last executing test programs: 7m19.626008385s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) getrlimit(0x3, &(0x7f0000000980)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100cd9989e2962a7540fe47ca6f9cc050f4ded36fbb700c5fa2a87db940432a9df6bcfe24cebdb95b797737b00f87395b20d8cee3eced96f00eac8fe195b8e7d5209f0a06aa1a80b3fa7c9d25fe15e85b95c17d8c9a244b4494cb9305912784433a4dfa62a5c98", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 7m16.360059136s ago: executing program 1 (id=17): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 7m14.892595179s ago: executing program 1 (id=19): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0xfffffffc, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7m14.648571421s ago: executing program 1 (id=23): r0 = syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xd) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) unshare(0x22020600) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x800, 0x8000, 0x1d8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x39bb, 0x41, 0x0, 0x0) 6m59.205679875s ago: executing program 32 (id=23): r0 = syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xd) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) unshare(0x22020600) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x800, 0x8000, 0x1d8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x39bb, 0x41, 0x0, 0x0) 6m18.668561979s ago: executing program 4 (id=227): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9015) syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x800, 0x1, 0x315}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000004480), 0x0, 0x0) read(r5, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 6m18.113280726s ago: executing program 4 (id=232): unlinkat(0xffffffffffffffff, &(0x7f0000003380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000010c0)={[{0x2d, 'hugetlb'}]}, 0x9) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb240009"], 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005800500"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6m17.597782592s ago: executing program 4 (id=235): openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x1400, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000017c0)=""/4103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 6m16.377852302s ago: executing program 4 (id=243): unlinkat(0xffffffffffffffff, &(0x7f0000003380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000010c0)={[{0x2d, 'hugetlb'}]}, 0x9) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb240009"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 6m16.00936484s ago: executing program 4 (id=247): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) wait4(0x0, 0x0, 0x80000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 6m15.048555678s ago: executing program 4 (id=248): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) 5m59.662984298s ago: executing program 33 (id=248): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) 14.309569643s ago: executing program 0 (id=1527): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000940)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) 12.835140326s ago: executing program 0 (id=1531): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xc5) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xffffff75, 0xaeb, 0x10e57, 0x3, 0xf6, "3ce69208000000f6001700", 0x4, 0xff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x8) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r6 = socket(0x10, 0x803, 0x3) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x836a18dd027ae1e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x2, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 12.429118515s ago: executing program 6 (id=1533): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000940)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) 11.425930145s ago: executing program 6 (id=1535): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r2, 0x0, 0x4000851) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 8.997104805s ago: executing program 6 (id=1542): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r2, 0x0, 0x4000851) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 8.741082308s ago: executing program 5 (id=1543): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000940)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0) 8.079949541s ago: executing program 5 (id=1544): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000940)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0) 8.044594582s ago: executing program 0 (id=1546): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xc5) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xffffff75, 0xaeb, 0x10e57, 0x3, 0xf6, "3ce69208000000f6001700", 0x4, 0xff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x8) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = socket(0x10, 0x803, 0x3) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x836a18dd027ae1e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x2, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x44030) 7.133806728s ago: executing program 2 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r6) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20004014) r8 = socket(0x1, 0x803, 0x0) r9 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0xa, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000b40)=""/63, 0x27, 0x3f, 0x0, 0x5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x66, '\x00', r5, r11, 0x1, 0x1, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvmsg$qrtr(r8, &(0x7f00000009c0)={&(0x7f0000000080), 0xc, &(0x7f0000000800)=[{&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000380)=""/56, 0x38}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000700)=""/195, 0xc3}], 0x8, &(0x7f0000000880)=[{0x108, 0x0, 0x0, ""/247}], 0x108}, 0x38, 0x40020021) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r14], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 7.065396751s ago: executing program 2 (id=1549): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107e000000000063014800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r7, 0x2) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r10 = getpid() r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x18, 0x72, 0x301, 0x4000001, 0x4}, 0x18}, 0x1, 0xf00, 0x0, 0x480c0}, 0x4000810) r12 = syz_pidfd_open(r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r12}}) 6.633465582s ago: executing program 5 (id=1550): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x8001) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x40c0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x79) readahead(r6, 0x0, 0x7) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'team_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 6.595535974s ago: executing program 3 (id=1551): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000940)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007"], 0x80}}, 0x0) 6.383053074s ago: executing program 2 (id=1552): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xc5) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xffffff75, 0xaeb, 0x10e57, 0x3, 0xf6, "3ce69208000000f6001700", 0x4, 0xff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x8) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = socket(0x10, 0x803, 0x3) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x836a18dd027ae1e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x2, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x44030) 6.217275143s ago: executing program 3 (id=1553): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xc5) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xffffff75, 0xaeb, 0x10e57, 0x3, 0xf6, "3ce69208000000f6001700", 0x4, 0xff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x8) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = socket(0x10, 0x803, 0x3) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x836a18dd027ae1e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x2, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 6.103319778s ago: executing program 0 (id=1554): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r6 = getpgrp(0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={0x0, 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 5.282338749s ago: executing program 6 (id=1555): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r6 = getpgrp(0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={0x0, 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 5.189339004s ago: executing program 0 (id=1556): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r2, 0x0, 0x4000851) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) mremap(&(0x7f000005c000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000092b000/0x4000)=nil) 4.363610804s ago: executing program 2 (id=1557): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r2, 0x0, 0x4000851) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) mremap(&(0x7f000005c000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000092b000/0x4000)=nil) 4.274052349s ago: executing program 6 (id=1558): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) 4.176357844s ago: executing program 3 (id=1559): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107e000000000063014800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r7, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r9 = getpid() r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x18, 0x72, 0x301, 0x4000001, 0x4}, 0x18}, 0x1, 0xf00, 0x0, 0x480c0}, 0x4000810) r11 = syz_pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) 3.263628809s ago: executing program 5 (id=1560): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r6 = getpgrp(0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={0x0, 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 3.24861472s ago: executing program 6 (id=1561): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8001) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x40c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x79) readahead(r5, 0x0, 0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'team_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 2.392165282s ago: executing program 3 (id=1562): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r6 = getpgrp(0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={0x0, 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 2.327772805s ago: executing program 5 (id=1563): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r2, 0x0, 0x4000851) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) mremap(&(0x7f000005c000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000092b000/0x4000)=nil) 1.43161972s ago: executing program 3 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1.287246796s ago: executing program 2 (id=1565): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r6 = getpgrp(0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={0x0, 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 755.456933ms ago: executing program 5 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) epoll_create1(0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001fc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d61736369692c00125c6f3ad370264551e3ffff7e80e44939e902bdf759e02dbdff45399cd965a877fb80b6f99d249537cb3ccf29a605586bcc81c95f7bdb69711ae6935ce36b"], 0x1, 0x566, &(0x7f0000000540)="$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") r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2cf}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r5, &(0x7f0000000040)=""/225, 0xe1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3f, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x80}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) 317.375414ms ago: executing program 0 (id=1567): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r2, 0x0, 0x4000851) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) mremap(&(0x7f000005c000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000092b000/0x4000)=nil) 91.834896ms ago: executing program 3 (id=1568): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mremap(&(0x7f00008b1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000188000/0x4000)=nil) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_submit(0x0, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0xfffffffe, 0x8, 0x3511, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x9000000000, 0x800) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x7fff, 0x0, &(0x7f0000000e80), &(0x7f0000000280)=[0xb, 0xfffffffffffff1c2]}, 0x20) pselect6(0x0, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/19, @ANYRES32=r7, @ANYBLOB="0000000000620000200012800b00010065727370616e00001000028004001200060011004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000f40)={'ip6_vti0\x00', r7, 0x2f, 0x5c, 0xd3, 0x4, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x20, 0x4, 0x9}}) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x5, 0xfffffbff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000009003140018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8001, 0xdc, &(0x7f0000000340)=""/220, 0x40f00, 0x3, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x3, 0x4, 0x3f}, 0x10, 0x0, r1, 0x7, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x6, 0x3}, {0x1, 0x4, 0xc}, {0x5, 0x3, 0x7, 0x6}, {0x5, 0x2, 0x9, 0x9}, {0x1, 0x3, 0x2}, {0x5, 0x2, 0xb, 0x9a7571c42364b19b}, {0x3, 0x2, 0xe, 0xb}], 0x10, 0xb3f}, 0x94) 0s ago: executing program 2 (id=1569): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xc5) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xffffff75, 0xaeb, 0x10e57, 0x3, 0xf6, "3ce69208000000f6001700", 0x4, 0xff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x8) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = socket(0x10, 0x803, 0x3) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x836a18dd027ae1e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x2, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = timerfd_create(0x0, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) sendmsg$nl_route(r6, 0x0, 0x44030) kernel console output (not intermixed with test programs): n 0 [ 303.475528][ T3311] total_active_anon 126976 [ 303.497383][ T3311] total_inactive_file 0 [ 303.501563][ T3311] total_active_file 524288 [ 303.505989][ T3311] total_unevictable 0 [ 303.512297][ T8656] loop0: detected capacity change from 0 to 736 [ 303.527248][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1047,pid=8626,uid=0 [ 303.571323][ T3311] Memory cgroup out of memory: OOM victim 8626 (syz.3.1047) is already exiting. Skip killing the task [ 303.897900][ T8674] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1058'. [ 304.922116][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 305.016488][ T8681] syz.6.1060 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 305.097153][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.6.1060 Not tainted syzkaller #0 PREEMPT(full) [ 305.097185][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 305.097199][ T8681] Call Trace: [ 305.097209][ T8681] [ 305.097217][ T8681] __dump_stack+0x1d/0x30 [ 305.097260][ T8681] dump_stack_lvl+0x95/0xd0 [ 305.097282][ T8681] dump_stack+0x15/0x1b [ 305.097308][ T8681] dump_header+0x80/0x240 [ 305.097336][ T8681] oom_kill_process+0x295/0x350 [ 305.097405][ T8681] out_of_memory+0x97d/0xb80 [ 305.097425][ T8681] try_charge_memcg+0x62e/0xa10 [ 305.097538][ T8681] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 305.097568][ T8681] __swap_cache_prepare_and_add+0x386/0x530 [ 305.097674][ T8681] swap_cache_alloc_folio+0xa2/0x120 [ 305.097709][ T8681] swap_cluster_readahead+0x36b/0x3d0 [ 305.097748][ T8681] swapin_readahead+0xde/0x840 [ 305.097776][ T8681] ? __vmalloc_node_range_noprof+0x121d/0x12b0 [ 305.097831][ T8681] ? __rcu_read_unlock+0x4e/0x70 [ 305.097857][ T8681] ? swap_cache_get_folio+0x26f/0x280 [ 305.097891][ T8681] do_swap_page+0x30d/0x2220 [ 305.097936][ T8681] ? __rcu_read_lock+0x36/0x50 [ 305.097960][ T8681] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 305.097993][ T8681] handle_mm_fault+0xb46/0x3020 [ 305.098044][ T8681] ? vma_start_read+0x1c7/0x2c0 [ 305.098079][ T8681] do_user_addr_fault+0x62f/0x1050 [ 305.098114][ T8681] ? trace_page_fault_user+0x1f/0xe0 [ 305.098226][ T8681] exc_page_fault+0x62/0xa0 [ 305.098261][ T8681] asm_exc_page_fault+0x26/0x30 [ 305.098281][ T8681] RIP: 0033:0x7f359fcac7ab [ 305.098297][ T8681] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 305.098314][ T8681] RSP: 002b:00007f359e707028 EFLAGS: 00010217 [ 305.098362][ T8681] RAX: 000000000000000c RBX: 00007f359ff25fa0 RCX: ffffffffffffffe8 [ 305.098379][ T8681] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000 [ 305.098392][ T8681] RBP: 00007f359fd42c99 R08: 0000000000000000 R09: 0000000000000000 [ 305.098404][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.098415][ T8681] R13: 00007f359ff26038 R14: 00007f359ff25fa0 R15: 00007ffc98017b48 [ 305.098433][ T8681] [ 305.098454][ T8681] memory: usage 193844kB, limit 307200kB, failcnt 11130 [ 305.378791][ T8681] memory+swap: usage 157812kB, limit 9007199254740988kB, failcnt 0 [ 305.427314][ T8681] kmem: usage 126992kB, limit 9007199254740988kB, failcnt 0 [ 305.458952][ T8681] Memory cgroup stats for /syz6: [ 305.459293][ T8681] cache 0 [ 305.487125][ T8681] rss 114688 [ 305.494387][ T8681] shmem 0 [ 305.537323][ T8681] mapped_file 0 [ 305.686264][ T8681] dirty 0 [ 305.808099][ T8681] writeback 0 [ 305.849905][ T8681] workingset_refault_anon 299 [ 305.911914][ T8681] workingset_refault_file 1492 [ 305.976303][ T8681] swap 102400 [ 306.027336][ T8681] swapcached 18882560 [ 306.099079][ T8681] pgpgin 279914 [ 306.150515][ T8681] pgpgout 279884 [ 306.193098][ T8681] pgfault 129091 [ 306.241925][ T8681] pgmajfault 240 [ 306.457172][ T8681] inactive_anon 12288 [ 306.461238][ T8681] active_anon 110592 [ 306.465208][ T8681] inactive_file 0 [ 306.491748][ T8681] active_file 0 [ 306.495303][ T8681] unevictable 0 [ 306.559891][ T8681] hierarchical_memory_limit 314572800 [ 306.565382][ T8681] hierarchical_memsw_limit 9223372036854771712 [ 306.585352][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1063'. [ 306.657329][ T8681] total_cache 0 [ 306.677388][ T8681] total_rss 114688 [ 306.681170][ T8681] total_shmem 0 [ 306.684676][ T8681] total_mapped_file 0 [ 306.748312][ T8681] total_dirty 0 [ 306.751826][ T8681] total_writeback 0 [ 306.755636][ T8681] total_workingset_refault_anon 299 [ 306.778366][ T8706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1065'. [ 306.831946][ T8681] total_workingset_refault_file 1492 [ 306.859013][ T8681] total_swap 102400 [ 307.042914][ T8681] total_swapcached 18882560 [ 307.060675][ T8681] total_pgpgin 279914 [ 307.064700][ T8681] total_pgpgout 279884 [ 307.135189][ T8720] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1067'. [ 307.619030][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 307.637725][ T8681] total_pgfault 129091 [ 307.641898][ T8681] total_pgmajfault 240 [ 307.646135][ T8681] total_inactive_anon 12288 [ 307.650745][ T8681] total_active_anon 110592 [ 307.655361][ T8681] total_inactive_file 0 [ 307.659601][ T8681] total_active_file 0 [ 307.663783][ T8681] total_unevictable 0 [ 307.677129][ T8681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1060,pid=8680,uid=0 [ 307.727250][ T8681] Memory cgroup out of memory: Killed process 8681 (syz.6.1060) total-vm:96212kB, anon-rss:1336kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 307.900552][ T8723] loop3: detected capacity change from 0 to 736 [ 307.963716][ T8731] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1072'. [ 308.306545][ T8742] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1071'. [ 309.122387][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1073'. [ 310.322567][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1078'. [ 310.468472][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1076'. [ 310.608520][ T8785] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1084'. [ 310.777790][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1077'. [ 311.837305][ T8803] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1088'. [ 312.571927][ T5108] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 312.681471][ T5108] CPU: 1 UID: 0 PID: 5108 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 312.681523][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.681534][ T5108] Call Trace: [ 312.681540][ T5108] [ 312.681547][ T5108] __dump_stack+0x1d/0x30 [ 312.681577][ T5108] dump_stack_lvl+0x95/0xd0 [ 312.681663][ T5108] dump_stack+0x15/0x1b [ 312.681685][ T5108] dump_header+0x80/0x240 [ 312.681709][ T5108] oom_kill_process+0x295/0x350 [ 312.681732][ T5108] out_of_memory+0x97d/0xb80 [ 312.681790][ T5108] try_charge_memcg+0x62e/0xa10 [ 312.681833][ T5108] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 312.681906][ T5108] __swap_cache_prepare_and_add+0x386/0x530 [ 312.682013][ T5108] swap_cache_alloc_folio+0xa2/0x120 [ 312.682045][ T5108] swap_cluster_readahead+0x26e/0x3d0 [ 312.682082][ T5108] swapin_readahead+0xde/0x840 [ 312.682122][ T5108] ? __rcu_read_unlock+0x4e/0x70 [ 312.682141][ T5108] ? __perf_event_task_sched_in+0xa65/0xad0 [ 312.682163][ T5108] ? __list_add_valid_or_report+0x38/0xe0 [ 312.682261][ T5108] ? __rcu_read_unlock+0x4e/0x70 [ 312.682329][ T5108] ? swap_cache_get_folio+0x26f/0x280 [ 312.682362][ T5108] do_swap_page+0x30d/0x2220 [ 312.682396][ T5108] ? __schedule+0x93c/0xd40 [ 312.682480][ T5108] ? __rcu_read_lock+0x36/0x50 [ 312.682578][ T5108] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 312.682609][ T5108] handle_mm_fault+0xb46/0x3020 [ 312.682658][ T5108] ? vma_start_read+0x1c7/0x2c0 [ 312.682741][ T5108] do_user_addr_fault+0x62f/0x1050 [ 312.682787][ T5108] ? trace_page_fault_user+0x1f/0xe0 [ 312.682880][ T5108] exc_page_fault+0x62/0xa0 [ 312.682952][ T5108] asm_exc_page_fault+0x26/0x30 [ 312.683002][ T5108] RIP: 0033:0x7f359fc67917 [ 312.683021][ T5108] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 312.683040][ T5108] RSP: 002b:00007ffc98017e40 EFLAGS: 00010202 [ 312.683057][ T5108] RAX: 0000000000000000 RBX: 0000555567c67500 RCX: 00007f359fc67917 [ 312.683073][ T5108] RDX: 00007ffc98017e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.683101][ T5108] RBP: 00007ffc98017eec R08: 0000000000000000 R09: 0000000000000000 [ 312.683113][ T5108] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 312.683127][ T5108] R13: 00000000000927c0 R14: 000000000004c462 R15: 00007ffc98017f40 [ 312.683149][ T5108] [ 312.683204][ T5108] memory: usage 206840kB, limit 307200kB, failcnt 11275 [ 312.763507][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'. [ 312.847377][ T5108] memory+swap: usage 121760kB, limit 9007199254740988kB, failcnt 0 [ 313.713102][ T5108] kmem: usage 10668kB, limit 9007199254740988kB, failcnt 0 [ 313.765261][ T5108] Memory cgroup stats for /syz6: [ 313.765582][ T5108] cache 0 [ 313.773564][ T5108] rss 24576 [ 313.776715][ T5108] shmem 0 [ 313.779699][ T5108] mapped_file 0 [ 313.783198][ T5108] dirty 0 [ 313.786181][ T5108] writeback 0 [ 313.790672][ T5108] workingset_refault_anon 314 [ 313.795895][ T5108] workingset_refault_file 1492 [ 313.855680][ T5108] swap 204800 [ 313.859173][ T5108] swapcached 18944000 [ 313.863235][ T5108] pgpgin 280460 [ 313.866849][ T5108] pgpgout 280454 [ 313.870613][ T5108] pgfault 129804 [ 313.874170][ T5108] pgmajfault 250 [ 313.878056][ T5108] inactive_anon 0 [ 313.881695][ T5108] active_anon 24576 [ 313.885511][ T5108] inactive_file 0 [ 313.902409][ T5108] active_file 0 [ 314.000161][ T5108] unevictable 0 [ 314.003640][ T5108] hierarchical_memory_limit 314572800 [ 314.009115][ T5108] hierarchical_memsw_limit 9223372036854771712 [ 314.015388][ T5108] total_cache 0 [ 314.018888][ T5108] total_rss 24576 [ 314.022548][ T5108] total_shmem 0 [ 314.026027][ T5108] total_mapped_file 0 [ 314.030049][ T5108] total_dirty 0 [ 314.033524][ T5108] total_writeback 0 [ 314.057865][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 314.074911][ T5108] total_workingset_refault_anon 314 [ 314.217316][ T8841] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1093'. [ 314.231697][ T5108] total_workingset_refault_file 1492 [ 314.249646][ T5108] total_swap 204800 [ 314.263300][ T5108] total_swapcached 18944000 [ 314.998325][ T5108] total_pgpgin 280460 [ 315.002369][ T5108] total_pgpgout 280454 [ 315.006513][ T5108] total_pgfault 129804 [ 315.029488][ T5108] total_pgmajfault 250 [ 315.269449][ T5108] total_inactive_anon 0 [ 315.322738][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 315.331763][ T5108] total_active_anon 24576 [ 315.336103][ T5108] total_inactive_file 0 [ 315.347315][ T5108] total_active_file 0 [ 315.351310][ T5108] total_unevictable 0 [ 315.355293][ T5108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1087,pid=8791,uid=0 [ 315.393209][ T8854] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1096'. [ 315.434190][ T5108] Memory cgroup out of memory: OOM victim 8791 (syz.6.1087) is already exiting. Skip killing the task [ 315.778679][ T8870] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1099'. [ 317.194306][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1102'. [ 317.390080][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1098'. [ 318.632025][ T8901] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1108'. [ 319.258539][ T8912] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1110'. [ 319.888403][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1112'. [ 320.039489][ T8915] syz.3.1111 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 320.057144][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.3.1111 Not tainted syzkaller #0 PREEMPT(full) [ 320.057323][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.057336][ T8915] Call Trace: [ 320.057343][ T8915] [ 320.057351][ T8915] __dump_stack+0x1d/0x30 [ 320.057380][ T8915] dump_stack_lvl+0x95/0xd0 [ 320.057406][ T8915] dump_stack+0x15/0x1b [ 320.057429][ T8915] dump_header+0x80/0x240 [ 320.057460][ T8915] oom_kill_process+0x295/0x350 [ 320.057485][ T8915] out_of_memory+0x97d/0xb80 [ 320.057531][ T8915] try_charge_memcg+0x62e/0xa10 [ 320.057635][ T8915] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 320.057670][ T8915] __swap_cache_prepare_and_add+0x386/0x530 [ 320.057801][ T8915] swap_cache_alloc_folio+0xa2/0x120 [ 320.057831][ T8915] swap_cluster_readahead+0x26e/0x3d0 [ 320.057867][ T8915] swapin_readahead+0xde/0x840 [ 320.057904][ T8915] ? _raw_spin_unlock+0x9/0x30 [ 320.058052][ T8915] ? swap_put_entries_cluster+0x385/0x3a0 [ 320.058084][ T8915] ? swap_put_entries_cluster+0x131/0x3a0 [ 320.058116][ T8915] ? __rcu_read_unlock+0x4e/0x70 [ 320.058194][ T8915] ? swap_cache_get_folio+0x26f/0x280 [ 320.058224][ T8915] do_swap_page+0x30d/0x2220 [ 320.058262][ T8915] ? css_rstat_updated+0xbb/0x280 [ 320.058304][ T8915] ? __rcu_read_lock+0x36/0x50 [ 320.058344][ T8915] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 320.058438][ T8915] handle_mm_fault+0xb46/0x3020 [ 320.058487][ T8915] ? vma_start_read+0x1c7/0x2c0 [ 320.058516][ T8915] do_user_addr_fault+0x62f/0x1050 [ 320.058549][ T8915] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 320.058579][ T8915] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 320.058617][ T8915] ? trace_page_fault_user+0x1f/0xe0 [ 320.058649][ T8915] exc_page_fault+0x62/0xa0 [ 320.058680][ T8915] asm_exc_page_fault+0x26/0x30 [ 320.058744][ T8915] RIP: 0033:0x7fe747b4a110 [ 320.058764][ T8915] Code: c4 4c 0f 42 e0 83 3d ba dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e b5 ed 00 e8 03 00 00 48 8d 1d 7f be 3a 00 e8 8a 31 13 00 [ 320.058784][ T8915] RSP: 002b:00007fff58f44d00 EFLAGS: 00010216 [ 320.058851][ T8915] RAX: 000000000004e20d RBX: 00007fe747ef7da0 RCX: 000000000004e200 [ 320.058866][ T8915] RDX: 000000000000000d RSI: 00007fff58f44ce0 RDI: 0000000000000001 [ 320.058886][ T8915] RBP: 00007fe747ef7da0 R08: 0000000000cc87fe R09: 7fffffffffffffff [ 320.058903][ T8915] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000004e372 [ 320.058918][ T8915] R13: 00007fe747ef609c R14: 000000000004e12d R15: 00007fe747ef6090 [ 320.058962][ T8915] [ 320.058969][ T8915] memory: usage 307200kB, limit 307200kB, failcnt 29870 [ 320.377483][ T8915] memory+swap: usage 125896kB, limit 9007199254740988kB, failcnt 0 [ 320.385427][ T8915] kmem: usage 125140kB, limit 9007199254740988kB, failcnt 0 [ 320.446226][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'. [ 320.451385][ T8903] loop5: detected capacity change from 0 to 736 [ 320.458609][ T8915] Memory cgroup stats for /syz3: [ 320.463070][ T8915] cache 524288 [ 320.492564][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'. [ 320.507125][ T8915] rss 12288 [ 320.510254][ T8915] shmem 0 [ 320.513202][ T8915] mapped_file 65536 [ 320.517011][ T8915] dirty 0 [ 320.566441][ T8915] writeback 4096 [ 320.582114][ T8915] workingset_refault_anon 463 [ 320.586814][ T8915] workingset_refault_file 23620 [ 320.627133][ T8915] swap 188416 [ 320.645728][ T8915] swapcached 49094656 [ 320.657346][ T8915] pgpgin 455887 [ 320.668954][ T8915] pgpgout 455751 [ 320.673329][ T8915] pgfault 259829 [ 320.676889][ T8915] pgmajfault 374 [ 320.690650][ T8915] inactive_anon 24576 [ 320.709263][ T8915] active_anon 8192 [ 320.713051][ T8915] inactive_file 0 [ 320.716692][ T8915] active_file 524288 [ 320.738051][ T8915] unevictable 0 [ 320.837197][ T8915] hierarchical_memory_limit 314572800 [ 320.843020][ T8915] hierarchical_memsw_limit 9223372036854771712 [ 320.900586][ T8937] loop6: detected capacity change from 0 to 736 [ 320.908342][ T8915] total_cache 524288 [ 320.912246][ T8915] total_rss 12288 [ 320.915878][ T8915] total_shmem 0 [ 321.162247][ T8915] total_mapped_file 65536 [ 321.213714][ T8915] total_dirty 0 [ 321.235156][ T8915] total_writeback 4096 [ 321.361570][ T8915] total_workingset_refault_anon 463 [ 321.452173][ T8915] total_workingset_refault_file 23620 [ 321.477113][ T8915] total_swap 188416 [ 321.480963][ T8915] total_swapcached 49094656 [ 321.485478][ T8915] total_pgpgin 455887 [ 321.507181][ T8915] total_pgpgout 455751 [ 321.511290][ T8915] total_pgfault 259829 [ 321.537185][ T8915] total_pgmajfault 374 [ 321.552477][ T8915] total_inactive_anon 24576 [ 321.570691][ T8915] total_active_anon 8192 [ 321.575040][ T8915] total_inactive_file 0 [ 321.621972][ T8915] total_active_file 524288 [ 321.641326][ T8915] total_unevictable 0 [ 321.650733][ T8915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1111,pid=8915,uid=0 [ 321.699851][ T8915] Memory cgroup out of memory: Killed process 8915 (syz.3.1111) total-vm:96212kB, anon-rss:1240kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 322.102933][ T8949] loop0: detected capacity change from 0 to 736 [ 322.825603][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1124'. [ 322.963299][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1125'. [ 323.775674][ T8977] loop2: detected capacity change from 0 to 736 [ 323.826754][ T8981] loop3: detected capacity change from 0 to 736 [ 324.862720][ T8985] loop0: detected capacity change from 0 to 736 [ 325.255300][ T9002] loop3: detected capacity change from 0 to 736 [ 325.378806][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1135'. [ 325.682935][ T9016] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'. [ 325.818434][ T9012] syz.0.1136 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 325.837162][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.0.1136 Not tainted syzkaller #0 PREEMPT(full) [ 325.837190][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.837203][ T9012] Call Trace: [ 325.837285][ T9012] [ 325.837294][ T9012] __dump_stack+0x1d/0x30 [ 325.837322][ T9012] dump_stack_lvl+0x95/0xd0 [ 325.837347][ T9012] dump_stack+0x15/0x1b [ 325.837371][ T9012] dump_header+0x80/0x240 [ 325.837399][ T9012] oom_kill_process+0x295/0x350 [ 325.837459][ T9012] out_of_memory+0x97d/0xb80 [ 325.837483][ T9012] try_charge_memcg+0x62e/0xa10 [ 325.837530][ T9012] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 325.837587][ T9012] __swap_cache_prepare_and_add+0x386/0x530 [ 325.837765][ T9012] swap_cache_alloc_folio+0xa2/0x120 [ 325.837791][ T9012] swap_cluster_readahead+0x26e/0x3d0 [ 325.837822][ T9012] swapin_readahead+0xde/0x840 [ 325.837877][ T9012] ? __vmalloc_node_range_noprof+0x121d/0x12b0 [ 325.837909][ T9012] ? __rcu_read_unlock+0x4e/0x70 [ 325.837929][ T9012] ? swap_cache_get_folio+0x26f/0x280 [ 325.837955][ T9012] do_swap_page+0x30d/0x2220 [ 325.838045][ T9012] ? __rcu_read_lock+0x36/0x50 [ 325.838092][ T9012] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 325.838121][ T9012] handle_mm_fault+0xb46/0x3020 [ 325.838148][ T9012] ? vma_start_read+0x1c7/0x2c0 [ 325.838229][ T9012] do_user_addr_fault+0x62f/0x1050 [ 325.838259][ T9012] ? trace_page_fault_user+0x1f/0xe0 [ 325.838341][ T9012] exc_page_fault+0x62/0xa0 [ 325.838374][ T9012] asm_exc_page_fault+0x26/0x30 [ 325.838398][ T9012] RIP: 0033:0x7f8ff312c7ab [ 325.838418][ T9012] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 325.838473][ T9012] RSP: 002b:00007f8ff1b7f028 EFLAGS: 00010217 [ 325.838491][ T9012] RAX: 000000000000000c RBX: 00007f8ff33a5fa0 RCX: ffffffffffffffe8 [ 325.838504][ T9012] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000 [ 325.838517][ T9012] RBP: 00007f8ff31c2c99 R08: 0000000000000000 R09: 0000000000000000 [ 325.838529][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.838542][ T9012] R13: 00007f8ff33a6038 R14: 00007f8ff33a5fa0 R15: 00007ffe68946818 [ 325.838594][ T9012] [ 325.838635][ T9012] memory: usage 286660kB, limit 307200kB, failcnt 29072 [ 326.147150][ T9012] memory+swap: usage 275136kB, limit 9007199254740988kB, failcnt 0 [ 326.179601][ T9012] kmem: usage 271808kB, limit 9007199254740988kB, failcnt 0 [ 326.328088][ T9012] Memory cgroup stats for /syz0: [ 326.336796][ T9012] cache 4096 [ 326.403424][ T9012] rss 32768 [ 326.419526][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1138'. [ 326.450235][ T9012] shmem 0 [ 326.482263][ T9012] mapped_file 4096 [ 326.546955][ T9012] dirty 0 [ 326.592714][ T9012] writeback 0 [ 326.630611][ T9012] workingset_refault_anon 364 [ 326.655487][ T9012] workingset_refault_file 10013 [ 326.670854][ T9012] swap 172032 [ 326.681059][ T9012] swapcached 47820800 [ 326.696747][ T9012] pgpgin 579089 [ 326.713903][ T9012] pgpgout 579073 [ 326.837586][ T9012] pgfault 266169 [ 326.847457][ T9012] pgmajfault 236 [ 326.861309][ T9012] inactive_anon 28672 [ 327.837304][ T9012] active_anon 32768 [ 327.986553][ T9012] inactive_file 4096 [ 328.004989][ T9012] active_file 0 [ 328.023740][ T9012] unevictable 0 [ 328.031443][ T9012] hierarchical_memory_limit 314572800 [ 328.050168][ T9012] hierarchical_memsw_limit 9223372036854771712 [ 328.067582][ T9012] total_cache 4096 [ 328.077539][ T9012] total_rss 32768 [ 328.178609][ T9012] total_shmem 0 [ 328.182109][ T9012] total_mapped_file 4096 [ 328.241266][ T9012] total_dirty 0 [ 328.244772][ T9012] total_writeback 0 [ 328.267677][ T9012] total_workingset_refault_anon 364 [ 328.277157][ T9012] total_workingset_refault_file 10013 [ 328.292750][ T9012] total_swap 172032 [ 328.296619][ T9012] total_swapcached 47820800 [ 328.317399][ T9012] total_pgpgin 579089 [ 328.321489][ T9012] total_pgpgout 579073 [ 328.347196][ T9012] total_pgfault 266169 [ 328.351289][ T9012] total_pgmajfault 236 [ 328.355365][ T9012] total_inactive_anon 28672 [ 328.383440][ T9042] loop3: detected capacity change from 0 to 736 [ 328.390351][ T9012] total_active_anon 32768 [ 328.394709][ T9012] total_inactive_file 4096 [ 328.439672][ T9012] total_active_file 0 [ 328.443689][ T9012] total_unevictable 0 [ 328.457530][ T9012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1136,pid=9011,uid=0 [ 328.564169][ T9012] Memory cgroup out of memory: Killed process 9012 (syz.0.1136) total-vm:96344kB, anon-rss:1344kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 328.974628][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1142'. [ 329.856515][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 329.952311][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1148'. [ 329.993861][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 329.993889][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.993968][ T3311] Call Trace: [ 329.993976][ T3311] [ 329.993983][ T3311] __dump_stack+0x1d/0x30 [ 329.994008][ T3311] dump_stack_lvl+0x95/0xd0 [ 329.994029][ T3311] dump_stack+0x15/0x1b [ 329.994048][ T3311] dump_header+0x80/0x240 [ 329.994077][ T3311] oom_kill_process+0x295/0x350 [ 329.994103][ T3311] out_of_memory+0x97d/0xb80 [ 329.994129][ T3311] try_charge_memcg+0x62e/0xa10 [ 329.994214][ T3311] __mem_cgroup_charge+0x65/0x150 [ 329.994276][ T3311] filemap_add_folio+0x110/0x350 [ 329.994296][ T3311] __filemap_get_folio_mpol+0x326/0x680 [ 329.994380][ T3311] filemap_fault+0x486/0xb90 [ 329.994410][ T3311] __do_fault+0xbc/0x200 [ 329.994428][ T3311] handle_mm_fault+0x11e2/0x3020 [ 329.994492][ T3311] ? vma_start_read+0x1c7/0x2c0 [ 329.994522][ T3311] do_user_addr_fault+0x62f/0x1050 [ 329.994621][ T3311] ? trace_page_fault_user+0x1f/0xe0 [ 329.994706][ T3311] exc_page_fault+0x62/0xa0 [ 329.994742][ T3311] asm_exc_page_fault+0x26/0x30 [ 329.994766][ T3311] RIP: 0033:0x7fe747b4a7b4 [ 329.994784][ T3311] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 329.994826][ T3311] RSP: 002b:00007fff58f44f00 EFLAGS: 00010206 [ 329.994846][ T3311] RAX: 0000001b33924000 RBX: 00000000000003be RCX: 0000000000050528 [ 329.994862][ T3311] RDX: 000000000cfe2e5a RSI: 00007fff58f44f90 RDI: 0000000000000001 [ 329.994876][ T3311] RBP: 00007fff58f44f3c R08: 0000000031905fb2 R09: 7fffffffffffffff [ 329.994891][ T3311] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 329.994934][ T3311] R13: 00000000000927c0 R14: 000000000005073c R15: 00007fff58f44f90 [ 329.994954][ T3311] [ 329.995152][ T3311] memory: usage 203984kB, limit 307200kB, failcnt 30412 [ 330.008377][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1152'. [ 330.077632][ T3311] memory+swap: usage 178680kB, limit 9007199254740988kB, failcnt 0 [ 330.227275][ T3311] kmem: usage 86940kB, limit 9007199254740988kB, failcnt 0 [ 330.234510][ T3311] Memory cgroup stats for /syz3: [ 330.234852][ T3311] cache 0 [ 330.309770][ T9082] loop0: detected capacity change from 0 to 736 [ 330.316210][ T3311] rss 36864 [ 330.316223][ T3311] shmem 0 [ 330.316231][ T3311] mapped_file 0 [ 330.316239][ T3311] dirty 0 [ 330.316247][ T3311] writeback 0 [ 330.316254][ T3311] workingset_refault_anon 492 [ 330.316263][ T3311] workingset_refault_file 23829 [ 330.316273][ T3311] swap 163840 [ 330.316280][ T3311] swapcached 49229824 [ 330.316295][ T3311] pgpgin 460959 [ 330.316302][ T3311] pgpgout 460947 [ 330.316310][ T3311] pgfault 265996 [ 330.316317][ T3311] pgmajfault 398 [ 330.316324][ T3311] inactive_anon 12288 [ 330.316331][ T3311] active_anon 36864 [ 330.316339][ T3311] inactive_file 0 [ 330.316347][ T3311] active_file 0 [ 330.316355][ T3311] unevictable 0 [ 330.316363][ T3311] hierarchical_memory_limit 314572800 [ 330.316424][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 330.316432][ T3311] total_cache 0 [ 330.316440][ T3311] total_rss 36864 [ 330.316447][ T3311] total_shmem 0 [ 330.316455][ T3311] total_mapped_file 0 [ 330.316463][ T3311] total_dirty 0 [ 330.316471][ T3311] total_writeback 0 [ 330.316479][ T3311] total_workingset_refault_anon 492 [ 330.316487][ T3311] total_workingset_refault_file 23829 [ 330.316531][ T3311] total_swap 163840 [ 330.316539][ T3311] total_swapcached 49229824 [ 330.316557][ T3311] total_pgpgin 460959 [ 330.316565][ T3311] total_pgpgout 460947 [ 330.316574][ T3311] total_pgfault 265996 [ 330.316582][ T3311] total_pgmajfault 398 [ 330.316590][ T3311] total_inactive_anon 12288 [ 330.316599][ T3311] total_active_anon 36864 [ 330.316608][ T3311] total_inactive_file 0 [ 330.316649][ T3311] total_active_file 0 [ 330.316657][ T3311] total_unevictable 0 [ 330.316666][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1151,pid=9066,uid=0 [ 330.316761][ T3311] Memory cgroup out of memory: Killed process 9066 (syz.3.1151) total-vm:96212kB, anon-rss:1272kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 331.025494][ T9085] loop3: detected capacity change from 0 to 736 [ 331.424116][ T9091] loop2: detected capacity change from 0 to 736 [ 331.550292][ T9108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1160'. [ 331.806870][ T9109] loop6: detected capacity change from 0 to 736 [ 332.207030][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'. [ 332.350174][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 333.459093][ T9122] loop5: detected capacity change from 0 to 736 [ 333.537980][ T9132] loop0: detected capacity change from 0 to 736 [ 333.563362][ T9141] loop6: detected capacity change from 0 to 736 [ 334.458603][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1172'. [ 335.012580][ T9156] loop2: detected capacity change from 0 to 736 [ 335.098025][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1176'. [ 336.062279][ T9167] loop5: detected capacity change from 0 to 736 [ 336.342850][ T9177] loop0: detected capacity change from 0 to 736 [ 336.431419][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'. [ 336.615665][ T9180] loop3: detected capacity change from 0 to 736 [ 337.046215][ T9193] loop5: detected capacity change from 0 to 736 [ 337.365709][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1185'. [ 338.310213][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1187'. [ 338.808318][ T9217] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1190'. [ 339.252428][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 339.328881][ T3311] CPU: 0 UID: 0 PID: 3311 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 339.328915][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.328996][ T3311] Call Trace: [ 339.329004][ T3311] [ 339.329011][ T3311] __dump_stack+0x1d/0x30 [ 339.329040][ T3311] dump_stack_lvl+0x95/0xd0 [ 339.329066][ T3311] dump_stack+0x15/0x1b [ 339.329089][ T3311] dump_header+0x80/0x240 [ 339.329132][ T3311] oom_kill_process+0x295/0x350 [ 339.329158][ T3311] out_of_memory+0x97d/0xb80 [ 339.329183][ T3311] try_charge_memcg+0x62e/0xa10 [ 339.329237][ T3311] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 339.329288][ T3311] __swap_cache_prepare_and_add+0x386/0x530 [ 339.329398][ T3311] swap_cache_alloc_folio+0xa2/0x120 [ 339.329505][ T3311] swap_cluster_readahead+0x26e/0x3d0 [ 339.329540][ T3311] swapin_readahead+0xde/0x840 [ 339.329611][ T3311] ? __rcu_read_unlock+0x4e/0x70 [ 339.329634][ T3311] ? __perf_event_task_sched_in+0xa65/0xad0 [ 339.329656][ T3311] ? __list_add_valid_or_report+0x38/0xe0 [ 339.329757][ T3311] ? xfd_validate_state+0x45/0xf0 [ 339.329790][ T3311] ? __rcu_read_unlock+0x4e/0x70 [ 339.329812][ T3311] ? swap_cache_get_folio+0x26f/0x280 [ 339.330025][ T3311] do_swap_page+0x30d/0x2220 [ 339.330057][ T3311] ? __schedule+0x93c/0xd40 [ 339.330083][ T3311] ? __rcu_read_lock+0x36/0x50 [ 339.330147][ T3311] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 339.330222][ T3311] handle_mm_fault+0xb46/0x3020 [ 339.330250][ T3311] ? vma_start_read+0x1c7/0x2c0 [ 339.330376][ T3311] do_user_addr_fault+0x62f/0x1050 [ 339.330428][ T3311] ? trace_page_fault_user+0x1f/0xe0 [ 339.330463][ T3311] exc_page_fault+0x62/0xa0 [ 339.330566][ T3311] asm_exc_page_fault+0x26/0x30 [ 339.330596][ T3311] RIP: 0033:0x7fe747c37917 [ 339.330665][ T3311] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 339.330683][ T3311] RSP: 002b:00007fff58f44e90 EFLAGS: 00010202 [ 339.330702][ T3311] RAX: 0000000000000000 RBX: 000055555c38b500 RCX: 00007fe747c37917 [ 339.330715][ T3311] RDX: 00007fff58f44ed0 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.330761][ T3311] RBP: 00007fff58f44f3c R08: 0000000000000000 R09: 0000000000000000 [ 339.330776][ T3311] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 339.330821][ T3311] R13: 00000000000927c0 R14: 0000000000052b70 R15: 00007fff58f44f90 [ 339.330838][ T3311] [ 339.579955][ T3311] memory: usage 290560kB, limit 307200kB, failcnt 37047 [ 339.613431][ T3311] memory+swap: usage 276460kB, limit 9007199254740988kB, failcnt 0 [ 339.645028][ T3311] kmem: usage 260660kB, limit 9007199254740988kB, failcnt 0 [ 339.684247][ T3311] Memory cgroup stats for /syz3: [ 339.684570][ T3311] cache 0 [ 339.721257][ T3311] rss 24576 [ 339.744729][ T3311] shmem 0 [ 339.764978][ T3311] mapped_file 0 [ 339.795648][ T3311] dirty 0 [ 339.822609][ T3311] writeback 0 [ 339.825978][ T3311] workingset_refault_anon 563 [ 339.855294][ T3311] workingset_refault_file 23829 [ 339.869297][ T3311] swap 196608 [ 339.877188][ T3311] swapcached 71991296 [ 339.892155][ T3311] pgpgin 484370 [ 339.904500][ T3311] pgpgout 484363 [ 339.924876][ T3311] pgfault 276121 [ 339.936541][ T3311] pgmajfault 435 [ 339.947966][ T3311] inactive_anon 0 [ 339.958317][ T3311] active_anon 28672 [ 339.967637][ T3311] inactive_file 0 [ 339.976798][ T3311] active_file 0 [ 339.990240][ T3311] unevictable 0 [ 339.999339][ T3311] hierarchical_memory_limit 314572800 [ 340.013549][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 340.029933][ T3311] total_cache 0 [ 340.035682][ T3311] total_rss 24576 [ 340.041545][ T3311] total_shmem 0 [ 340.048383][ T3311] total_mapped_file 0 [ 340.054551][ T3311] total_dirty 0 [ 340.062267][ T3311] total_writeback 0 [ 340.068326][ T3311] total_workingset_refault_anon 563 [ 340.077987][ T3311] total_workingset_refault_file 23829 [ 340.090101][ T3311] total_swap 196608 [ 340.098533][ T3311] total_swapcached 71991296 [ 340.106882][ T3311] total_pgpgin 484370 [ 340.115359][ T3311] total_pgpgout 484363 [ 340.128627][ T3311] total_pgfault 276121 [ 340.140975][ T3311] total_pgmajfault 435 [ 340.150732][ T3311] total_inactive_anon 0 [ 340.164168][ T9229] loop5: detected capacity change from 0 to 736 [ 340.165350][ T3311] total_active_anon 28672 [ 340.184920][ T3311] total_inactive_file 0 [ 340.189412][ T3311] total_active_file 0 [ 340.195276][ T3311] total_unevictable 0 [ 340.203424][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1189,pid=9207,uid=0 [ 340.494111][ T3311] Memory cgroup out of memory: OOM victim 9207 (syz.3.1189) is already exiting. Skip killing the task [ 341.834243][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1195'. [ 343.145245][ T9255] loop2: detected capacity change from 0 to 736 [ 343.552900][ T9266] loop3: detected capacity change from 0 to 736 [ 343.813162][ T9269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1203'. [ 344.366231][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1204'. [ 346.061679][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1210'. [ 346.155822][ T9313] loop0: detected capacity change from 0 to 736 [ 346.368567][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 346.437019][ T9318] loop6: detected capacity change from 0 to 736 [ 346.540309][ T9332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1217'. [ 346.741812][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'. [ 347.075698][ T9330] loop3: detected capacity change from 0 to 736 [ 348.227964][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1218'. [ 349.261998][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1223'. [ 349.276592][ T9359] loop5: detected capacity change from 0 to 736 [ 349.537894][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1228'. [ 349.656874][ T9375] loop0: detected capacity change from 0 to 736 [ 351.196235][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1229'. [ 351.305914][ T9397] loop2: detected capacity change from 0 to 736 [ 351.675773][ T9399] loop6: detected capacity change from 0 to 736 [ 351.761126][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1236'. [ 351.991821][ T9406] loop5: detected capacity change from 0 to 736 [ 352.053824][ T9411] syz.0.1237 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 352.064961][ T9411] CPU: 0 UID: 0 PID: 9411 Comm: syz.0.1237 Not tainted syzkaller #0 PREEMPT(full) [ 352.065072][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.065086][ T9411] Call Trace: [ 352.065093][ T9411] [ 352.065101][ T9411] __dump_stack+0x1d/0x30 [ 352.065132][ T9411] dump_stack_lvl+0x95/0xd0 [ 352.065212][ T9411] dump_stack+0x15/0x1b [ 352.065238][ T9411] dump_header+0x80/0x240 [ 352.065272][ T9411] oom_kill_process+0x295/0x350 [ 352.065298][ T9411] out_of_memory+0x97d/0xb80 [ 352.065392][ T9411] try_charge_memcg+0x62e/0xa10 [ 352.065431][ T9411] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 352.065544][ T9411] __swap_cache_prepare_and_add+0x386/0x530 [ 352.065632][ T9411] swap_cache_alloc_folio+0xa2/0x120 [ 352.065666][ T9411] swap_cluster_readahead+0x26e/0x3d0 [ 352.065702][ T9411] swapin_readahead+0xde/0x840 [ 352.065758][ T9411] ? _raw_spin_unlock+0x9/0x30 [ 352.065789][ T9411] ? swap_put_entries_cluster+0x385/0x3a0 [ 352.065825][ T9411] ? swap_put_entries_cluster+0x131/0x3a0 [ 352.065858][ T9411] ? __rcu_read_unlock+0x4e/0x70 [ 352.065958][ T9411] ? swap_cache_get_folio+0x26f/0x280 [ 352.066013][ T9411] do_swap_page+0x30d/0x2220 [ 352.066084][ T9411] ? css_rstat_updated+0xbb/0x280 [ 352.066107][ T9411] ? __rcu_read_lock+0x36/0x50 [ 352.066125][ T9411] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 352.066203][ T9411] handle_mm_fault+0xb46/0x3020 [ 352.066231][ T9411] ? vma_start_read+0x1c7/0x2c0 [ 352.066257][ T9411] do_user_addr_fault+0x62f/0x1050 [ 352.066425][ T9411] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 352.066457][ T9411] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 352.066486][ T9411] ? trace_page_fault_user+0x1f/0xe0 [ 352.066522][ T9411] exc_page_fault+0x62/0xa0 [ 352.066647][ T9411] asm_exc_page_fault+0x26/0x30 [ 352.066670][ T9411] RIP: 0033:0x7f8ff30e78f8 [ 352.066687][ T9411] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 352.066704][ T9411] RSP: 002b:00007ffe68946900 EFLAGS: 00010246 [ 352.066720][ T9411] RAX: 0000000000000000 RBX: 0000555575c33500 RCX: 00007f8ff30ecfce [ 352.066733][ T9411] RDX: 00007ffe68946950 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.066757][ T9411] RBP: 00007f8ff33a7da0 R08: 0000000000000000 R09: 0000000000000000 [ 352.066772][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000056172 [ 352.066787][ T9411] R13: 00007f8ff33a609c R14: 0000000000055ee4 R15: 00007f8ff33a6090 [ 352.066809][ T9411] [ 352.066858][ T9411] memory: usage 307200kB, limit 307200kB, failcnt 33969 [ 352.322725][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1234'. [ 352.337693][ T9411] memory+swap: usage 229652kB, limit 9007199254740988kB, failcnt 0 [ 352.345786][ T9411] kmem: usage 219848kB, limit 9007199254740988kB, failcnt 0 [ 352.388818][ T9411] Memory cgroup stats for /syz0: [ 352.389029][ T9411] cache 524288 [ 352.447135][ T9411] rss 12288 [ 352.450288][ T9411] shmem 0 [ 352.453361][ T9411] mapped_file 0 [ 352.495919][ T9411] dirty 0 [ 352.499035][ T9411] writeback 0 [ 352.502451][ T9411] workingset_refault_anon 450 [ 352.507349][ T9411] workingset_refault_file 12318 [ 352.512335][ T9411] swap 192512 [ 352.515629][ T9411] swapcached 47869952 [ 352.519711][ T9411] pgpgin 631738 [ 352.523180][ T9411] pgpgout 631602 [ 352.526745][ T9411] pgfault 287810 [ 352.530354][ T9411] pgmajfault 296 [ 352.533924][ T9411] inactive_anon 0 [ 352.538114][ T9411] active_anon 28672 [ 352.541939][ T9411] inactive_file 0 [ 352.545578][ T9411] active_file 503808 [ 352.549519][ T9411] unevictable 0 [ 352.553059][ T9411] hierarchical_memory_limit 314572800 [ 352.567204][ T9411] hierarchical_memsw_limit 9223372036854771712 [ 352.737255][ T9411] total_cache 524288 [ 352.775586][ T9411] total_rss 12288 [ 352.849535][ T9411] total_shmem 0 [ 352.893278][ T9411] total_mapped_file 0 [ 352.934129][ T9411] total_dirty 0 [ 352.967111][ T9411] total_writeback 0 [ 353.002342][ T9411] total_workingset_refault_anon 450 [ 353.052424][ T9411] total_workingset_refault_file 12318 [ 353.116413][ T9411] total_swap 192512 [ 353.134729][ T9411] total_swapcached 47869952 [ 353.139600][ T9411] total_pgpgin 631738 [ 353.143687][ T9411] total_pgpgout 631602 [ 353.147843][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1240'. [ 353.148088][ T9411] total_pgfault 287810 [ 353.170503][ T9411] total_pgmajfault 296 [ 353.179721][ T9411] total_inactive_anon 0 [ 353.188952][ T9411] total_active_anon 28672 [ 353.198504][ T9411] total_inactive_file 0 [ 353.211544][ T9411] total_active_file 503808 [ 353.224868][ T9411] total_unevictable 0 [ 353.257631][ T9411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1237,pid=9411,uid=0 [ 353.326139][ T9411] Memory cgroup out of memory: Killed process 9411 (syz.0.1237) total-vm:96212kB, anon-rss:1252kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 353.517761][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1241'. [ 354.781221][ T9444] loop2: detected capacity change from 0 to 736 [ 354.939231][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1249'. [ 355.210505][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'. [ 355.479731][ T28] audit: type=1400 audit(1774169887.026:426): avc: denied { create } for pid=9469 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.323650][ T9475] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1252'. [ 356.334773][ T9475] netlink: zone id is out of range [ 356.340689][ T9475] netlink: zone id is out of range [ 356.361895][ T9475] netlink: zone id is out of range [ 356.781153][ T9475] netlink: set zone limit has 8 unknown bytes [ 356.795388][ T28] audit: type=1400 audit(1774169888.336:427): avc: denied { shutdown } for pid=9469 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.448190][ T9481] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1253'. [ 357.460586][ T9481] netlink: zone id is out of range [ 357.467637][ T9481] netlink: zone id is out of range [ 357.488273][ T9481] netlink: zone id is out of range [ 357.798776][ T9481] netlink: set zone limit has 8 unknown bytes [ 358.360957][ T28] audit: type=1400 audit(1774169889.416:428): avc: denied { write } for pid=9478 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.771418][ T9504] loop0: detected capacity change from 0 to 736 [ 360.145196][ T9513] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1261'. [ 360.156024][ T9513] netlink: zone id is out of range [ 360.162115][ T9513] netlink: zone id is out of range [ 362.071680][ T9523] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1263'. [ 362.086899][ T9523] net_ratelimit: 2 callbacks suppressed [ 362.086962][ T9523] netlink: zone id is out of range [ 362.097807][ T9523] netlink: zone id is out of range [ 362.103097][ T9523] netlink: zone id is out of range [ 362.240587][ T9526] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1264'. [ 362.249945][ T9526] netlink: zone id is out of range [ 362.255064][ T9526] netlink: zone id is out of range [ 362.260399][ T9526] netlink: zone id is out of range [ 362.276221][ T9526] netlink: set zone limit has 8 unknown bytes [ 362.860317][ T9523] netlink: set zone limit has 8 unknown bytes [ 362.903923][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 363.505888][ T9535] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1266'. [ 363.516513][ T9535] netlink: zone id is out of range [ 363.522632][ T9535] netlink: zone id is out of range [ 364.520413][ T9539] loop6: detected capacity change from 0 to 736 [ 364.536613][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1268'. [ 364.707294][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 365.129824][ T9556] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1271'. [ 366.151900][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 366.317702][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 366.317730][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.317741][ T3317] Call Trace: [ 366.317747][ T3317] [ 366.317756][ T3317] __dump_stack+0x1d/0x30 [ 366.317834][ T3317] dump_stack_lvl+0x95/0xd0 [ 366.317854][ T3317] dump_stack+0x15/0x1b [ 366.317873][ T3317] dump_header+0x80/0x240 [ 366.317893][ T3317] oom_kill_process+0x295/0x350 [ 366.317972][ T3317] out_of_memory+0x97d/0xb80 [ 366.318022][ T3317] try_charge_memcg+0x62e/0xa10 [ 366.318056][ T3317] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 366.318155][ T3317] __swap_cache_prepare_and_add+0x386/0x530 [ 366.318261][ T3317] swap_cache_alloc_folio+0xa2/0x120 [ 366.318286][ T3317] swap_cluster_readahead+0x36b/0x3d0 [ 366.318337][ T3317] swapin_readahead+0xde/0x840 [ 366.318372][ T3317] ? mm_trace_rss_stat+0x1d/0xf0 [ 366.318392][ T3317] ? __rcu_read_unlock+0x33/0x70 [ 366.318411][ T3317] ? __rcu_read_unlock+0x4e/0x70 [ 366.318428][ T3317] ? swap_cache_get_folio+0x26f/0x280 [ 366.318483][ T3317] do_swap_page+0x30d/0x2220 [ 366.318511][ T3317] ? mas_state_walk+0x82/0x650 [ 366.318532][ T3317] ? __rcu_read_lock+0x36/0x50 [ 366.318555][ T3317] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 366.318667][ T3317] handle_mm_fault+0xb46/0x3020 [ 366.318720][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 366.318751][ T3317] do_user_addr_fault+0x62f/0x1050 [ 366.318834][ T3317] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 366.318855][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 366.318927][ T3317] exc_page_fault+0x62/0xa0 [ 366.318986][ T3317] asm_exc_page_fault+0x26/0x30 [ 366.319034][ T3317] RIP: 0033:0x7f8ff2ffa7b7 [ 366.319054][ T3317] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 366.319075][ T3317] RSP: 002b:00007ffe68946b80 EFLAGS: 00010202 [ 366.319099][ T3317] RAX: 0000001b33624000 RBX: 00000000000003c5 RCX: 00000000000595b0 [ 366.319115][ T3317] RDX: 00000000019a228f RSI: 00007ffe68946c10 RDI: 0000000000000016 [ 366.319201][ T3317] RBP: 00007ffe68946bbc R08: 00000000061c8a77 R09: 7fffffffffffffff [ 366.319217][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 366.319241][ T3317] R13: 00000000000927c0 R14: 00000000000595a6 R15: 00007ffe68946c10 [ 366.319262][ T3317] [ 366.387114][ T3317] memory: usage 33940kB, limit 307200kB, failcnt 34396 [ 366.538627][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 366.822132][ T3317] memory+swap: usage 34092kB, limit 9007199254740988kB, failcnt 0 [ 366.867447][ T9569] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1274'. [ 367.368139][ T9569] net_ratelimit: 9 callbacks suppressed [ 367.368165][ T9569] netlink: set zone limit has 8 unknown bytes [ 367.395238][ T3317] kmem: usage 33536kB, limit 9007199254740988kB, failcnt 0 [ 367.467138][ T3317] Memory cgroup stats for /syz0: [ 367.467301][ T3317] cache 0 [ 367.477422][ T3317] rss 65536 [ 367.483023][ T3317] shmem 0 [ 367.625692][ T3317] mapped_file 0 [ 367.653367][ T3317] dirty 0 [ 368.067244][ T3317] writeback 0 [ 368.071232][ T3317] workingset_refault_anon 613 [ 368.077040][ T3317] workingset_refault_file 12447 [ 368.107652][ T3317] swap 139264 [ 368.941346][ T3317] swapcached 48619520 [ 368.945367][ T3317] pgpgin 644149 [ 369.003549][ T3317] pgpgout 644128 [ 369.027176][ T3317] pgfault 303181 [ 369.047143][ T3317] pgmajfault 354 [ 369.062396][ T3317] inactive_anon 4096 [ 369.077631][ T3317] active_anon 81920 [ 369.093620][ T3317] inactive_file 0 [ 369.112742][ T3317] active_file 0 [ 369.116239][ T3317] unevictable 0 [ 369.144914][ T3317] hierarchical_memory_limit 314572800 [ 369.153009][ T9582] loop5: detected capacity change from 0 to 736 [ 369.171153][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 369.201203][ T3317] total_cache 0 [ 369.222622][ T3317] total_rss 65536 [ 369.239727][ T3317] total_shmem 0 [ 369.256598][ T3317] total_mapped_file 0 [ 369.287680][ T3317] total_dirty 0 [ 369.291294][ T3317] total_writeback 0 [ 369.316490][ T3317] total_workingset_refault_anon 613 [ 369.349363][ T3317] total_workingset_refault_file 12447 [ 369.385125][ T3317] total_swap 139264 [ 369.400269][ T3317] total_swapcached 48619520 [ 369.404795][ T3317] total_pgpgin 644149 [ 369.440312][ T3317] total_pgpgout 644128 [ 369.444408][ T3317] total_pgfault 303181 [ 369.487158][ T3317] total_pgmajfault 354 [ 369.497417][ T3317] total_inactive_anon 4096 [ 369.557355][ T3317] total_active_anon 81920 [ 369.561743][ T3317] total_inactive_file 0 [ 369.565912][ T3317] total_active_file 0 [ 369.732127][ T3317] total_unevictable 0 [ 369.752345][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1273,pid=9560,uid=0 [ 370.284998][ T3317] Memory cgroup out of memory: OOM victim 9560 (syz.0.1273) is already exiting. Skip killing the task [ 370.972184][ T9598] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1281'. [ 370.983247][ T9598] netlink: zone id is out of range [ 370.989398][ T9598] netlink: zone id is out of range [ 371.004618][ T9598] netlink: zone id is out of range [ 371.437503][ T9598] netlink: set zone limit has 8 unknown bytes [ 371.867517][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1282'. [ 373.183160][ T9618] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1286'. [ 373.193289][ T9618] netlink: zone id is out of range [ 373.199161][ T9618] netlink: zone id is out of range [ 373.208220][ T9618] netlink: zone id is out of range [ 373.420566][ T9618] netlink: set zone limit has 8 unknown bytes [ 373.779048][ T9627] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1289'. [ 373.820268][ T9627] netlink: zone id is out of range [ 373.825442][ T9627] netlink: zone id is out of range [ 373.889140][ T9627] netlink: set zone limit has 8 unknown bytes [ 373.998559][ T9610] loop5: detected capacity change from 0 to 736 [ 374.008406][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1288'. [ 374.649489][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1284'. [ 376.290772][ T9642] loop3: detected capacity change from 0 to 736 [ 377.377386][ T9658] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1295'. [ 377.388170][ T9658] netlink: zone id is out of range [ 377.395130][ T9658] netlink: zone id is out of range [ 377.415911][ T9658] netlink: zone id is out of range [ 378.020982][ T9660] loop0: detected capacity change from 0 to 736 [ 378.731674][ T9663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1296'. [ 378.762995][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1299'. [ 379.407072][ T9682] loop0: detected capacity change from 0 to 736 [ 379.615421][ T9693] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 379.623275][ T9693] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1306'. [ 379.650184][ T9693] lo speed is unknown, defaulting to 1000 [ 379.838322][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1305'. [ 380.104576][ T9702] loop6: detected capacity change from 0 to 736 [ 380.131976][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1302'. [ 380.675077][ T9717] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1310'. [ 380.685356][ T9717] net_ratelimit: 1 callbacks suppressed [ 380.685455][ T9717] netlink: zone id is out of range [ 380.697152][ T9717] netlink: zone id is out of range [ 380.709888][ T9717] netlink: zone id is out of range [ 381.003050][ T9717] netlink: set zone limit has 8 unknown bytes [ 381.084225][ T9711] loop5: detected capacity change from 0 to 736 [ 381.278382][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'. [ 381.326135][ T9724] syz.3.1313 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 381.517294][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.3.1313 Not tainted syzkaller #0 PREEMPT(full) [ 381.517328][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.517340][ T9724] Call Trace: [ 381.517346][ T9724] [ 381.517353][ T9724] __dump_stack+0x1d/0x30 [ 381.517378][ T9724] dump_stack_lvl+0x95/0xd0 [ 381.517482][ T9724] dump_stack+0x15/0x1b [ 381.517503][ T9724] dump_header+0x80/0x240 [ 381.517524][ T9724] oom_kill_process+0x295/0x350 [ 381.517623][ T9724] out_of_memory+0x97d/0xb80 [ 381.517644][ T9724] try_charge_memcg+0x62e/0xa10 [ 381.517682][ T9724] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 381.517776][ T9724] __swap_cache_prepare_and_add+0x386/0x530 [ 381.517831][ T9724] swap_cache_alloc_folio+0xa2/0x120 [ 381.517865][ T9724] swap_cluster_readahead+0x26e/0x3d0 [ 381.517909][ T9724] swapin_readahead+0xde/0x840 [ 381.517934][ T9724] ? _raw_spin_unlock+0x9/0x30 [ 381.517957][ T9724] ? swap_put_entries_cluster+0x385/0x3a0 [ 381.518021][ T9724] ? swap_put_entries_cluster+0x131/0x3a0 [ 381.518052][ T9724] ? __rcu_read_unlock+0x4e/0x70 [ 381.518086][ T9724] ? swap_cache_get_folio+0x26f/0x280 [ 381.518147][ T9724] do_swap_page+0x30d/0x2220 [ 381.518173][ T9724] ? css_rstat_updated+0xbb/0x280 [ 381.518194][ T9724] ? __rcu_read_lock+0x36/0x50 [ 381.518217][ T9724] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 381.518337][ T9724] handle_mm_fault+0xb46/0x3020 [ 381.518448][ T9724] ? vma_start_read+0x1c7/0x2c0 [ 381.518502][ T9724] do_user_addr_fault+0x62f/0x1050 [ 381.518561][ T9724] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 381.518585][ T9724] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 381.518606][ T9724] ? trace_page_fault_user+0x1f/0xe0 [ 381.518693][ T9724] exc_page_fault+0x62/0xa0 [ 381.518776][ T9724] asm_exc_page_fault+0x26/0x30 [ 381.518800][ T9724] RIP: 0033:0x7fe747b4a14c [ 381.518817][ T9724] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 381.518837][ T9724] RSP: 002b:00007fff58f44d00 EFLAGS: 00010202 [ 381.518872][ T9724] RAX: 0000000000000000 RBX: 00007fe747ef5fa0 RCX: 000055555c38b808 [ 381.518934][ T9724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.518948][ T9724] RBP: 00007fe747ef7da0 R08: 0000000000000000 R09: 0000000000000000 [ 381.518963][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005d3ea [ 381.518978][ T9724] R13: 00007fe747ef609c R14: 000000000005d13e R15: 00007fe747ef6090 [ 381.519000][ T9724] [ 381.519018][ T9724] memory: usage 260132kB, limit 307200kB, failcnt 37463 [ 382.363275][ T9724] memory+swap: usage 260300kB, limit 9007199254740988kB, failcnt 0 [ 382.615848][ T9724] kmem: usage 259796kB, limit 9007199254740988kB, failcnt 0 [ 382.735353][ T9724] Memory cgroup stats for /syz3: [ 382.735685][ T9724] cache 0 [ 382.768163][ T9724] rss 28672 [ 382.771357][ T9724] shmem 0 [ 382.895763][ T9733] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1314'. [ 382.906825][ T9733] netlink: zone id is out of range [ 382.912500][ T9733] netlink: zone id is out of range [ 382.983830][ T9733] netlink: zone id is out of range [ 383.346280][ T9724] mapped_file 0 [ 383.354109][ T9724] dirty 0 [ 383.360275][ T9724] writeback 4096 [ 383.370029][ T9724] workingset_refault_anon 720 [ 383.385347][ T9733] netlink: set zone limit has 8 unknown bytes [ 383.726493][ T9724] workingset_refault_file 23829 [ 383.748612][ T9754] netlink: 'syz.5.1319': attribute type 1 has an invalid length. [ 383.766644][ T9724] swap 151552 [ 383.920612][ T9754] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1319'. [ 383.948610][ T9752] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1318'. [ 383.960131][ T9752] netlink: zone id is out of range [ 383.965470][ T9752] netlink: zone id is out of range [ 384.127460][ T9724] swapcached 72806400 [ 384.144327][ T9724] pgpgin 511033 [ 384.163869][ T9724] pgpgout 511015 [ 384.175064][ T9754] lo speed is unknown, defaulting to 1000 [ 384.230809][ T9724] pgfault 303857 [ 384.247144][ T9724] pgmajfault 503 [ 384.260938][ T9724] inactive_anon 36864 [ 384.287536][ T9724] active_anon 36864 [ 384.321529][ T9724] inactive_file 0 [ 384.345428][ T9724] active_file 0 [ 384.368352][ T9724] unevictable 0 [ 384.375864][ T9761] loop6: detected capacity change from 0 to 736 [ 384.377725][ T9724] hierarchical_memory_limit 314572800 [ 384.438168][ T9724] hierarchical_memsw_limit 9223372036854771712 [ 384.454589][ T9724] total_cache 0 [ 384.487574][ T9724] total_rss 28672 [ 384.491249][ T9724] total_shmem 0 [ 384.494711][ T9724] total_mapped_file 0 [ 384.520036][ T9724] total_dirty 0 [ 384.524737][ T9724] total_writeback 4096 [ 384.548597][ T9724] total_workingset_refault_anon 720 [ 384.553841][ T9724] total_workingset_refault_file 23829 [ 384.587769][ T9724] total_swap 151552 [ 384.591804][ T9724] total_swapcached 72806400 [ 384.596494][ T9724] total_pgpgin 511033 [ 384.609497][ T9724] total_pgpgout 511015 [ 384.619209][ T9724] total_pgfault 303857 [ 384.628217][ T9724] total_pgmajfault 503 [ 384.632307][ T9724] total_inactive_anon 36864 [ 384.652988][ T9724] total_active_anon 36864 [ 384.667577][ T9724] total_inactive_file 0 [ 384.671754][ T9724] total_active_file 0 [ 384.675756][ T9724] total_unevictable 0 [ 384.687335][ T9724] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1313,pid=9724,uid=0 [ 384.721172][ T9724] Memory cgroup out of memory: Killed process 9724 (syz.3.1313) total-vm:96212kB, anon-rss:1260kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 384.775509][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1320'. [ 384.780359][ T9763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1322'. [ 385.393454][ T9785] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1325'. [ 385.883482][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'. [ 386.103494][ T9793] loop3: detected capacity change from 0 to 736 [ 387.432562][ T9808] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1331'. [ 387.443003][ T9808] net_ratelimit: 6 callbacks suppressed [ 387.443183][ T9808] netlink: zone id is out of range [ 387.454964][ T9808] netlink: zone id is out of range [ 387.473905][ T9806] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1330'. [ 387.488186][ T9806] netlink: zone id is out of range [ 387.495283][ T9806] netlink: zone id is out of range [ 387.502352][ T9808] netlink: zone id is out of range [ 387.504917][ T9806] netlink: zone id is out of range [ 388.032062][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1328'. [ 388.392969][ T9806] netlink: set zone limit has 8 unknown bytes [ 388.393075][ T9808] netlink: set zone limit has 8 unknown bytes [ 389.122740][ T9826] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1335'. [ 389.133891][ T9826] netlink: zone id is out of range [ 389.139909][ T9826] netlink: zone id is out of range [ 389.628482][ T9821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1334'. [ 389.647120][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1333'. [ 389.915235][ T9843] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1337'. [ 390.455913][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1339'. [ 390.647919][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1338'. [ 390.881210][ T9859] syz.5.1342 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 391.171591][ T9868] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1343'. [ 391.460173][ T9859] CPU: 0 UID: 0 PID: 9859 Comm: syz.5.1342 Not tainted syzkaller #0 PREEMPT(full) [ 391.460202][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.460256][ T9859] Call Trace: [ 391.460266][ T9859] [ 391.460275][ T9859] __dump_stack+0x1d/0x30 [ 391.460305][ T9859] dump_stack_lvl+0x95/0xd0 [ 391.460373][ T9859] dump_stack+0x15/0x1b [ 391.460411][ T9859] dump_header+0x80/0x240 [ 391.460438][ T9859] oom_kill_process+0x295/0x350 [ 391.460462][ T9859] out_of_memory+0x97d/0xb80 [ 391.460483][ T9859] try_charge_memcg+0x62e/0xa10 [ 391.460538][ T9859] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 391.460602][ T9859] __swap_cache_prepare_and_add+0x386/0x530 [ 391.460686][ T9859] swap_cache_alloc_folio+0xa2/0x120 [ 391.460785][ T9859] swap_cluster_readahead+0x36b/0x3d0 [ 391.460825][ T9859] swapin_readahead+0xde/0x840 [ 391.460922][ T9859] ? __rcu_read_unlock+0x4e/0x70 [ 391.460948][ T9859] ? __perf_event_task_sched_in+0xa65/0xad0 [ 391.461006][ T9859] ? __list_add_valid_or_report+0x38/0xe0 [ 391.461067][ T9859] ? __rcu_read_unlock+0x4e/0x70 [ 391.461091][ T9859] ? swap_cache_get_folio+0x26f/0x280 [ 391.461117][ T9859] do_swap_page+0x30d/0x2220 [ 391.461151][ T9859] ? __schedule+0x93c/0xd40 [ 391.461188][ T9859] ? __rcu_read_lock+0x36/0x50 [ 391.461206][ T9859] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 391.461252][ T9859] handle_mm_fault+0xb46/0x3020 [ 391.461327][ T9859] ? vma_start_read+0x1c7/0x2c0 [ 391.461416][ T9859] do_user_addr_fault+0x62f/0x1050 [ 391.461452][ T9859] ? trace_page_fault_user+0x1f/0xe0 [ 391.461479][ T9859] exc_page_fault+0x62/0xa0 [ 391.461528][ T9859] asm_exc_page_fault+0x26/0x30 [ 391.461553][ T9859] RIP: 0033:0x7f096de678f8 [ 391.461573][ T9859] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 391.461603][ T9859] RSP: 002b:00007ffdc711fdb0 EFLAGS: 00010246 [ 391.461625][ T9859] RAX: 0000000000000000 RBX: 0000555563c9e500 RCX: 00007f096de6cfce [ 391.461679][ T9859] RDX: 00007ffdc711fe00 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.461693][ T9859] RBP: 00007f096e127da0 R08: 0000000000000000 R09: 0000000000000000 [ 391.461708][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005f90b [ 391.461724][ T9859] R13: 00007f096e12609c R14: 000000000005f6c8 R15: 00007f096e126090 [ 391.461746][ T9859] [ 391.461833][ T9859] memory: usage 290816kB, limit 307200kB, failcnt 30656 [ 391.787201][ T9859] memory+swap: usage 804kB, limit 9007199254740988kB, failcnt 0 [ 391.801365][ T9859] kmem: usage 348kB, limit 9007199254740988kB, failcnt 0 [ 391.835188][ T9859] Memory cgroup stats for /syz5: [ 391.836561][ T9859] cache 0 [ 392.109458][ T9873] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1344'. [ 392.393709][ T9859] rss 36864 [ 392.396898][ T9859] shmem 0 [ 392.430321][ T9859] mapped_file 0 [ 392.472344][ T9859] dirty 0 [ 392.475324][ T9859] writeback 0 [ 392.501287][ T9859] workingset_refault_anon 842 [ 392.544367][ T9859] workingset_refault_file 12366 [ 392.554776][ T9859] swap 151552 [ 392.558755][ T9859] swapcached 47194112 [ 392.562968][ T9859] pgpgin 660707 [ 392.566472][ T9859] pgpgout 660687 [ 392.577321][ T9859] pgfault 275263 [ 392.580884][ T9859] pgmajfault 476 [ 392.584488][ T9859] inactive_anon 0 [ 392.608400][ T9859] active_anon 81920 [ 392.612347][ T9859] inactive_file 0 [ 392.615984][ T9859] active_file 0 [ 392.645699][ T9859] unevictable 0 [ 392.672821][ T9859] hierarchical_memory_limit 314572800 [ 392.685206][ T9859] hierarchical_memsw_limit 9223372036854771712 [ 392.711889][ T9859] total_cache 0 [ 392.715452][ T9859] total_rss 36864 [ 392.722727][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1341'. [ 392.737135][ T9859] total_shmem 0 [ 392.740613][ T9859] total_mapped_file 0 [ 392.744603][ T9859] total_dirty 0 [ 392.767121][ T9859] total_writeback 0 [ 392.771119][ T9859] total_workingset_refault_anon 842 [ 392.777433][ T9859] total_workingset_refault_file 12366 [ 392.810338][ T9859] total_swap 151552 [ 392.814497][ T9859] total_swapcached 47194112 [ 392.837082][ T9859] total_pgpgin 660707 [ 392.841097][ T9859] total_pgpgout 660687 [ 392.845170][ T9859] total_pgfault 275263 [ 392.858067][ T9859] total_pgmajfault 476 [ 392.862240][ T9859] total_inactive_anon 0 [ 392.866462][ T9859] total_active_anon 81920 [ 392.887071][ T9859] total_inactive_file 0 [ 392.891261][ T9859] total_active_file 0 [ 392.895253][ T9859] total_unevictable 0 [ 392.917286][ T9859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1342,pid=9859,uid=0 [ 392.985384][ T9859] Memory cgroup out of memory: Killed process 9859 (syz.5.1342) total-vm:96212kB, anon-rss:1248kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 393.342998][ T9892] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1347'. [ 393.353269][ T9892] net_ratelimit: 10 callbacks suppressed [ 393.353407][ T9892] netlink: zone id is out of range [ 393.365477][ T9892] netlink: zone id is out of range [ 393.375687][ T9892] netlink: zone id is out of range [ 393.665216][ T9892] netlink: set zone limit has 8 unknown bytes [ 393.905252][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'. [ 394.733602][ T9917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1352'. [ 394.913426][ T9931] loop0: detected capacity change from 0 to 736 [ 395.230921][ T9922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1353'. [ 396.537478][ T9943] loop6: detected capacity change from 0 to 736 [ 396.635835][ T9945] loop0: detected capacity change from 0 to 736 [ 397.944658][ T9959] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1362'. [ 397.954873][ T9959] netlink: zone id is out of range [ 397.961072][ T9959] netlink: zone id is out of range [ 397.970703][ T9959] netlink: zone id is out of range [ 398.177839][ T9959] netlink: set zone limit has 8 unknown bytes [ 398.537910][ T9965] netlink: 'syz.6.1364': attribute type 1 has an invalid length. [ 398.569317][ T9965] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1364'. [ 398.622114][ T9965] lo speed is unknown, defaulting to 1000 [ 400.986396][ T9981] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1366'. [ 400.997341][ T9981] netlink: zone id is out of range [ 401.002783][ T9981] netlink: zone id is out of range [ 401.019476][ T9981] netlink: zone id is out of range [ 401.220772][ T9981] netlink: set zone limit has 8 unknown bytes [ 402.154657][ T9992] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1368'. [ 402.169489][ T9992] netlink: zone id is out of range [ 402.177096][ T9992] netlink: zone id is out of range [ 402.193987][ T9992] netlink: zone id is out of range [ 402.656714][ T9992] netlink: set zone limit has 8 unknown bytes [ 402.979970][ T9995] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 402.988595][ T9995] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1369'. [ 403.091440][ T9995] lo speed is unknown, defaulting to 1000 [ 404.466161][T10006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1373'. [ 404.713576][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 404.804662][ T28] audit: type=1400 audit(1774169936.336:429): avc: denied { write } for pid=10024 comm="syz.3.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.837893][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1376'. [ 404.870508][T10025] vlan0: entered allmulticast mode [ 404.875694][T10025] bridge1: entered allmulticast mode [ 405.627785][T10045] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1380'. [ 405.637908][T10045] netlink: zone id is out of range [ 405.643666][T10045] netlink: zone id is out of range [ 405.755011][T10046] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1379'. [ 405.996624][T10051] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 406.007574][T10055] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1378'. [ 406.017191][T10051] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1382'. [ 406.017874][T10054] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 406.034088][T10054] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1381'. [ 406.087901][T10051] lo speed is unknown, defaulting to 1000 [ 406.275948][T10054] lo speed is unknown, defaulting to 1000 [ 406.594500][T10064] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1384'. [ 406.604679][T10064] net_ratelimit: 6 callbacks suppressed [ 406.604852][T10064] netlink: zone id is out of range [ 406.616886][T10064] netlink: zone id is out of range [ 406.627181][T10064] netlink: zone id is out of range [ 406.907339][T10064] netlink: set zone limit has 8 unknown bytes [ 407.131232][T10051] 9p: Bad value for 'wfdno' [ 407.253716][ T3750] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 407.286136][ T3750] CPU: 0 UID: 0 PID: 3750 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 407.286167][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.286239][ T3750] Call Trace: [ 407.286247][ T3750] [ 407.286255][ T3750] __dump_stack+0x1d/0x30 [ 407.286284][ T3750] dump_stack_lvl+0x95/0xd0 [ 407.286310][ T3750] dump_stack+0x15/0x1b [ 407.286332][ T3750] dump_header+0x80/0x240 [ 407.286365][ T3750] oom_kill_process+0x295/0x350 [ 407.286389][ T3750] out_of_memory+0x97d/0xb80 [ 407.286412][ T3750] try_charge_memcg+0x62e/0xa10 [ 407.286475][ T3750] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 407.286511][ T3750] __swap_cache_prepare_and_add+0x386/0x530 [ 407.286600][ T3750] swap_cache_alloc_folio+0xa2/0x120 [ 407.286635][ T3750] swap_cluster_readahead+0x26e/0x3d0 [ 407.286680][ T3750] swapin_readahead+0xde/0x840 [ 407.286712][ T3750] ? _raw_spin_unlock+0x9/0x30 [ 407.286757][ T3750] ? swap_put_entries_cluster+0x385/0x3a0 [ 407.286853][ T3750] ? swap_put_entries_cluster+0x131/0x3a0 [ 407.286886][ T3750] ? __rcu_read_unlock+0x4e/0x70 [ 407.286969][ T3750] ? swap_cache_get_folio+0x26f/0x280 [ 407.287000][ T3750] do_swap_page+0x30d/0x2220 [ 407.287038][ T3750] ? css_rstat_updated+0xbb/0x280 [ 407.287060][ T3750] ? __rcu_read_lock+0x36/0x50 [ 407.287091][ T3750] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 407.287121][ T3750] handle_mm_fault+0xb46/0x3020 [ 407.287228][ T3750] ? vma_start_read+0x1c7/0x2c0 [ 407.287257][ T3750] do_user_addr_fault+0x62f/0x1050 [ 407.287292][ T3750] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 407.287324][ T3750] ? trace_page_fault_user+0x1f/0xe0 [ 407.287358][ T3750] exc_page_fault+0x62/0xa0 [ 407.287392][ T3750] asm_exc_page_fault+0x26/0x30 [ 407.287451][ T3750] RIP: 0033:0x7f096de67934 [ 407.287469][ T3750] Code: 84 00 00 00 00 00 48 8b 44 24 10 0f 05 5b c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff 0f 1f 00 48 83 ec 10 74 24 18 e8 73 ff ff ff 5a 59 48 63 d0 3d 00 f0 ff ff 77 0f 48 [ 407.287490][ T3750] RSP: 002b:00007ffdc711fff8 EFLAGS: 00010202 [ 407.287509][ T3750] RAX: 0000000000000000 RBX: 000000000000044a RCX: 0000000000000000 [ 407.287574][ T3750] RDX: 0000000040000001 RSI: 00007ffdc712006c RDI: ffffffffffffffff [ 407.287590][ T3750] RBP: 00007ffdc712006c R08: 0000000000000000 R09: 0000000000000000 [ 407.287605][ T3750] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 407.287618][ T3750] R13: 00000000000927c0 R14: 000000000006366b R15: 00007ffdc71200c0 [ 407.287637][ T3750] [ 407.535532][ T3750] memory: usage 301480kB, limit 307200kB, failcnt 31013 [ 407.542527][ T3750] memory+swap: usage 289732kB, limit 9007199254740988kB, failcnt 0 [ 407.550664][ T3750] kmem: usage 278308kB, limit 9007199254740988kB, failcnt 0 [ 407.558042][ T3750] Memory cgroup stats for /syz5: [ 407.558216][ T3750] cache 0 [ 407.566083][ T3750] rss 0 [ 407.569183][ T3750] shmem 0 [ 407.572128][ T3750] mapped_file 0 [ 407.575600][ T3750] dirty 0 [ 407.771054][T10079] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1386'. [ 407.781444][T10079] netlink: zone id is out of range [ 407.787609][T10079] netlink: zone id is out of range [ 407.797056][T10079] netlink: zone id is out of range [ 408.006692][T10079] netlink: set zone limit has 8 unknown bytes [ 408.011153][ T3750] writeback 4096 [ 408.057338][ T3750] workingset_refault_anon 1089 [ 408.067172][ T3750] workingset_refault_file 12366 [ 408.072056][ T3750] swap 221184 [ 408.086424][ T3750] swapcached 51482624 [ 408.101054][ T3750] pgpgin 680727 [ 408.114724][ T3750] pgpgout 680724 [ 408.155641][ T3750] pgfault 296075 [ 408.162336][T10085] netlink: 'syz.6.1389': attribute type 1 has an invalid length. [ 408.165759][ T3750] pgmajfault 549 [ 408.178304][ T3750] inactive_anon 8192 [ 408.185559][T10085] lo speed is unknown, defaulting to 1000 [ 408.194645][ T3750] active_anon 0 [ 408.198808][ T3750] inactive_file 0 [ 408.202481][ T3750] active_file 0 [ 408.206060][ T3750] unevictable 0 [ 408.217081][ T3750] hierarchical_memory_limit 314572800 [ 408.224046][ T3750] hierarchical_memsw_limit 9223372036854771712 [ 408.248553][ T3750] total_cache 0 [ 408.258623][ T3750] total_rss 0 [ 408.265285][ T3750] total_shmem 0 [ 408.275373][ T3750] total_mapped_file 0 [ 408.285942][ T3750] total_dirty 0 [ 408.293867][ T3750] total_writeback 4096 [ 408.304587][ T3750] total_workingset_refault_anon 1089 [ 408.316435][ T3750] total_workingset_refault_file 12366 [ 408.351876][ T3750] total_swap 221184 [ 408.364596][ T3750] total_swapcached 51482624 [ 408.376868][ T3750] total_pgpgin 680727 [ 408.388429][ T3750] total_pgpgout 680724 [ 408.400383][ T3750] total_pgfault 296075 [ 408.416381][ T3750] total_pgmajfault 549 [ 408.424865][ T3750] total_inactive_anon 8192 [ 408.434719][ T3750] total_active_anon 0 [ 408.443277][ T3750] total_inactive_file 0 [ 408.467119][ T3750] total_active_file 0 [ 408.479821][ T3750] total_unevictable 0 [ 408.497088][ T3750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1385,pid=10071,uid=0 [ 408.607088][ T3750] Memory cgroup out of memory: Killed process 10071 (syz.5.1385) total-vm:96212kB, anon-rss:1248kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 408.669219][T10083] syz.2.1388 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 408.687804][T10083] CPU: 0 UID: 0 PID: 10083 Comm: syz.2.1388 Not tainted syzkaller #0 PREEMPT(full) [ 408.687836][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.687921][T10083] Call Trace: [ 408.687928][T10083] [ 408.687936][T10083] __dump_stack+0x1d/0x30 [ 408.687967][T10083] dump_stack_lvl+0x95/0xd0 [ 408.687998][T10083] dump_stack+0x15/0x1b [ 408.688022][T10083] dump_header+0x80/0x240 [ 408.688048][T10083] oom_kill_process+0x295/0x350 [ 408.688091][T10083] out_of_memory+0x97d/0xb80 [ 408.688165][T10083] try_charge_memcg+0x62e/0xa10 [ 408.688208][T10083] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 408.688245][T10083] __swap_cache_prepare_and_add+0x386/0x530 [ 408.688315][T10083] swap_cache_alloc_folio+0xa2/0x120 [ 408.688348][T10083] swap_cluster_readahead+0x26e/0x3d0 [ 408.688413][T10083] swapin_readahead+0xde/0x840 [ 408.688446][T10083] ? __vmalloc_node_range_noprof+0x121d/0x12b0 [ 408.688478][T10083] ? __rcu_read_unlock+0x4e/0x70 [ 408.688544][T10083] ? swap_cache_get_folio+0x26f/0x280 [ 408.688657][T10083] do_swap_page+0x30d/0x2220 [ 408.688692][T10083] ? __rcu_read_lock+0x36/0x50 [ 408.688712][T10083] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 408.688742][T10083] handle_mm_fault+0xb46/0x3020 [ 408.688864][T10083] ? vma_start_read+0x1c7/0x2c0 [ 408.688892][T10083] do_user_addr_fault+0x62f/0x1050 [ 408.688926][T10083] ? trace_page_fault_user+0x1f/0xe0 [ 408.688991][T10083] exc_page_fault+0x62/0xa0 [ 408.689104][T10083] asm_exc_page_fault+0x26/0x30 [ 408.689125][T10083] RIP: 0033:0x7f914270c7ab [ 408.689143][T10083] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 408.689209][T10083] RSP: 002b:00007f914115f028 EFLAGS: 00010217 [ 408.689228][T10083] RAX: 000000000000000c RBX: 00007f9142985fa0 RCX: ffffffffffffffe8 [ 408.689243][T10083] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000 [ 408.689256][T10083] RBP: 00007f91427a2c99 R08: 0000000000000000 R09: 0000000000000000 [ 408.689270][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.689296][T10083] R13: 00007f9142986038 R14: 00007f9142985fa0 R15: 00007ffda5443dc8 [ 408.689315][T10083] [ 408.689523][T10083] memory: usage 307200kB, limit 307200kB, failcnt 61695 [ 408.982925][T10083] memory+swap: usage 1376kB, limit 9007199254740988kB, failcnt 0 [ 409.008321][T10083] kmem: usage 392kB, limit 9007199254740988kB, failcnt 0 [ 409.047158][T10083] Memory cgroup stats for /syz2: [ 409.047438][T10083] cache 524288 [ 409.051270][T10093] netlink: zone id is out of range [ 409.052398][T10083] rss 4096 [ 409.052408][T10083] shmem 0 [ 409.052417][T10083] mapped_file 65536 [ 409.052425][T10083] dirty 0 [ 409.052432][T10083] writeback 0 [ 409.052441][T10083] workingset_refault_anon 1292 [ 409.052450][T10083] workingset_refault_file 13415 [ 409.052459][T10083] swap 208896 [ 409.052529][T10083] swapcached 226357248 [ 409.052538][T10083] pgpgin 743122 [ 409.052546][T10083] pgpgout 742989 [ 409.052555][T10083] pgfault 326620 [ 409.052583][T10083] pgmajfault 753 [ 409.052591][T10083] inactive_anon 0 [ 409.052599][T10083] active_anon 20480 [ 409.052607][T10083] inactive_file 0 [ 409.052665][T10083] active_file 524288 [ 409.052674][T10083] unevictable 0 [ 409.052682][T10083] hierarchical_memory_limit 314572800 [ 409.056390][T10093] netlink: zone id is out of range [ 409.062564][T10083] hierarchical_memsw_limit 9223372036854771712 [ 409.327032][T10083] total_cache 524288 [ 409.673670][T10107] __nla_validate_parse: 2 callbacks suppressed [ 409.673724][T10107] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1393'. [ 409.902542][T10083] total_rss 4096 [ 409.908235][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1392'. [ 409.933440][T10083] total_shmem 0 [ 409.946010][T10083] total_mapped_file 65536 [ 409.967424][T10083] total_dirty 0 [ 409.970942][T10083] total_writeback 0 [ 410.001824][T10083] total_workingset_refault_anon 1292 [ 410.027287][T10083] total_workingset_refault_file 13415 [ 410.053248][T10083] total_swap 208896 [ 410.067260][T10083] total_swapcached 226357248 [ 410.107534][T10083] total_pgpgin 743122 [ 410.108725][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1390'. [ 410.127198][T10083] total_pgpgout 742989 [ 410.132076][T10083] total_pgfault 326620 [ 410.139924][T10083] total_pgmajfault 753 [ 410.144417][T10083] total_inactive_anon 0 [ 410.148846][T10083] total_active_anon 20480 [ 410.153302][T10083] total_inactive_file 0 [ 410.157710][T10083] total_active_file 524288 [ 410.162208][T10083] total_unevictable 0 [ 410.166558][T10083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1388,pid=10082,uid=0 [ 410.211975][T10083] Memory cgroup out of memory: Killed process 10082 (syz.2.1388) total-vm:96212kB, anon-rss:1228kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 411.284381][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 411.535337][T10130] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1395'. [ 412.024621][T10130] net_ratelimit: 9 callbacks suppressed [ 412.024916][T10130] netlink: set zone limit has 8 unknown bytes [ 412.146054][T10131] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1397'. [ 412.157093][T10131] netlink: zone id is out of range [ 412.164793][T10131] netlink: zone id is out of range [ 412.249416][T10131] netlink: zone id is out of range [ 412.401801][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1400'. [ 412.887841][T10131] netlink: set zone limit has 8 unknown bytes [ 413.251693][T10127] vlan2: entered allmulticast mode [ 413.256889][T10127] bridge2: entered allmulticast mode [ 413.631678][T10157] netlink: 'syz.0.1404': attribute type 1 has an invalid length. [ 413.658949][T10157] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1404'. [ 413.967904][T10160] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1403'. [ 413.978622][T10160] netlink: zone id is out of range [ 413.984343][T10160] netlink: zone id is out of range [ 413.995006][T10160] netlink: zone id is out of range [ 414.150855][T10160] netlink: set zone limit has 8 unknown bytes [ 414.248404][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1405'. [ 414.264959][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 414.301133][T10157] lo speed is unknown, defaulting to 1000 [ 414.331004][ T3311] CPU: 0 UID: 0 PID: 3311 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 414.331035][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.331045][ T3311] Call Trace: [ 414.331051][ T3311] [ 414.331058][ T3311] __dump_stack+0x1d/0x30 [ 414.331131][ T3311] dump_stack_lvl+0x95/0xd0 [ 414.331157][ T3311] dump_stack+0x15/0x1b [ 414.331188][ T3311] dump_header+0x80/0x240 [ 414.331272][ T3311] oom_kill_process+0x295/0x350 [ 414.331298][ T3311] out_of_memory+0x97d/0xb80 [ 414.331343][ T3311] try_charge_memcg+0x62e/0xa10 [ 414.331376][ T3311] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 414.331408][ T3311] __swap_cache_prepare_and_add+0x386/0x530 [ 414.331477][ T3311] swap_cache_alloc_folio+0xa2/0x120 [ 414.331505][ T3311] swap_cluster_readahead+0x26e/0x3d0 [ 414.331535][ T3311] swapin_readahead+0xde/0x840 [ 414.331582][ T3311] ? __rcu_read_unlock+0x4e/0x70 [ 414.331604][ T3311] ? swap_cache_get_folio+0x26f/0x280 [ 414.331636][ T3311] do_swap_page+0x30d/0x2220 [ 414.331674][ T3311] ? __rcu_read_lock+0x36/0x50 [ 414.331755][ T3311] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 414.331780][ T3311] handle_mm_fault+0xb46/0x3020 [ 414.331815][ T3311] ? vma_start_read+0x1c7/0x2c0 [ 414.331844][ T3311] do_user_addr_fault+0x62f/0x1050 [ 414.331885][ T3311] ? trace_page_fault_user+0x1f/0xe0 [ 414.331939][ T3311] exc_page_fault+0x62/0xa0 [ 414.331966][ T3311] asm_exc_page_fault+0x26/0x30 [ 414.331984][ T3311] RIP: 0033:0x7fe747c37917 [ 414.332056][ T3311] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 414.332072][ T3311] RSP: 002b:00007fff58f44e90 EFLAGS: 00010202 [ 414.332088][ T3311] RAX: 0000000000000000 RBX: 000055555c38b500 RCX: 00007fe747c37917 [ 414.332101][ T3311] RDX: 00007fff58f44ed0 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.332113][ T3311] RBP: 00007fff58f44f3c R08: 0000000000000000 R09: 0000000000000000 [ 414.332127][ T3311] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 414.332141][ T3311] R13: 00000000000927c0 R14: 0000000000064fd3 R15: 00007fff58f44f90 [ 414.332181][ T3311] [ 414.332187][ T3311] memory: usage 307200kB, limit 307200kB, failcnt 37632 [ 414.485171][T10159] vlan0: entered allmulticast mode [ 414.577075][ T3311] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 414.585183][ T3311] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 414.597528][T10159] bridge1: entered allmulticast mode [ 414.637137][ T3311] Memory cgroup stats for /syz3: [ 414.637460][ T3311] cache 0 [ 414.655845][T10168] 9p: Bad value for 'wfdno' [ 414.667766][ T3311] rss 0 [ 414.670602][ T3311] shmem 0 [ 414.673547][ T3311] mapped_file 0 [ 414.677015][ T3311] dirty 0 [ 414.727646][ T3311] writeback 0 [ 414.731031][ T3311] workingset_refault_anon 787 [ 414.735713][ T3311] workingset_refault_file 23829 [ 414.787082][ T3311] swap 225280 [ 414.790446][ T3311] swapcached 73453568 [ 414.794438][ T3311] pgpgin 522403 [ 414.822934][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 414.833250][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1416'. [ 414.843105][ T3311] pgpgout 522403 [ 414.846729][ T3311] pgfault 317266 [ 414.867059][ T3311] pgmajfault 518 [ 414.870631][ T3311] inactive_anon 0 [ 414.874275][ T3311] active_anon 0 [ 414.889073][ T3311] inactive_file 0 [ 414.897062][ T3311] active_file 0 [ 414.900626][ T3311] unevictable 0 [ 414.911192][ T3311] hierarchical_memory_limit 314572800 [ 414.916631][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 414.937229][ T3311] total_cache 0 [ 414.940792][ T3311] total_rss 0 [ 414.977199][ T3311] total_shmem 0 [ 414.980704][ T3311] total_mapped_file 0 [ 414.984694][ T3311] total_dirty 0 [ 415.010901][ T3311] total_writeback 0 [ 415.014738][ T3311] total_workingset_refault_anon 787 [ 415.020176][ T3311] total_workingset_refault_file 23829 [ 415.025585][ T3311] total_swap 225280 [ 415.029438][ T3311] total_swapcached 73453568 [ 415.034012][ T3311] total_pgpgin 522403 [ 415.039885][ T3311] total_pgpgout 522403 [ 415.044016][ T3311] total_pgfault 317266 [ 415.048424][ T3311] total_pgmajfault 518 [ 415.058180][ T3311] total_inactive_anon 0 [ 415.062434][ T3311] total_active_anon 0 [ 415.066453][ T3311] total_inactive_file 0 [ 415.070919][ T3311] total_active_file 0 [ 415.074983][ T3311] total_unevictable 0 [ 415.079333][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1402,pid=10150,uid=0 [ 415.094620][ T3311] Memory cgroup out of memory: Killed process 10150 (syz.3.1402) total-vm:96212kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 415.154210][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 415.508508][T10194] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1408'. [ 415.518956][T10194] netlink: zone id is out of range [ 415.864116][T10199] netlink: 'syz.6.1411': attribute type 1 has an invalid length. [ 415.871937][T10199] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1411'. [ 416.008857][T10199] lo speed is unknown, defaulting to 1000 [ 416.416441][T10209] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1412'. [ 416.695777][T10203] syz.3.1413 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 416.747804][T10203] CPU: 1 UID: 0 PID: 10203 Comm: syz.3.1413 Not tainted syzkaller #0 PREEMPT(full) [ 416.747837][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.747856][T10203] Call Trace: [ 416.747862][T10203] [ 416.747870][T10203] __dump_stack+0x1d/0x30 [ 416.747901][T10203] dump_stack_lvl+0x95/0xd0 [ 416.747927][T10203] dump_stack+0x15/0x1b [ 416.747950][T10203] dump_header+0x80/0x240 [ 416.748020][T10203] oom_kill_process+0x295/0x350 [ 416.748081][T10203] out_of_memory+0x97d/0xb80 [ 416.748108][T10203] try_charge_memcg+0x62e/0xa10 [ 416.748220][T10203] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 416.748264][T10203] __swap_cache_prepare_and_add+0x386/0x530 [ 416.748303][T10203] swap_cache_alloc_folio+0xa2/0x120 [ 416.748396][T10203] swap_cluster_readahead+0x26e/0x3d0 [ 416.748435][T10203] swapin_readahead+0xde/0x840 [ 416.748499][T10203] ? __vmalloc_node_range_noprof+0x121d/0x12b0 [ 416.748555][T10203] ? __rcu_read_unlock+0x4e/0x70 [ 416.748576][T10203] ? swap_cache_get_folio+0x26f/0x280 [ 416.748682][T10203] do_swap_page+0x30d/0x2220 [ 416.748836][T10203] ? __rcu_read_lock+0x36/0x50 [ 416.748902][T10203] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 416.748935][T10203] handle_mm_fault+0xb46/0x3020 [ 416.748970][T10203] ? vma_start_read+0x1c7/0x2c0 [ 416.749005][T10203] do_user_addr_fault+0x62f/0x1050 [ 416.749044][T10203] ? trace_page_fault_user+0x1f/0xe0 [ 416.749219][T10203] exc_page_fault+0x62/0xa0 [ 416.749262][T10203] asm_exc_page_fault+0x26/0x30 [ 416.749285][T10203] RIP: 0033:0x7fe747c7c7ab [ 416.749304][T10203] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 416.749379][T10203] RSP: 002b:00007fe7466cf028 EFLAGS: 00010217 [ 416.749399][T10203] RAX: 000000000000000c RBX: 00007fe747ef5fa0 RCX: ffffffffffffffe8 [ 416.749414][T10203] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000 [ 416.749441][T10203] RBP: 00007fe747d12c99 R08: 0000000000000000 R09: 0000000000000000 [ 416.749497][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.749512][T10203] R13: 00007fe747ef6038 R14: 00007fe747ef5fa0 R15: 00007fff58f44b98 [ 416.749531][T10203] [ 416.749564][T10203] memory: usage 244280kB, limit 307200kB, failcnt 37894 [ 416.997058][T10203] memory+swap: usage 201720kB, limit 9007199254740988kB, failcnt 0 [ 417.005501][T10203] kmem: usage 201140kB, limit 9007199254740988kB, failcnt 0 [ 417.030114][T10218] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 417.041212][T10218] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1417'. [ 417.083815][T10203] Memory cgroup stats for /syz3: [ 417.084004][T10203] cache 0 [ 417.096596][T10218] lo speed is unknown, defaulting to 1000 [ 417.123068][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 417.124329][T10203] rss 94208 [ 417.157832][T10203] shmem 0 [ 417.207177][T10203] mapped_file 0 [ 417.230345][T10203] dirty 0 [ 417.233312][T10203] writeback 0 [ 417.236626][T10203] workingset_refault_anon 838 [ 417.309293][T10203] workingset_refault_file 23829 [ 417.335317][T10203] swap 77824 [ 417.339089][T10203] swapcached 73605120 [ 417.357317][T10203] pgpgin 522496 [ 417.360862][T10203] pgpgout 522461 [ 417.384625][T10203] pgfault 317431 [ 417.442366][T10203] pgmajfault 544 [ 417.446192][T10203] inactive_anon 57344 [ 417.450739][T10203] active_anon 81920 [ 417.454645][T10203] inactive_file 0 [ 417.459151][T10203] active_file 0 [ 417.462675][T10203] unevictable 0 [ 417.466248][T10203] hierarchical_memory_limit 314572800 [ 417.472055][T10203] hierarchical_memsw_limit 9223372036854771712 [ 417.497111][T10203] total_cache 0 [ 417.500609][T10203] total_rss 94208 [ 417.511307][T10203] total_shmem 0 [ 417.532425][T10203] total_mapped_file 0 [ 417.543194][T10203] total_dirty 0 [ 417.584742][T10227] loop0: detected capacity change from 0 to 736 [ 417.592175][T10203] total_writeback 0 [ 417.596015][T10203] total_workingset_refault_anon 838 [ 417.605167][T10203] total_workingset_refault_file 23829 [ 417.610738][T10203] total_swap 77824 [ 417.614513][T10203] total_swapcached 73605120 [ 417.647469][T10203] total_pgpgin 522496 [ 418.017684][T10240] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1420'. [ 418.028570][T10240] net_ratelimit: 7 callbacks suppressed [ 418.028713][T10240] netlink: zone id is out of range [ 418.046819][T10240] netlink: zone id is out of range [ 418.058533][T10240] netlink: zone id is out of range [ 418.538231][T10240] netlink: set zone limit has 8 unknown bytes [ 418.611321][T10203] total_pgpgout 522461 [ 418.615472][T10203] total_pgfault 317431 [ 418.629430][T10203] total_pgmajfault 544 [ 418.633517][T10203] total_inactive_anon 57344 [ 418.638283][T10203] total_active_anon 81920 [ 418.642768][T10203] total_inactive_file 0 [ 418.646984][T10203] total_active_file 0 [ 418.737113][T10203] total_unevictable 0 [ 418.741168][T10203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1413,pid=10202,uid=0 [ 418.839436][T10203] Memory cgroup out of memory: Killed process 10203 (syz.3.1413) total-vm:96212kB, anon-rss:1344kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 419.864306][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1423'. [ 420.328928][T10270] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1425'. [ 420.636687][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1428'. [ 420.728723][T10279] loop3: detected capacity change from 0 to 736 [ 420.872253][T10286] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 420.901017][T10286] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1432'. [ 420.946365][T10286] lo speed is unknown, defaulting to 1000 [ 421.038731][T10283] loop6: detected capacity change from 0 to 736 [ 421.191605][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'. [ 421.548742][T10297] loop2: detected capacity change from 0 to 736 [ 421.772191][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1436'. [ 421.872950][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1437'. [ 422.925133][T10332] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1441'. [ 422.935843][T10332] netlink: zone id is out of range [ 422.942091][T10332] netlink: zone id is out of range [ 422.951774][T10332] netlink: zone id is out of range [ 423.120303][T10332] netlink: set zone limit has 8 unknown bytes [ 423.273416][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1442'. [ 423.476138][T10339] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 423.492795][T10339] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1445'. [ 423.515825][T10339] lo speed is unknown, defaulting to 1000 [ 424.842119][T10345] netlink: zone id is out of range [ 424.989943][T10345] netlink: zone id is out of range [ 425.009203][T10345] netlink: zone id is out of range [ 425.039636][T10350] __nla_validate_parse: 1 callbacks suppressed [ 425.039652][T10350] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1444'. [ 425.055046][T10350] netlink: zone id is out of range [ 425.060229][T10350] netlink: zone id is out of range [ 425.065626][T10350] netlink: zone id is out of range [ 425.081938][T10350] netlink: set zone limit has 8 unknown bytes [ 425.819705][T10345] netlink: set zone limit has 8 unknown bytes [ 426.109219][T10344] loop3: detected capacity change from 0 to 736 [ 426.300757][T10352] loop5: detected capacity change from 0 to 736 [ 427.778755][T10365] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1450'. [ 427.791538][T10365] netlink: zone id is out of range [ 427.867108][T10363] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1449'. [ 428.319641][T10365] net_ratelimit: 5 callbacks suppressed [ 428.319848][T10365] netlink: set zone limit has 8 unknown bytes [ 428.671969][T10363] netlink: set zone limit has 8 unknown bytes [ 430.232893][T10385] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1454'. [ 430.243285][T10385] netlink: zone id is out of range [ 430.248925][T10385] netlink: zone id is out of range [ 430.260237][T10385] netlink: zone id is out of range [ 430.323422][T10391] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 430.339209][T10391] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1456'. [ 430.407596][T10385] netlink: set zone limit has 8 unknown bytes [ 430.877879][T10373] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1451'. [ 431.182566][T10406] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1459'. [ 431.193391][T10406] netlink: zone id is out of range [ 431.199170][T10406] netlink: zone id is out of range [ 431.208420][T10406] netlink: zone id is out of range [ 431.385302][T10406] netlink: set zone limit has 8 unknown bytes [ 432.016661][T10422] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1457'. [ 432.048095][T10412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 433.562269][T10429] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1462'. [ 433.575708][T10429] netlink: zone id is out of range [ 433.583091][T10429] netlink: zone id is out of range [ 433.591908][T10429] netlink: zone id is out of range [ 433.690399][T10433] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1464'. [ 433.699735][T10433] netlink: zone id is out of range [ 433.704865][T10433] netlink: zone id is out of range [ 433.710171][T10433] netlink: zone id is out of range [ 433.726140][T10433] netlink: set zone limit has 8 unknown bytes [ 434.526681][T10429] netlink: set zone limit has 8 unknown bytes [ 434.870980][T10435] loop0: detected capacity change from 0 to 736 [ 435.021805][T10445] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1463'. [ 435.060366][T10442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1466'. [ 435.383712][T10450] loop3: detected capacity change from 0 to 736 [ 435.572286][T10451] __nla_validate_parse: 1 callbacks suppressed [ 435.572305][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1468'. [ 436.501224][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 436.518379][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 436.598981][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1471'. [ 436.906383][T10485] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1474'. [ 436.918650][T10485] netlink: zone id is out of range [ 436.924474][T10485] netlink: zone id is out of range [ 437.303583][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 437.323931][T10489] vlan3: entered allmulticast mode [ 437.335999][T10489] bridge3: entered allmulticast mode [ 437.477739][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 437.702742][T10503] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1481'. [ 438.098491][T10492] loop5: detected capacity change from 0 to 736 [ 438.260977][T10506] loop2: detected capacity change from 0 to 736 [ 438.754361][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 438.957062][T10514] loop3: detected capacity change from 0 to 8192 [ 439.194103][T10520] loop6: detected capacity change from 0 to 8192 [ 439.482870][T10522] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1485'. [ 439.493455][T10522] net_ratelimit: 2 callbacks suppressed [ 439.493640][T10522] netlink: zone id is out of range [ 439.506159][T10522] netlink: zone id is out of range [ 439.517267][T10522] netlink: zone id is out of range [ 439.796237][T10522] netlink: set zone limit has 8 unknown bytes [ 440.041492][T10529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 440.064528][ T28] audit: type=1400 audit(1774169971.596:430): avc: denied { ioctl } for pid=10519 comm="syz.6.1486" path="socket:[23822]" dev="sockfs" ino=23822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.408055][T10537] netlink: zone id is out of range [ 440.414072][T10537] netlink: zone id is out of range [ 440.425299][T10537] netlink: zone id is out of range [ 440.583212][T10537] netlink: set zone limit has 8 unknown bytes [ 442.708077][T10545] __nla_validate_parse: 1 callbacks suppressed [ 442.708105][T10545] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1491'. [ 442.726600][T10545] netlink: zone id is out of range [ 442.732954][T10545] netlink: zone id is out of range [ 443.093022][T10536] loop3: detected capacity change from 0 to 8192 [ 443.649220][T10553] loop6: detected capacity change from 0 to 1024 [ 443.670701][T10553] ext4: Unknown parameter 'uid' [ 443.812044][T10557] loop2: detected capacity change from 0 to 8192 [ 443.922733][T10559] loop6: detected capacity change from 0 to 8192 [ 444.175788][T10566] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1496'. [ 444.634862][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 444.811157][T10576] loop0: detected capacity change from 0 to 8192 [ 444.961222][T10574] loop5: detected capacity change from 0 to 8192 [ 445.717619][T10590] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1501'. [ 445.727936][T10590] net_ratelimit: 6 callbacks suppressed [ 445.728022][T10590] netlink: zone id is out of range [ 445.739523][T10590] netlink: zone id is out of range [ 445.748536][T10590] netlink: zone id is out of range [ 445.908824][T10590] netlink: set zone limit has 8 unknown bytes [ 446.342665][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1498'. [ 447.001476][T10603] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1503'. [ 447.012068][T10603] netlink: zone id is out of range [ 447.018089][T10603] netlink: zone id is out of range [ 447.028462][T10603] netlink: zone id is out of range [ 447.189477][T10603] netlink: set zone limit has 8 unknown bytes [ 447.337329][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1504'. [ 447.584127][ T5108] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 447.796616][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 447.796650][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.796664][ T5108] Call Trace: [ 447.796752][ T5108] [ 447.796762][ T5108] __dump_stack+0x1d/0x30 [ 447.796794][ T5108] dump_stack_lvl+0x95/0xd0 [ 447.796848][ T5108] dump_stack+0x15/0x1b [ 447.796873][ T5108] dump_header+0x80/0x240 [ 447.796900][ T5108] oom_kill_process+0x295/0x350 [ 447.796927][ T5108] out_of_memory+0x97d/0xb80 [ 447.797003][ T5108] try_charge_memcg+0x62e/0xa10 [ 447.797150][ T5108] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 447.797180][ T5108] __swap_cache_prepare_and_add+0x386/0x530 [ 447.797279][ T5108] swap_cache_alloc_folio+0xa2/0x120 [ 447.797328][ T5108] swap_cluster_readahead+0x26e/0x3d0 [ 447.797410][ T5108] swapin_readahead+0xde/0x840 [ 447.797433][ T5108] ? __rcu_read_unlock+0x4e/0x70 [ 447.797454][ T5108] ? __perf_event_task_sched_in+0xa65/0xad0 [ 447.797555][ T5108] ? __list_add_valid_or_report+0x38/0xe0 [ 447.797588][ T5108] ? xfd_validate_state+0x45/0xf0 [ 447.797613][ T5108] ? __rcu_read_unlock+0x4e/0x70 [ 447.797631][ T5108] ? swap_cache_get_folio+0x26f/0x280 [ 447.797781][ T5108] do_swap_page+0x30d/0x2220 [ 447.797815][ T5108] ? __schedule+0x93c/0xd40 [ 447.797840][ T5108] ? __rcu_read_lock+0x36/0x50 [ 447.797863][ T5108] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 447.797967][ T5108] handle_mm_fault+0xb46/0x3020 [ 447.798003][ T5108] ? vma_start_read+0x1c7/0x2c0 [ 447.798087][ T5108] do_user_addr_fault+0x62f/0x1050 [ 447.798117][ T5108] ? trace_page_fault_user+0x1f/0xe0 [ 447.798215][ T5108] exc_page_fault+0x62/0xa0 [ 447.798251][ T5108] asm_exc_page_fault+0x26/0x30 [ 447.798274][ T5108] RIP: 0033:0x7f359fcad2f8 [ 447.798290][ T5108] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 93 19 00 00 0f [ 447.798341][ T5108] RSP: 002b:00007ffc98017e80 EFLAGS: 00010206 [ 447.798361][ T5108] RAX: 0000000000000000 RBX: 000000000000037d RCX: 00007f359fc67917 [ 447.798423][ T5108] RDX: 9521b3cad6e23900 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.798436][ T5108] RBP: 00007ffc98017eec R08: 0000000000000000 R09: 0000000000000000 [ 447.798449][ T5108] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 447.798464][ T5108] R13: 00000000000927c0 R14: 000000000006d3f8 R15: 00007ffc98017f40 [ 447.798531][ T5108] [ 448.159390][ T5108] memory: usage 215156kB, limit 307200kB, failcnt 19720 [ 448.167321][ T5108] memory+swap: usage 215308kB, limit 9007199254740988kB, failcnt 0 [ 448.175327][ T5108] kmem: usage 215064kB, limit 9007199254740988kB, failcnt 0 [ 448.347157][ T5108] Memory cgroup stats for /syz6: [ 448.347412][ T5108] cache 0 [ 449.253528][T10620] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1506'. [ 449.263866][T10620] netlink: zone id is out of range [ 449.271934][T10620] netlink: zone id is out of range [ 449.339734][ T5108] rss 24576 [ 449.342883][ T5108] shmem 0 [ 449.345837][ T5108] mapped_file 0 [ 449.357462][ T5108] dirty 0 [ 449.367194][ T5108] writeback 49152 [ 449.371005][ T5108] workingset_refault_anon 1017 [ 449.375891][ T5108] workingset_refault_file 5826 [ 449.382543][ T5108] swap 155648 [ 449.386411][ T5108] swapcached 22847488 [ 449.594542][ T5108] pgpgin 449120 [ 449.622022][ T5108] pgpgout 449100 [ 449.651707][ T5108] pgfault 247925 [ 449.736038][ T5108] pgmajfault 415 [ 449.749856][ T5108] inactive_anon 53248 [ 449.753871][ T5108] active_anon 28672 [ 449.770082][ T5108] inactive_file 0 [ 449.773832][ T5108] active_file 0 [ 449.787645][ T5108] unevictable 0 [ 449.797140][ T5108] hierarchical_memory_limit 314572800 [ 449.807504][ T5108] hierarchical_memsw_limit 9223372036854771712 [ 449.840536][T10627] netlink: 'syz.5.1510': attribute type 1 has an invalid length. [ 449.848555][ T5108] total_cache 0 [ 449.852141][ T5108] total_rss 24576 [ 449.867180][T10627] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1510'. [ 449.876096][ T5108] total_shmem 0 [ 449.885308][ T5108] total_mapped_file 0 [ 449.899063][ T5108] total_dirty 0 [ 449.905525][T10627] lo speed is unknown, defaulting to 1000 [ 449.911340][ T5108] total_writeback 49152 [ 449.915539][ T5108] total_workingset_refault_anon 1017 [ 449.925631][ T5108] total_workingset_refault_file 5826 [ 449.932955][ T5108] total_swap 155648 [ 449.983954][ T5108] total_swapcached 22847488 [ 449.988565][ T5108] total_pgpgin 449120 [ 449.992591][ T5108] total_pgpgout 449100 [ 449.996797][ T5108] total_pgfault 247925 [ 450.000955][ T5108] total_pgmajfault 415 [ 450.005068][ T5108] total_inactive_anon 53248 [ 450.009728][ T5108] total_active_anon 28672 [ 450.014107][ T5108] total_inactive_file 0 [ 450.018403][ T5108] total_active_file 0 [ 450.022443][ T5108] total_unevictable 0 [ 450.026531][ T5108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1504,pid=10600,uid=0 [ 450.055730][ T5108] Memory cgroup out of memory: Killed process 10600 (syz.6.1504) total-vm:96344kB, anon-rss:1252kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 450.322311][T10644] loop6: detected capacity change from 0 to 1024 [ 450.345432][T10644] ext4: Unknown parameter 'uid' [ 450.375730][T10646] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 450.667737][T10646] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1514'. [ 450.950553][T10651] lo speed is unknown, defaulting to 1000 [ 452.641222][T10662] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1518'. [ 452.651810][T10662] net_ratelimit: 2 callbacks suppressed [ 452.651904][T10662] netlink: zone id is out of range [ 452.664203][T10662] netlink: zone id is out of range [ 452.677291][T10662] netlink: zone id is out of range [ 452.817363][T10662] netlink: set zone limit has 8 unknown bytes [ 452.902502][T10665] loop0: detected capacity change from 0 to 8192 [ 453.043423][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1516'. [ 453.346153][T10682] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1521'. [ 453.356303][T10682] netlink: zone id is out of range [ 453.362968][T10682] netlink: zone id is out of range [ 453.371487][T10682] netlink: zone id is out of range [ 453.459605][T10682] netlink: set zone limit has 8 unknown bytes [ 453.592301][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1522'. [ 453.640850][T10672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1520'. [ 453.980126][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1524'. [ 453.994440][T10678] syz.2.1522 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 454.088805][T10694] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1523'. [ 454.127356][T10678] CPU: 1 UID: 0 PID: 10678 Comm: syz.2.1522 Not tainted syzkaller #0 PREEMPT(full) [ 454.127468][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.127483][T10678] Call Trace: [ 454.127490][T10678] [ 454.127499][T10678] __dump_stack+0x1d/0x30 [ 454.127528][T10678] dump_stack_lvl+0x95/0xd0 [ 454.127566][T10678] dump_stack+0x15/0x1b [ 454.127591][T10678] dump_header+0x80/0x240 [ 454.127625][T10678] oom_kill_process+0x295/0x350 [ 454.127652][T10678] out_of_memory+0x97d/0xb80 [ 454.127690][T10678] try_charge_memcg+0x62e/0xa10 [ 454.127806][T10678] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 454.127843][T10678] __swap_cache_prepare_and_add+0x386/0x530 [ 454.127954][T10678] swap_cache_alloc_folio+0xa2/0x120 [ 454.127986][T10678] swap_cluster_readahead+0x36b/0x3d0 [ 454.128023][T10678] swapin_readahead+0xde/0x840 [ 454.128075][T10678] ? _raw_spin_unlock+0x9/0x30 [ 454.128125][T10678] ? swap_put_entries_cluster+0x385/0x3a0 [ 454.128159][T10678] ? swap_put_entries_cluster+0x131/0x3a0 [ 454.128193][T10678] ? __rcu_read_unlock+0x4e/0x70 [ 454.128218][T10678] ? swap_cache_get_folio+0x26f/0x280 [ 454.128252][T10678] do_swap_page+0x30d/0x2220 [ 454.128282][T10678] ? css_rstat_updated+0xbb/0x280 [ 454.128355][T10678] ? __rcu_read_lock+0x36/0x50 [ 454.128378][T10678] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 454.128409][T10678] handle_mm_fault+0xb46/0x3020 [ 454.128523][T10678] ? vma_start_read+0x1c7/0x2c0 [ 454.128552][T10678] do_user_addr_fault+0x62f/0x1050 [ 454.128664][T10678] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 454.128690][T10678] ? trace_page_fault_user+0x1f/0xe0 [ 454.128732][T10678] exc_page_fault+0x62/0xa0 [ 454.128847][T10678] asm_exc_page_fault+0x26/0x30 [ 454.128941][T10678] RIP: 0033:0x7f91425d59f4 [ 454.128959][T10678] Code: 84 00 00 00 00 00 80 3d 0e fd ed 00 00 74 40 80 3d f3 fc ed 00 00 74 2e 80 3d f6 fc ed 00 00 74 2e 80 3d de fc ed 00 00 75 25 <53> 48 8d 1d 44 05 3b 00 48 89 df e8 5c e3 fe ff 8b 05 3a 05 3b 00 [ 454.128978][T10678] RSP: 002b:00007ffda5443f28 EFLAGS: 00010246 [ 454.128998][T10678] RAX: 0000000000000000 RBX: 00007f9142987da0 RCX: 00007f914270c799 [ 454.129081][T10678] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 454.129096][T10678] RBP: 00007f9142987da0 R08: 0000000000000006 R09: 0000000000000000 [ 454.129144][T10678] R10: 00007f9142987cb0 R11: 0000000000000246 R12: 000000000006ecaf [ 454.129159][T10678] R13: 00007f914298618c R14: 000000000006ec7d R15: 00007f9142986180 [ 454.129186][T10678] [ 454.447665][T10678] memory: usage 307200kB, limit 307200kB, failcnt 62874 [ 454.507263][T10678] memory+swap: usage 304052kB, limit 9007199254740988kB, failcnt 0 [ 454.684196][T10698] loop5: detected capacity change from 0 to 8192 [ 454.697592][T10678] kmem: usage 223412kB, limit 9007199254740988kB, failcnt 0 [ 454.713941][T10678] Memory cgroup stats for /syz2: [ 454.730659][T10678] cache 0 [ 454.751357][T10678] rss 28672 [ 454.837133][T10678] shmem 0 [ 455.027347][T10678] mapped_file 0 [ 455.061801][T10678] dirty 0 [ 455.092948][T10678] writeback 0 [ 455.130830][T10678] workingset_refault_anon 1787 [ 455.231200][T10678] workingset_refault_file 13706 [ 455.248437][T10678] swap 208896 [ 455.257357][T10678] swapcached 229322752 [ 455.261746][T10678] pgpgin 778507 [ 455.287286][T10678] pgpgout 778499 [ 455.291205][T10678] pgfault 363206 [ 455.297227][T10678] pgmajfault 908 [ 455.300806][T10678] inactive_anon 0 [ 455.304628][T10678] active_anon 28672 [ 455.310142][T10678] inactive_file 0 [ 455.313834][T10678] active_file 0 [ 455.318442][T10678] unevictable 0 [ 455.322190][T10678] hierarchical_memory_limit 314572800 [ 455.347061][T10678] hierarchical_memsw_limit 9223372036854771712 [ 455.353479][T10678] total_cache 0 [ 455.356953][T10678] total_rss 28672 [ 455.367058][T10678] total_shmem 0 [ 455.370580][T10678] total_mapped_file 0 [ 455.374617][T10678] total_dirty 0 [ 455.397366][T10678] total_writeback 0 [ 455.401259][T10678] total_workingset_refault_anon 1787 [ 455.406553][T10678] total_workingset_refault_file 13706 [ 455.431867][T10678] total_swap 208896 [ 455.441334][T10678] total_swapcached 229322752 [ 455.445944][T10678] total_pgpgin 778507 [ 455.464918][T10678] total_pgpgout 778499 [ 455.469111][T10678] total_pgfault 363206 [ 455.473229][T10678] total_pgmajfault 908 [ 455.517065][T10678] total_inactive_anon 0 [ 455.524511][T10678] total_active_anon 28672 [ 455.531817][T10678] total_inactive_file 0 [ 455.536041][T10678] total_active_file 0 [ 455.545856][T10678] total_unevictable 0 [ 455.556808][T10678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1522,pid=10678,uid=0 [ 455.587350][T10678] Memory cgroup out of memory: Killed process 10678 (syz.2.1522) total-vm:96344kB, anon-rss:1256kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 455.615543][T10712] loop3: detected capacity change from 0 to 8192 [ 455.822218][T10717] loop2: detected capacity change from 0 to 8192 [ 456.760106][T10732] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1530'. [ 456.769470][T10732] netlink: zone id is out of range [ 456.774631][T10732] netlink: zone id is out of range [ 457.515786][T10735] loop0: detected capacity change from 0 to 1024 [ 458.055039][T10735] ext4: Unknown parameter 'uid' [ 458.184656][T10745] loop0: detected capacity change from 0 to 512 [ 458.262305][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1534'. [ 458.310135][T10747] vlan0: entered allmulticast mode [ 458.310155][T10747] bridge1: entered allmulticast mode [ 458.323595][T10747] bridge1: port 1(erspan0) entered blocking state [ 458.323710][T10747] bridge1: port 1(erspan0) entered disabled state [ 458.323799][T10747] erspan0: entered allmulticast mode [ 458.324422][T10747] erspan0: entered promiscuous mode [ 458.404086][T10750] loop6: detected capacity change from 0 to 8192 [ 459.036355][T10745] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 459.217501][T10745] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 459.351426][T10745] EXT4-fs (loop0): mount failed [ 459.588402][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1537'. [ 459.630263][T10772] loop2: detected capacity change from 0 to 1024 [ 459.689063][T10772] ext4: Unknown parameter 'uid' [ 459.800509][T10780] loop2: detected capacity change from 0 to 512 [ 459.859642][T10776] syz.3.1540 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 459.859677][T10776] CPU: 0 UID: 0 PID: 10776 Comm: syz.3.1540 Not tainted syzkaller #0 PREEMPT(full) [ 459.859700][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.859787][T10776] Call Trace: [ 459.859795][T10776] [ 459.859804][T10776] __dump_stack+0x1d/0x30 [ 459.859836][T10776] dump_stack_lvl+0x95/0xd0 [ 459.859877][T10776] dump_stack+0x15/0x1b [ 459.859970][T10776] dump_header+0x80/0x240 [ 459.859990][T10776] oom_kill_process+0x295/0x350 [ 459.860010][T10776] out_of_memory+0x97d/0xb80 [ 459.860032][T10776] try_charge_memcg+0x62e/0xa10 [ 459.860079][T10776] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 459.860138][T10776] __swap_cache_prepare_and_add+0x386/0x530 [ 459.860234][T10776] swap_cache_alloc_folio+0xa2/0x120 [ 459.860353][T10776] swap_cluster_readahead+0x26e/0x3d0 [ 459.860391][T10776] swapin_readahead+0xde/0x840 [ 459.860415][T10776] ? _raw_spin_unlock+0x9/0x30 [ 459.860439][T10776] ? swap_put_entries_cluster+0x385/0x3a0 [ 459.860503][T10776] ? swap_put_entries_cluster+0x131/0x3a0 [ 459.860531][T10776] ? __rcu_read_unlock+0x4e/0x70 [ 459.860568][T10776] ? swap_cache_get_folio+0x26f/0x280 [ 459.860595][T10776] do_swap_page+0x30d/0x2220 [ 459.860623][T10776] ? css_rstat_updated+0xbb/0x280 [ 459.860647][T10776] ? __rcu_read_lock+0x36/0x50 [ 459.860669][T10776] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 459.860738][T10776] handle_mm_fault+0xb46/0x3020 [ 459.860804][T10776] ? vma_start_read+0x1c7/0x2c0 [ 459.860837][T10776] do_user_addr_fault+0x62f/0x1050 [ 459.860870][T10776] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 459.860925][T10776] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 459.860953][T10776] ? trace_page_fault_user+0x1f/0xe0 [ 459.860990][T10776] exc_page_fault+0x62/0xa0 [ 459.861017][T10776] asm_exc_page_fault+0x26/0x30 [ 459.861040][T10776] RIP: 0033:0x7fe747b4a14c [ 459.861060][T10776] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 459.861109][T10776] RSP: 002b:00007fff58f44d00 EFLAGS: 00010202 [ 459.861125][T10776] RAX: 0000000000000000 RBX: 00007fe747ef5fa0 RCX: 000055555c38b808 [ 459.861138][T10776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.861150][T10776] RBP: 00007fe747ef7da0 R08: 0000000000000000 R09: 0000000000000000 [ 459.861203][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000070692 [ 459.861218][T10776] R13: 00007fe747ef609c R14: 00000000000703d2 R15: 00007fe747ef6090 [ 459.861237][T10776] [ 459.861245][T10776] memory: usage 307200kB, limit 307200kB, failcnt 38194 [ 459.861260][T10776] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 459.861276][T10776] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 459.861300][T10776] Memory cgroup stats for /syz3: [ 459.861511][T10776] cache 0 [ 459.861522][T10776] rss 0 [ 459.861559][T10776] shmem 0 [ 459.861586][T10776] mapped_file 0 [ 459.861595][T10776] dirty 0 [ 459.861603][T10776] writeback 0 [ 459.861612][T10776] workingset_refault_anon 1074 [ 459.861622][T10776] workingset_refault_file 23829 [ 459.861631][T10776] swap 217088 [ 459.861638][T10776] swapcached 75300864 [ 459.861645][T10776] pgpgin 555487 [ 459.861652][T10776] pgpgout 555486 [ 459.861660][T10776] pgfault 351792 [ 459.861668][T10776] pgmajfault 590 [ 459.861677][T10776] inactive_anon 4096 [ 459.861757][T10776] active_anon 0 [ 459.861764][T10776] inactive_file 0 [ 459.861770][T10776] active_file 0 [ 459.861777][T10776] unevictable 0 [ 459.861784][T10776] hierarchical_memory_limit 314572800 [ 459.861792][T10776] hierarchical_memsw_limit 9223372036854771712 [ 459.861800][T10776] total_cache 0 [ 459.861808][T10776] total_rss 0 [ 459.861816][T10776] total_shmem 0 [ 459.861825][T10776] total_mapped_file 0 [ 459.861834][T10776] total_dirty 0 [ 459.861842][T10776] total_writeback 0 [ 459.861932][T10776] total_workingset_refault_anon 1074 [ 459.861942][T10776] total_workingset_refault_file 23829 [ 459.861950][T10776] total_swap 217088 [ 459.861958][T10776] total_swapcached 75300864 [ 459.861968][T10776] total_pgpgin 555487 [ 459.861977][T10776] total_pgpgout 555486 [ 459.861986][T10776] total_pgfault 351792 [ 459.861995][T10776] total_pgmajfault 590 [ 459.862004][T10776] total_inactive_anon 4096 [ 459.862050][T10776] total_active_anon 0 [ 459.862059][T10776] total_inactive_file 0 [ 459.862068][T10776] total_active_file 0 [ 459.862077][T10776] total_unevictable 0 [ 459.862161][T10776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1540,pid=10776,uid=0 [ 459.862302][T10776] Memory cgroup out of memory: Killed process 10776 (syz.3.1540) total-vm:96212kB, anon-rss:1232kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 459.894825][T10780] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 459.894910][T10780] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 459.895082][T10780] EXT4-fs (loop2): mount failed [ 460.016896][T10784] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1539'. [ 461.368130][T10792] loop6: detected capacity change from 0 to 8192 [ 461.874271][T10801] loop0: detected capacity change from 0 to 1024 [ 461.941719][T10801] ext4: Unknown parameter 'uid' [ 462.624167][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 462.629574][T10812] loop0: detected capacity change from 0 to 512 [ 462.654251][T10804] loop3: detected capacity change from 0 to 1024 [ 462.659452][T10804] ext4: Unknown parameter 'uid' [ 462.709656][T10816] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 462.709674][T10816] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1549'. [ 462.720661][T10817] loop3: detected capacity change from 0 to 512 [ 462.728271][T10816] lo speed is unknown, defaulting to 1000 [ 462.817249][T10817] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 462.817292][T10817] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.822939][T10817] EXT4-fs (loop3): mount failed [ 462.911803][T10812] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 462.911846][T10812] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.912080][T10812] EXT4-fs (loop0): mount failed [ 463.446274][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 463.548552][T10843] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1550'. [ 463.668540][T10837] loop2: detected capacity change from 0 to 1024 [ 463.690850][T10837] ext4: Unknown parameter 'uid' [ 463.825555][T10847] loop2: detected capacity change from 0 to 512 [ 463.838003][T10842] loop3: detected capacity change from 0 to 1024 [ 464.008656][T10848] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1554'. [ 464.008682][T10848] net_ratelimit: 2 callbacks suppressed [ 464.008692][T10848] netlink: zone id is out of range [ 464.008699][T10848] netlink: zone id is out of range [ 464.008969][T10848] netlink: zone id is out of range [ 464.017438][T10848] netlink: set zone limit has 8 unknown bytes [ 464.037891][T10842] ext4: Unknown parameter 'uid' [ 464.525110][T10847] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 464.525149][T10847] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 464.525380][T10847] EXT4-fs (loop2): mount failed [ 464.703356][T10858] loop0: detected capacity change from 0 to 8192 [ 465.072337][T10861] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1555'. [ 465.072854][T10861] netlink: zone id is out of range [ 465.072943][T10861] netlink: zone id is out of range [ 465.076670][T10861] netlink: zone id is out of range [ 465.225984][T10861] netlink: set zone limit has 8 unknown bytes [ 465.539169][T10865] loop2: detected capacity change from 0 to 8192 [ 465.648301][T10875] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 465.970148][T10875] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1559'. [ 466.149470][T10880] lo speed is unknown, defaulting to 1000 [ 467.878204][T10899] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1562'. [ 467.889459][T10899] netlink: zone id is out of range [ 467.895685][T10899] netlink: zone id is out of range [ 468.103247][T10897] loop5: detected capacity change from 0 to 8192 [ 468.439709][T10890] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1561'. [ 469.207089][T10915] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1565'. [ 469.216330][T10915] net_ratelimit: 2 callbacks suppressed [ 469.216341][T10915] netlink: zone id is out of range [ 469.227229][T10915] netlink: zone id is out of range [ 469.232768][T10915] netlink: zone id is out of range [ 469.258319][T10915] netlink: set zone limit has 8 unknown bytes [ 469.826434][T10913] loop5: detected capacity change from 0 to 736 [ 469.865566][T10922] loop0: detected capacity change from 0 to 8192 [ 469.889359][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1568'. [ 469.912339][T10924] loop2: detected capacity change from 0 to 1024 [ 469.930555][T10924] ext4: Unknown parameter 'uid' [ 470.034079][T10922] ================================================================== [ 470.034110][T10922] BUG: KCSAN: data-race in __d_drop / fast_dput [ 470.034139][T10922] [ 470.034145][T10922] write to 0xffff88811b14e310 of 8 bytes by task 10928 on cpu 1: [ 470.034162][T10922] __d_drop+0x14d/0x240 [ 470.034189][T10922] d_invalidate+0x50/0x1d0 [ 470.034215][T10922] path_openat+0x12e6/0x2050 [ 470.034247][T10922] do_file_open+0x16c/0x290 [ 470.034273][T10922] do_sys_openat2+0x94/0x130 [ 470.034299][T10922] __x64_sys_openat+0xf2/0x120 [ 470.034326][T10922] x64_sys_call+0x1e39/0x3020 [ 470.034349][T10922] do_syscall_64+0x12c/0x370 [ 470.034368][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.034387][T10922] [ 470.034394][T10922] read to 0xffff88811b14e310 of 8 bytes by task 10922 on cpu 0: [ 470.034411][T10922] fast_dput+0x5f/0x2c0 [ 470.034435][T10922] dput+0x24/0x60 [ 470.034458][T10922] filename_mknodat+0x2cb/0x450 [ 470.034476][T10922] __se_sys_mknodat+0x38/0xf0 [ 470.034491][T10922] __x64_sys_mknodat+0x55/0x70 [ 470.034506][T10922] x64_sys_call+0x312/0x3020 [ 470.034534][T10922] do_syscall_64+0x12c/0x370 [ 470.034565][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.034584][T10922] [ 470.034588][T10922] value changed: 0xffff888237ac8f88 -> 0x0000000000000000 [ 470.034599][T10922] [ 470.034603][T10922] Reported by Kernel Concurrency Sanitizer on: [ 470.034613][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.0.1567 Not tainted syzkaller #0 PREEMPT(full) [ 470.034638][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.034650][T10922] ================================================================== [ 470.039948][T10929] loop2: detected capacity change from 0 to 512 [ 470.476398][T10929] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 470.476485][T10929] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 470.476725][T10929] EXT4-fs (loop2): mount failed