty 0 [ 772.105654][T17561] total_writeback 0 [ 772.109601][T17561] total_workingset_refault_anon 2223 [ 772.115043][T17561] total_workingset_refault_file 2399 [ 772.120392][T17561] total_swap 12664832 [ 772.124488][T17561] total_swapcached 86822912 [ 772.129104][T17561] total_pgpgin 298875 [ 772.133253][T17561] total_pgpgout 298869 [ 772.137340][T17561] total_pgfault 355897 [ 772.191479][T17561] total_pgmajfault 1301 [ 772.195732][T17561] total_inactive_anon 8192 [ 772.200182][T17561] total_active_anon 16384 [ 772.204575][T17561] total_inactive_file 0 [ 772.208746][T17561] total_active_file 0 [ 772.212733][T17561] total_unevictable 0 [ 772.216775][T17561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4585,pid=17561,uid=0 [ 772.232205][T17561] Memory cgroup out of memory: Killed process 17561 (syz.7.4585) total-vm:82028kB, anon-rss:1236kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 772.317464][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.522116][T17593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=17593 comm=syz.7.4596 [ 772.610695][T17603] dns_resolver: Unsupported server list version (0) [ 773.537781][T17627] loop8: detected capacity change from 0 to 1024 [ 773.579562][T17627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 773.674044][T17627] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.686428][T17636] xt_hashlimit: size too large, truncated to 1048576 [ 773.743478][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 773.743497][ T28] audit: type=1400 audit(1784454295.134:1301): avc: denied { write } for pid=17626 comm="syz.8.4609" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 773.789135][T17635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.804548][T17627] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.4609: lblock 0 mapped to illegal pblock 0 (length 1) [ 773.834289][T17635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.862739][T17627] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 773.908765][T17627] EXT4-fs (loop8): This should not happen!! Data will be lost [ 773.908765][T17627] [ 773.939793][T17627] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.4609: lblock 0 mapped to illegal pblock 0 (length 1) [ 774.009882][T17625] syz.0.4607 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 774.023918][T17625] CPU: 0 UID: 0 PID: 17625 Comm: syz.0.4607 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 774.023958][T17625] Tainted: [W]=WARN [ 774.023967][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 774.023983][T17625] Call Trace: [ 774.024068][T17625] [ 774.024079][T17625] __dump_stack+0x1d/0x30 [ 774.024109][T17625] dump_stack_lvl+0x95/0xd0 [ 774.024177][T17625] dump_stack+0x15/0x1b [ 774.024201][T17625] dump_header+0x80/0x240 [ 774.024228][T17625] oom_kill_process+0x295/0x350 [ 774.024267][T17625] out_of_memory+0x981/0xbc0 [ 774.024384][T17625] try_charge_memcg+0x621/0xa00 [ 774.024416][T17625] __memcg_kmem_charge_page+0x199/0x3a0 [ 774.024453][T17625] __alloc_frozen_pages_noprof+0x18a/0x350 [ 774.024525][T17625] alloc_pages_bulk_noprof+0x4c3/0x550 [ 774.024559][T17625] ? policy_nodemask+0x417/0x5e0 [ 774.024596][T17625] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 774.024635][T17625] ? alloc_pages_mpol+0xd9/0x1d0 [ 774.024719][T17625] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 774.024761][T17625] __kvmalloc_node_noprof+0x3a0/0x590 [ 774.024794][T17625] ? futex_hash_allocate+0x192/0x920 [ 774.024820][T17625] ? futex_hash_allocate+0x192/0x920 [ 774.024936][T17625] ? futex_hash_allocate+0x192/0x920 [ 774.024964][T17625] futex_hash_allocate+0x192/0x920 [ 774.025105][T17625] ? cap_task_prctl+0x13f/0x6b0 [ 774.025223][T17625] futex_hash_prctl+0xd8/0xf0 [ 774.025249][T17625] __se_sys_prctl+0x4f4/0x13b0 [ 774.025283][T17625] __x64_sys_prctl+0x67/0x80 [ 774.025366][T17625] x64_sys_call+0x2533/0x3020 [ 774.025396][T17625] do_syscall_64+0x136/0x3c0 [ 774.025424][T17625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.025451][T17625] RIP: 0033:0x7f1d1be3de99 [ 774.025470][T17625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.025528][T17625] RSP: 002b:00007f1d1a432028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 774.025554][T17625] RAX: ffffffffffffffda RBX: 00007f1d1c0c6270 RCX: 00007f1d1be3de99 [ 774.025572][T17625] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 774.025670][T17625] RBP: 00007f1d1bed3eaf R08: 0000000000000000 R09: 0000000000000000 [ 774.025684][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.025762][T17625] R13: 00007f1d1c0c6308 R14: 00007f1d1c0c6270 R15: 00007ffcf70d53d8 [ 774.025785][T17625] [ 774.025794][T17625] memory: usage 307200kB, limit 307200kB, failcnt 21944 [ 774.098368][T17627] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 774.101041][T17625] memory+swap: usage 323152kB, limit 9007199254740988kB, failcnt 0 [ 774.115463][T17627] EXT4-fs (loop8): This should not happen!! Data will be lost [ 774.115463][T17627] [ 774.118082][T17625] kmem: usage 306872kB, limit 9007199254740988kB, failcnt 0 [ 774.260104][T17643] loop7: detected capacity change from 0 to 16384 [ 774.263838][T17625] Memory cgroup stats for /syz0: [ 774.264280][T17625] cache 0 [ 774.264293][T17625] rss 28672 [ 774.264302][T17625] shmem 0 [ 774.264310][T17625] mapped_file 0 [ 774.264442][T17625] dirty 0 [ 774.264451][T17625] writeback 0 [ 774.264459][T17625] workingset_refault_anon 3244 [ 774.264469][T17625] workingset_refault_file 8528 [ 774.264478][T17625] swap 16568320 [ 774.264487][T17625] swapcached 229380096 [ 774.264495][T17625] pgpgin 541073 [ 774.264503][T17625] pgpgout 541049 [ 774.264590][T17625] pgfault 650048 [ 774.264599][T17625] pgmajfault 2113 [ 774.264608][T17625] inactive_anon 98304 [ 774.264693][T17625] active_anon 0 [ 774.264702][T17625] inactive_file 0 [ 774.264713][T17625] active_file 0 [ 774.264724][T17625] unevictable 0 [ 774.264734][T17625] hierarchical_memory_limit 314572800 [ 774.268413][ T6639] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:28: lblock 4 mapped to illegal pblock 4 (length 2) [ 774.274847][T17625] hierarchical_memsw_limit 9223372036854771712 [ 774.274863][T17625] total_cache 0 [ 774.274872][T17625] total_rss 28672 [ 774.274881][T17625] total_shmem 0 [ 774.274890][T17625] total_mapped_file 0 [ 774.274965][T17625] total_dirty 0 [ 774.274974][T17625] total_writeback 0 [ 774.275048][T17625] total_workingset_refault_anon 3244 [ 774.275059][T17625] total_workingset_refault_file 8528 [ 774.275070][T17625] total_swap 16568320 [ 774.275080][T17625] total_swapcached 229380096 [ 774.275090][T17625] total_pgpgin 541073 [ 774.275099][T17625] total_pgpgout 541049 [ 774.275109][T17625] total_pgfault 650048 [ 774.275117][T17625] total_pgmajfault 2113 [ 774.275135][T17625] total_inactive_anon 98304 [ 774.275208][T17625] total_active_anon 0 [ 774.275216][T17625] total_inactive_file 0 [ 774.275225][T17625] total_active_file 0 [ 774.275235][T17625] total_unevictable 0 [ 774.275245][T17625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.30,pid=3677,uid=0 [ 774.275359][T17625] Memory cgroup out of memory: Killed process 3677 (syz.0.30) total-vm:108648kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 774.561084][ T6639] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 774.576350][ T6639] EXT4-fs (loop8): This should not happen!! Data will be lost [ 774.576350][ T6639] [ 774.586436][ T6639] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:28: lblock 8 mapped to illegal pblock 8 (length 8) [ 774.601987][ T6639] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 774.615458][ T6639] EXT4-fs (loop8): This should not happen!! Data will be lost [ 774.615458][ T6639] [ 774.627412][T10756] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 774.644131][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 774.718826][T17661] loop4: detected capacity change from 0 to 512 [ 774.734329][T17661] EXT4-fs: Ignoring removed i_version option [ 774.742591][T17661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 774.756616][T17661] EXT4-fs (loop4): 1 truncate cleaned up [ 774.764987][T17661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.786649][ T28] audit: type=1400 audit(1784454296.184:1302): avc: denied { write } for pid=17660 comm="syz.4.4619" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 774.874473][ T28] audit: type=1400 audit(1784454296.264:1303): avc: denied { create } for pid=17666 comm="syz.7.4621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 774.875415][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.962270][T17655] loop8: detected capacity change from 0 to 1024 [ 774.981907][T17655] EXT4-fs: Ignoring removed bh option [ 775.022485][T17655] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 775.137282][T17689] loop6: detected capacity change from 0 to 2048 [ 775.156911][T17689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.165655][T17655] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.235558][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4632'. [ 775.278527][ T28] audit: type=1400 audit(1784454296.594:1304): avc: denied { write } for pid=17654 comm="syz.8.4612" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 775.351544][T17700] dns_resolver: Unsupported server list version (0) [ 775.574985][ T28] audit: type=1400 audit(1784454296.964:1305): avc: denied { create } for pid=17701 comm="syz.4.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 775.649460][ T28] audit: type=1400 audit(1784454297.004:1306): avc: denied { ioctl } for pid=17701 comm="syz.4.4633" path="socket:[45607]" dev="sockfs" ino=45607 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 775.690331][T17689] EXT4-fs (loop6): shut down requested (1) [ 775.696587][T17689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 775.707140][T17689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 775.716542][T17689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 775.740731][ T7771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.812955][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.844485][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4637'. [ 775.913651][T17702] syz.0.4628 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 775.927582][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.0.4628 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 775.927620][T17702] Tainted: [W]=WARN [ 775.927629][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 775.927644][T17702] Call Trace: [ 775.927653][T17702] [ 775.927663][T17702] __dump_stack+0x1d/0x30 [ 775.927734][T17702] dump_stack_lvl+0x95/0xd0 [ 775.927759][T17702] dump_stack+0x15/0x1b [ 775.927783][T17702] dump_header+0x80/0x240 [ 775.927810][T17702] oom_kill_process+0x295/0x350 [ 775.927881][T17702] out_of_memory+0x981/0xbc0 [ 775.927919][T17702] try_charge_memcg+0x621/0xa00 [ 775.927949][T17702] __memcg_kmem_charge_page+0x199/0x3a0 [ 775.928103][T17702] __alloc_frozen_pages_noprof+0x18a/0x350 [ 775.928138][T17702] alloc_pages_bulk_noprof+0x4c3/0x550 [ 775.928171][T17702] ? policy_nodemask+0x417/0x5e0 [ 775.928256][T17702] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 775.928398][T17702] ? alloc_pages_mpol+0xd9/0x1d0 [ 775.928433][T17702] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 775.928472][T17702] __kvmalloc_node_noprof+0x3a0/0x590 [ 775.928504][T17702] ? futex_hash_allocate+0x192/0x920 [ 775.928600][T17702] ? futex_hash_allocate+0x192/0x920 [ 775.928625][T17702] ? futex_hash_allocate+0x192/0x920 [ 775.928651][T17702] futex_hash_allocate+0x192/0x920 [ 775.928678][T17702] ? cap_task_prctl+0x13f/0x6b0 [ 775.928793][T17702] futex_hash_prctl+0xd8/0xf0 [ 775.928884][T17702] __se_sys_prctl+0x4f4/0x13b0 [ 775.928917][T17702] __x64_sys_prctl+0x67/0x80 [ 775.928948][T17702] x64_sys_call+0x2533/0x3020 [ 775.928984][T17702] do_syscall_64+0x136/0x3c0 [ 775.929012][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.929104][T17702] RIP: 0033:0x7f1d1be3de99 [ 775.929126][T17702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.929218][T17702] RSP: 002b:00007f1d1a00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 775.929245][T17702] RAX: ffffffffffffffda RBX: 00007f1d1c0c6360 RCX: 00007f1d1be3de99 [ 775.929263][T17702] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 775.929320][T17702] RBP: 00007f1d1bed3eaf R08: 0000000000000000 R09: 0000000000000000 [ 775.929416][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.929432][T17702] R13: 00007f1d1c0c63f8 R14: 00007f1d1c0c6360 R15: 00007ffcf70d53d8 [ 775.929453][T17702] [ 775.929462][T17702] memory: usage 307200kB, limit 307200kB, failcnt 22010 [ 776.178150][T17702] memory+swap: usage 311564kB, limit 9007199254740988kB, failcnt 0 [ 776.186153][T17702] kmem: usage 306936kB, limit 9007199254740988kB, failcnt 0 [ 776.193574][T17702] Memory cgroup stats for /syz0: [ 776.193911][T17702] cache 0 [ 776.201856][T17702] rss 0 [ 776.204661][T17702] shmem 0 [ 776.207631][T17702] mapped_file 0 [ 776.211295][T17702] dirty 0 [ 776.214304][T17702] writeback 0 [ 776.217859][T17702] workingset_refault_anon 3273 [ 776.222642][T17702] workingset_refault_file 8656 [ 776.227651][T17702] swap 4698112 [ 776.231203][T17702] swapcached 233766912 [ 776.235419][T17702] pgpgin 544356 [ 776.238914][T17702] pgpgout 544348 [ 776.242762][T17702] pgfault 653599 [ 776.246357][T17702] pgmajfault 2132 [ 776.250012][T17702] inactive_anon 32768 [ 776.254058][T17702] active_anon 0 [ 776.257617][T17702] inactive_file 0 [ 776.261256][T17702] active_file 0 [ 776.265014][T17702] unevictable 0 [ 776.268483][T17702] hierarchical_memory_limit 314572800 [ 776.273883][T17702] hierarchical_memsw_limit 9223372036854771712 [ 776.280089][T17702] total_cache 0 [ 776.283580][T17702] total_rss 0 [ 776.286879][T17702] total_shmem 0 [ 776.290394][T17702] total_mapped_file 0 [ 776.294491][T17702] total_dirty 0 [ 776.298129][T17702] total_writeback 0 [ 776.302041][T17702] total_workingset_refault_anon 3273 [ 776.307587][T17702] total_workingset_refault_file 8656 [ 776.312924][T17702] total_swap 4698112 [ 776.316843][T17702] total_swapcached 233766912 [ 776.321474][T17702] total_pgpgin 544356 [ 776.325553][T17702] total_pgpgout 544348 [ 776.329706][T17702] total_pgfault 653599 [ 776.333800][T17702] total_pgmajfault 2132 [ 776.337969][T17702] total_inactive_anon 32768 [ 776.342585][T17702] total_active_anon 0 [ 776.346591][T17702] total_inactive_file 0 [ 776.350841][T17702] total_active_file 0 [ 776.354917][T17702] total_unevictable 0 [ 776.359357][T17702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3659,pid=14902,uid=0 [ 776.374185][T17702] Memory cgroup out of memory: Killed process 14902 (syz.0.3659) total-vm:96096kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 776.447020][T17702] syz.0.4628 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 776.461197][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.0.4628 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 776.461238][T17702] Tainted: [W]=WARN [ 776.461247][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 776.461317][T17702] Call Trace: [ 776.461326][T17702] [ 776.461336][T17702] __dump_stack+0x1d/0x30 [ 776.461419][T17702] dump_stack_lvl+0x95/0xd0 [ 776.461444][T17702] dump_stack+0x15/0x1b [ 776.461469][T17702] dump_header+0x80/0x240 [ 776.461546][T17702] oom_kill_process+0x295/0x350 [ 776.461594][T17702] out_of_memory+0x981/0xbc0 [ 776.461633][T17702] try_charge_memcg+0x621/0xa00 [ 776.461660][T17702] __memcg_kmem_charge_page+0x199/0x3a0 [ 776.461742][T17702] __alloc_frozen_pages_noprof+0x18a/0x350 [ 776.461793][T17702] alloc_pages_mpol+0xa9/0x1d0 [ 776.461903][T17702] alloc_pages_noprof+0x8f/0x140 [ 776.461939][T17702] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 776.462053][T17702] __kvmalloc_node_noprof+0x3a0/0x590 [ 776.462086][T17702] ? futex_hash_allocate+0x192/0x920 [ 776.462113][T17702] ? futex_hash_allocate+0x192/0x920 [ 776.462139][T17702] ? futex_hash_allocate+0x192/0x920 [ 776.462189][T17702] futex_hash_allocate+0x192/0x920 [ 776.462261][T17702] ? cap_task_prctl+0x13f/0x6b0 [ 776.462300][T17702] futex_hash_prctl+0xd8/0xf0 [ 776.462361][T17702] __se_sys_prctl+0x4f4/0x13b0 [ 776.462395][T17702] __x64_sys_prctl+0x67/0x80 [ 776.462443][T17702] x64_sys_call+0x2533/0x3020 [ 776.462473][T17702] do_syscall_64+0x136/0x3c0 [ 776.462528][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.462556][T17702] RIP: 0033:0x7f1d1be3de99 [ 776.462584][T17702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.462608][T17702] RSP: 002b:00007f1d1a00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 776.462692][T17702] RAX: ffffffffffffffda RBX: 00007f1d1c0c6360 RCX: 00007f1d1be3de99 [ 776.462711][T17702] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 776.462728][T17702] RBP: 00007f1d1bed3eaf R08: 0000000000000000 R09: 0000000000000000 [ 776.462744][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.462785][T17702] R13: 00007f1d1c0c63f8 R14: 00007f1d1c0c6360 R15: 00007ffcf70d53d8 [ 776.462808][T17702] [ 776.462816][T17702] memory: usage 307200kB, limit 307200kB, failcnt 22141 [ 776.523049][T17714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.559377][T17702] memory+swap: usage 311656kB, limit 9007199254740988kB, failcnt 0 [ 776.559417][T17702] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 776.559433][T17702] Memory cgroup stats for /syz0: [ 776.559612][T17702] cache 0 [ 776.559623][T17702] rss 0 [ 776.559692][T17702] shmem 0 [ 776.559700][T17702] mapped_file 0 [ 776.559719][T17702] dirty 0 [ 776.559728][T17702] writeback 0 [ 776.559737][T17702] workingset_refault_anon 3273 [ 776.559747][T17702] workingset_refault_file 8656 [ 776.559765][T17702] swap 4562944 [ 776.559774][T17702] swapcached 233766912 [ 776.559784][T17702] pgpgin 544356 [ 776.559793][T17702] pgpgout 544352 [ 776.559801][T17702] pgfault 653599 [ 776.559809][T17702] pgmajfault 2132 [ 776.559817][T17702] inactive_anon 8192 [ 776.559825][T17702] active_anon 8192 [ 776.559833][T17702] inactive_file 0 [ 776.559842][T17702] active_file 0 [ 776.559851][T17702] unevictable 0 [ 776.559882][T17702] hierarchical_memory_limit 314572800 [ 776.559893][T17702] hierarchical_memsw_limit 9223372036854771712 [ 776.559905][T17702] total_cache 0 [ 776.559914][T17702] total_rss 0 [ 776.559923][T17702] total_shmem 0 [ 776.559984][T17702] total_mapped_file 0 [ 776.559994][T17702] total_dirty 0 [ 776.560002][T17702] total_writeback 0 [ 776.560011][T17702] total_workingset_refault_anon 3273 [ 776.560022][T17702] total_workingset_refault_file 8656 [ 776.560033][T17702] total_swap 4562944 [ 776.560043][T17702] total_swapcached 233766912 [ 776.560052][T17702] total_pgpgin 544356 [ 776.560070][T17702] total_pgpgout 544352 [ 776.560080][T17702] total_pgfault 653599 [ 776.560089][T17702] total_pgmajfault 2132 [ 776.560102][T17702] total_inactive_anon 8192 [ 776.560112][T17702] total_active_anon 8192 [ 776.560121][T17702] total_inactive_file 0 [ 776.560131][T17702] total_active_file 0 [ 776.560140][T17702] total_unevictable 0 [ 776.560167][T17702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3548,pid=14598,uid=0 [ 776.560283][T17702] Memory cgroup out of memory: Killed process 14598 (syz.0.3548) total-vm:96096kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 777.473227][T17702] ================================================================== [ 777.473267][T17702] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 777.473307][T17702] [ 777.473313][T17702] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 777.473337][T17702] tick_do_update_jiffies64+0x113/0x1c0 [ 777.473364][T17702] tick_nohz_handler+0x88/0x380 [ 777.473387][T17702] __hrtimer_run_queues+0x1f8/0x510 [ 777.473421][T17702] hrtimer_interrupt+0x257/0x810 [ 777.473455][T17702] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 777.473486][T17702] sysvec_apic_timer_interrupt+0x32/0x80 [ 777.473522][T17702] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 777.473560][T17702] pie_calculate_probability+0x15f/0x4c0 [ 777.473588][T17702] fq_pie_timer+0xf6/0x1d0 [ 777.473613][T17702] call_timer_fn+0x3b/0x240 [ 777.473642][T17702] __run_timer_base+0x40c/0x5f0 [ 777.473676][T17702] run_timer_softirq+0x31/0x70 [ 777.473705][T17702] handle_softirqs+0xb9/0x280 [ 777.473728][T17702] __irq_exit_rcu+0x42/0xd0 [ 777.473751][T17702] sysvec_apic_timer_interrupt+0x74/0x80 [ 777.473786][T17702] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 777.473812][T17702] console_flush_all+0x513/0x6b0 [ 777.473843][T17702] console_unlock+0xa1/0x280 [ 777.473870][T17702] vprintk_emit+0x3e4/0x600 [ 777.473897][T17702] vprintk_default+0x26/0x30 [ 777.473925][T17702] vprintk+0x1d/0x30 [ 777.473958][T17702] _printk+0x79/0xa0 [ 777.473979][T17702] usb_gadget_register_driver_owner+0x17e/0x1a0 [ 777.474011][T17702] raw_ioctl+0xc5b/0x1df0 [ 777.474037][T17702] __se_sys_ioctl+0xce/0x140 [ 777.474058][T17702] __x64_sys_ioctl+0x43/0x50 [ 777.474080][T17702] x64_sys_call+0x1563/0x3020 [ 777.474109][T17702] do_syscall_64+0x136/0x3c0 [ 777.474134][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.474159][T17702] [ 777.474167][T17702] read to 0xffffffff86c07a00 of 8 bytes by task 17702 on cpu 0: [ 777.474188][T17702] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 777.474219][T17702] count_shadow_nodes+0x6a/0x250 [ 777.474253][T17702] do_shrink_slab+0x61/0x650 [ 777.474276][T17702] shrink_slab+0x53b/0x8e0 [ 777.474296][T17702] shrink_node+0x6d9/0x20f0 [ 777.474315][T17702] do_try_to_free_pages+0x408/0xc90 [ 777.474345][T17702] try_to_free_mem_cgroup_pages+0x201/0x420 [ 777.474378][T17702] try_charge_memcg+0x375/0xa00 [ 777.474400][T17702] __memcg_kmem_charge_page+0x199/0x3a0 [ 777.474435][T17702] __alloc_frozen_pages_noprof+0x18a/0x350 [ 777.474467][T17702] alloc_pages_mpol+0xa9/0x1d0 [ 777.474500][T17702] alloc_pages_noprof+0x8f/0x140 [ 777.474541][T17702] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 777.474570][T17702] __kvmalloc_node_noprof+0x3a0/0x590 [ 777.474600][T17702] futex_hash_allocate+0x192/0x920 [ 777.474626][T17702] futex_hash_prctl+0xd8/0xf0 [ 777.474650][T17702] __se_sys_prctl+0x4f4/0x13b0 [ 777.474680][T17702] __x64_sys_prctl+0x67/0x80 [ 777.474708][T17702] x64_sys_call+0x2533/0x3020 [ 777.474737][T17702] do_syscall_64+0x136/0x3c0 [ 777.474761][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.474788][T17702] [ 777.474793][T17702] value changed: 0x000000010000ba3d -> 0x000000010000ba3e [ 777.474808][T17702] [ 777.474813][T17702] Reported by Kernel Concurrency Sanitizer on: [ 777.474830][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.0.4628 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 777.474868][T17702] Tainted: [W]=WARN [ 777.474877][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 777.474893][T17702] ================================================================== [ 779.824445][ T29] oom_reaper: reaped process 14598 (syz.0.3548), now anon-rss:0kB, file-rss:20480kB, shmem-rss:0kB [ 779.998848][T17702] syz.0.4628 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 779.998934][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.0.4628 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 779.998973][T17702] Tainted: [W]=WARN [ 779.998982][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.998997][T17702] Call Trace: [ 779.999052][T17702] [ 779.999062][T17702] __dump_stack+0x1d/0x30 [ 779.999092][T17702] dump_stack_lvl+0x95/0xd0 [ 779.999118][T17702] dump_stack+0x15/0x1b [ 779.999160][T17702] dump_header+0x80/0x240 [ 779.999187][T17702] oom_kill_process+0x295/0x350 [ 779.999230][T17702] out_of_memory+0x981/0xbc0 [ 779.999341][T17702] try_charge_memcg+0x621/0xa00 [ 779.999373][T17702] __memcg_kmem_charge_page+0x199/0x3a0 [ 779.999446][T17702] __alloc_frozen_pages_noprof+0x18a/0x350 [ 779.999483][T17702] alloc_pages_mpol+0xa9/0x1d0 [ 779.999530][T17702] alloc_pages_noprof+0x8f/0x140 [ 779.999566][T17702] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 779.999613][T17702] __kvmalloc_node_noprof+0x3a0/0x590 [ 779.999679][T17702] ? futex_hash_allocate+0x192/0x920 [ 779.999704][T17702] ? futex_hash_allocate+0x192/0x920 [ 779.999726][T17702] ? futex_hash_allocate+0x192/0x920 [ 779.999793][T17702] futex_hash_allocate+0x192/0x920 [ 779.999820][T17702] ? cap_task_prctl+0x13f/0x6b0 [ 779.999861][T17702] futex_hash_prctl+0xd8/0xf0 [ 779.999886][T17702] __se_sys_prctl+0x4f4/0x13b0 [ 779.999980][T17702] __x64_sys_prctl+0x67/0x80 [ 780.000011][T17702] x64_sys_call+0x2533/0x3020 [ 780.000048][T17702] do_syscall_64+0x136/0x3c0 [ 780.000144][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.000170][T17702] RIP: 0033:0x7f1d1be3de99 [ 780.000264][T17702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.000287][T17702] RSP: 002b:00007f1d1a00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 780.000314][T17702] RAX: ffffffffffffffda RBX: 00007f1d1c0c6360 RCX: 00007f1d1be3de99 [ 780.000347][T17702] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 780.000365][T17702] RBP: 00007f1d1bed3eaf R08: 0000000000000000 R09: 0000000000000000 [ 780.000382][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.000451][T17702] R13: 00007f1d1c0c63f8 R14: 00007f1d1c0c6360 R15: 00007ffcf70d53d8 [ 780.000473][T17702] [ 780.000517][T17702] memory: usage 307200kB, limit 307200kB, failcnt 26799 [ 780.000563][T17702] memory+swap: usage 311516kB, limit 9007199254740988kB, failcnt 0 [ 780.000580][T17702] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 780.000596][T17702] Memory cgroup stats for /syz0: [ 780.000835][T17702] cache 0 [ 780.000846][T17702] rss 0 [ 780.000854][T17702] shmem 0 [ 780.000924][T17702] mapped_file 0 [ 780.000933][T17702] dirty 0 [ 780.000961][T17702] writeback 0 [ 780.000970][T17702] workingset_refault_anon 3277 [ 780.000981][T17702] workingset_refault_file 8656 [ 780.000992][T17702] swap 4419584 [ 780.001001][T17702] swapcached 233783296 [ 780.001068][T17702] pgpgin 544360 [ 780.001077][T17702] pgpgout 544357 [ 780.001086][T17702] pgfault 653603 [ 780.001158][T17702] pgmajfault 2135 [ 780.001237][T17702] inactive_anon 4096 [ 780.001247][T17702] active_anon 8192 [ 780.001256][T17702] inactive_file 0 [ 780.001266][T17702] active_file 0 [ 780.001275][T17702] unevictable 0 [ 780.001284][T17702] hierarchical_memory_limit 314572800 [ 780.001296][T17702] hierarchical_memsw_limit 9223372036854771712 [ 780.001307][T17702] total_cache 0 [ 780.001316][T17702] total_rss 0 [ 780.001400][T17702] total_shmem 0 [ 780.001409][T17702] total_mapped_file 0 [ 780.001418][T17702] total_dirty 0 [ 780.001427][T17702] total_writeback 0 [ 780.001503][T17702] total_workingset_refault_anon 3277 [ 780.001585][T17702] total_workingset_refault_file 8656 [ 780.001596][T17702] total_swap 4419584 [ 780.001606][T17702] total_swapcached 233783296 [ 780.001617][T17702] total_pgpgin 544360 [ 780.001627][T17702] total_pgpgout 544357 [ 780.001650][T17702] total_pgfault 653603 [ 780.001659][T17702] total_pgmajfault 2135 [ 780.001669][T17702] total_inactive_anon 4096 [ 780.001680][T17702] total_active_anon 8192 [ 780.001690][T17702] total_inactive_file 0 [ 780.001700][T17702] total_active_file 0 [ 780.001709][T17702] total_unevictable 0 [ 780.001719][T17702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4628,pid=17683,uid=0 [ 780.001855][T17702] Memory cgroup out of memory: Killed process 17683 (syz.0.4628) total-vm:90500kB, anon-rss:1236kB, file-rss:30416kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 780.422831][T17726] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4641'. [ 780.424699][ T28] audit: type=1400 audit(1784454301.824:1307): avc: denied { write } for pid=17723 comm="syz.8.4640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 780.467890][T17729] loop8: detected capacity change from 0 to 4096 [ 780.492752][T17729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.066743][ T29] oom_reaper: reaped process 17683 (syz.0.4628), now anon-rss:0kB, file-rss:29384kB, shmem-rss:0kB [ 782.262993][T17714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.271813][T10756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.