last executing test programs: 7.539325078s ago: executing program 1 (id=411): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10002, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/attr/current\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2004c840}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xa19, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xfffffffffffffea2}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.466751264s ago: executing program 1 (id=419): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r4, r4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x200, 0x8, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000140)=""/129, 0x6}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x1804) syz_io_uring_setup(0x11cd, &(0x7f00000003c0)={0x0, 0xde73, 0x80, 0x1103, 0x2c}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) 5.287087339s ago: executing program 4 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10002, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/attr/current\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000002c0)=ANY=[], 0x158, 0xfd730c35dcbfc59e}}], 0x1, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2004c840}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xa19, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xfffffffffffffea2}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.106777804s ago: executing program 0 (id=427): r0 = getpid() syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet(0x2, 0x3, 0x0) prlimit64(r0, 0x7, &(0x7f0000000140)={0xc05, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x41015500, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f05ebbee6, 0x8031, r2, 0xd18fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = fcntl$getown(r7, 0x9) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='trusted.syz\x00') sched_setscheduler(r8, 0x1, &(0x7f0000000000)=0x7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r8, 0x2, 0x5001) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x0, @perf_config_ext={0x3, 0x2000000000000081}, 0x4, 0x6, 0x10000, 0x9, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001000), 0x0, 0x0, 0x11, 0x8, 0x0, 0x0}}, 0x10) unshare(0x6a000200) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 3.438256314s ago: executing program 4 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x0) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[], 0xee8a) 3.327745103s ago: executing program 2 (id=430): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56f", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 3.260276809s ago: executing program 2 (id=431): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000a00000085000000bc000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff", 0xd) connect$inet6(r1, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a42, 0x13) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100"], 0x38}}, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x0, 0x1, 0x11a, 0xc4cf, 0x6, "04920887e87fcb167844f100", 0x7, 0x200}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x8) sendfile(r6, r6, 0x0, 0xe3aa6ea) 3.25950847s ago: executing program 4 (id=432): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3ce6ed39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6, r6, r6, r6], 0x0, 0x10, 0x200}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ccc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b0c, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x300, 0x56, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", 0x0, 0x2f00, 0x0, 0xe3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed", &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) 2.79931285s ago: executing program 4 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') ptrace$poke(0x21, r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r5 = syz_io_uring_setup(0x80001891, &(0x7f0000000140)={0x0, 0x4356, 0x400, 0x3, 0x8069}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r5, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) syz_socket_connect_nvme_tcp() r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3b000000, @remote, 0x5}}}, 0x88) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) readv(r9, &(0x7f0000000ec0)=[{&(0x7f0000000600)=""/32, 0x20}, {0x0}], 0x2) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000033a80)=""/102363, 0x18fdb}], 0x1, 0x0, 0x1000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.471922709s ago: executing program 4 (id=434): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10002, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x800) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[], 0x158, 0xfd730c35dcbfc59e}}], 0x1, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2004c840}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.384258137s ago: executing program 2 (id=435): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56f", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 2.373692368s ago: executing program 1 (id=436): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 2.197061314s ago: executing program 0 (id=437): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff8d7b7d13072c83b227e5c15856e07aa2", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 2.196638644s ago: executing program 1 (id=438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x129081, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000353000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.924749138s ago: executing program 0 (id=440): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000080000000000e353da715ab8dc1700ff0700000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x8, 0x7, 0x0, 0x7, 0x0, 0x517}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = openat$urandom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) read(r6, &(0x7f00000001c0)=""/155, 0x9b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{0x0}], 0x1}, 0x4048043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) timer_create(0xa00, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 1.767077752s ago: executing program 2 (id=452): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56f", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 1.703159838s ago: executing program 3 (id=443): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) process_mrelease(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r5, 0xffffffffffffff7f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x24022, &(0x7f0000000180)={[{@name={'name', 0x3d, 'none'}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000016010000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xa6}, 0xc) 1.650128103s ago: executing program 2 (id=444): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="83000400000000002800128008000100736974001c000280080002e0feffffff080003000500000106000e0000000000565169e69e6986fab11cb30be7049de90cf07937452060d5e468fb1890b9a1f9354a3abb3cb3247a2b175e92"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x2, 0x88) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x7ffffffeffffffff) 1.600616247s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000080)=""/155, 0x9b}], 0x2, 0x3, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000020000000000000000000000850000005e00000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d1}, 0x94) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f00000002c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4, @v={0x0, 0x2, 0x4, 0x6, 0xdc, 0x3, 0x10, {0x9, 0xf, "bab0ec9438c39748"}, 0x7, 0x3d, 0x3, 0x9, 0x48, "3fb693dcf233950631c83a8e08530b6cca894c9f4ea09cb923365903483235abb662ab184b0415a8db6824b4008800dafc8bc31e80ea023d500f86097538bbcefef67a8e0cbb2aa9"}}, 0x61) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f00000022c0)={@random="ba43a0689ef4", @random="5fbdd2095c57", @val={@void, {0x8100, 0x6, 0x1}}, {@x25={0x805, {0x3, 0x3, 0xf3}}}}, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x24000004) 776.82474ms ago: executing program 3 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000340)=ANY=[], 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40008001}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018500000000000200000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100001, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88\a'}, @typed={0x8, 0x16, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80000, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) 742.781673ms ago: executing program 3 (id=447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x1, 0x4, 0x7}]}]}, {0x0, [0x61, 0x30]}}, 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) 660.031721ms ago: executing program 3 (id=448): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 557.01839ms ago: executing program 3 (id=449): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10002, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/attr/current\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000002c0)=ANY=[], 0x158, 0xfd730c35dcbfc59e}}], 0x1, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xa19, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xfffffffffffffea2}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 530.388903ms ago: executing program 4 (id=450): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x671, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x2c, 0x3, 0x80) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r10, r12, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendfile(r3, r2, &(0x7f00000001c0)=0x1, 0x8) 209.942331ms ago: executing program 0 (id=451): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff8d7b7d13072c83b227e5c15856e07aa2c5", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 144.876317ms ago: executing program 1 (id=453): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$eJzs3c9rXNUeAPDvnfxq077XPHi8175Ns3qvUDp57ctrFQRTXIhioaBr2zCZhphJpmQmpYlZWEQQRNTiQtGNa3/UnVvRjRv/Bjci0lI1LVZcyMidH8mkSSZpfkzS5vOB255z77lzznfuvefczD3MBLBn9af/ZCKORMTbScSh+vokIrqqqc6IoVq5e/NzuXRJolJ5/uekWubu/FwumvZJHahnDkfEV69FHM8sr7c0Mzs+XCjkp+r5gfLE5YHSzOyJsYnh0fxofvL0ycHBU2f+f+b01sX667ezB2+98/R/Phv6/dV/3njz6ySG4mB9W3Mcm/LsN/FyPdkf/fX3pCt9C5d4aksq2z2SnW4AG5Jemh21qzyOxKHoqKYAgEdZOv5XAIA9JjH+A8Ae0/gc4O78XK6x7OwnEu11+2xEktTibzzfrG3prD+z21d9Dtp7N4nO+hPR2MLnXf0R8eEXL36SLrGVzyEB1vDKtYi42Ne/vP9PoneTr/3fdZTpvy+v/4P2+fJsRDy20v1fZuH+Jxbufxb1rHDtbkR/RHdzfvn1n7m54o5PbkHl9fu/J2pz29JAm+7/Fiat9XXUc39JM0cjYqyQT/u2v0bEsejquTRWyJ9sUcexO3/cWW1b8/3fL9df+jitP/1/sUTmZmfP0n1GhsvDm4m52e1rEf/qXJzbd6+p/28c/2TZ8f9HdWg43+qFjy4mn3n89Q9WK5bGn8bbWJbHv70qH0X8O1aOvyFpOT9xoHGi1E6KFXz+/XurDqXNxz9d0vobfwu0Q3r8e1vH35c0z9csbW39a8e/8vnfnbxQTTc6j6vD5fLUyYju5Lnl608t7tvIN8qn8dcivT/+TIvzvzY39uI6Y+y89dOnG49/wbZMsUzjH3mg4//giRv3xjs2Hn96/AerqWP1Nevp/wr57lhPAzfz3gEAAAAAAAAAAAAAAAAAAAAAAADAemUi4mAkmexCOpPJZmu/4f336M0UiqXy8UvF6cmRqP5Wdl90ZS7Vv/+08R2Lje8/7attT9L8qfvy/4uIv0XEuz37q/lsrlgY2eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDhwCq//5/6safFjklnu5oIAGyHfWuWuJNfkq1UKpVtbA8AsP3WHv+Xe/+tbWgIANA2Lcb//e1sBwDQPhv5+x8AeLgZ/wFg7zH+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM3OnzuXLpXf5udyaX7kysz0ePHKiZF8aTw7MZ3L5opTl7OjxeJoIZ/NFSfWer1CsXh5MCanrw6U86XyQGlm9sJEcXqyfGFsYng0fyHf1ZaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODBlGZmx4cLhfzUI5F4IyKWrqnsjoZtPpHErmjGFieSdRX+4cR3h1uVub7GaTy0CyJ96BI73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBz+DAAA//9LViSU") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 132.281668ms ago: executing program 0 (id=454): socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r1 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x54}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80101, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sched_setscheduler(0x0, 0x2, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) 631.42µs ago: executing program 1 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 363.029µs ago: executing program 0 (id=456): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff", @ANYRESHEX=r3, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 0s ago: executing program 2 (id=465): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) kernel console output (not intermixed with test programs): z.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.758438][ T28] audit: type=1400 audit(1771533997.597:228): avc: denied { getopt } for pid=3860 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.788134][ T28] audit: type=1400 audit(1771533997.647:229): avc: denied { kexec_image_load } for pid=3857 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 46.830956][ T3869] loop4: detected capacity change from 0 to 128 [ 46.843829][ T3870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 46.859831][ T3866] loop1: detected capacity change from 0 to 2048 [ 46.899590][ T3866] EXT4-fs: Ignoring removed orlov option [ 46.958253][ T3866] EXT4-fs: Ignoring removed oldalloc option [ 46.971989][ T28] audit: type=1400 audit(1771533998.027:230): avc: denied { create } for pid=3872 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.006623][ T3866] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 47.015682][ T28] audit: type=1400 audit(1771533998.027:231): avc: denied { write } for pid=3872 comm="syz.3.91" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.208039][ T3878] loop4: detected capacity change from 0 to 2048 [ 47.221039][ T3867] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 47.226956][ T3878] EXT4-fs: Ignoring removed orlov option [ 47.244944][ T3878] EXT4-fs: Ignoring removed oldalloc option [ 47.274697][ T3880] syzkaller0: entered promiscuous mode [ 47.287248][ T3878] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 47.303624][ T3880] syzkaller0: entered allmulticast mode [ 47.371351][ T3878] 9p: Bad value for 'rfdno' [ 47.432714][ T3883] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 47.450693][ T3878] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 47.526535][ T3886] syzkaller0: entered promiscuous mode [ 47.540584][ T3886] syzkaller0: entered allmulticast mode [ 47.705539][ T3892] loop1: detected capacity change from 0 to 2048 [ 47.722264][ T3892] EXT4-fs: Ignoring removed orlov option [ 47.735777][ T3898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.748320][ T3892] EXT4-fs: Ignoring removed oldalloc option [ 47.759742][ T3892] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 47.772665][ T3863] syz.0.89 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 47.795173][ T3863] CPU: 1 UID: 0 PID: 3863 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 47.795248][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.795260][ T3863] Call Trace: [ 47.795268][ T3863] [ 47.795276][ T3863] __dump_stack+0x1d/0x30 [ 47.795311][ T3863] dump_stack_lvl+0x95/0xd0 [ 47.795332][ T3863] dump_stack+0x15/0x1b [ 47.795427][ T3863] dump_header+0x80/0x240 [ 47.795449][ T3863] oom_kill_process+0x295/0x350 [ 47.795470][ T3863] out_of_memory+0x97d/0xb80 [ 47.795515][ T3863] try_charge_memcg+0x62e/0xa10 [ 47.795551][ T3863] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 47.795606][ T3863] __swap_cache_prepare_and_add+0x386/0x530 [ 47.795642][ T3863] swap_cache_alloc_folio+0xa2/0x120 [ 47.795680][ T3863] swap_cluster_readahead+0x36b/0x3d0 [ 47.795717][ T3863] swapin_readahead+0xde/0x840 [ 47.795747][ T3863] ? _raw_spin_unlock+0x9/0x30 [ 47.795768][ T3863] ? swap_put_entries_cluster+0x385/0x3a0 [ 47.795794][ T3863] ? swap_put_entries_cluster+0x131/0x3a0 [ 47.795869][ T3863] ? __rcu_read_unlock+0x4e/0x70 [ 47.795889][ T3863] ? swap_cache_get_folio+0x26f/0x280 [ 47.795996][ T3863] do_swap_page+0x309/0x2210 [ 47.796029][ T3863] ? css_rstat_updated+0xbb/0x280 [ 47.796052][ T3863] ? __rcu_read_lock+0x36/0x50 [ 47.796149][ T3863] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 47.796174][ T3863] handle_mm_fault+0xb40/0x3020 [ 47.796205][ T3863] ? vma_start_read+0x1c7/0x2c0 [ 47.796234][ T3863] do_user_addr_fault+0x62f/0x1050 [ 47.796318][ T3863] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 47.796343][ T3863] ? trace_page_fault_user+0x1f/0xe0 [ 47.796412][ T3863] exc_page_fault+0x62/0xa0 [ 47.796442][ T3863] asm_exc_page_fault+0x26/0x30 [ 47.796464][ T3863] RIP: 0033:0x7f31b6740e2b [ 47.796485][ T3863] Code: 00 4c 89 ff be 04 00 00 00 e8 81 94 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 89 68 fc 41 8b 47 30 48 83 c4 28 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00 00 c6 [ 47.796505][ T3863] RSP: 002b:00007ffd9aeef588 EFLAGS: 00010206 [ 47.796527][ T3863] RAX: 0000000000000420 RBX: fffffffffffffbe4 RCX: ffffffff81920768 [ 47.796580][ T3863] RDX: 0000001b33b23be0 RSI: 0000000000000004 RDI: 00007f31b7615720 [ 47.796596][ T3863] RBP: 0000000000000000 R08: 00007f31b6ad0000 R09: 00007f31b6ad2000 [ 47.796610][ T3863] R10: 000000008192076c R11: 0000000000000010 R12: 0000000000000000 [ 47.796624][ T3863] R13: 000000000007ffff R14: ffffffff8192023f R15: 00007f31b7615720 [ 47.796640][ T3863] ? policy_nodemask+0x1f/0x5e0 [ 47.796679][ T3863] ? policy_nodemask+0x548/0x5e0 [ 47.796710][ T3863] [ 47.796791][ T3863] memory: usage 307200kB, limit 307200kB, failcnt 555 [ 48.017831][ T3905] syzkaller0: entered promiscuous mode [ 48.028121][ T3863] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 48.058960][ T3905] syzkaller0: entered allmulticast mode [ 48.064148][ T3863] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 48.064167][ T3863] Memory cgroup stats for /syz0: [ 48.104615][ T3863] cache 0 [ 48.113223][ T3863] rss 0 [ 48.116110][ T3863] shmem 0 [ 48.120920][ T3863] mapped_file 0 [ 48.124779][ T3863] dirty 0 [ 48.128434][ T3863] writeback 0 [ 48.132222][ T3863] workingset_refault_anon 45 [ 48.137201][ T3863] workingset_refault_file 411 [ 48.142608][ T3863] swap 200704 [ 48.145999][ T3863] swapcached 200704 [ 48.159867][ T3863] pgpgin 10413 [ 48.164120][ T3863] pgpgout 10413 [ 48.167734][ T3863] pgfault 10749 [ 48.171638][ T3863] pgmajfault 43 [ 48.175270][ T3863] inactive_anon 0 [ 48.179579][ T3863] active_anon 0 [ 48.224875][ T3863] inactive_file 0 [ 48.234456][ T3863] active_file 0 [ 48.239796][ T3863] unevictable 0 [ 48.243308][ T3863] hierarchical_memory_limit 314572800 [ 48.249567][ T3863] hierarchical_memsw_limit 9223372036854771712 [ 48.256528][ T3863] total_cache 0 [ 48.268176][ T3863] total_rss 0 [ 48.278111][ T3863] total_shmem 0 [ 48.282563][ T3863] total_mapped_file 0 [ 48.287636][ T3863] total_dirty 0 [ 48.295273][ T3907] syzkaller0: entered promiscuous mode [ 48.307797][ T3863] total_writeback 0 [ 48.312777][ T3863] total_workingset_refault_anon 45 [ 48.313363][ T3907] syzkaller0: entered allmulticast mode [ 48.318202][ T3863] total_workingset_refault_file 411 [ 48.330108][ T3863] total_swap 200704 [ 48.338414][ T3863] total_swapcached 200704 [ 48.347915][ T3863] total_pgpgin 10413 [ 48.352356][ T3863] total_pgpgout 10413 [ 48.356543][ T3863] total_pgfault 10749 [ 48.360788][ T3863] total_pgmajfault 43 [ 48.365185][ T3863] total_inactive_anon 0 [ 48.369669][ T3863] total_active_anon 0 [ 48.373793][ T3863] total_inactive_file 0 [ 48.378016][ T3863] total_active_file 0 [ 48.382449][ T3918] syzkaller0: entered promiscuous mode [ 48.389442][ T3918] syzkaller0: entered allmulticast mode [ 48.399039][ T3863] total_unevictable 0 [ 48.405283][ T3863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.89,pid=3863,uid=0 [ 48.422778][ T3863] Memory cgroup out of memory: Killed process 3863 (syz.0.89) total-vm:94292kB, anon-rss:1224kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 48.468164][ T3916] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 48.590049][ T3924] loop4: detected capacity change from 0 to 2048 [ 48.616308][ T3928] syzkaller0: entered promiscuous mode [ 48.627910][ T3926] 9p: Bad value for 'rfdno' [ 48.638295][ T3924] EXT4-fs: Ignoring removed orlov option [ 48.641577][ T3928] syzkaller0: entered allmulticast mode [ 48.644591][ T3924] EXT4-fs: Ignoring removed oldalloc option [ 48.670497][ T3924] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 48.683739][ T3909] xfrm0 speed is unknown, defaulting to 1000 [ 48.731710][ T3924] 9p: Bad value for 'rfdno' [ 48.807428][ T3933] syzkaller0: entered promiscuous mode [ 48.823776][ T3933] syzkaller0: entered allmulticast mode [ 49.161607][ T3921] xfrm0 speed is unknown, defaulting to 1000 [ 49.209982][ T3924] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 49.222067][ T3926] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 49.310904][ T3942] sit0: left promiscuous mode [ 49.325533][ T3941] loop3: detected capacity change from 0 to 2048 [ 49.342261][ T3941] EXT4-fs: Ignoring removed orlov option [ 49.349188][ T3941] EXT4-fs: Ignoring removed oldalloc option [ 49.356976][ T3941] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 49.400735][ T3941] 9p: Bad value for 'rfdno' [ 49.435292][ T3941] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 49.628996][ T3950] loop2: detected capacity change from 0 to 512 [ 49.815002][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 50.369223][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 50.369239][ T28] audit: type=1400 audit(1771534001.437:254): avc: denied { ioctl } for pid=3961 comm="syz.4.121" path="socket:[6428]" dev="sockfs" ino=6428 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.498964][ T3954] syz.2.119 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 50.540657][ T3954] CPU: 1 UID: 0 PID: 3954 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 50.540688][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.540702][ T3954] Call Trace: [ 50.540710][ T3954] [ 50.540719][ T3954] __dump_stack+0x1d/0x30 [ 50.540812][ T3954] dump_stack_lvl+0x95/0xd0 [ 50.540869][ T3954] dump_stack+0x15/0x1b [ 50.540895][ T3954] dump_header+0x80/0x240 [ 50.540921][ T3954] oom_kill_process+0x295/0x350 [ 50.540957][ T3954] out_of_memory+0x97d/0xb80 [ 50.540977][ T3954] try_charge_memcg+0x62e/0xa10 [ 50.541018][ T3954] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 50.541077][ T3954] __swap_cache_prepare_and_add+0x386/0x530 [ 50.541210][ T3954] swap_cache_alloc_folio+0xa2/0x120 [ 50.541235][ T3954] swap_cluster_readahead+0x26e/0x3d0 [ 50.541357][ T3954] swapin_readahead+0xde/0x840 [ 50.541383][ T3954] ? __rcu_read_unlock+0x4e/0x70 [ 50.541406][ T3954] ? __perf_event_task_sched_in+0xa65/0xad0 [ 50.541466][ T3954] ? __list_add_valid_or_report+0x38/0xe0 [ 50.541501][ T3954] ? __rcu_read_unlock+0x4e/0x70 [ 50.541590][ T3954] ? swap_cache_get_folio+0x26f/0x280 [ 50.541679][ T3954] do_swap_page+0x309/0x2210 [ 50.541704][ T3954] ? __schedule+0x85a/0xd40 [ 50.541725][ T3954] ? __rcu_read_lock+0x36/0x50 [ 50.541744][ T3954] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 50.541851][ T3954] handle_mm_fault+0xb40/0x3020 [ 50.541887][ T3954] ? vma_start_read+0x1c7/0x2c0 [ 50.541915][ T3954] do_user_addr_fault+0x62f/0x1050 [ 50.542012][ T3954] ? trace_page_fault_user+0x1f/0xe0 [ 50.542041][ T3954] exc_page_fault+0x62/0xa0 [ 50.542070][ T3954] asm_exc_page_fault+0x26/0x30 [ 50.542097][ T3954] RIP: 0033:0x7f86019d77f8 [ 50.542114][ T3954] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 50.542136][ T3954] RSP: 002b:00007ffd8737ace0 EFLAGS: 00010246 [ 50.542156][ T3954] RAX: 0000000000000000 RBX: 000055558a1dc500 RCX: 00007f86019dcece [ 50.542171][ T3954] RDX: 00007ffd8737ad30 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.542186][ T3954] RBP: 00007f8601c97da0 R08: 0000000000000000 R09: 0000000000000000 [ 50.542268][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000c57c [ 50.542280][ T3954] R13: 00007f8601c9609c R14: 000000000000c2c0 R15: 00007f8601c96090 [ 50.542298][ T3954] [ 50.794276][ T28] audit: type=1400 audit(1771534001.437:255): avc: denied { bind } for pid=3961 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.805486][ T3954] memory: usage 266644kB, limit 307200kB, failcnt 278 [ 50.839572][ T3954] memory+swap: usage 218672kB, limit 9007199254740988kB, failcnt 0 [ 50.856447][ T3954] kmem: usage 196068kB, limit 9007199254740988kB, failcnt 0 [ 50.874231][ T3954] Memory cgroup stats for /syz2: [ 50.875525][ T3954] cache 4096 [ 50.890318][ T3954] rss 4096 [ 50.893842][ T28] audit: type=1400 audit(1771534001.437:256): avc: denied { setopt } for pid=3961 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.920256][ T3954] shmem 0 [ 50.926020][ T3954] mapped_file 4096 [ 50.936316][ T3954] dirty 0 [ 50.943809][ T3954] writeback 4096 [ 50.954298][ T3965] loop3: detected capacity change from 0 to 2048 [ 50.954593][ T3954] workingset_refault_anon 15 [ 50.977426][ T3954] workingset_refault_file 775 [ 50.978212][ T3965] EXT4-fs: Ignoring removed orlov option [ 50.988073][ T3954] swap 196608 [ 50.993464][ T3965] EXT4-fs: Ignoring removed oldalloc option [ 50.994586][ T3954] swapcached 200704 [ 51.005282][ T3965] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 51.008792][ T3954] pgpgin 12624 [ 51.016075][ T28] audit: type=1400 audit(1771534002.077:257): avc: denied { read write } for pid=3966 comm="syz.4.123" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.022967][ T3954] pgpgout 12622 [ 51.045249][ T3954] pgfault 13750 [ 51.048996][ T3954] pgmajfault 16 [ 51.052973][ T3954] inactive_anon 4096 [ 51.064728][ T3954] active_anon 0 [ 51.065331][ T3421] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.068598][ T3954] inactive_file 4096 [ 51.068608][ T3954] active_file 0 [ 51.068615][ T3954] unevictable 0 [ 51.068621][ T3954] hierarchical_memory_limit 314572800 [ 51.096854][ T3954] hierarchical_memsw_limit 9223372036854771712 [ 51.098126][ T3965] 9p: Bad value for 'rfdno' [ 51.103144][ T3954] total_cache 4096 [ 51.103158][ T3954] total_rss 4096 [ 51.103166][ T3954] total_shmem 0 [ 51.103175][ T3954] total_mapped_file 4096 [ 51.103184][ T3954] total_dirty 0 [ 51.103192][ T3954] total_writeback 4096 [ 51.103200][ T3954] total_workingset_refault_anon 15 [ 51.103211][ T3954] total_workingset_refault_file 775 [ 51.103223][ T3954] total_swap 196608 [ 51.103231][ T3954] total_swapcached 200704 [ 51.103240][ T3954] total_pgpgin 12624 [ 51.103246][ T3954] total_pgpgout 12622 [ 51.103255][ T3954] total_pgfault 13750 [ 51.103263][ T3954] total_pgmajfault 16 [ 51.103270][ T3954] total_inactive_anon 4096 [ 51.103279][ T3954] total_active_anon 0 [ 51.103297][ T3954] total_inactive_file 4096 [ 51.103305][ T3954] total_active_file 0 [ 51.103312][ T3954] total_unevictable 0 [ 51.103321][ T3954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.119,pid=3954,uid=0 [ 51.103408][ T3954] Memory cgroup out of memory: Killed process 3954 (syz.2.119) total-vm:94160kB, anon-rss:1220kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 51.105237][ T28] audit: type=1400 audit(1771534002.077:258): avc: denied { open } for pid=3966 comm="syz.4.123" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.112938][ T3967] loop4: detected capacity change from 0 to 4096 [ 51.287447][ T3967] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.294261][ T3421] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.304649][ T3967] EXT4-fs: test_dummy_encryption option not supported [ 51.322624][ T3971] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 51.346764][ T3969] syzkaller0: entered promiscuous mode [ 51.350717][ T28] audit: type=1400 audit(1771534002.377:259): avc: denied { read write } for pid=3966 comm="syz.4.123" name="hidraw0" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.362667][ T3969] syzkaller0: entered allmulticast mode [ 51.397561][ T3955] syz.2.119 (3955) used greatest stack depth: 8504 bytes left [ 51.430004][ T28] audit: type=1400 audit(1771534002.377:260): avc: denied { open } for pid=3966 comm="syz.4.123" path="/dev/hidraw0" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.434001][ T3975] loop4: detected capacity change from 0 to 512 [ 51.498652][ T3975] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.551614][ T3975] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.123: bg 0: block 248: padding at end of block bitmap is not set [ 51.627674][ T3975] loop4: lost filesystem error report for type 5 error -117 [ 51.627967][ T3975] Quota error (device loop4): write_blk: dquota write failed [ 51.635725][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 51.635747][ C0] EXT4-fs (loop4): last error at time 1771534002: ext4_validate_block_bitmap:441 [ 51.665879][ T3975] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 51.676920][ T3975] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.123: Failed to acquire dquot type 1 [ 51.677874][ T3976] syzkaller0: entered promiscuous mode [ 51.688674][ T3975] loop4: lost filesystem error report for type 5 error -117 [ 51.694130][ T3976] syzkaller0: entered allmulticast mode [ 51.694573][ T3975] EXT4-fs (loop4): 1 truncate cleaned up [ 51.714846][ T3975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.791225][ T28] audit: type=1400 audit(1771534002.857:261): avc: denied { remount } for pid=3966 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.798595][ T3967] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 51.866553][ T3988] syzkaller0: entered promiscuous mode [ 51.872535][ T3988] syzkaller0: entered allmulticast mode [ 51.888621][ T3967] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.897551][ T3967] ext4 filesystem being remounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.922410][ T3967] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.123: Failed to acquire dquot type 1 [ 52.023937][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.156529][ T3999] loop2: detected capacity change from 0 to 1764 [ 52.184734][ T3999] iso9660: Unknown parameter 'de' [ 52.217272][ T4001] batadv0: entered promiscuous mode [ 52.238153][ T4001] vlan2: entered promiscuous mode [ 52.325788][ T4007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'. [ 52.491658][ T4013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 53.086230][ T4019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.123807][ T4019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.204448][ T4024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 53.282604][ T4029] syz.0.140 uses obsolete (PF_INET,SOCK_PACKET) [ 53.461993][ T4044] syz.1.147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.600202][ T4020] syz.3.138 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 53.637621][ T4020] CPU: 1 UID: 0 PID: 4020 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(full) [ 53.637655][ T4020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.637707][ T4020] Call Trace: [ 53.637713][ T4020] [ 53.637720][ T4020] __dump_stack+0x1d/0x30 [ 53.637748][ T4020] dump_stack_lvl+0x95/0xd0 [ 53.637776][ T4020] dump_stack+0x15/0x1b [ 53.637802][ T4020] dump_header+0x80/0x240 [ 53.637843][ T4020] oom_kill_process+0x295/0x350 [ 53.637869][ T4020] out_of_memory+0x97d/0xb80 [ 53.637891][ T4020] try_charge_memcg+0x62e/0xa10 [ 53.637924][ T4020] obj_cgroup_charge_pages+0x23/0xc0 [ 53.637952][ T4020] __memcg_kmem_charge_page+0x9e/0x170 [ 53.637984][ T4020] __alloc_frozen_pages_noprof+0x18a/0x360 [ 53.638014][ T4020] alloc_pages_mpol+0xb3/0x260 [ 53.638104][ T4020] alloc_pages_noprof+0x8f/0x130 [ 53.638168][ T4020] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 53.638199][ T4020] __kvmalloc_node_noprof+0x3d4/0x650 [ 53.638307][ T4020] ? futex_hash_allocate+0x190/0x9d0 [ 53.638341][ T4020] ? futex_hash_allocate+0x190/0x9d0 [ 53.638388][ T4020] futex_hash_allocate+0x190/0x9d0 [ 53.638417][ T4020] ? cap_task_prctl+0x13f/0x6e0 [ 53.638509][ T4020] futex_hash_prctl+0xd8/0xf0 [ 53.638595][ T4020] __se_sys_prctl+0xa3d/0x13f0 [ 53.638621][ T4020] __x64_sys_prctl+0x67/0x80 [ 53.638656][ T4020] x64_sys_call+0x2533/0x3020 [ 53.638688][ T4020] do_syscall_64+0x12c/0x370 [ 53.638854][ T4020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.638878][ T4020] RIP: 0033:0x7f94d899c629 [ 53.638907][ T4020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.638928][ T4020] RSP: 002b:00007f94d73ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 53.638984][ T4020] RAX: ffffffffffffffda RBX: 00007f94d8c15fa0 RCX: 00007f94d899c629 [ 53.638997][ T4020] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 53.639012][ T4020] RBP: 00007f94d8a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.639027][ T4020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.639042][ T4020] R13: 00007f94d8c16038 R14: 00007f94d8c15fa0 R15: 00007ffe59af3d48 [ 53.639060][ T4020] [ 53.893332][ T4020] memory: usage 232580kB, limit 307200kB, failcnt 268 [ 53.908120][ T4020] memory+swap: usage 201828kB, limit 9007199254740988kB, failcnt 0 [ 53.923974][ T4020] kmem: usage 168760kB, limit 9007199254740988kB, failcnt 0 [ 53.940862][ T4020] Memory cgroup stats for /syz3: [ 53.942265][ T4020] cache 0 [ 53.959644][ T4020] rss 0 [ 53.965909][ T4020] shmem 0 [ 53.972427][ T4020] mapped_file 0 [ 53.979751][ T4020] dirty 0 [ 53.985834][ T4020] writeback 0 [ 53.994659][ T4020] workingset_refault_anon 12 [ 54.004663][ T4020] workingset_refault_file 160 [ 54.009832][ T4020] swap 192512 [ 54.013703][ T4020] swapcached 204800 [ 54.017845][ T4020] pgpgin 24035 [ 54.022417][ T4020] pgpgout 24032 [ 54.026196][ T4020] pgfault 28958 [ 54.029925][ T4020] pgmajfault 10 [ 54.033632][ T4020] inactive_anon 12288 [ 54.037897][ T4020] active_anon 0 [ 54.042150][ T4020] inactive_file 0 [ 54.046087][ T4020] active_file 0 [ 54.050286][ T4020] unevictable 0 [ 54.077924][ T4020] hierarchical_memory_limit 314572800 [ 54.099634][ T4020] hierarchical_memsw_limit 9223372036854771712 [ 54.106794][ T4020] total_cache 0 [ 54.106807][ T4020] total_rss 0 [ 54.106815][ T4020] total_shmem 0 [ 54.106822][ T4020] total_mapped_file 0 [ 54.106830][ T4020] total_dirty 0 [ 54.106849][ T4020] total_writeback 0 [ 54.131308][ T4020] total_workingset_refault_anon 12 [ 54.131323][ T4020] total_workingset_refault_file 160 [ 54.131333][ T4020] total_swap 192512 [ 54.146156][ T4020] total_swapcached 204800 [ 54.146227][ T4020] total_pgpgin 24035 [ 54.146237][ T4020] total_pgpgout 24032 [ 54.146246][ T4020] total_pgfault 28958 [ 54.146255][ T4020] total_pgmajfault 10 [ 54.146263][ T4020] total_inactive_anon 12288 [ 54.146342][ T4020] total_active_anon 0 [ 54.146350][ T4020] total_inactive_file 0 [ 54.146368][ T4020] total_active_file 0 [ 54.146375][ T4020] total_unevictable 0 [ 54.146428][ T4020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.138,pid=4018,uid=0 [ 54.146519][ T4020] Memory cgroup out of memory: Killed process 4018 (syz.3.138) total-vm:94292kB, anon-rss:1228kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 54.316613][ T4067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 55.339077][ T4092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 55.568333][ T28] kauditd_printk_skb: 199 callbacks suppressed [ 55.568395][ T28] audit: type=1400 audit(1771534006.637:460): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 55.624317][ T4095] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 55.640128][ T4062] syz.4.155 (4062) used greatest stack depth: 8008 bytes left [ 55.685038][ T28] audit: type=1400 audit(1771534006.627:459): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 55.714070][ T4091] syz.0.164 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 55.740912][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(full) [ 55.740942][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.740957][ T4091] Call Trace: [ 55.740964][ T4091] [ 55.740972][ T4091] __dump_stack+0x1d/0x30 [ 55.741000][ T4091] dump_stack_lvl+0x95/0xd0 [ 55.741026][ T4091] dump_stack+0x15/0x1b [ 55.741047][ T4091] dump_header+0x80/0x240 [ 55.741079][ T4091] oom_kill_process+0x295/0x350 [ 55.741109][ T4091] out_of_memory+0x97d/0xb80 [ 55.741129][ T4091] try_charge_memcg+0x62e/0xa10 [ 55.741169][ T4091] obj_cgroup_charge_pages+0x23/0xc0 [ 55.741257][ T4091] __memcg_kmem_charge_page+0x9e/0x170 [ 55.741335][ T4091] __alloc_frozen_pages_noprof+0x18a/0x360 [ 55.741424][ T4091] alloc_pages_mpol+0xb3/0x260 [ 55.741451][ T4091] alloc_pages_noprof+0x8f/0x130 [ 55.741553][ T4091] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 55.741595][ T4091] __kvmalloc_node_noprof+0x3d4/0x650 [ 55.741620][ T4091] ? futex_hash_allocate+0x190/0x9d0 [ 55.741694][ T4091] ? futex_hash_allocate+0x190/0x9d0 [ 55.741724][ T4091] futex_hash_allocate+0x190/0x9d0 [ 55.741786][ T4091] ? cap_task_prctl+0x13f/0x6e0 [ 55.741808][ T4091] futex_hash_prctl+0xd8/0xf0 [ 55.741912][ T4091] __se_sys_prctl+0xa3d/0x13f0 [ 55.741941][ T4091] __x64_sys_prctl+0x67/0x80 [ 55.742000][ T4091] x64_sys_call+0x2533/0x3020 [ 55.742030][ T4091] do_syscall_64+0x12c/0x370 [ 55.742069][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.742094][ T4091] RIP: 0033:0x7f31b686c629 [ 55.742150][ T4091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.742182][ T4091] RSP: 002b:00007f31b52c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 55.742208][ T4091] RAX: ffffffffffffffda RBX: 00007f31b6ae5fa0 RCX: 00007f31b686c629 [ 55.742222][ T4091] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 55.742296][ T4091] RBP: 00007f31b6902b39 R08: 0000000000000000 R09: 0000000000000000 [ 55.742308][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.742363][ T4091] R13: 00007f31b6ae6038 R14: 00007f31b6ae5fa0 R15: 00007ffd9aeef4c8 [ 55.742383][ T4091] [ 55.742446][ T28] audit: type=1400 audit(1771534006.697:461): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.006260][ T4091] memory: usage 274956kB, limit 307200kB, failcnt 716 [ 56.014331][ T4091] memory+swap: usage 271764kB, limit 9007199254740988kB, failcnt 0 [ 56.023086][ T4091] kmem: usage 263896kB, limit 9007199254740988kB, failcnt 0 [ 56.031428][ T4091] Memory cgroup stats for /syz0: [ 56.031629][ T4091] cache 0 [ 56.040207][ T4091] rss 28672 [ 56.043536][ T4091] shmem 0 [ 56.046656][ T4091] mapped_file 0 [ 56.050207][ T4091] dirty 0 [ 56.053274][ T4091] writeback 0 [ 56.056849][ T4091] workingset_refault_anon 76 [ 56.062718][ T4091] workingset_refault_file 606 [ 56.067511][ T4091] swap 172032 [ 56.071096][ T4091] swapcached 335872 [ 56.075219][ T4091] pgpgin 14202 [ 56.078830][ T4091] pgpgout 14195 [ 56.084675][ T28] audit: type=1400 audit(1771534006.727:462): avc: denied { read write } for pid=4096 comm="syz.2.165" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 56.110600][ T4091] pgfault 16008 [ 56.114461][ T4091] pgmajfault 72 [ 56.118019][ T4091] inactive_anon 0 [ 56.149639][ T4091] active_anon 28672 [ 56.153961][ T28] audit: type=1400 audit(1771534006.727:463): avc: denied { create } for pid=4096 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 56.174583][ T4091] inactive_file 0 [ 56.181532][ T4091] active_file 0 [ 56.185196][ T4091] unevictable 0 [ 56.194595][ T4104] xfrm0 speed is unknown, defaulting to 1000 [ 56.203105][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 56.217600][ T4091] hierarchical_memory_limit 314572800 [ 56.226764][ T4091] hierarchical_memsw_limit 9223372036854771712 [ 56.233346][ T28] audit: type=1400 audit(1771534006.727:464): avc: denied { create } for pid=4096 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 56.277805][ T4091] total_cache 0 [ 56.288634][ T4091] total_rss 28672 [ 56.299558][ T4091] total_shmem 0 [ 56.309068][ T4091] total_mapped_file 0 [ 56.319929][ T4091] total_dirty 0 [ 56.335615][ T4091] total_writeback 0 [ 56.338504][ T28] audit: type=1400 audit(1771534006.727:465): avc: denied { read } for pid=4096 comm="syz.2.165" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 56.378945][ T4091] total_workingset_refault_anon 76 [ 56.391816][ T4091] total_workingset_refault_file 606 [ 56.405083][ T28] audit: type=1400 audit(1771534006.797:466): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.405121][ T28] audit: type=1400 audit(1771534006.797:467): avc: denied { create } for pid=4098 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 56.405181][ T28] audit: type=1400 audit(1771534006.797:468): avc: denied { create } for pid=4098 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 56.407550][ T4091] total_swap 172032 [ 56.528192][ T4091] total_swapcached 335872 [ 56.532849][ T4091] total_pgpgin 14202 [ 56.543361][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 56.554753][ T4091] total_pgpgout 14195 [ 56.560049][ T4091] total_pgfault 16008 [ 56.560061][ T4091] total_pgmajfault 72 [ 56.560068][ T4091] total_inactive_anon 0 [ 56.560076][ T4091] total_active_anon 28672 [ 56.560085][ T4091] total_inactive_file 0 [ 56.560094][ T4091] total_active_file 0 [ 56.560103][ T4091] total_unevictable 0 [ 56.560112][ T4091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.164,pid=4090,uid=0 [ 56.560199][ T4091] Memory cgroup out of memory: Killed process 4091 (syz.0.164) total-vm:94292kB, anon-rss:1336kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 56.834426][ T4126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 56.904451][ T4123] syz.0.175 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 56.904491][ T4123] CPU: 0 UID: 0 PID: 4123 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) [ 56.904523][ T4123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.904534][ T4123] Call Trace: [ 56.904541][ T4123] [ 56.904549][ T4123] __dump_stack+0x1d/0x30 [ 56.904652][ T4123] dump_stack_lvl+0x95/0xd0 [ 56.904680][ T4123] dump_stack+0x15/0x1b [ 56.904705][ T4123] dump_header+0x80/0x240 [ 56.904725][ T4123] oom_kill_process+0x295/0x350 [ 56.904807][ T4123] out_of_memory+0x97d/0xb80 [ 56.904831][ T4123] try_charge_memcg+0x62e/0xa10 [ 56.904933][ T4123] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 56.905079][ T4123] __swap_cache_prepare_and_add+0x386/0x530 [ 56.905185][ T4123] swap_cache_alloc_folio+0xa2/0x120 [ 56.905215][ T4123] swap_cluster_readahead+0x26e/0x3d0 [ 56.905252][ T4123] swapin_readahead+0xde/0x840 [ 56.905311][ T4123] ? _raw_spin_unlock+0x9/0x30 [ 56.905338][ T4123] ? swap_put_entries_cluster+0x385/0x3a0 [ 56.905372][ T4123] ? swap_put_entries_cluster+0x131/0x3a0 [ 56.905472][ T4123] ? __rcu_read_unlock+0x4e/0x70 [ 56.905498][ T4123] ? swap_cache_get_folio+0x26f/0x280 [ 56.905635][ T4123] do_swap_page+0x309/0x2210 [ 56.905669][ T4123] ? css_rstat_updated+0xbb/0x280 [ 56.905693][ T4123] ? __rcu_read_lock+0x36/0x50 [ 56.905773][ T4123] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 56.905805][ T4123] handle_mm_fault+0xb40/0x3020 [ 56.905838][ T4123] ? vma_start_read+0x1c7/0x2c0 [ 56.905870][ T4123] do_user_addr_fault+0x62f/0x1050 [ 56.905902][ T4123] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 56.905924][ T4123] ? trace_page_fault_user+0x1f/0xe0 [ 56.905988][ T4123] exc_page_fault+0x62/0xa0 [ 56.906027][ T4123] asm_exc_page_fault+0x26/0x30 [ 56.906052][ T4123] RIP: 0033:0x7f31b673a04c [ 56.906074][ T4123] Code: 4a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 56.906157][ T4123] RSP: 002b:00007ffd9aeef630 EFLAGS: 00010206 [ 56.906177][ T4123] RAX: 0000000000000000 RBX: 00007f31b6ae5fa0 RCX: 0000555581670808 [ 56.906202][ T4123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.906219][ T4123] RBP: 00007f31b6ae7da0 R08: 0000000000000000 R09: 0000000000000000 [ 56.906231][ T4123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000e0b4 [ 56.906245][ T4123] R13: 00007f31b6ae618c R14: 000000000000de22 R15: 00007f31b6ae6180 [ 56.906279][ T4123] [ 56.906288][ T4123] memory: usage 307200kB, limit 307200kB, failcnt 832 [ 56.906377][ T4123] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 56.906395][ T4123] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 56.906418][ T4123] Memory cgroup stats for /syz0: [ 56.906678][ T4123] cache 4096 [ 56.906690][ T4123] rss 0 [ 56.906699][ T4123] shmem 0 [ 56.906708][ T4123] mapped_file 0 [ 56.906750][ T4123] dirty 0 [ 56.906758][ T4123] writeback 0 [ 56.906766][ T4123] workingset_refault_anon 110 [ 56.906775][ T4123] workingset_refault_file 734 [ 56.906783][ T4123] swap 192512 [ 56.906791][ T4123] swapcached 368640 [ 56.906798][ T4123] pgpgin 14402 [ 56.906806][ T4123] pgpgout 14400 [ 56.906814][ T4123] pgfault 16214 [ 56.906822][ T4123] pgmajfault 94 [ 56.906831][ T4123] inactive_anon 0 [ 56.906839][ T4123] active_anon 4096 [ 56.906848][ T4123] inactive_file 0 [ 56.906887][ T4123] active_file 4096 [ 56.906896][ T4123] unevictable 0 [ 56.906905][ T4123] hierarchical_memory_limit 314572800 [ 56.906927][ T4123] hierarchical_memsw_limit 9223372036854771712 [ 56.906938][ T4123] total_cache 4096 [ 56.906947][ T4123] total_rss 0 [ 56.906955][ T4123] total_shmem 0 [ 56.906964][ T4123] total_mapped_file 0 [ 56.906973][ T4123] total_dirty 0 [ 56.906982][ T4123] total_writeback 0 [ 56.906992][ T4123] total_workingset_refault_anon 110 [ 56.907002][ T4123] total_workingset_refault_file 734 [ 56.907011][ T4123] total_swap 192512 [ 56.907061][ T4123] total_swapcached 368640 [ 56.907068][ T4123] total_pgpgin 14402 [ 56.907075][ T4123] total_pgpgout 14400 [ 56.907082][ T4123] total_pgfault 16214 [ 56.907089][ T4123] total_pgmajfault 94 [ 56.907096][ T4123] total_inactive_anon 0 [ 56.907103][ T4123] total_active_anon 4096 [ 56.907110][ T4123] total_inactive_file 0 [ 56.907117][ T4123] total_active_file 4096 [ 56.907151][ T4123] total_unevictable 0 [ 56.907160][ T4123] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.175,pid=4123,uid=0 [ 56.907269][ T4123] Memory cgroup out of memory: Killed process 4123 (syz.0.175) total-vm:94292kB, anon-rss:1224kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 57.021616][ T4131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'. [ 57.830462][ T4151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 58.067547][ T4150] syz.3.186 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 58.067616][ T4150] CPU: 0 UID: 0 PID: 4150 Comm: syz.3.186 Not tainted syzkaller #0 PREEMPT(full) [ 58.067644][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.067658][ T4150] Call Trace: [ 58.067666][ T4150] [ 58.067675][ T4150] __dump_stack+0x1d/0x30 [ 58.067706][ T4150] dump_stack_lvl+0x95/0xd0 [ 58.067739][ T4150] dump_stack+0x15/0x1b [ 58.067765][ T4150] dump_header+0x80/0x240 [ 58.067792][ T4150] oom_kill_process+0x295/0x350 [ 58.067812][ T4150] out_of_memory+0x97d/0xb80 [ 58.067835][ T4150] try_charge_memcg+0x62e/0xa10 [ 58.067878][ T4150] obj_cgroup_charge_pages+0x23/0xc0 [ 58.067947][ T4150] __memcg_kmem_charge_page+0x9e/0x170 [ 58.067972][ T4150] __alloc_frozen_pages_noprof+0x18a/0x360 [ 58.068006][ T4150] alloc_pages_mpol+0xb3/0x260 [ 58.068071][ T4150] alloc_pages_noprof+0x8f/0x130 [ 58.068099][ T4150] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 58.068138][ T4150] __kvmalloc_node_noprof+0x3d4/0x650 [ 58.068194][ T4150] ? futex_hash_allocate+0x190/0x9d0 [ 58.068228][ T4150] ? futex_hash_allocate+0x190/0x9d0 [ 58.068360][ T4150] futex_hash_allocate+0x190/0x9d0 [ 58.068386][ T4150] ? cap_task_prctl+0x13f/0x6e0 [ 58.068467][ T4150] futex_hash_prctl+0xd8/0xf0 [ 58.068499][ T4150] __se_sys_prctl+0xa3d/0x13f0 [ 58.068530][ T4150] __x64_sys_prctl+0x67/0x80 [ 58.068564][ T4150] x64_sys_call+0x2533/0x3020 [ 58.068588][ T4150] do_syscall_64+0x12c/0x370 [ 58.068628][ T4150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.068674][ T4150] RIP: 0033:0x7f94d899c629 [ 58.068691][ T4150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.068707][ T4150] RSP: 002b:00007f94d73ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 58.068737][ T4150] RAX: ffffffffffffffda RBX: 00007f94d8c15fa0 RCX: 00007f94d899c629 [ 58.068754][ T4150] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 58.068767][ T4150] RBP: 00007f94d8a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 58.068779][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.068793][ T4150] R13: 00007f94d8c16038 R14: 00007f94d8c15fa0 R15: 00007ffe59af3d48 [ 58.068882][ T4150] [ 58.068993][ T4150] memory: usage 307200kB, limit 307200kB, failcnt 330 [ 58.069009][ T4150] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 58.069022][ T4150] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 58.069033][ T4150] Memory cgroup stats for /syz3: [ 58.069241][ T4150] cache 8192 [ 58.069272][ T4150] rss 32768 [ 58.069281][ T4150] shmem 0 [ 58.069290][ T4150] mapped_file 4096 [ 58.069299][ T4150] dirty 0 [ 58.069307][ T4150] writeback 0 [ 58.069375][ T4150] workingset_refault_anon 27 [ 58.069383][ T4150] workingset_refault_file 416 [ 58.069465][ T4150] swap 135168 [ 58.069473][ T4150] swapcached 299008 [ 58.069480][ T4150] pgpgin 28307 [ 58.069487][ T4150] pgpgout 28290 [ 58.069494][ T4150] pgfault 34659 [ 58.069503][ T4150] pgmajfault 24 [ 58.069510][ T4150] inactive_anon 57344 [ 58.069519][ T4150] active_anon 4096 [ 58.069528][ T4150] inactive_file 4096 [ 58.069537][ T4150] active_file 4096 [ 58.069569][ T4150] unevictable 0 [ 58.069576][ T4150] hierarchical_memory_limit 314572800 [ 58.069585][ T4150] hierarchical_memsw_limit 9223372036854771712 [ 58.069593][ T4150] total_cache 8192 [ 58.069600][ T4150] total_rss 32768 [ 58.069607][ T4150] total_shmem 0 [ 58.069614][ T4150] total_mapped_file 4096 [ 58.069621][ T4150] total_dirty 0 [ 58.069628][ T4150] total_writeback 0 [ 58.069659][ T4150] total_workingset_refault_anon 27 [ 58.069668][ T4150] total_workingset_refault_file 416 [ 58.069676][ T4150] total_swap 135168 [ 58.069683][ T4150] total_swapcached 299008 [ 58.069690][ T4150] total_pgpgin 28307 [ 58.069698][ T4150] total_pgpgout 28290 [ 58.069705][ T4150] total_pgfault 34659 [ 58.069714][ T4150] total_pgmajfault 24 [ 58.069776][ T4150] total_inactive_anon 57344 [ 58.069786][ T4150] total_active_anon 4096 [ 58.069796][ T4150] total_inactive_file 4096 [ 58.069805][ T4150] total_active_file 4096 [ 58.069815][ T4150] total_unevictable 0 [ 58.069823][ T4150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.186,pid=4149,uid=0 [ 58.069930][ T4150] Memory cgroup out of memory: Killed process 4149 (syz.3.186) total-vm:94160kB, anon-rss:1256kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 59.017966][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 59.269206][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 59.421853][ T4183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 59.886588][ T4057] syz.4.152 (4057) used greatest stack depth: 7928 bytes left [ 59.938702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 60.174599][ T4190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 60.540974][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 60.950387][ T28] kauditd_printk_skb: 327 callbacks suppressed [ 60.950406][ T28] audit: type=1400 audit(1771534012.017:796): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.027941][ T28] audit: type=1400 audit(1771534012.067:797): avc: denied { read write } for pid=4217 comm="syz.4.212" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.108180][ T28] audit: type=1400 audit(1771534012.077:798): avc: denied { create } for pid=4215 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 61.168104][ T28] audit: type=1400 audit(1771534012.077:799): avc: denied { create } for pid=4215 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 61.205239][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 61.228115][ T28] audit: type=1400 audit(1771534012.087:800): avc: denied { open } for pid=4215 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 61.282111][ T4222] xfrm0 speed is unknown, defaulting to 1000 [ 61.298942][ T28] audit: type=1400 audit(1771534012.087:801): avc: denied { prog_load } for pid=4215 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.348099][ T28] audit: type=1400 audit(1771534012.087:802): avc: denied { open } for pid=4217 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 61.428137][ T28] audit: type=1400 audit(1771534012.087:803): avc: denied { allowed } for pid=4217 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 61.478105][ T28] audit: type=1400 audit(1771534012.087:804): avc: denied { mounton } for pid=4215 comm="syz.3.222" path="/52" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 61.548084][ T28] audit: type=1400 audit(1771534012.087:805): avc: denied { open } for pid=4217 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 61.848567][ T4247] netlink: 'syz.3.224': attribute type 13 has an invalid length. [ 61.926928][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.934762][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.035268][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.070684][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.208740][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.248267][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.278169][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.318177][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.474214][ T4282] netlink: 'syz.2.239': attribute type 39 has an invalid length. [ 62.677064][ T4291] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.684376][ T4291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.694979][ T4291] vhci_hcd vhci_hcd.0: Device attached [ 62.742523][ T4295] SET target dimension over the limit! [ 62.834724][ T4301] xfrm0 speed is unknown, defaulting to 1000 [ 62.928143][ T3408] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 62.968070][ T4301] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 63.506748][ T4292] vhci_hcd: connection reset by peer [ 63.512751][ T2127] vhci_hcd vhci_hcd.2: stop threads [ 63.518027][ T2127] vhci_hcd vhci_hcd.2: release socket [ 63.524157][ T2127] vhci_hcd vhci_hcd.2: disconnect device [ 64.160155][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 64.270515][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.283099][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.711506][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 64.779494][ T4369] x_tables: duplicate underflow at hook 2 [ 65.059524][ T4350] syz.2.266 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 65.112885][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.2.266 Not tainted syzkaller #0 PREEMPT(full) [ 65.112929][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.112941][ T4350] Call Trace: [ 65.112948][ T4350] [ 65.112956][ T4350] __dump_stack+0x1d/0x30 [ 65.113060][ T4350] dump_stack_lvl+0x95/0xd0 [ 65.113088][ T4350] dump_stack+0x15/0x1b [ 65.113114][ T4350] dump_header+0x80/0x240 [ 65.113196][ T4350] oom_kill_process+0x295/0x350 [ 65.113218][ T4350] out_of_memory+0x97d/0xb80 [ 65.113315][ T4350] try_charge_memcg+0x62e/0xa10 [ 65.113349][ T4350] obj_cgroup_charge_pages+0x23/0xc0 [ 65.113380][ T4350] __memcg_kmem_charge_page+0x9e/0x170 [ 65.113413][ T4350] __alloc_frozen_pages_noprof+0x18a/0x360 [ 65.113509][ T4350] alloc_pages_mpol+0xb3/0x260 [ 65.113542][ T4350] alloc_pages_noprof+0x8f/0x130 [ 65.113622][ T4350] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 65.113662][ T4350] __kvmalloc_node_noprof+0x3d4/0x650 [ 65.113689][ T4350] ? futex_hash_allocate+0x190/0x9d0 [ 65.113795][ T4350] ? futex_hash_allocate+0x190/0x9d0 [ 65.113826][ T4350] futex_hash_allocate+0x190/0x9d0 [ 65.113861][ T4350] ? cap_task_prctl+0x13f/0x6e0 [ 65.113914][ T4350] futex_hash_prctl+0xd8/0xf0 [ 65.113967][ T4350] __se_sys_prctl+0xa3d/0x13f0 [ 65.114001][ T4350] __x64_sys_prctl+0x67/0x80 [ 65.114027][ T4350] x64_sys_call+0x2533/0x3020 [ 65.114096][ T4350] do_syscall_64+0x12c/0x370 [ 65.114127][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.114147][ T4350] RIP: 0033:0x7f8601a1c629 [ 65.114166][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.114209][ T4350] RSP: 002b:00007f8600477028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 65.114232][ T4350] RAX: ffffffffffffffda RBX: 00007f8601c95fa0 RCX: 00007f8601a1c629 [ 65.114248][ T4350] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 65.114264][ T4350] RBP: 00007f8601ab2b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.114278][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.114292][ T4350] R13: 00007f8601c96038 R14: 00007f8601c95fa0 R15: 00007ffd8737abf8 [ 65.114313][ T4350] [ 65.114324][ T4350] memory: usage 307200kB, limit 307200kB, failcnt 697 [ 65.160342][ T4378] netlink: 'syz.3.274': attribute type 36 has an invalid length. [ 65.253616][ T4350] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 65.260497][ T4378] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 65.290357][ T4350] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 65.330189][ T4378] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.368338][ T4350] Memory cgroup stats for /syz2: [ 65.402171][ T4350] cache 0 [ 65.404826][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 65.407248][ T4350] rss 0 [ 65.422794][ T4350] shmem 0 [ 65.426308][ T4350] mapped_file 0 [ 65.430187][ T4350] dirty 0 [ 65.433200][ T4350] writeback 0 [ 65.436761][ T4350] workingset_refault_anon 96 [ 65.441858][ T4350] workingset_refault_file 1108 [ 65.447002][ T4350] swap 196608 [ 65.450933][ T4350] swapcached 299008 [ 65.455269][ T4350] pgpgin 29203 [ 65.459548][ T4350] pgpgout 29202 [ 65.523139][ T4350] pgfault 27687 [ 65.528376][ T4350] pgmajfault 53 [ 65.543355][ T4350] inactive_anon 0 [ 65.553143][ T4350] active_anon 4096 [ 65.563241][ T4350] inactive_file 0 [ 65.569276][ T4350] active_file 0 [ 65.572938][ T4350] unevictable 0 [ 65.576642][ T4350] hierarchical_memory_limit 314572800 [ 65.582530][ T4350] hierarchical_memsw_limit 9223372036854771712 [ 65.588913][ T4350] total_cache 0 [ 65.592416][ T4350] total_rss 0 [ 65.595831][ T4350] total_shmem 0 [ 65.599569][ T4350] total_mapped_file 0 [ 65.603836][ T4350] total_dirty 0 [ 65.607619][ T4350] total_writeback 0 [ 65.628672][ T4350] total_workingset_refault_anon 96 [ 65.652733][ T4350] total_workingset_refault_file 1108 [ 65.660040][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 65.715760][ T4350] total_swap 196608 [ 65.769305][ T4350] total_swapcached 299008 [ 65.783703][ T4350] total_pgpgin 29203 [ 65.797390][ T4350] total_pgpgout 29202 [ 65.812265][ T4350] total_pgfault 27687 [ 65.827034][ T4350] total_pgmajfault 53 [ 65.839739][ T4350] total_inactive_anon 0 [ 65.857107][ T4350] total_active_anon 4096 [ 65.870330][ T4350] total_inactive_file 0 [ 65.884886][ T4350] total_active_file 0 [ 65.897815][ T4350] total_unevictable 0 [ 65.910669][ T4350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.266,pid=4349,uid=0 [ 65.947318][ T4350] Memory cgroup out of memory: Killed process 4349 (syz.2.266) total-vm:94160kB, anon-rss:1220kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 65.994460][ T28] kauditd_printk_skb: 630 callbacks suppressed [ 65.994487][ T28] audit: type=1400 audit(2000000002.600:1436): avc: denied { open } for pid=4407 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 66.057198][ T28] audit: type=1400 audit(2000000002.600:1437): avc: denied { create } for pid=4407 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 66.110773][ T28] audit: type=1400 audit(2000000002.620:1438): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.197725][ T28] audit: type=1400 audit(2000000002.640:1439): avc: denied { read write } for pid=4407 comm="syz.1.288" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.288183][ T28] audit: type=1400 audit(2000000002.640:1440): avc: denied { open } for pid=4407 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 66.362517][ T28] audit: type=1400 audit(2000000002.640:1441): avc: denied { allowed } for pid=4407 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 66.431457][ T28] audit: type=1400 audit(2000000002.640:1442): avc: denied { open } for pid=4410 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 66.486511][ T28] audit: type=1400 audit(2000000002.640:1443): avc: denied { bpf } for pid=4410 comm="syz.3.289" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 66.537925][ T28] audit: type=1400 audit(2000000002.640:1444): avc: denied { map_create } for pid=4410 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.623476][ T28] audit: type=1400 audit(2000000002.660:1445): avc: denied { read write } for pid=4410 comm="syz.3.289" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.758509][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.781264][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.853374][ T3401] xfrm0 speed is unknown, defaulting to 1000 [ 67.938187][ T3408] usb 5-1: enqueue for inactive port 0 [ 67.948310][ T3408] usb 5-1: enqueue for inactive port 0 [ 68.038248][ T3408] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 68.152093][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 69.094095][ T4442] syz.0.300 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 69.160680][ T4442] CPU: 0 UID: 0 PID: 4442 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 69.160741][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.160802][ T4442] Call Trace: [ 69.160808][ T4442] [ 69.160817][ T4442] __dump_stack+0x1d/0x30 [ 69.160847][ T4442] dump_stack_lvl+0x95/0xd0 [ 69.160882][ T4442] dump_stack+0x15/0x1b [ 69.160906][ T4442] dump_header+0x80/0x240 [ 69.160933][ T4442] oom_kill_process+0x295/0x350 [ 69.160959][ T4442] out_of_memory+0x97d/0xb80 [ 69.160980][ T4442] try_charge_memcg+0x62e/0xa10 [ 69.161092][ T4442] obj_cgroup_charge_pages+0x23/0xc0 [ 69.161123][ T4442] __memcg_kmem_charge_page+0x9e/0x170 [ 69.161184][ T4442] __alloc_frozen_pages_noprof+0x18a/0x360 [ 69.161215][ T4442] alloc_pages_mpol+0xb3/0x260 [ 69.161248][ T4442] alloc_pages_noprof+0x8f/0x130 [ 69.161313][ T4442] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 69.161349][ T4442] __kvmalloc_node_noprof+0x3d4/0x650 [ 69.161377][ T4442] ? futex_hash_allocate+0x190/0x9d0 [ 69.161440][ T4442] ? futex_hash_allocate+0x190/0x9d0 [ 69.161551][ T4442] futex_hash_allocate+0x190/0x9d0 [ 69.161686][ T4442] ? cap_task_prctl+0x13f/0x6e0 [ 69.161711][ T4442] futex_hash_prctl+0xd8/0xf0 [ 69.161738][ T4442] __se_sys_prctl+0xa3d/0x13f0 [ 69.161765][ T4442] __x64_sys_prctl+0x67/0x80 [ 69.161805][ T4442] x64_sys_call+0x2533/0x3020 [ 69.161834][ T4442] do_syscall_64+0x12c/0x370 [ 69.161869][ T4442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.161892][ T4442] RIP: 0033:0x7f31b686c629 [ 69.161917][ T4442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.161938][ T4442] RSP: 002b:00007f31b52c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 69.161977][ T4442] RAX: ffffffffffffffda RBX: 00007f31b6ae5fa0 RCX: 00007f31b686c629 [ 69.161995][ T4442] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 69.162010][ T4442] RBP: 00007f31b6902b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.162025][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.162073][ T4442] R13: 00007f31b6ae6038 R14: 00007f31b6ae5fa0 R15: 00007ffd9aeef4c8 [ 69.162094][ T4442] [ 69.162103][ T4442] memory: usage 307200kB, limit 307200kB, failcnt 1158 [ 69.455342][ T4442] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 69.478694][ T4442] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 69.491487][ T4442] Memory cgroup stats for /syz0: [ 69.491730][ T4442] cache 12288 [ 69.518231][ T4442] rss 4096 [ 69.522053][ T4442] shmem 0 [ 69.528374][ T4442] mapped_file 12288 [ 69.538305][ T4442] dirty 0 [ 69.541611][ T4442] writeback 0 [ 69.551697][ T4442] workingset_refault_anon 148 [ 69.561791][ T4442] workingset_refault_file 1354 [ 69.571995][ T4442] swap 196608 [ 69.575368][ T4442] swapcached 487424 [ 69.588152][ T4442] pgpgin 32326 [ 69.598256][ T4442] pgpgout 32322 [ 69.601827][ T4442] pgfault 31180 [ 69.615353][ T4442] pgmajfault 123 [ 69.619721][ T4442] inactive_anon 4096 [ 69.628184][ T4442] active_anon 0 [ 69.631760][ T4442] inactive_file 12288 [ 69.636115][ T4442] active_file 0 [ 69.658123][ T4442] unevictable 0 [ 69.661884][ T4442] hierarchical_memory_limit 314572800 [ 69.688110][ T4442] hierarchical_memsw_limit 9223372036854771712 [ 69.694844][ T4442] total_cache 12288 [ 69.708078][ T4442] total_rss 4096 [ 69.713582][ T4442] total_shmem 0 [ 69.734437][ T4442] total_mapped_file 12288 [ 69.739862][ T4442] total_dirty 0 [ 69.743795][ T4442] total_writeback 0 [ 69.747892][ T4442] total_workingset_refault_anon 148 [ 69.774052][ T4442] total_workingset_refault_file 1354 [ 69.788103][ T4442] total_swap 196608 [ 69.793161][ T4442] total_swapcached 487424 [ 69.797881][ T4442] total_pgpgin 32326 [ 69.818122][ T4442] total_pgpgout 32322 [ 69.822405][ T4442] total_pgfault 31180 [ 69.826655][ T4442] total_pgmajfault 123 [ 69.838126][ T4442] total_inactive_anon 4096 [ 69.843766][ T4442] total_active_anon 0 [ 69.868087][ T4442] total_inactive_file 12288 [ 69.873427][ T4442] total_active_file 0 [ 69.877943][ T4442] total_unevictable 0 [ 69.898115][ T4442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.300,pid=4441,uid=0 [ 69.928129][ T4442] Memory cgroup out of memory: Killed process 4441 (syz.0.300) total-vm:94292kB, anon-rss:1224kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 70.297029][ T4466] syz.2.308 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 70.316158][ T4466] CPU: 1 UID: 0 PID: 4466 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(full) [ 70.316191][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.316264][ T4466] Call Trace: [ 70.316271][ T4466] [ 70.316278][ T4466] __dump_stack+0x1d/0x30 [ 70.316308][ T4466] dump_stack_lvl+0x95/0xd0 [ 70.316333][ T4466] dump_stack+0x15/0x1b [ 70.316422][ T4466] dump_header+0x80/0x240 [ 70.316447][ T4466] oom_kill_process+0x295/0x350 [ 70.316479][ T4466] out_of_memory+0x97d/0xb80 [ 70.316515][ T4466] try_charge_memcg+0x62e/0xa10 [ 70.316649][ T4466] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 70.316684][ T4466] __swap_cache_prepare_and_add+0x386/0x530 [ 70.316821][ T4466] swap_cache_alloc_folio+0xa2/0x120 [ 70.316852][ T4466] swap_cluster_readahead+0x26e/0x3d0 [ 70.316914][ T4466] swapin_readahead+0xde/0x840 [ 70.316942][ T4466] ? __rcu_read_unlock+0x4e/0x70 [ 70.317015][ T4466] ? __perf_event_task_sched_in+0xa65/0xad0 [ 70.317039][ T4466] ? __list_add_valid_or_report+0x38/0xe0 [ 70.317077][ T4466] ? __rcu_read_unlock+0x4e/0x70 [ 70.317099][ T4466] ? swap_cache_get_folio+0x26f/0x280 [ 70.317128][ T4466] do_swap_page+0x309/0x2210 [ 70.317238][ T4466] ? __schedule+0x85a/0xd40 [ 70.317263][ T4466] ? __rcu_read_lock+0x36/0x50 [ 70.317285][ T4466] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 70.317437][ T4466] handle_mm_fault+0xb40/0x3020 [ 70.317465][ T4466] ? vma_start_read+0x1c7/0x2c0 [ 70.317557][ T4466] do_user_addr_fault+0x62f/0x1050 [ 70.317589][ T4466] ? trace_page_fault_user+0x1f/0xe0 [ 70.317716][ T4466] exc_page_fault+0x62/0xa0 [ 70.317745][ T4466] asm_exc_page_fault+0x26/0x30 [ 70.317767][ T4466] RIP: 0033:0x7f86018ea04c [ 70.317786][ T4466] Code: 4a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 70.317804][ T4466] RSP: 002b:00007ffd8737ad60 EFLAGS: 00010202 [ 70.317873][ T4466] RAX: 0000000000000000 RBX: 00007f8601c97080 RCX: 000055558a1dc808 [ 70.317888][ T4466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.317902][ T4466] RBP: 00007f8601c97da0 R08: 0000000000000000 R09: 0000000000000000 [ 70.317915][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001132a [ 70.317929][ T4466] R13: 00007f8601c9609c R14: 0000000000011058 R15: 00007f8601c96090 [ 70.317949][ T4466] [ 70.317996][ T4466] memory: usage 307200kB, limit 307200kB, failcnt 1468 [ 70.600679][ T4466] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 70.609165][ T4466] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 70.612260][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 70.634379][ T4466] Memory cgroup stats for /syz2: [ 70.634772][ T4466] cache 0 [ 70.662944][ T4466] rss 0 [ 70.666799][ T4466] shmem 0 [ 70.670006][ T4466] mapped_file 0 [ 70.674602][ T4466] dirty 0 [ 70.677783][ T4466] writeback 16384 [ 70.695105][ T4466] workingset_refault_anon 132 [ 70.704798][ T4466] workingset_refault_file 1430 [ 70.714559][ T4466] swap 180224 [ 70.721697][ T4466] swapcached 425984 [ 70.730783][ T4466] pgpgin 34306 [ 70.878309][ T4466] pgpgout 34301 [ 70.884194][ T4466] pgfault 34994 [ 70.921396][ T4466] pgmajfault 83 [ 70.925245][ T4466] inactive_anon 20480 [ 70.930071][ T4466] active_anon 0 [ 70.934514][ T4466] inactive_file 0 [ 70.939887][ T4466] active_file 0 [ 70.945492][ T4466] unevictable 0 [ 70.950404][ T4466] hierarchical_memory_limit 314572800 [ 70.957451][ T4466] hierarchical_memsw_limit 9223372036854771712 [ 70.966517][ T4466] total_cache 0 [ 70.972425][ T4466] total_rss 0 [ 70.976780][ T4466] total_shmem 0 [ 70.981869][ T4466] total_mapped_file 0 [ 70.986979][ T4466] total_dirty 0 [ 71.028101][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 71.028123][ T28] audit: type=1400 audit(2000000007.600:1665): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 71.138147][ T4466] total_writeback 16384 [ 71.143864][ T4466] total_workingset_refault_anon 132 [ 71.161842][ T28] audit: type=1400 audit(2000000007.770:1666): avc: denied { prog_load } for pid=4496 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.164023][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.195544][ T4466] total_workingset_refault_file 1430 [ 71.210267][ T4466] total_swap 180224 [ 71.219215][ T4497] bridge_slave_1: left allmulticast mode [ 71.222598][ T4466] total_swapcached 425984 [ 71.226502][ T4497] bridge_slave_1: left promiscuous mode [ 71.247542][ T4466] total_pgpgin 34306 [ 71.252499][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.258014][ T28] audit: type=1400 audit(2000000007.770:1667): avc: denied { prog_load } for pid=4496 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.281106][ T4466] total_pgpgout 34301 [ 71.296228][ T4497] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 71.324777][ T4466] total_pgfault 34994 [ 71.352786][ T28] audit: type=1400 audit(2000000007.770:1668): avc: denied { prog_load } for pid=4496 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.358263][ T4466] total_pgmajfault 83 [ 71.448143][ T28] audit: type=1400 audit(2000000007.770:1669): avc: denied { open } for pid=4496 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 71.476020][ T28] audit: type=1400 audit(2000000008.010:1670): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 71.498106][ T4466] total_inactive_anon 20480 [ 71.558168][ T4466] total_active_anon 0 [ 71.563445][ T4466] total_inactive_file 0 [ 71.569262][ T28] audit: type=1400 audit(2000000008.020:1671): avc: denied { open } for pid=4499 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 71.588089][ T4466] total_active_file 0 [ 71.595715][ T4466] total_unevictable 0 [ 71.605827][ T4466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.308,pid=4466,uid=0 [ 71.618099][ T28] audit: type=1400 audit(2000000008.020:1672): avc: denied { bpf } for pid=4499 comm="syz.1.319" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 71.643301][ T4466] Memory cgroup out of memory: Killed process 4466 (syz.2.308) total-vm:94160kB, anon-rss:1220kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 71.945968][ T28] audit: type=1400 audit(2000000008.020:1673): avc: denied { map_create } for pid=4499 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.999244][ T4521] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.013937][ T4512] syz.2.324 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 72.078373][ T4512] CPU: 0 UID: 0 PID: 4512 Comm: syz.2.324 Not tainted syzkaller #0 PREEMPT(full) [ 72.078405][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.078418][ T4512] Call Trace: [ 72.078426][ T4512] [ 72.078435][ T4512] __dump_stack+0x1d/0x30 [ 72.078528][ T4512] dump_stack_lvl+0x95/0xd0 [ 72.078554][ T4512] dump_stack+0x15/0x1b [ 72.078639][ T4512] dump_header+0x80/0x240 [ 72.078691][ T4512] oom_kill_process+0x295/0x350 [ 72.078714][ T4512] out_of_memory+0x97d/0xb80 [ 72.078816][ T4512] try_charge_memcg+0x62e/0xa10 [ 72.078856][ T4512] obj_cgroup_charge_pages+0x23/0xc0 [ 72.078954][ T4512] __memcg_kmem_charge_page+0x9e/0x170 [ 72.079114][ T4512] __alloc_frozen_pages_noprof+0x18a/0x360 [ 72.079145][ T4512] alloc_pages_mpol+0xb3/0x260 [ 72.079176][ T4512] alloc_pages_noprof+0x8f/0x130 [ 72.079204][ T4512] __pmd_alloc+0x47/0x480 [ 72.079283][ T4512] handle_mm_fault+0x1ecf/0x3020 [ 72.079361][ T4512] ? vma_start_read+0x1c7/0x2c0 [ 72.079397][ T4512] do_user_addr_fault+0x62f/0x1050 [ 72.079433][ T4512] ? trace_page_fault_user+0x1f/0xe0 [ 72.079477][ T4512] exc_page_fault+0x62/0xa0 [ 72.079508][ T4512] asm_exc_page_fault+0x26/0x30 [ 72.079544][ T4512] RIP: 0033:0x7f86018ea143 [ 72.079562][ T4512] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 90 fa ff ff 48 89 c2 48 8d 35 39 97 1c 00 48 8d 3d ef 97 1c 00 31 c0 e8 0d 7f fe ff <89> 32 e9 78 ef ff ff 48 8d 05 bf f5 36 00 48 8d 3d c8 b5 ed 00 c6 [ 72.079583][ T4512] RSP: 002b:00007ffd8737ad60 EFLAGS: 00010246 [ 72.079674][ T4512] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33964000 [ 72.079695][ T4512] RDX: 0000001b33924000 RSI: 0000000000400000 RDI: 00007f8601c59710 [ 72.079711][ T4512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.079724][ T4512] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 72.079738][ T4512] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd8737aff0 [ 72.079757][ T4512] [ 72.079764][ T4512] memory: usage 307200kB, limit 307200kB, failcnt 1618 [ 72.507979][ T4512] memory+swap: usage 408kB, limit 9007199254740988kB, failcnt 0 [ 72.508000][ T4512] kmem: usage 248kB, limit 9007199254740988kB, failcnt 0 [ 72.508011][ T4512] Memory cgroup stats for /syz2: [ 72.508328][ T4512] cache 0 [ 72.508340][ T4512] rss 0 [ 72.508346][ T4512] shmem 0 [ 72.508352][ T4512] mapped_file 0 [ 72.508371][ T4512] dirty 0 [ 72.508377][ T4512] writeback 0 [ 72.508384][ T4512] workingset_refault_anon 146 [ 72.508393][ T4512] workingset_refault_file 1447 [ 72.508402][ T4512] swap 8192 [ 72.508409][ T4512] swapcached 458752 [ 72.508417][ T4512] pgpgin 34347 [ 72.508425][ T4512] pgpgout 34324 [ 72.508432][ T4512] pgfault 35047 [ 72.508449][ T4512] pgmajfault 92 [ 72.508457][ T4512] inactive_anon 94208 [ 72.508465][ T4512] active_anon 0 [ 72.508473][ T4512] inactive_file 0 [ 72.508489][ T4512] active_file 0 [ 72.508495][ T4512] unevictable 0 [ 72.508510][ T4512] hierarchical_memory_limit 314572800 [ 72.508518][ T4512] hierarchical_memsw_limit 9223372036854771712 [ 72.508527][ T4512] total_cache 0 [ 72.508533][ T4512] total_rss 0 [ 72.508540][ T4512] total_shmem 0 [ 72.508549][ T4512] total_mapped_file 0 [ 72.508557][ T4512] total_dirty 0 [ 72.508603][ T4512] total_writeback 0 [ 72.508611][ T4512] total_workingset_refault_anon 146 [ 72.508619][ T4512] total_workingset_refault_file 1447 [ 72.508626][ T4512] total_swap 8192 [ 72.508634][ T4512] total_swapcached 458752 [ 72.508642][ T4512] total_pgpgin 34347 [ 72.508650][ T4512] total_pgpgout 34324 [ 72.508710][ T4512] total_pgfault 35047 [ 72.508718][ T4512] total_pgmajfault 92 [ 72.508724][ T4512] total_inactive_anon 94208 [ 72.508732][ T4512] total_active_anon 0 [ 72.508741][ T4512] total_inactive_file 0 [ 72.508749][ T4512] total_active_file 0 [ 72.508758][ T4512] total_unevictable 0 [ 72.508818][ T4512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.324,pid=4512,uid=0 [ 72.508911][ T4512] Memory cgroup out of memory: Killed process 4512 (syz.2.324) total-vm:93896kB, anon-rss:1244kB, file-rss:21312kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 72.533753][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.859724][ T4535] batadv_slave_0: entered promiscuous mode [ 74.035758][ T4565] xfrm0 speed is unknown, defaulting to 1000 [ 74.833477][ T4580] syz.0.349 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 74.860208][ T4580] CPU: 0 UID: 0 PID: 4580 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 74.860235][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.860247][ T4580] Call Trace: [ 74.860254][ T4580] [ 74.860263][ T4580] __dump_stack+0x1d/0x30 [ 74.860317][ T4580] dump_stack_lvl+0x95/0xd0 [ 74.860351][ T4580] dump_stack+0x15/0x1b [ 74.860376][ T4580] dump_header+0x80/0x240 [ 74.860402][ T4580] oom_kill_process+0x295/0x350 [ 74.860428][ T4580] out_of_memory+0x97d/0xb80 [ 74.860499][ T4580] try_charge_memcg+0x62e/0xa10 [ 74.860605][ T4580] obj_cgroup_charge_pages+0x23/0xc0 [ 74.860636][ T4580] __memcg_kmem_charge_page+0x9e/0x170 [ 74.860667][ T4580] __alloc_frozen_pages_noprof+0x18a/0x360 [ 74.860724][ T4580] alloc_pages_bulk_noprof+0x4aa/0x530 [ 74.860753][ T4580] ? policy_nodemask+0x417/0x5e0 [ 74.860784][ T4580] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 74.860858][ T4580] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 74.860889][ T4580] ? alloc_pages_mpol+0x217/0x260 [ 74.861074][ T4580] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 74.861109][ T4580] __kvmalloc_node_noprof+0x3d4/0x650 [ 74.861137][ T4580] ? futex_hash_allocate+0x190/0x9d0 [ 74.861170][ T4580] ? futex_hash_allocate+0x190/0x9d0 [ 74.861260][ T4580] futex_hash_allocate+0x190/0x9d0 [ 74.861307][ T4580] ? cap_task_prctl+0x13f/0x6e0 [ 74.861340][ T4580] futex_hash_prctl+0xd8/0xf0 [ 74.861367][ T4580] __se_sys_prctl+0xa3d/0x13f0 [ 74.861399][ T4580] __x64_sys_prctl+0x67/0x80 [ 74.861480][ T4580] x64_sys_call+0x2533/0x3020 [ 74.861508][ T4580] do_syscall_64+0x12c/0x370 [ 74.861548][ T4580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.861574][ T4580] RIP: 0033:0x7f31b686c629 [ 74.861593][ T4580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.861684][ T4580] RSP: 002b:00007f31b52c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 74.861770][ T4580] RAX: ffffffffffffffda RBX: 00007f31b6ae5fa0 RCX: 00007f31b686c629 [ 74.861837][ T4580] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 74.861850][ T4580] RBP: 00007f31b6902b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.861864][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.861879][ T4580] R13: 00007f31b6ae6038 R14: 00007f31b6ae5fa0 R15: 00007ffd9aeef4c8 [ 74.861897][ T4580] [ 74.861938][ T4580] memory: usage 276000kB, limit 307200kB, failcnt 1403 [ 75.118109][ T4580] memory+swap: usage 276152kB, limit 9007199254740988kB, failcnt 0 [ 75.138391][ T4580] kmem: usage 258960kB, limit 9007199254740988kB, failcnt 0 [ 75.165952][ T4580] Memory cgroup stats for /syz0: [ 75.166249][ T4580] cache 0 [ 75.192533][ T4580] rss 28672 [ 75.200811][ T4580] shmem 0 [ 75.208792][ T4580] mapped_file 0 [ 75.219764][ T4580] dirty 0 [ 75.226629][ T4580] writeback 0 [ 75.243677][ T4580] workingset_refault_anon 204 [ 75.248813][ T4580] workingset_refault_file 1675 [ 75.263865][ T4580] swap 155648 [ 75.273485][ T4580] swapcached 638976 [ 75.284476][ T4588] netlink: 'syz.4.351': attribute type 10 has an invalid length. [ 75.287965][ T4580] pgpgin 38650 [ 75.308130][ T4580] pgpgout 38641 [ 75.318199][ T4580] pgfault 37760 [ 75.322179][ T4580] pgmajfault 152 [ 75.334746][ T4580] inactive_anon 36864 [ 75.341429][ T4588] macvlan1: entered allmulticast mode [ 75.351381][ T4580] active_anon 0 [ 75.358154][ T4580] inactive_file 0 [ 75.368236][ T4580] active_file 0 [ 75.380456][ T4580] unevictable 0 [ 75.385890][ T4588] veth1_vlan: entered allmulticast mode [ 75.395547][ T4580] hierarchical_memory_limit 314572800 [ 75.408109][ T4580] hierarchical_memsw_limit 9223372036854771712 [ 75.427944][ T4580] total_cache 0 [ 75.435861][ T4588] team0: Port device macvlan1 added [ 75.438126][ T4580] total_rss 28672 [ 75.456780][ T4580] total_shmem 0 [ 75.469843][ T4580] total_mapped_file 0 [ 75.488097][ T4580] total_dirty 0 [ 75.492246][ T4580] total_writeback 0 [ 75.506879][ T4580] total_workingset_refault_anon 204 [ 75.516859][ T4580] total_workingset_refault_file 1675 [ 75.778301][ T4580] total_swap 155648 [ 75.788403][ T4580] total_swapcached 638976 [ 75.798480][ T4580] total_pgpgin 38650 [ 75.818258][ T4580] total_pgpgout 38641 [ 75.822478][ T4580] total_pgfault 37760 [ 75.826457][ T4580] total_pgmajfault 152 [ 75.868446][ T4580] total_inactive_anon 36864 [ 75.913611][ T4580] total_active_anon 0 [ 75.917647][ T4580] total_inactive_file 0 [ 75.938612][ T4580] total_active_file 0 [ 75.942812][ T4580] total_unevictable 0 [ 75.946811][ T4580] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.349,pid=4579,uid=0 [ 76.008104][ T4580] Memory cgroup out of memory: Killed process 4580 (syz.0.349) total-vm:94160kB, anon-rss:1332kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 76.091481][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 76.091498][ T28] audit: type=1400 audit(2000000012.700:1899): avc: denied { open } for pid=4590 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 76.148140][ T28] audit: type=1400 audit(2000000012.730:1900): avc: denied { prog_load } for pid=4590 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 76.158478][ T4591] xfrm0 speed is unknown, defaulting to 1000 [ 76.332053][ T28] audit: type=1400 audit(2000000012.940:1901): avc: denied { create } for pid=4590 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 76.399449][ T28] audit: type=1400 audit(2000000012.940:1902): avc: denied { prog_load } for pid=4590 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 76.438471][ T28] audit: type=1400 audit(2000000012.940:1903): avc: denied { name_bind } for pid=4590 comm="syz.0.352" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 76.481044][ T28] audit: type=1400 audit(2000000012.970:1904): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 76.568251][ T28] audit: type=1400 audit(2000000012.990:1905): avc: denied { prog_load } for pid=4593 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 76.644325][ T28] audit: type=1400 audit(2000000012.990:1906): avc: denied { prog_load } for pid=4593 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 76.701287][ T28] audit: type=1400 audit(2000000012.990:1907): avc: denied { open } for pid=4593 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 76.761457][ T28] audit: type=1400 audit(2000000012.990:1908): avc: denied { read } for pid=4593 comm="syz.4.353" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 77.298911][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 77.975733][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 77.998108][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 77.998141][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.998155][ T3313] Call Trace: [ 77.998164][ T3313] [ 77.998172][ T3313] __dump_stack+0x1d/0x30 [ 77.998202][ T3313] dump_stack_lvl+0x95/0xd0 [ 77.998284][ T3313] dump_stack+0x15/0x1b [ 77.998305][ T3313] dump_header+0x80/0x240 [ 77.998327][ T3313] oom_kill_process+0x295/0x350 [ 77.998347][ T3313] out_of_memory+0x97d/0xb80 [ 77.998399][ T3313] try_charge_memcg+0x62e/0xa10 [ 77.998431][ T3313] __mem_cgroup_charge+0x65/0x150 [ 77.998458][ T3313] filemap_add_folio+0x110/0x350 [ 77.998558][ T3313] __filemap_get_folio_mpol+0x326/0x680 [ 77.998586][ T3313] filemap_fault+0x486/0xb90 [ 77.998689][ T3313] __do_fault+0xbc/0x200 [ 77.998736][ T3313] handle_mm_fault+0x11d7/0x3020 [ 77.998764][ T3313] ? vma_start_read+0x1c7/0x2c0 [ 77.998792][ T3313] do_user_addr_fault+0x62f/0x1050 [ 77.998862][ T3313] ? trace_page_fault_user+0x1f/0xe0 [ 77.998889][ T3313] exc_page_fault+0x62/0xa0 [ 77.998981][ T3313] asm_exc_page_fault+0x26/0x30 [ 77.998999][ T3313] RIP: 0033:0x7fabfa2aa6b4 [ 77.999015][ T3313] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 77.999092][ T3313] RSP: 002b:00007fffdc65a5f0 EFLAGS: 00010202 [ 77.999110][ T3313] RAX: 0000001b33b24000 RBX: 00000000000000b6 RCX: 0000000000012cc8 [ 77.999210][ T3313] RDX: 000000000ea4436b RSI: 00007fffdc65a680 RDI: 0000000000000001 [ 77.999226][ T3313] RBP: 00007fffdc65a62c R08: 0000000037da7d6f R09: 7fffffffffffffff [ 77.999239][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 77.999252][ T3313] R13: 00000000000927c0 R14: 0000000000012e0a R15: 00007fffdc65a680 [ 77.999269][ T3313] [ 77.999305][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 1211 [ 78.238175][ T3313] memory+swap: usage 375380kB, limit 9007199254740988kB, failcnt 0 [ 78.246368][ T3313] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 78.268558][ T3313] Memory cgroup stats for /syz4: [ 78.268805][ T3313] cache 0 [ 78.277166][ T3313] rss 0 [ 78.281076][ T3313] shmem 0 [ 78.302114][ T3313] mapped_file 0 [ 78.308223][ T3313] dirty 0 [ 78.314700][ T3313] writeback 0 [ 78.323709][ T3313] workingset_refault_anon 146 [ 78.336167][ T3313] workingset_refault_file 10474 [ 78.348187][ T3313] swap 69816320 [ 78.356349][ T3313] swapcached 76931072 [ 78.364871][ T3313] pgpgin 103928 [ 78.374015][ T3313] pgpgout 103928 [ 78.382306][ T3313] pgfault 56171 [ 78.389248][ T3313] pgmajfault 67 [ 78.397164][ T3313] inactive_anon 0 [ 78.405455][ T3313] active_anon 0 [ 78.412320][ T3313] inactive_file 0 [ 78.420688][ T3313] active_file 0 [ 78.429054][ T3313] unevictable 0 [ 78.436484][ T3313] hierarchical_memory_limit 314572800 [ 78.450202][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 78.463197][ T3313] total_cache 0 [ 78.470048][ T3313] total_rss 0 [ 78.476697][ T3313] total_shmem 0 [ 78.484681][ T3313] total_mapped_file 0 [ 78.493354][ T3313] total_dirty 0 [ 78.498238][ T4626] bond0: entered promiscuous mode [ 78.501184][ T3313] total_writeback 0 [ 78.503382][ T4626] bond_slave_0: entered promiscuous mode [ 78.509463][ T3313] total_workingset_refault_anon 146 [ 78.528173][ T3313] total_workingset_refault_file 10474 [ 78.539351][ T3313] total_swap 69816320 [ 78.560745][ T3313] total_swapcached 76931072 [ 78.565391][ T3313] total_pgpgin 103928 [ 78.568418][ T4626] bond_slave_1: entered promiscuous mode [ 78.575412][ T4626] bridge_slave_1: entered promiscuous mode [ 78.584781][ T3313] total_pgpgout 103928 [ 78.606789][ T3313] total_pgfault 56171 [ 78.610989][ T3313] total_pgmajfault 67 [ 78.611101][ T4626] batadv0: entered promiscuous mode [ 78.615061][ T3313] total_inactive_anon 0 [ 78.648132][ T3313] total_active_anon 0 [ 78.652220][ T4626] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 78.652465][ T3313] total_inactive_file 0 [ 78.668093][ T3313] total_active_file 0 [ 78.672208][ T3313] total_unevictable 0 [ 78.684193][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.362,pid=4614,uid=0 [ 78.718758][ T3313] Memory cgroup out of memory: Killed process 4614 (syz.4.362) total-vm:94160kB, anon-rss:1224kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 78.754879][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 78.768664][ T4636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.926461][ T4644] : port 1(ip6gretap0) entered blocking state [ 78.943026][ T4644] : port 1(ip6gretap0) entered disabled state [ 78.973544][ T4644] ip6gretap0: entered allmulticast mode [ 79.010329][ T4644] ip6gretap0: entered promiscuous mode [ 79.048244][ T4649] ip6gretap0: left allmulticast mode [ 79.055507][ T4649] ip6gretap0: left promiscuous mode [ 79.073377][ T4649] : port 1(ip6gretap0) entered disabled state [ 79.120687][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 79.196819][ T4664] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 79.300917][ T4671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'. [ 79.328824][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 79.552887][ T4654] syz.1.374 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 79.608294][ T3371] Process accounting resumed [ 79.708728][ T4654] CPU: 1 UID: 0 PID: 4654 Comm: syz.1.374 Not tainted syzkaller #0 PREEMPT(full) [ 79.708758][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.708769][ T4654] Call Trace: [ 79.708775][ T4654] [ 79.708782][ T4654] __dump_stack+0x1d/0x30 [ 79.708812][ T4654] dump_stack_lvl+0x95/0xd0 [ 79.708846][ T4654] dump_stack+0x15/0x1b [ 79.708869][ T4654] dump_header+0x80/0x240 [ 79.708894][ T4654] oom_kill_process+0x295/0x350 [ 79.708954][ T4654] out_of_memory+0x97d/0xb80 [ 79.708973][ T4654] try_charge_memcg+0x62e/0xa10 [ 79.709005][ T4654] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 79.709057][ T4654] __swap_cache_prepare_and_add+0x386/0x530 [ 79.709091][ T4654] swap_cache_alloc_folio+0xa2/0x120 [ 79.709188][ T4654] swap_cluster_readahead+0x26e/0x3d0 [ 79.709312][ T4654] swapin_readahead+0xde/0x840 [ 79.709343][ T4654] ? __rcu_read_unlock+0x4e/0x70 [ 79.709396][ T4654] ? swap_cache_get_folio+0x26f/0x280 [ 79.709424][ T4654] do_swap_page+0x309/0x2210 [ 79.709452][ T4654] ? css_rstat_updated+0xbb/0x280 [ 79.709518][ T4654] ? __rcu_read_lock+0x36/0x50 [ 79.709536][ T4654] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 79.709586][ T4654] handle_mm_fault+0xb40/0x3020 [ 79.709616][ T4654] ? vma_start_read+0x1c7/0x2c0 [ 79.709642][ T4654] do_user_addr_fault+0x62f/0x1050 [ 79.709725][ T4654] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 79.709755][ T4654] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 79.709788][ T4654] ? trace_page_fault_user+0x1f/0xe0 [ 79.709889][ T4654] exc_page_fault+0x62/0xa0 [ 79.709918][ T4654] asm_exc_page_fault+0x26/0x30 [ 79.709936][ T4654] RIP: 0033:0x7fb41910a04c [ 79.709974][ T4654] Code: 4a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 79.709993][ T4654] RSP: 002b:00007ffca5a29820 EFLAGS: 00010202 [ 79.710069][ T4654] RAX: 0000000000000000 RBX: 00007fb4194b6090 RCX: 0000555576cb7808 [ 79.710130][ T4654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.710142][ T4654] RBP: 00007fb4194b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 79.710154][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000013807 [ 79.710166][ T4654] R13: 00007fb4194b609c R14: 0000000000013542 R15: 00007fb4194b6090 [ 79.710183][ T4654] [ 79.710364][ T4654] memory: usage 236232kB, limit 307200kB, failcnt 567 [ 79.980528][ T4654] memory+swap: usage 260348kB, limit 9007199254740988kB, failcnt 0 [ 79.998128][ T4684] bridge0: entered allmulticast mode [ 80.019398][ T4684] bridge_slave_1: left allmulticast mode [ 80.045654][ T4684] bridge_slave_1: left promiscuous mode [ 80.071014][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.098117][ T4654] kmem: usage 96300kB, limit 9007199254740988kB, failcnt 0 [ 80.105798][ T4654] Memory cgroup stats for /syz1: [ 80.106116][ T4654] cache 4096 [ 80.123516][ T4686] netlink: 'syz.0.388': attribute type 7 has an invalid length. [ 80.123709][ T4684] bridge_slave_0: left allmulticast mode [ 80.131676][ T4686] netlink: 140 bytes leftover after parsing attributes in process `syz.0.388'. [ 80.218149][ T4684] bridge_slave_0: left promiscuous mode [ 80.224090][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.239865][ T4654] rss 4096 [ 80.243284][ T4654] shmem 0 [ 80.247042][ T4654] mapped_file 4096 [ 80.252101][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 80.273023][ T4654] dirty 0 [ 80.276091][ T4654] writeback 8192 [ 80.318239][ T4654] workingset_refault_anon 192 [ 80.328172][ T4654] workingset_refault_file 2286 [ 80.333405][ T4654] swap 180224 [ 80.336940][ T4654] swapcached 376832 [ 80.347487][ T4654] pgpgin 64597 [ 80.357629][ T4654] pgpgout 64592 [ 80.365823][ T4654] pgfault 67504 [ 80.378143][ T4654] pgmajfault 116 [ 80.381821][ T4654] inactive_anon 8192 [ 80.385998][ T4654] active_anon 8192 [ 80.390159][ T4690] : port 1(ip6gretap0) entered blocking state [ 80.396616][ T4654] inactive_file 0 [ 80.396631][ T4654] active_file 4096 [ 80.396640][ T4654] unevictable 0 [ 80.401208][ T4690] : port 1(ip6gretap0) entered disabled state [ 80.408144][ T4654] hierarchical_memory_limit 314572800 [ 80.409005][ T4690] ip6gretap0: entered allmulticast mode [ 80.438982][ T4690] ip6gretap0: entered promiscuous mode [ 80.446396][ T4693] ip6gretap0: left allmulticast mode [ 80.453192][ T4693] ip6gretap0: left promiscuous mode [ 80.456070][ T4654] hierarchical_memsw_limit 9223372036854771712 [ 80.465593][ T4693] : port 1(ip6gretap0) entered disabled state [ 80.477613][ T4654] total_cache 4096 [ 80.487704][ T4654] total_rss 4096 [ 80.493128][ T4654] total_shmem 0 [ 80.497053][ T4654] total_mapped_file 4096 [ 80.508106][ T4654] total_dirty 0 [ 80.511853][ T4654] total_writeback 8192 [ 80.517423][ T4654] total_workingset_refault_anon 192 [ 80.528117][ T4654] total_workingset_refault_file 2286 [ 80.533805][ T4654] total_swap 180224 [ 80.552713][ T4697] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 80.563820][ T4654] total_swapcached 376832 [ 80.573758][ T4654] total_pgpgin 64623 [ 80.583871][ T4654] total_pgpgout 64618 [ 80.596599][ T4654] total_pgfault 67543 [ 80.638456][ T4654] total_pgmajfault 116 [ 80.642779][ T4654] total_inactive_anon 8192 [ 80.647591][ T4654] total_active_anon 8192 [ 80.678272][ T4654] total_inactive_file 0 [ 80.682735][ T4654] total_active_file 4096 [ 80.687271][ T4654] total_unevictable 0 [ 80.740377][ T4654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.374,pid=4654,uid=0 [ 80.757030][ T4654] Memory cgroup out of memory: Killed process 4654 (syz.1.374) total-vm:94160kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 80.775933][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 80.798191][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 80.798226][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.798240][ T3318] Call Trace: [ 80.798247][ T3318] [ 80.798331][ T3318] __dump_stack+0x1d/0x30 [ 80.798364][ T3318] dump_stack_lvl+0x95/0xd0 [ 80.798387][ T3318] dump_stack+0x15/0x1b [ 80.798407][ T3318] dump_header+0x80/0x240 [ 80.798428][ T3318] oom_kill_process+0x295/0x350 [ 80.798514][ T3318] out_of_memory+0x97d/0xb80 [ 80.798533][ T3318] try_charge_memcg+0x62e/0xa10 [ 80.798580][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 80.798613][ T3318] __swap_cache_prepare_and_add+0x386/0x530 [ 80.798652][ T3318] swap_cache_alloc_folio+0xa2/0x120 [ 80.798775][ T3318] swap_cluster_readahead+0x26e/0x3d0 [ 80.798818][ T3318] swapin_readahead+0xde/0x840 [ 80.798849][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 80.798869][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 80.798992][ T3318] do_swap_page+0x309/0x2210 [ 80.799023][ T3318] ? putname+0x7c/0xc0 [ 80.799049][ T3318] ? should_fail_ex+0x30/0x280 [ 80.799071][ T3318] ? __rcu_read_lock+0x36/0x50 [ 80.799154][ T3318] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 80.799249][ T3318] handle_mm_fault+0xb40/0x3020 [ 80.799283][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 80.799315][ T3318] do_user_addr_fault+0x62f/0x1050 [ 80.799395][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 80.799426][ T3318] exc_page_fault+0x62/0xa0 [ 80.799459][ T3318] asm_exc_page_fault+0x26/0x30 [ 80.799482][ T3318] RIP: 0033:0x7f94d8851c4b [ 80.799554][ T3318] Code: ff 48 8d 3d f7 48 1b 00 31 c0 e8 60 fe ff ff 41 57 41 56 41 55 4c 8d 2d b3 02 1e 00 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 44 24 0c 00 00 00 00 80 3d 86 3a ef 00 00 48 8d 1d 8f 02 1e 00 [ 80.799574][ T3318] RSP: 002b:00007ffe59af1ed0 EFLAGS: 00010202 [ 80.799645][ T3318] RAX: 0000000000004000 RBX: 0000000000000000 RCX: 00007f94d899acda [ 80.799658][ T3318] RDX: 00007ffe59af2fe0 RSI: 00007ffe59af3070 RDI: 00007ffe59af3070 [ 80.799670][ T3318] RBP: 00007ffe59af3070 R08: 00007ffe59af4070 R09: 00000000ffffffff [ 80.799686][ T3318] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe59af3070 [ 80.799701][ T3318] R13: 00007f94d8a31ef0 R14: 000000000001387c R15: 00007ffe59af4140 [ 80.799747][ T3318] [ 80.799776][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 1780 [ 81.048113][ T3318] memory+swap: usage 375348kB, limit 9007199254740988kB, failcnt 0 [ 81.062218][ T3318] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 81.079266][ T3318] Memory cgroup stats for /syz4: [ 81.079578][ T3318] cache 0 [ 81.097414][ T3318] rss 0 [ 81.103763][ T3318] shmem 0 [ 81.110005][ T3318] mapped_file 0 [ 81.116450][ T3318] dirty 0 [ 81.130319][ T3318] writeback 0 [ 81.136964][ T3318] workingset_refault_anon 177 [ 81.147475][ T3318] workingset_refault_file 10546 [ 81.158130][ T3318] swap 69783552 [ 81.168279][ T3318] swapcached 77058048 [ 81.179095][ T3318] pgpgin 104453 [ 81.189320][ T3318] pgpgout 104445 [ 81.193228][ T3318] pgfault 56718 [ 81.197375][ T3318] pgmajfault 94 [ 81.202546][ T3318] inactive_anon 32768 [ 81.207108][ T3318] active_anon 0 [ 81.210760][ T3318] inactive_file 0 [ 81.214630][ T3318] active_file 0 [ 81.218858][ T3318] unevictable 0 [ 81.223013][ T3318] hierarchical_memory_limit 314572800 [ 81.229296][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 81.237712][ T3318] total_cache 0 [ 81.241911][ T3318] total_rss 0 [ 81.245507][ T3318] total_shmem 0 [ 81.249412][ T3318] total_mapped_file 0 [ 81.253969][ T3318] total_dirty 0 [ 81.258457][ T3318] total_writeback 0 [ 81.260647][ T28] kauditd_printk_skb: 353 callbacks suppressed [ 81.260663][ T28] audit: type=1400 audit(2000000273.875:2262): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.262714][ T3318] total_workingset_refault_anon 177 [ 81.279752][ T28] audit: type=1400 audit(2000000273.895:2263): avc: denied { create } for pid=4708 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 81.296443][ T3318] total_workingset_refault_file 10546 [ 81.329543][ T3318] total_swap 69783552 [ 81.333838][ T3318] total_swapcached 77058048 [ 81.338757][ T3318] total_pgpgin 104453 [ 81.343505][ T3318] total_pgpgout 104445 [ 81.348387][ T3318] total_pgfault 56718 [ 81.352377][ T3318] total_pgmajfault 94 [ 81.353817][ T28] audit: type=1400 audit(2000000273.965:2264): avc: denied { execmem } for pid=4708 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 81.356608][ T3318] total_inactive_anon 32768 [ 81.356620][ T3318] total_active_anon 0 [ 81.356629][ T3318] total_inactive_file 0 [ 81.356637][ T3318] total_active_file 0 [ 81.394463][ T3318] total_unevictable 0 [ 81.398765][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.381,pid=4667,uid=0 [ 81.414357][ T3318] Memory cgroup out of memory: Killed process 4667 (syz.4.381) total-vm:94160kB, anon-rss:1224kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 81.453267][ T28] audit: type=1400 audit(2000000274.065:2265): avc: denied { open } for pid=4708 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 81.507069][ T28] audit: type=1400 audit(2000000274.095:2266): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.633503][ T4718] syz.1.400 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 81.653754][ T4718] CPU: 1 UID: 0 PID: 4718 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 81.653784][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.653796][ T4718] Call Trace: [ 81.653803][ T4718] [ 81.653811][ T4718] __dump_stack+0x1d/0x30 [ 81.653840][ T4718] dump_stack_lvl+0x95/0xd0 [ 81.653900][ T4718] dump_stack+0x15/0x1b [ 81.653927][ T4718] dump_header+0x80/0x240 [ 81.653952][ T4718] oom_kill_process+0x295/0x350 [ 81.653977][ T4718] out_of_memory+0x97d/0xb80 [ 81.654029][ T4718] try_charge_memcg+0x62e/0xa10 [ 81.654071][ T4718] obj_cgroup_charge_pages+0x23/0xc0 [ 81.654100][ T4718] __memcg_kmem_charge_page+0x9e/0x170 [ 81.654143][ T4718] __alloc_frozen_pages_noprof+0x18a/0x360 [ 81.654171][ T4718] alloc_pages_mpol+0xb3/0x260 [ 81.654237][ T4718] alloc_pages_noprof+0x8f/0x130 [ 81.654270][ T4718] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 81.654304][ T4718] __kvmalloc_node_noprof+0x3d4/0x650 [ 81.654340][ T4718] ? futex_hash_allocate+0x190/0x9d0 [ 81.654423][ T4718] ? futex_hash_allocate+0x190/0x9d0 [ 81.654516][ T4718] futex_hash_allocate+0x190/0x9d0 [ 81.654545][ T4718] ? cap_task_prctl+0x13f/0x6e0 [ 81.654569][ T4718] futex_hash_prctl+0xd8/0xf0 [ 81.654599][ T4718] __se_sys_prctl+0xa3d/0x13f0 [ 81.654709][ T4718] __x64_sys_prctl+0x67/0x80 [ 81.654740][ T4718] x64_sys_call+0x2533/0x3020 [ 81.654772][ T4718] do_syscall_64+0x12c/0x370 [ 81.654803][ T4718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.654860][ T4718] RIP: 0033:0x7fb41923c629 [ 81.654925][ T4718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.654947][ T4718] RSP: 002b:00007fb417c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 81.654972][ T4718] RAX: ffffffffffffffda RBX: 00007fb4194b5fa0 RCX: 00007fb41923c629 [ 81.655000][ T4718] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 81.655014][ T4718] RBP: 00007fb4192d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 81.655027][ T4718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.655039][ T4718] R13: 00007fb4194b6038 R14: 00007fb4194b5fa0 R15: 00007ffca5a296b8 [ 81.655058][ T4718] [ 81.656301][ T4718] memory: usage 307200kB, limit 307200kB, failcnt 872 [ 81.667165][ T28] audit: type=1400 audit(2000000274.095:2267): avc: denied { open } for pid=4714 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 81.680861][ T4718] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 81.711476][ T28] audit: type=1400 audit(2000000274.095:2268): avc: denied { bpf } for pid=4714 comm="syz.3.389" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 81.803882][ T4718] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 81.829131][ T4730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.859353][ T4727] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.898131][ T4730] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 81.988305][ T4718] Memory cgroup stats for /syz1: [ 81.988663][ T4718] cache 524288 [ 82.008298][ T4718] rss 8192 [ 82.011578][ T4718] shmem 0 [ 82.014792][ T4718] mapped_file 65536 [ 82.028195][ T4718] dirty 0 [ 82.031665][ T4718] writeback 0 [ 82.035066][ T4718] workingset_refault_anon 240 [ 82.048111][ T4718] workingset_refault_file 2546 [ 82.053291][ T4718] swap 184320 [ 82.062110][ T4718] swapcached 507904 [ 82.078202][ T4718] pgpgin 64943 [ 82.081680][ T4718] pgpgout 64812 [ 82.085238][ T4718] pgfault 67650 [ 82.097974][ T4718] pgmajfault 155 [ 82.110318][ T4718] inactive_anon 0 [ 82.118121][ T4718] active_anon 12288 [ 82.138266][ T4718] inactive_file 0 [ 82.157952][ T4718] active_file 524288 [ 82.168124][ T4718] unevictable 0 [ 82.171903][ T4718] hierarchical_memory_limit 314572800 [ 82.178111][ T4718] hierarchical_memsw_limit 9223372036854771712 [ 82.187014][ T4718] total_cache 524288 [ 82.191690][ T4718] total_rss 8192 [ 82.195380][ T4718] total_shmem 0 [ 82.212837][ T4718] total_mapped_file 65536 [ 82.217286][ T4718] total_dirty 0 [ 82.221045][ T4718] total_writeback 0 [ 82.225503][ T4718] total_workingset_refault_anon 240 [ 82.231382][ T4718] total_workingset_refault_file 2546 [ 82.237161][ T4718] total_swap 184320 [ 82.241019][ T4718] total_swapcached 507904 [ 82.245618][ T4718] total_pgpgin 64969 [ 82.418956][ T4718] total_pgpgout 64838 [ 82.423407][ T4718] total_pgfault 67689 [ 82.428526][ T4718] total_pgmajfault 155 [ 82.433102][ T4718] total_inactive_anon 0 [ 82.437847][ T4718] total_active_anon 12288 [ 82.458115][ T4718] total_inactive_file 0 [ 82.463233][ T4718] total_active_file 524288 [ 82.468358][ T4718] total_unevictable 0 [ 82.478377][ T4718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.400,pid=4717,uid=0 [ 82.495130][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 82.498213][ T4718] Memory cgroup out of memory: Killed process 4717 (syz.1.400) total-vm:94160kB, anon-rss:1292kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 82.827954][ T4740] syz.0.408 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 83.048969][ T4750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 83.130005][ T4740] CPU: 0 UID: 0 PID: 4740 Comm: syz.0.408 Not tainted syzkaller #0 PREEMPT(full) [ 83.130090][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.130103][ T4740] Call Trace: [ 83.130111][ T4740] [ 83.130121][ T4740] __dump_stack+0x1d/0x30 [ 83.130189][ T4740] dump_stack_lvl+0x95/0xd0 [ 83.130247][ T4740] dump_stack+0x15/0x1b [ 83.130272][ T4740] dump_header+0x80/0x240 [ 83.130307][ T4740] oom_kill_process+0x295/0x350 [ 83.130328][ T4740] out_of_memory+0x97d/0xb80 [ 83.130352][ T4740] try_charge_memcg+0x62e/0xa10 [ 83.130416][ T4740] obj_cgroup_charge_pages+0x23/0xc0 [ 83.130448][ T4740] __memcg_kmem_charge_page+0x9e/0x170 [ 83.130536][ T4740] __alloc_frozen_pages_noprof+0x18a/0x360 [ 83.130610][ T4740] alloc_pages_mpol+0xb3/0x260 [ 83.130636][ T4740] alloc_pages_noprof+0x8f/0x130 [ 83.130705][ T4740] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 83.130745][ T4740] __kvmalloc_node_noprof+0x3d4/0x650 [ 83.130771][ T4740] ? futex_hash_allocate+0x190/0x9d0 [ 83.130797][ T4740] ? futex_hash_allocate+0x190/0x9d0 [ 83.130865][ T4740] futex_hash_allocate+0x190/0x9d0 [ 83.130897][ T4740] ? cap_task_prctl+0x13f/0x6e0 [ 83.130990][ T4740] futex_hash_prctl+0xd8/0xf0 [ 83.131088][ T4740] __se_sys_prctl+0xa3d/0x13f0 [ 83.131123][ T4740] __x64_sys_prctl+0x67/0x80 [ 83.131170][ T4740] x64_sys_call+0x2533/0x3020 [ 83.131196][ T4740] do_syscall_64+0x12c/0x370 [ 83.131305][ T4740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.131326][ T4740] RIP: 0033:0x7f31b686c629 [ 83.131345][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.131364][ T4740] RSP: 002b:00007f31b52c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 83.131388][ T4740] RAX: ffffffffffffffda RBX: 00007f31b6ae5fa0 RCX: 00007f31b686c629 [ 83.131404][ T4740] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 83.131477][ T4740] RBP: 00007f31b6902b39 R08: 0000000000000000 R09: 0000000000000000 [ 83.131489][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.131501][ T4740] R13: 00007f31b6ae6038 R14: 00007f31b6ae5fa0 R15: 00007ffd9aeef4c8 [ 83.131520][ T4740] [ 83.369931][ T4740] memory: usage 157632kB, limit 307200kB, failcnt 1597 [ 83.378219][ T4740] memory+swap: usage 156456kB, limit 9007199254740988kB, failcnt 0 [ 83.386665][ T4740] kmem: usage 136424kB, limit 9007199254740988kB, failcnt 0 [ 83.462385][ T4740] Memory cgroup stats for /syz0: [ 83.462651][ T4740] cache 4096 [ 83.482699][ T4740] rss 36864 [ 83.488478][ T4740] shmem 0 [ 83.496122][ T4740] mapped_file 4096 [ 83.503593][ T4740] dirty 0 [ 83.539204][ T4740] writeback 0 [ 83.547285][ T4740] workingset_refault_anon 258 [ 83.559015][ T4740] workingset_refault_file 2316 [ 83.588157][ T4740] swap 110592 [ 83.591591][ T4740] swapcached 606208 [ 83.608552][ T4740] pgpgin 42014 [ 83.612134][ T4740] pgpgout 41993 [ 83.632729][ T4740] pgfault 42736 [ 83.647421][ T4740] pgmajfault 173 [ 83.654636][ T4740] inactive_anon 0 [ 83.663441][ T4740] active_anon 81920 [ 83.680212][ T4740] inactive_file 0 [ 83.684120][ T4740] active_file 4096 [ 83.687931][ T4740] unevictable 0 [ 83.704873][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 83.708151][ T4740] hierarchical_memory_limit 314572800 [ 83.738119][ T4740] hierarchical_memsw_limit 9223372036854771712 [ 83.755503][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 83.777713][ T4740] total_cache 4096 [ 83.782401][ T4740] total_rss 36864 [ 83.786143][ T4740] total_shmem 0 [ 83.858590][ T4740] total_mapped_file 4096 [ 83.863062][ T4740] total_dirty 0 [ 83.878482][ T4740] total_writeback 0 [ 83.882318][ T4740] total_workingset_refault_anon 258 [ 83.887620][ T4740] total_workingset_refault_file 2316 [ 83.943773][ T4740] total_swap 110592 [ 83.958079][ T4740] total_swapcached 606208 [ 83.978094][ T4740] total_pgpgin 42014 [ 83.989668][ T4740] total_pgpgout 41993 [ 83.993690][ T4740] total_pgfault 42736 [ 84.011701][ T4740] total_pgmajfault 173 [ 84.015968][ T4740] total_inactive_anon 0 [ 84.028172][ T4740] total_active_anon 81920 [ 84.038073][ T4740] total_inactive_file 0 [ 84.049143][ T4740] total_active_file 4096 [ 84.058182][ T4740] total_unevictable 0 [ 84.063749][ T4740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.408,pid=4739,uid=0 [ 84.108160][ T4740] Memory cgroup out of memory: Killed process 4740 (syz.0.408) total-vm:94160kB, anon-rss:1332kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 84.127861][ T4762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 85.916872][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 86.260626][ T4783] syz.4.422 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 86.309816][ T4783] CPU: 0 UID: 0 PID: 4783 Comm: syz.4.422 Not tainted syzkaller #0 PREEMPT(full) [ 86.309878][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.309892][ T4783] Call Trace: [ 86.309901][ T4783] [ 86.309910][ T4783] __dump_stack+0x1d/0x30 [ 86.309937][ T4783] dump_stack_lvl+0x95/0xd0 [ 86.309960][ T4783] dump_stack+0x15/0x1b [ 86.310003][ T4783] dump_header+0x80/0x240 [ 86.310031][ T4783] oom_kill_process+0x295/0x350 [ 86.310057][ T4783] out_of_memory+0x97d/0xb80 [ 86.310077][ T4783] try_charge_memcg+0x62e/0xa10 [ 86.310110][ T4783] obj_cgroup_charge_pages+0x23/0xc0 [ 86.310208][ T4783] __memcg_kmem_charge_page+0x9e/0x170 [ 86.310232][ T4783] __alloc_frozen_pages_noprof+0x18a/0x360 [ 86.310326][ T4783] alloc_pages_mpol+0xb3/0x260 [ 86.310360][ T4783] alloc_pages_noprof+0x8f/0x130 [ 86.310409][ T4783] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 86.310441][ T4783] __kvmalloc_node_noprof+0x3d4/0x650 [ 86.310478][ T4783] ? futex_hash_allocate+0x190/0x9d0 [ 86.310505][ T4783] ? futex_hash_allocate+0x190/0x9d0 [ 86.310531][ T4783] futex_hash_allocate+0x190/0x9d0 [ 86.310621][ T4783] ? cap_task_prctl+0x13f/0x6e0 [ 86.310711][ T4783] futex_hash_prctl+0xd8/0xf0 [ 86.310736][ T4783] __se_sys_prctl+0xa3d/0x13f0 [ 86.310761][ T4783] __x64_sys_prctl+0x67/0x80 [ 86.310788][ T4783] x64_sys_call+0x2533/0x3020 [ 86.310821][ T4783] do_syscall_64+0x12c/0x370 [ 86.310915][ T4783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.310995][ T4783] RIP: 0033:0x7fabfa3dc629 [ 86.311015][ T4783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.311037][ T4783] RSP: 002b:00007fabf8e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 86.311063][ T4783] RAX: ffffffffffffffda RBX: 00007fabfa655fa0 RCX: 00007fabfa3dc629 [ 86.311097][ T4783] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 86.311113][ T4783] RBP: 00007fabfa472b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.311128][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.311143][ T4783] R13: 00007fabfa656038 R14: 00007fabfa655fa0 R15: 00007fffdc65a288 [ 86.311165][ T4783] [ 86.313399][ T4783] memory: usage 307200kB, limit 307200kB, failcnt 1859 [ 86.558118][ T4783] memory+swap: usage 227148kB, limit 9007199254740988kB, failcnt 0 [ 86.566225][ T4783] kmem: usage 158852kB, limit 9007199254740988kB, failcnt 0 [ 86.598092][ T28] kauditd_printk_skb: 226 callbacks suppressed [ 86.598112][ T28] audit: type=1400 audit(2000000279.185:2468): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.672248][ T28] audit: type=1400 audit(2000000279.195:2469): avc: denied { execmem } for pid=4785 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 86.713880][ T28] audit: type=1400 audit(2000000279.255:2470): avc: denied { open } for pid=4785 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 86.753278][ T28] audit: type=1400 audit(2000000279.255:2471): avc: denied { prog_load } for pid=4785 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.797416][ T28] audit: type=1400 audit(2000000279.255:2472): avc: denied { open } for pid=4785 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 86.801193][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 86.838079][ T28] audit: type=1400 audit(2000000279.265:2473): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.859873][ T4783] Memory cgroup stats for /syz4: [ 86.878345][ T4783] cache 0 [ 86.908150][ T4783] rss 28672 [ 86.919230][ T28] audit: type=1400 audit(2000000279.445:2474): avc: denied { open } for pid=4788 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 86.923756][ T4783] shmem 0 [ 86.965718][ T4793] netlink: 'syz.3.426': attribute type 13 has an invalid length. [ 86.983731][ T28] audit: type=1400 audit(2000000279.475:2475): avc: denied { bpf } for pid=4788 comm="syz.3.425" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 86.990640][ T4783] mapped_file 0 [ 87.016154][ T4794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 87.039896][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 87.049062][ T4783] dirty 0 [ 87.049552][ T28] audit: type=1400 audit(2000000279.485:2476): avc: denied { map_create } for pid=4788 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.052095][ T4783] writeback 0 [ 87.052122][ T4783] workingset_refault_anon 203 [ 87.111851][ T28] audit: type=1400 audit(2000000279.495:2477): avc: denied { read write } for pid=4788 comm="syz.3.425" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.138066][ T4783] workingset_refault_file 11315 [ 87.160376][ T4783] swap 69767168 [ 87.163986][ T4783] swapcached 77127680 [ 87.178107][ T4783] pgpgin 109397 [ 87.188080][ T4783] pgpgout 109385 [ 87.191682][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 87.191687][ T4783] pgfault 61546 [ 87.238079][ T4783] pgmajfault 109 [ 87.241749][ T4783] inactive_anon 32768 [ 87.246201][ T4783] active_anon 16384 [ 87.269079][ T4783] inactive_file 0 [ 87.272876][ T4783] active_file 0 [ 87.276615][ T4783] unevictable 0 [ 87.298124][ T4783] hierarchical_memory_limit 314572800 [ 87.308115][ T4783] hierarchical_memsw_limit 9223372036854771712 [ 87.314414][ T4783] total_cache 0 [ 87.338116][ T4783] total_rss 28672 [ 87.341793][ T4783] total_shmem 0 [ 87.345461][ T4783] total_mapped_file 0 [ 87.368119][ T4783] total_dirty 0 [ 87.371683][ T4783] total_writeback 0 [ 87.379560][ T4783] total_workingset_refault_anon 203 [ 87.385144][ T4783] total_workingset_refault_file 11315 [ 87.413732][ T4800] xfrm0 speed is unknown, defaulting to 1000 [ 87.419807][ T4783] total_swap 69767168 [ 87.423918][ T4783] total_swapcached 77127680 [ 87.448080][ T4783] total_pgpgin 109397 [ 87.452299][ T4783] total_pgpgout 109385 [ 87.456379][ T4783] total_pgfault 61546 [ 87.478069][ T4783] total_pgmajfault 109 [ 87.482291][ T4783] total_inactive_anon 32768 [ 87.486928][ T4783] total_active_anon 16384 [ 87.522451][ T4783] total_inactive_file 0 [ 87.526736][ T4783] total_active_file 0 [ 87.552436][ T4783] total_unevictable 0 [ 87.556722][ T4783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.422,pid=4782,uid=0 [ 87.638193][ T4783] Memory cgroup out of memory: Killed process 4783 (syz.4.422) total-vm:94160kB, anon-rss:1336kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 87.906005][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 87.939691][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 87.939720][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.939731][ T3318] Call Trace: [ 87.939745][ T3318] [ 87.939752][ T3318] __dump_stack+0x1d/0x30 [ 87.939785][ T3318] dump_stack_lvl+0x95/0xd0 [ 87.939812][ T3318] dump_stack+0x15/0x1b [ 87.939837][ T3318] dump_header+0x80/0x240 [ 87.939863][ T3318] oom_kill_process+0x295/0x350 [ 87.939964][ T3318] out_of_memory+0x97d/0xb80 [ 87.939989][ T3318] try_charge_memcg+0x62e/0xa10 [ 87.940118][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 87.940148][ T3318] __swap_cache_prepare_and_add+0x386/0x530 [ 87.940231][ T3318] swap_cache_alloc_folio+0xa2/0x120 [ 87.940262][ T3318] swap_cluster_readahead+0x26e/0x3d0 [ 87.940333][ T3318] swapin_readahead+0xde/0x840 [ 87.940390][ T3318] ? mm_trace_rss_stat+0x1d/0xf0 [ 87.940411][ T3318] ? __rcu_read_unlock+0x33/0x70 [ 87.940435][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 87.940524][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 87.940580][ T3318] do_swap_page+0x309/0x2210 [ 87.940605][ T3318] ? css_rstat_updated+0xbb/0x280 [ 87.940627][ T3318] ? __rcu_read_lock+0x36/0x50 [ 87.940650][ T3318] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 87.940741][ T3318] handle_mm_fault+0xb40/0x3020 [ 87.940842][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 87.940866][ T3318] do_user_addr_fault+0x62f/0x1050 [ 87.940905][ T3318] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 87.940929][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 87.941024][ T3318] exc_page_fault+0x62/0xa0 [ 87.941056][ T3318] asm_exc_page_fault+0x26/0x30 [ 87.941078][ T3318] RIP: 0033:0x7f94d886a6b7 [ 87.941118][ T3318] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 39 7c 24 [ 87.941137][ T3318] RSP: 002b:00007ffe59af40b0 EFLAGS: 00010206 [ 87.941157][ T3318] RAX: 0000001b33a24000 RBX: 00000000000000f3 RCX: 00000000000153d8 [ 87.941173][ T3318] RDX: 000000000c718c24 RSI: 00007ffe59af4140 RDI: 0000000000000019 [ 87.941207][ T3318] RBP: 00007ffe59af40ec R08: 000000002f77e629 R09: 7fffffffffffffff [ 87.941223][ T3318] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 87.941235][ T3318] R13: 00000000000927c0 R14: 000000000001548a R15: 00007ffe59af4140 [ 87.941253][ T3318] [ 87.941298][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 638 [ 87.942777][ T4808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 87.971130][ T3318] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 88.209807][ T3318] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 88.217156][ T3318] Memory cgroup stats for /syz3: [ 88.217463][ T3318] cache 0 [ 88.251992][ T3318] rss 24576 [ 88.255192][ T3318] shmem 0 [ 88.337013][ T3318] mapped_file 0 [ 88.365906][ T3318] dirty 0 [ 88.369160][ T3318] writeback 24576 [ 88.372891][ T3318] workingset_refault_anon 519 [ 88.401288][ T3318] workingset_refault_file 1570 [ 88.406163][ T3318] swap 176128 [ 88.418084][ T3318] swapcached 5197824 [ 88.431706][ T3318] pgpgin 55338 [ 88.445685][ T3318] pgpgout 55331 [ 88.455365][ T3318] pgfault 70307 [ 88.475168][ T3318] pgmajfault 150 [ 88.486906][ T3318] inactive_anon 28672 [ 88.498084][ T3318] active_anon 0 [ 88.508269][ T3318] inactive_file 0 [ 88.512338][ T3318] active_file 0 [ 88.515899][ T3318] unevictable 0 [ 88.531640][ T3318] hierarchical_memory_limit 314572800 [ 88.547854][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 88.566820][ T3318] total_cache 0 [ 88.572761][ T3318] total_rss 24576 [ 88.588068][ T3318] total_shmem 0 [ 88.597939][ T3318] total_mapped_file 0 [ 88.618253][ T3318] total_dirty 0 [ 88.621873][ T3318] total_writeback 24576 [ 88.634364][ T3318] total_workingset_refault_anon 519 [ 88.648064][ T3318] total_workingset_refault_file 1570 [ 88.653426][ T3318] total_swap 176128 [ 88.657307][ T3318] total_swapcached 5197824 [ 88.678117][ T3318] total_pgpgin 55338 [ 88.682255][ T3318] total_pgpgout 55331 [ 88.686302][ T3318] total_pgfault 70307 [ 88.698088][ T3318] total_pgmajfault 150 [ 88.702293][ T3318] total_inactive_anon 28672 [ 88.717003][ T3318] total_active_anon 0 [ 88.721267][ T3318] total_inactive_file 0 [ 88.725499][ T3318] total_active_file 0 [ 88.730960][ T3318] total_unevictable 0 [ 88.735078][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.428,pid=4797,uid=0 [ 88.766488][ T3318] Memory cgroup out of memory: Killed process 4797 (syz.3.428) total-vm:94160kB, anon-rss:1244kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 88.959464][ T4820] syz.4.434 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 88.973848][ T4820] CPU: 1 UID: 0 PID: 4820 Comm: syz.4.434 Not tainted syzkaller #0 PREEMPT(full) [ 88.973878][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.973892][ T4820] Call Trace: [ 88.973901][ T4820] [ 88.973921][ T4820] __dump_stack+0x1d/0x30 [ 88.973954][ T4820] dump_stack_lvl+0x95/0xd0 [ 88.974071][ T4820] dump_stack+0x15/0x1b [ 88.974113][ T4820] dump_header+0x80/0x240 [ 88.974140][ T4820] oom_kill_process+0x295/0x350 [ 88.974215][ T4820] out_of_memory+0x97d/0xb80 [ 88.974237][ T4820] try_charge_memcg+0x62e/0xa10 [ 88.974272][ T4820] obj_cgroup_charge_pages+0x23/0xc0 [ 88.974410][ T4820] __memcg_kmem_charge_page+0x9e/0x170 [ 88.974443][ T4820] __alloc_frozen_pages_noprof+0x18a/0x360 [ 88.974479][ T4820] alloc_pages_mpol+0xb3/0x260 [ 88.974512][ T4820] alloc_pages_noprof+0x8f/0x130 [ 88.974565][ T4820] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 88.974602][ T4820] __kvmalloc_node_noprof+0x3d4/0x650 [ 88.974705][ T4820] ? futex_hash_allocate+0x190/0x9d0 [ 88.974737][ T4820] ? futex_hash_allocate+0x190/0x9d0 [ 88.974780][ T4820] futex_hash_allocate+0x190/0x9d0 [ 88.974812][ T4820] ? cap_task_prctl+0x13f/0x6e0 [ 88.974833][ T4820] futex_hash_prctl+0xd8/0xf0 [ 88.974885][ T4820] __se_sys_prctl+0xa3d/0x13f0 [ 88.974918][ T4820] __x64_sys_prctl+0x67/0x80 [ 88.974949][ T4820] x64_sys_call+0x2533/0x3020 [ 88.975029][ T4820] do_syscall_64+0x12c/0x370 [ 88.975071][ T4820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.975098][ T4820] RIP: 0033:0x7fabfa3dc629 [ 88.975183][ T4820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.975203][ T4820] RSP: 002b:00007fabf8e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 88.975228][ T4820] RAX: ffffffffffffffda RBX: 00007fabfa655fa0 RCX: 00007fabfa3dc629 [ 88.975242][ T4820] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 88.975254][ T4820] RBP: 00007fabfa472b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.975269][ T4820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.975347][ T4820] R13: 00007fabfa656038 R14: 00007fabfa655fa0 R15: 00007fffdc65a288 [ 88.975370][ T4820] [ 88.975378][ T4820] memory: usage 307200kB, limit 307200kB, failcnt 1952 [ 89.297127][ T4820] memory+swap: usage 383644kB, limit 9007199254740988kB, failcnt 0 [ 89.317882][ T4820] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 89.333252][ T4820] Memory cgroup stats for /syz4: [ 89.333517][ T4820] cache 0 [ 89.348208][ T4820] rss 0 [ 89.352263][ T4820] shmem 0 [ 89.357430][ T4820] mapped_file 0 [ 89.364229][ T4820] dirty 0 [ 89.375300][ T4820] writeback 0 [ 89.383935][ T4820] workingset_refault_anon 238 [ 89.395272][ T4820] workingset_refault_file 11699 [ 89.407828][ T4820] swap 78278656 [ 89.417206][ T4820] swapcached 85635072 [ 89.427918][ T4820] pgpgin 112132 [ 89.435459][ T4820] pgpgout 112132 [ 89.445734][ T4820] pgfault 62309 [ 89.449949][ T4820] pgmajfault 128 [ 89.453881][ T4820] inactive_anon 0 [ 89.472234][ T4820] active_anon 0 [ 89.480287][ T4820] inactive_file 0 [ 89.486965][ T4820] active_file 0 [ 89.491184][ T4820] unevictable 0 [ 89.499666][ T4820] hierarchical_memory_limit 314572800 [ 89.516805][ T4820] hierarchical_memsw_limit 9223372036854771712 [ 89.552840][ T4820] total_cache 0 [ 89.556484][ T4820] total_rss 0 [ 90.149113][ T4820] total_shmem 0 [ 90.152718][ T4820] total_mapped_file 0 [ 90.156715][ T4820] total_dirty 0 [ 90.170400][ T4820] total_writeback 0 [ 90.174413][ T4820] total_workingset_refault_anon 238 [ 90.208095][ T4820] total_workingset_refault_file 11699 [ 90.213539][ T4820] total_swap 78278656 [ 90.217615][ T4820] total_swapcached 85635072 [ 90.259481][ T4820] total_pgpgin 112132 [ 90.263595][ T4820] total_pgpgout 112132 [ 90.267764][ T4820] total_pgfault 62309 [ 90.303151][ T4820] total_pgmajfault 128 [ 90.307360][ T4820] total_inactive_anon 0 [ 90.342147][ T4820] total_active_anon 0 [ 90.346279][ T4820] total_inactive_file 0 [ 90.388102][ T4820] total_active_file 0 [ 90.398227][ T4820] total_unevictable 0 [ 90.418204][ T4820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.433,pid=4817,uid=0 [ 90.458086][ T4820] Memory cgroup out of memory: Killed process 4817 (syz.4.433) total-vm:96076kB, anon-rss:1224kB, file-rss:28928kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 90.659031][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 91.117047][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.455'. [ 91.135706][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.455'. [ 91.179043][ T4866] ================================================================== [ 91.187497][ T4866] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 91.195542][ T4866] [ 91.197958][ T4866] write to 0xffffea00048d8018 of 8 bytes by task 4855 on cpu 1: [ 91.205687][ T4866] __filemap_remove_folio+0x201/0x310 [ 91.211073][ T4866] filemap_remove_folio+0x6d/0x1d0 [ 91.216357][ T4866] truncate_inode_folio+0x42/0x50 [ 91.221394][ T4866] shmem_undo_range+0x26d/0xb10 [ 91.226413][ T4866] shmem_evict_inode+0x12e/0x510 [ 91.231364][ T4866] evict+0x2af/0x510 [ 91.235270][ T4866] iput+0x41a/0x580 [ 91.239082][ T4866] dentry_unlink_inode+0x24f/0x260 [ 91.244283][ T4866] __dentry_kill+0x13f/0x460 [ 91.248877][ T4866] finish_dput+0x2b/0x200 [ 91.253197][ T4866] dput+0x52/0x60 [ 91.256870][ T4866] __fput+0x444/0x650 [ 91.260931][ T4866] ____fput+0x1c/0x30 [ 91.264939][ T4866] task_work_run+0x130/0x1a0 [ 91.269534][ T4866] do_exit+0x466/0x15a0 [ 91.273798][ T4866] do_group_exit+0xfe/0x140 [ 91.279037][ T4866] get_signal+0xe54/0xf60 [ 91.284165][ T4866] arch_do_signal_or_restart+0x96/0x450 [ 91.289978][ T4866] irqentry_exit+0xf7/0x520 [ 91.295023][ T4866] asm_exc_page_fault+0x26/0x30 [ 91.300052][ T4866] [ 91.302369][ T4866] read to 0xffffea00048d8018 of 8 bytes by task 4866 on cpu 0: [ 91.310090][ T4866] folio_mapping+0xa1/0xe0 [ 91.314593][ T4866] move_folios_to_lru+0x128/0x6d0 [ 91.319612][ T4866] evict_folios+0x31f8/0x35c0 [ 91.324288][ T4866] try_to_shrink_lruvec+0x81b/0xbf0 [ 91.329648][ T4866] shrink_lruvec+0x255/0x1c60 [ 91.334403][ T4866] shrink_node+0x67a/0x2130 [ 91.339363][ T4866] do_try_to_free_pages+0x408/0xc80 [ 91.344729][ T4866] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 91.350788][ T4866] try_charge_memcg+0x37e/0xa10 [ 91.355650][ T4866] obj_cgroup_charge_pages+0x23/0xc0 [ 91.361012][ T4866] __memcg_kmem_charge_page+0x9e/0x170 [ 91.366461][ T4866] __alloc_frozen_pages_noprof+0x18a/0x360 [ 91.372344][ T4866] alloc_pages_mpol+0xb3/0x260 [ 91.377101][ T4866] alloc_pages_noprof+0x8f/0x130 [ 91.382030][ T4866] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 91.387999][ T4866] __kvmalloc_node_noprof+0x3d4/0x650 [ 91.393441][ T4866] futex_hash_allocate+0x190/0x9d0 [ 91.398578][ T4866] futex_hash_prctl+0xd8/0xf0 [ 91.404077][ T4866] __se_sys_prctl+0xa3d/0x13f0 [ 91.408834][ T4866] __x64_sys_prctl+0x67/0x80 [ 91.414222][ T4866] x64_sys_call+0x2533/0x3020 [ 91.419996][ T4866] do_syscall_64+0x12c/0x370 [ 91.424774][ T4866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.430672][ T4866] [ 91.433098][ T4866] value changed: 0xffff88811a6e7070 -> 0x0000000000000000 [ 91.440334][ T4866] [ 91.442654][ T4866] Reported by Kernel Concurrency Sanitizer on: [ 91.448809][ T4866] CPU: 0 UID: 0 PID: 4866 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) [ 91.458252][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.468659][ T4866] ==================================================================