last executing test programs: 17.907677579s ago: executing program 2 (id=1070): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x90a3b4a3e4f91378) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x0, 0x3, 0xfb, "d05dbab632"}}}}, 0x0) 14.18480708s ago: executing program 2 (id=1077): r0 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x110, 0xffffffffffffffff, 0x4000) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x100, 0x100) finit_module(r1, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 11.226733316s ago: executing program 2 (id=1082): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 10.49283246s ago: executing program 3 (id=1085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffffa, 0xb0a}, 0x1009, 0x0, 0x0, 0x3, 0x14, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 9.152804543s ago: executing program 3 (id=1086): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mknod(&(0x7f0000000340)='./bus\x00', 0xc000, 0x2000008) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 8.95959734s ago: executing program 1 (id=1087): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0xc0f0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fsopen(0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x80) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r4}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x5b}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x79dd}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 8.681355378s ago: executing program 1 (id=1088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9", @ANYRESHEX=r4, @ANYRES8=r4], 0x2, 0x2bc, &(0x7f00000015c0)="$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") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socket$unix(0x1, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 8.334707089s ago: executing program 0 (id=1089): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 7.732246199s ago: executing program 4 (id=1090): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) timer_create(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="741c0000", @ANYRES16=r2, @ANYBLOB="15382bbd7000fddbdf250e000000f8010e8078"], 0x1c74}, 0x1, 0x0, 0x0, 0x40}, 0xc000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 7.271863144s ago: executing program 3 (id=1091): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000040000", @ANYRES32, @ANYBLOB="00000001da45074000edfffdffffffffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x42, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f00000001c0)={0x2a, 0x1, 0x8000}, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000013, 0x4c032, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDENABIO(r4, 0x4b36) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x44063100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) 7.271420174s ago: executing program 4 (id=1092): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000500)=0x10001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/42, 0x2a}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000006c0)={0xcd4e, 0x4, 0x9b, 0x9, 0x0}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000740)={0x4, 0x0, 0x68, 0x0, r2}, &(0x7f0000000780)=0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x348, 0x1d0, 0x348, 0x348, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2ab, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5370bd4294c1", 0x200, 0xe, [0x25, 0x1e, 0x18, 0x2f, 0x38, 0x40, 0x11, 0x23, 0x16, 0x1f, 0x30, 0x38, 0x18, 0x27, 0x15, 0x1], 0x2, 0x0, 0x9}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x7a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000800)={r2, 0x40, 0x1419}, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = eventfd(0x8) read$eventfd(r4, &(0x7f00000007c0), 0x8) pread64(r3, 0x0, 0x0, 0x4eb) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x110, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x80000001, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4064000}, 0x8804) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.088346533s ago: executing program 3 (id=1093): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 5.977609896s ago: executing program 1 (id=1094): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) timer_create(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="741c0000", @ANYRES16=r2, @ANYBLOB="15382bbd7000fddbdf250e000000f8010e8078"], 0x1c74}, 0x1, 0x0, 0x0, 0x40}, 0xc000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 5.962561037s ago: executing program 2 (id=1095): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) inotify_init() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x10) msgget$private(0x0, 0x0) 5.943483447s ago: executing program 0 (id=1096): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r4, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="95beea75", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1884c600000032c7efff000000000900000018000000610000000000000007000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0xbe, &(0x7f00000001c0)=""/190, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x38, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x37, 0x0, @val=@netkit={@void, @value=r6, @void, @void, r5}}, 0x1c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x4, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001100)={@map=r7, 0xffffffffffffffff, 0x2, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r8, r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r10, &(0x7f00000010c0)=""/4096, 0x1000) vmsplice(r11, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) writev(r9, &(0x7f0000000700)=[{&(0x7f00000006c0)="6e7976baadf141a41ee5b2921ab09a1d256d42bdda353157", 0x18}], 0x1) 5.708475035s ago: executing program 1 (id=1097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffffa, 0xb0a}, 0x1009, 0x0, 0x0, 0x3, 0x14, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 5.708360295s ago: executing program 4 (id=1098): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgsnd(r0, &(0x7f0000000180)={0x2, "f69a76e026afc71dd75f1e4dff056f708a5e5190217e5e6ceb3920a1e173d146458270cc4a571834745115a17b3a6b8338b2191ffecf2aa2693ccaafeeee50cc33f390779880c33c03cafd6fb265a409c88bc523387fd2b606561a4387d4ab428d984f3e1c2776413d3a223cde7c5cefeff03ab0b804165f236b0b5a4fc71da6d80c8d02a99f8f7eeb1711f24d705a832363c7408fdb7d260d6846f636d41490743b27c5ea14b81fdba94d4efa14d6d12fdd2d5829daaddd8e7eea9a29dfeb0705db43a6fa397d5356002eefd2dc3417f9c65494b65a826135a84f42c7262d98c43a4917bf09d20d4e7a74"}, 0xf3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) 5.652483017s ago: executing program 2 (id=1099): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 4.823361924s ago: executing program 4 (id=1100): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8010, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000240)=@raw=[@alu={0x7, 0x1, 0xb, 0x5, 0x0, 0x18, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}], 0x0, 0xc2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0x0, 0x3ade, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 4.726480917s ago: executing program 1 (id=1101): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x3, &(0x7f0000000180)=0x8001, 0x6, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) 4.724184357s ago: executing program 0 (id=1102): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) timer_create(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="741c0000", @ANYRES16=r2, @ANYBLOB="15382bbd7000fddbdf250e000000f8010e8078"], 0x1c74}, 0x1, 0x0, 0x0, 0x40}, 0xc000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyHb8I1nshWV3czMsZAMhcpz1JrvQQ0oPpdBAoD03MbJiUstWsOQQG0MTSqGXQlt6KLSXnPsjvfXaH9BT+1/0UBLSxglN6aG4jDSyFVtybMe23PrzgfG892bk977zZjRPmkETwIE1nP7JRRyNiLeTiMGsPImInlqqO+Jcfb1HS4t9EVFIYnn5pZ+S2joPlxYL0fSa1OEs88+I+OqNiBO59fVW5hemxkul4myWH6lOXx2pzC+cvDI9PlmcLM6cGR0bO332v2fP7FysP3+3cOTuO8//+9Nzv77+j9tvfZ3EuTiSLWuOY6cMx3C2TXrSTfiY53a6sg5LOt0AtiU9NLvqR3kcjcHoqqXa6N/LlgEAu+W1iFgGAA6YxPkfAA6YxvcAD5cWC42ps99I7K17z0ZEXz3+R9lUX9KdXbPrq10HHXiYPHZlJImIoR2ofzgiPvz8lWNdWT5th2tpwF64cTMiLg0Nr3//T9bds7BVpzZauNxbmw2vKT5o5x/opC/S8c//Wo3/civjn2gx/umtH7t/f9r62x7/K4Or3J2nrWMj6fjvmfq9bWvGfys3rQ11Zbm/1JrVk1y+UiqeyrZBKs2P1lKtR27HH/z2oF392fjv43S6/+6rH6X1p/PVNXJ3unsff83EeLX7m6cJusm9mzGQJdfEn6z0f9Jm/Hthk3W88P83P2i3LI0/jbcxrY9/dy3fijjWsv9X+zLZ8P7EkdruMNLYKVr47Pv3B9rV39z/6ZTWn853PtLW7t2MGLg/GEmyug3qS1biH0qa79esbL2Ob28Nftlu2ZPjb7n/jx9KXq6lD2Vl18er1dnRiEPJi+vLT6++tpFvrJ/Gf/xfrY//erWt9//0M+GlTcbffffHT7Yf/+5K45/YeP9f0/99WfFqyZMStx9NdbWrf3P9P1ZLHc9K0v5/Ulybadf29mYAAAAAAAAAAAAAAAAAAAAAAAAA2LpcRByJJJdfSedy+Xz9Gd5/i4FcqVypnrhcnpuZiNqzsoeiJ9f4qcvBpt9DHc1+srWRP70m/5+I+GtEvNfbX8vnC+XSRKeDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM4TbP/0/90Nvp1gEAu6av0w0AAPac8z8AHDxbO//371o7AIC94/M/ABw8mz7/X9rddgAAe8fnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZhfPn02n5l6XFQpqfuDY/N1W+dnKiWJnKT88V8oXy7NX8ZLk8WSrmC+Xptv/oRn1WKpevjsXM3PWRarFSHanML1ycLs/NVC9emR6fLF4s9uxZZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACweZX5hanxUqk4+6dI3FgNbIf/c39H4xrYH5u3KdEd+6IZ+zrRG/uiGdtMNL9L9HfgnQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgj+H3AAAA//+0Bxg2") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 4.560874542s ago: executing program 3 (id=1103): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 4.539360103s ago: executing program 4 (id=1104): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) syz_clone(0x2a004000, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 4.529923233s ago: executing program 0 (id=1105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9", @ANYRESHEX=r4, @ANYRES8=r4], 0x2, 0x2bc, &(0x7f00000015c0)="$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") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socket$unix(0x1, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.414213874s ago: executing program 2 (id=1106): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x2, @perf_bp={0x0, 0x1}, 0x10c8ec, 0x0, 0x1, 0x3, 0x6, 0x5ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x2200) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x4004000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x20002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4) 890.494201ms ago: executing program 0 (id=1107): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) timer_create(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="741c0000", @ANYRES16=r2, @ANYBLOB="15382bbd7000fddbdf250e000000f8010e8078"], 0x1c74}, 0x1, 0x0, 0x0, 0x40}, 0xc000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 529.468283ms ago: executing program 1 (id=1108): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) 529.322973ms ago: executing program 4 (id=1109): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001d80)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) inotify_init() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x10) msgget$private(0x0, 0x0) 183.626554ms ago: executing program 3 (id=1110): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 0s ago: executing program 0 (id=1111): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgsnd(r0, &(0x7f0000000180)={0x2, "f69a76e026afc71dd75f1e4dff056f708a5e5190217e5e6ceb3920a1e173d146458270cc4a571834745115a17b3a6b8338b2191ffecf2aa2693ccaafeeee50cc33f390779880c33c03cafd6fb265a409c88bc523387fd2b606561a4387d4ab428d984f3e1c2776413d3a223cde7c5cefeff03ab0b804165f236b0b5a4fc71da6d80c8d02a99f8f7eeb1711f24d705a832363c7408fdb7d260d6846f636d41490743b27c5ea14b81fdba94d4efa14d6d12fdd2d5829daaddd8e7eea9a29dfeb0705db43a6fa397d5356002eefd2dc3417f9c65494b65a826135a84f42c7262d98c43a4917bf09d20d4e7a74"}, 0xf3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) kernel console output (not intermixed with test programs): 4572800 [ 241.493761][ T3298] hierarchical_memsw_limit 9223372036854771712 [ 241.500625][ T3298] total_cache 524288 [ 241.506018][ T3298] total_rss 102400 [ 241.520916][ T3298] total_shmem 0 [ 241.532118][ T3298] total_mapped_file 4096 [ 241.547164][ T3298] total_dirty 4096 [ 242.416608][ T3298] total_writeback 0 [ 242.423716][ T3298] total_workingset_refault_anon 653 [ 242.429345][ T3298] total_workingset_refault_file 3591 [ 242.447876][ T3298] total_swap 479232 [ 242.453968][ T3298] total_swapcached 3903488 [ 242.528071][ T3298] total_pgpgin 149429 [ 242.535109][ T3298] total_pgpgout 149276 [ 243.110222][ T3298] total_pgfault 165461 [ 243.116609][ T3298] total_pgmajfault 523 [ 243.121992][ T3298] total_inactive_anon 0 [ 243.194333][ T3298] total_active_anon 102400 [ 243.199991][ T3298] total_inactive_file 0 [ 243.207245][ T3298] total_active_file 524288 [ 243.233452][ T3298] total_unevictable 0 [ 243.245686][ T3298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.684,pid=6379,uid=0 [ 243.260664][ T3298] Memory cgroup out of memory: OOM victim 6379 (syz.4.684) is already exiting. Skip killing the task [ 243.309035][ T6427] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.695'. [ 243.322254][ T28] audit: type=1400 audit(1782021627.023:590): avc: denied { connect } for pid=6430 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.385416][ T6466] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.706'. [ 246.420713][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 246.444712][ T28] audit: type=1400 audit(1782021630.143:591): avc: denied { getopt } for pid=6465 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.535774][ T6454] syz.1.702 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 246.558999][ T28] audit: type=1400 audit(1782021630.193:592): avc: denied { accept } for pid=6469 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.620537][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.1.702 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.620599][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.620612][ T6454] Call Trace: [ 246.620618][ T6454] [ 246.620664][ T6454] __dump_stack+0x1d/0x30 [ 246.620770][ T6454] dump_stack_lvl+0x95/0xd0 [ 246.620833][ T6454] dump_stack+0x15/0x1b [ 246.620854][ T6454] dump_header+0x80/0x240 [ 246.620883][ T6454] oom_kill_process+0x295/0x350 [ 246.620923][ T6454] out_of_memory+0x981/0xbc0 [ 246.620993][ T6454] try_charge_memcg+0x621/0xa00 [ 246.621050][ T6454] __memcg_kmem_charge_page+0x199/0x3a0 [ 246.621102][ T6454] __alloc_frozen_pages_noprof+0x18a/0x350 [ 246.621133][ T6454] alloc_pages_bulk_noprof+0x4c3/0x550 [ 246.621161][ T6454] ? policy_nodemask+0x417/0x5e0 [ 246.621253][ T6454] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 246.621323][ T6454] ? alloc_pages_mpol+0xd9/0x1d0 [ 246.621364][ T6454] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 246.621499][ T6454] __kvmalloc_node_noprof+0x3d4/0x640 [ 246.621597][ T6454] ? futex_hash_allocate+0x192/0x920 [ 246.621668][ T6454] ? futex_hash_allocate+0x192/0x920 [ 246.621725][ T6454] ? file_ioctl+0x14a/0x5b0 [ 246.621762][ T6454] futex_hash_allocate+0x192/0x920 [ 246.621783][ T6454] ? cap_task_prctl+0x13f/0x6b0 [ 246.621821][ T6454] futex_hash_prctl+0xd8/0xf0 [ 246.621875][ T6454] __se_sys_prctl+0x4f4/0x13b0 [ 246.621910][ T6454] __x64_sys_prctl+0x67/0x80 [ 246.621934][ T6454] x64_sys_call+0x2533/0x3020 [ 246.622038][ T6454] do_syscall_64+0x136/0x3c0 [ 246.622066][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.622092][ T6454] RIP: 0033:0x7f8c9898ce59 [ 246.622108][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.622223][ T6454] RSP: 002b:00007f8c973c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 246.622245][ T6454] RAX: ffffffffffffffda RBX: 00007f8c98c06090 RCX: 00007f8c9898ce59 [ 246.622265][ T6454] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 246.622282][ T6454] RBP: 00007f8c98a22e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.622301][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.622318][ T6454] R13: 00007f8c98c06128 R14: 00007f8c98c06090 R15: 00007ffd155bbd18 [ 246.622408][ T6454] [ 246.923708][ T6454] memory: usage 306968kB, limit 307200kB, failcnt 658 [ 246.945082][ T6454] memory+swap: usage 309280kB, limit 9007199254740988kB, failcnt 0 [ 246.967619][ T6454] kmem: usage 306944kB, limit 9007199254740988kB, failcnt 0 [ 246.989939][ T6454] Memory cgroup stats for /syz1: [ 246.990167][ T6454] cache 0 [ 247.017963][ T6454] rss 0 [ 247.025178][ T6454] shmem 0 [ 247.033534][ T6454] mapped_file 0 [ 247.045861][ T6454] dirty 0 [ 247.056607][ T6454] writeback 0 [ 247.066680][ T6454] workingset_refault_anon 174 [ 247.082857][ T6454] workingset_refault_file 270 [ 247.097031][ T6454] swap 2367488 [ 247.108045][ T6454] swapcached 5885952 [ 247.119463][ T6454] pgpgin 183534 [ 247.130406][ T6454] pgpgout 183531 [ 247.141379][ T6454] pgfault 169289 [ 247.152168][ T6454] pgmajfault 132 [ 247.164583][ T6454] inactive_anon 4096 [ 247.175960][ T6454] active_anon 8192 [ 247.187162][ T6454] inactive_file 0 [ 247.205319][ T6454] active_file 0 [ 247.213836][ T6454] unevictable 0 [ 247.223307][ T6454] hierarchical_memory_limit 314572800 [ 247.238980][ T6454] hierarchical_memsw_limit 9223372036854771712 [ 247.258587][ T6454] total_cache 0 [ 247.268075][ T6454] total_rss 0 [ 247.278634][ T6454] total_shmem 0 [ 247.289581][ T6454] total_mapped_file 0 [ 247.302728][ T6454] total_dirty 0 [ 247.313545][ T6454] total_writeback 0 [ 247.326998][ T6454] total_workingset_refault_anon 174 [ 247.342420][ T6454] total_workingset_refault_file 270 [ 247.359976][ T6454] total_swap 2367488 [ 247.372677][ T6454] total_swapcached 5885952 [ 247.386175][ T6454] total_pgpgin 183534 [ 247.403431][ T6454] total_pgpgout 183531 [ 247.407605][ T6454] total_pgfault 169289 [ 247.422496][ T6454] total_pgmajfault 132 [ 247.438116][ T6454] total_inactive_anon 4096 [ 247.446622][ T6454] total_active_anon 8192 [ 247.457252][ T6454] total_inactive_file 0 [ 247.465674][ T6454] total_active_file 0 [ 247.476582][ T6454] total_unevictable 0 [ 247.484532][ T6454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.702,pid=6450,uid=0 [ 247.522316][ T6454] Memory cgroup out of memory: Killed process 6450 (syz.1.702) total-vm:94300kB, anon-rss:1228kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 247.835364][ T6482] usb usb8: usbfs: process 6482 (syz.0.709) did not claim interface 0 before use [ 250.200944][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 251.988133][ T28] audit: type=1400 audit(1782021635.693:593): avc: denied { write } for pid=6501 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.398676][ T28] audit: type=1400 audit(1782021637.843:594): avc: denied { mounton } for pid=6521 comm="syz.2.716" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 254.495753][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.716'. [ 254.563492][ T6529] devpts: Bad value for 'gid' [ 254.595170][ T6529] devpts: Bad value for 'gid' [ 254.642663][ T28] audit: type=1400 audit(1782021638.343:595): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 254.819356][ T6532] netlink: 6760 bytes leftover after parsing attributes in process `syz.4.718'. [ 255.282616][ T6545] syz.4.721 (6545) used obsolete PPPIOCDETACH ioctl [ 255.661901][ T28] audit: type=1400 audit(1782021639.363:596): avc: denied { bind } for pid=6555 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.680463][ T6556] netlink: 'syz.0.728': attribute type 10 has an invalid length. [ 256.233841][ T6556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.310008][ T6556] team0: Port device netdevsim2 added [ 256.420271][ T6556] Process accounting resumed [ 256.509930][ T6564] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.731'. [ 257.752902][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.759743][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.062961][ T6580] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.734'. [ 260.413146][ T28] audit: type=1400 audit(1782021644.093:597): avc: denied { mount } for pid=6581 comm="syz.1.735" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 262.472778][ T28] audit: type=1400 audit(1782021646.173:598): avc: denied { create } for pid=6596 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.195807][ T6602] bond0: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 263.220615][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.592208][ T6595] syz.2.739 (6595) used greatest stack depth: 8064 bytes left [ 264.597095][ T6613] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.743'. [ 264.926869][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 265.313297][ T28] audit: type=1400 audit(1782021649.013:599): avc: denied { create } for pid=6614 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.399889][ T28] audit: type=1400 audit(1782021649.033:600): avc: denied { connect } for pid=6614 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.502348][ T28] audit: type=1400 audit(1782021649.063:601): avc: denied { read } for pid=6614 comm="syz.2.744" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.620392][ T28] audit: type=1400 audit(1782021649.063:602): avc: denied { open } for pid=6614 comm="syz.2.744" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 266.794140][ T28] audit: type=1400 audit(1782021650.493:603): avc: denied { write } for pid=6643 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 267.434258][ T28] audit: type=1400 audit(1782021651.133:604): avc: denied { create } for pid=6660 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 267.472362][ T6657] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.756'. [ 267.483826][ T28] audit: type=1400 audit(1782021651.173:605): avc: denied { map } for pid=6660 comm="syz.4.758" path="socket:[14225]" dev="sockfs" ino=14225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.540063][ T28] audit: type=1400 audit(1782021651.173:606): avc: denied { read } for pid=6660 comm="syz.4.758" path="socket:[14225]" dev="sockfs" ino=14225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.717033][ T28] audit: type=1400 audit(1782021651.413:607): avc: denied { mount } for pid=6673 comm="syz.0.761" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.731079][ T6670] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.770'. [ 267.773822][ T28] audit: type=1400 audit(1782021651.423:608): avc: denied { bind } for pid=6664 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.818928][ T28] audit: type=1400 audit(1782021651.423:609): avc: denied { listen } for pid=6664 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.903465][ T28] audit: type=1400 audit(1782021651.603:611): avc: denied { read } for pid=6683 comm="syz.3.763" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 267.967960][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 268.952340][ T6699] netlink: 6760 bytes leftover after parsing attributes in process `syz.3.768'. [ 268.965829][ T6701] netlink: 6760 bytes leftover after parsing attributes in process `syz.2.767'. [ 270.206213][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 272.120377][ T6769] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.786'. [ 272.833681][ T6781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.790'. [ 273.070220][ T6784] usb usb8: usbfs: process 6784 (syz.4.789) did not claim interface 0 before use [ 273.952568][ T6781] devpts: Bad value for 'gid' [ 273.957343][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 273.957361][ T28] audit: type=1400 audit(1782021657.653:620): avc: denied { mounton } for pid=6777 comm="syz.3.790" path="/156/file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.978134][ T6781] devpts: Bad value for 'gid' [ 274.382001][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 274.426745][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 274.426780][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.426797][ T3304] Call Trace: [ 274.426806][ T3304] [ 274.426890][ T3304] __dump_stack+0x1d/0x30 [ 274.426916][ T3304] dump_stack_lvl+0x95/0xd0 [ 274.427015][ T3304] dump_stack+0x15/0x1b [ 274.427040][ T3304] dump_header+0x80/0x240 [ 274.427104][ T3304] oom_kill_process+0x295/0x350 [ 274.427208][ T3304] out_of_memory+0x981/0xbc0 [ 274.427241][ T3304] try_charge_memcg+0x621/0xa00 [ 274.427280][ T3304] charge_memcg+0x6d/0x120 [ 274.427323][ T3304] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 274.427360][ T3304] swap_cache_alloc_folio+0x47b/0x5e0 [ 274.427392][ T3304] swap_cluster_readahead+0x3d2/0x460 [ 274.427508][ T3304] swapin_readahead+0xd8/0x8a0 [ 274.427541][ T3304] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 274.427578][ T3304] ? hrtimer_start_range_ns+0x108/0x120 [ 274.427614][ T3304] ? __rcu_read_unlock+0x4e/0x70 [ 274.427692][ T3304] ? swap_cache_get_folio+0x1f7/0x200 [ 274.427721][ T3304] do_swap_page+0x2a2/0x1ec0 [ 274.427751][ T3304] ? __schedule+0x799/0xd10 [ 274.427815][ T3304] ? __rcu_read_lock+0x36/0x50 [ 274.427846][ T3304] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 274.427885][ T3304] handle_mm_fault+0xb3c/0x2da0 [ 274.427924][ T3304] do_user_addr_fault+0x634/0x1060 [ 274.427962][ T3304] ? trace_page_fault_user+0x1f/0xa0 [ 274.428007][ T3304] exc_page_fault+0x62/0xa0 [ 274.428113][ T3304] asm_exc_page_fault+0x26/0x30 [ 274.428134][ T3304] RIP: 0033:0x7f6eb2bc7fd7 [ 274.428150][ T3304] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 274.428236][ T3304] RSP: 002b:00007ffdfbd1b270 EFLAGS: 00010202 [ 274.428303][ T3304] RAX: 0000000000000000 RBX: 00005555615e2500 RCX: 00007f6eb2bc7fd7 [ 274.428322][ T3304] RDX: 00007ffdfbd1b2b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.428345][ T3304] RBP: 00007ffdfbd1b31c R08: 0000000000000000 R09: 0000000000000000 [ 274.428362][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 274.428379][ T3304] R13: 00000000000927c0 R14: 0000000000042e99 R15: 00007ffdfbd1b370 [ 274.428474][ T3304] [ 274.432887][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 5280 [ 274.888150][ T3304] memory+swap: usage 308420kB, limit 9007199254740988kB, failcnt 0 [ 274.903243][ T3304] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 274.917998][ T3304] Memory cgroup stats for /syz2: [ 274.918508][ T3304] cache 0 [ 274.938381][ T3304] rss 0 [ 274.941213][ T3304] shmem 0 [ 274.944205][ T3304] mapped_file 0 [ 274.976460][ T3304] dirty 0 [ 274.986955][ T3304] writeback 0 [ 274.996078][ T3304] workingset_refault_anon 492 [ 275.013185][ T3304] workingset_refault_file 1589 [ 275.029120][ T3304] swap 1249280 [ 275.041292][ T3304] swapcached 5472256 [ 275.045231][ T3304] pgpgin 211756 [ 275.048898][ T3304] pgpgout 211756 [ 275.052466][ T3304] pgfault 190867 [ 275.056096][ T3304] pgmajfault 358 [ 275.059688][ T3304] inactive_anon 0 [ 275.063351][ T3304] active_anon 0 [ 275.066856][ T3304] inactive_file 0 [ 275.070585][ T3304] active_file 0 [ 275.074071][ T3304] unevictable 0 [ 275.077616][ T3304] hierarchical_memory_limit 314572800 [ 275.083010][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 275.089208][ T3304] total_cache 0 [ 275.092732][ T3304] total_rss 0 [ 275.186894][ T3304] total_shmem 0 [ 275.190652][ T3304] total_mapped_file 0 [ 275.195088][ T3304] total_dirty 0 [ 275.198955][ T3304] total_writeback 0 [ 275.204427][ T3304] total_workingset_refault_anon 492 [ 275.217765][ T3304] total_workingset_refault_file 1589 [ 275.233395][ T6797] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.794'. [ 275.256459][ T3304] total_swap 1249280 [ 275.271260][ T3304] total_swapcached 5472256 [ 275.298314][ T3304] total_pgpgin 211756 [ 275.317130][ T3304] total_pgpgout 211756 [ 275.337563][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.793'. [ 275.353292][ T3304] total_pgfault 190867 [ 275.374329][ T3304] total_pgmajfault 358 [ 275.390380][ T3304] total_inactive_anon 0 [ 275.405143][ T3304] total_active_anon 0 [ 275.416580][ T3304] total_inactive_file 0 [ 275.436592][ T3304] total_active_file 0 [ 275.449453][ T3304] total_unevictable 0 [ 275.459488][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.787,pid=6770,uid=0 [ 275.503727][ T3304] Memory cgroup out of memory: OOM victim 6770 (syz.2.787) is already exiting. Skip killing the task [ 275.821908][ T6812] random: crng reseeded on system resumption [ 275.821907][ T28] audit: type=1400 audit(1782021659.523:621): avc: denied { read } for pid=6811 comm="syz.0.797" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 275.925180][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 275.934136][ T28] audit: type=1400 audit(1782021659.623:622): avc: denied { mount } for pid=6806 comm="syz.2.796" name="/" dev="ramfs" ino=15140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 276.669504][ T6828] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 278.455291][ T6840] usb usb8: usbfs: process 6840 (syz.3.803) did not claim interface 0 before use [ 280.212975][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 280.282952][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 280.282988][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.283005][ T3304] Call Trace: [ 280.283014][ T3304] [ 280.283025][ T3304] __dump_stack+0x1d/0x30 [ 280.283109][ T3304] dump_stack_lvl+0x95/0xd0 [ 280.283143][ T3304] dump_stack+0x15/0x1b [ 280.283216][ T3304] dump_header+0x80/0x240 [ 280.283243][ T3304] oom_kill_process+0x295/0x350 [ 280.283277][ T3304] out_of_memory+0x981/0xbc0 [ 280.283317][ T3304] try_charge_memcg+0x621/0xa00 [ 280.283367][ T3304] charge_memcg+0x6d/0x120 [ 280.283402][ T3304] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 280.283446][ T3304] swap_cache_alloc_folio+0x47b/0x5e0 [ 280.283520][ T3304] swap_cluster_readahead+0x3d2/0x460 [ 280.283557][ T3304] swapin_readahead+0xd8/0x8a0 [ 280.283596][ T3304] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 280.283664][ T3304] ? hrtimer_start_range_ns+0x108/0x120 [ 280.283724][ T3304] ? __rcu_read_unlock+0x4e/0x70 [ 280.283760][ T3304] ? swap_cache_get_folio+0x1f7/0x200 [ 280.283869][ T3304] do_swap_page+0x2a2/0x1ec0 [ 280.283961][ T3304] ? __schedule+0x799/0xd10 [ 280.283994][ T3304] ? __rcu_read_lock+0x36/0x50 [ 280.284021][ T3304] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 280.284058][ T3304] handle_mm_fault+0xb3c/0x2da0 [ 280.284108][ T3304] do_user_addr_fault+0x634/0x1060 [ 280.284194][ T3304] ? trace_page_fault_user+0x1f/0xa0 [ 280.284293][ T3304] exc_page_fault+0x62/0xa0 [ 280.284336][ T3304] asm_exc_page_fault+0x26/0x30 [ 280.284441][ T3304] RIP: 0033:0x7f6eb2bc7fd7 [ 280.284461][ T3304] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 280.284543][ T3304] RSP: 002b:00007ffdfbd1b270 EFLAGS: 00010202 [ 280.284559][ T3304] RAX: 0000000000000000 RBX: 00005555615e2500 RCX: 00007f6eb2bc7fd7 [ 280.284616][ T3304] RDX: 00007ffdfbd1b2b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.284630][ T3304] RBP: 00007ffdfbd1b31c R08: 0000000000000000 R09: 0000000000000000 [ 280.284683][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 280.284700][ T3304] R13: 00000000000927c0 R14: 0000000000044590 R15: 00007ffdfbd1b370 [ 280.284725][ T3304] [ 280.510370][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 5499 [ 280.531662][ T3304] memory+swap: usage 308416kB, limit 9007199254740988kB, failcnt 0 [ 280.539619][ T3304] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 280.546962][ T3304] Memory cgroup stats for /syz2: [ 280.547215][ T3304] cache 0 [ 280.571156][ T3304] rss 0 [ 280.576887][ T3304] shmem 0 [ 280.582775][ T3304] mapped_file 0 [ 280.590594][ T3304] dirty 0 [ 280.596495][ T3304] writeback 0 [ 280.602808][ T3304] workingset_refault_anon 682 [ 280.611887][ T3304] workingset_refault_file 1589 [ 280.622621][ T3304] swap 1245184 [ 280.626067][ T3304] swapcached 6561792 [ 280.630285][ T3304] pgpgin 214916 [ 280.633776][ T3304] pgpgout 214915 [ 280.637400][ T3304] pgfault 191474 [ 280.640980][ T3304] pgmajfault 498 [ 280.644610][ T3304] inactive_anon 0 [ 280.648295][ T3304] active_anon 4096 [ 280.652050][ T3304] inactive_file 0 [ 280.655724][ T3304] active_file 0 [ 280.659228][ T3304] unevictable 0 [ 280.662722][ T3304] hierarchical_memory_limit 314572800 [ 280.668279][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 280.674557][ T3304] total_cache 0 [ 280.678059][ T3304] total_rss 0 [ 280.681356][ T3304] total_shmem 0 [ 280.684831][ T3304] total_mapped_file 0 [ 280.688918][ T3304] total_dirty 0 [ 280.692397][ T3304] total_writeback 0 [ 280.696344][ T3304] total_workingset_refault_anon 682 [ 280.702077][ T3304] total_workingset_refault_file 1589 [ 280.708853][ T3304] total_swap 1245184 [ 280.714402][ T3304] total_swapcached 6561792 [ 280.718867][ T3304] total_pgpgin 214916 [ 280.722874][ T3304] total_pgpgout 214915 [ 280.727328][ T3304] total_pgfault 191474 [ 280.731566][ T3304] total_pgmajfault 498 [ 280.735796][ T3304] total_inactive_anon 0 [ 280.740004][ T3304] total_active_anon 4096 [ 280.744278][ T3304] total_inactive_file 0 [ 280.748489][ T3304] total_active_file 0 [ 280.752548][ T3304] total_unevictable 0 [ 280.757043][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.806,pid=6849,uid=0 [ 280.771839][ T3304] Memory cgroup out of memory: Killed process 6849 (syz.2.806) total-vm:94300kB, anon-rss:1232kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 280.945038][ T6879] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.815'. [ 281.162597][ T28] audit: type=1400 audit(1782021664.863:623): avc: denied { read } for pid=6872 comm="syz.2.813" lport=37877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.634057][ T28] audit: type=1400 audit(1782021665.333:624): avc: denied { module_load } for pid=6900 comm="syz.3.820" path="/sys/kernel/uevent_seqnum" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 281.637534][ T6899] netlink: 6760 bytes leftover after parsing attributes in process `syz.2.819'. [ 281.972979][ T28] audit: type=1400 audit(1782021665.623:625): avc: denied { firmware_load } for pid=6900 comm="syz.3.820" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 283.381018][ T3304] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 283.424286][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 283.424319][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.424332][ T3304] Call Trace: [ 283.424339][ T3304] [ 283.424350][ T3304] __dump_stack+0x1d/0x30 [ 283.424380][ T3304] dump_stack_lvl+0x95/0xd0 [ 283.424407][ T3304] dump_stack+0x15/0x1b [ 283.424431][ T3304] dump_header+0x80/0x240 [ 283.424456][ T3304] oom_kill_process+0x295/0x350 [ 283.424488][ T3304] out_of_memory+0x981/0xbc0 [ 283.424523][ T3304] try_charge_memcg+0x621/0xa00 [ 283.424572][ T3304] __memcg_kmem_charge_page+0x199/0x3a0 [ 283.424603][ T3304] __alloc_frozen_pages_noprof+0x18a/0x350 [ 283.424637][ T3304] alloc_pages_mpol+0xa9/0x1d0 [ 283.424674][ T3304] alloc_pages_noprof+0x8f/0x140 [ 283.424704][ T3304] __pmd_alloc+0x47/0x430 [ 283.424737][ T3304] copy_page_range+0x30cb/0x3400 [ 283.424771][ T3304] ? mas_wr_walk_descend+0x3d5/0x4a0 [ 283.424820][ T3304] dup_mmap+0x870/0x10b0 [ 283.424855][ T3304] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 283.424888][ T3304] ? __list_add_valid_or_report+0x38/0xe0 [ 283.424930][ T3304] copy_mm+0xfa/0x340 [ 283.424952][ T3304] copy_process+0x10cd/0x2350 [ 283.424983][ T3304] kernel_clone+0x1c0/0x5f0 [ 283.425015][ T3304] __x64_sys_clone+0x143/0x180 [ 283.425046][ T3304] x64_sys_call+0x1222/0x3020 [ 283.425072][ T3304] do_syscall_64+0x136/0x3c0 [ 283.425103][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.425124][ T3304] RIP: 0033:0x7f6eb2c358d2 [ 283.425147][ T3304] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 283.425171][ T3304] RSP: 002b:00007ffdfbd1b190 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 283.425197][ T3304] RAX: ffffffffffffffda RBX: 00007ffdfbd1b190 RCX: 00007f6eb2c358d2 [ 283.425215][ T3304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 283.425228][ T3304] RBP: 00007ffdfbd1b31c R08: 0000000000000000 R09: 0000000000000001 [ 283.425244][ T3304] R10: 00005555615e27d0 R11: 0000000000000246 R12: 0000000000000000 [ 283.425262][ T3304] R13: 00000000000927c0 R14: 000000000004515d R15: 00007ffdfbd1b370 [ 283.425282][ T3304] [ 283.425291][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 5587 [ 283.698789][ T3304] memory+swap: usage 308256kB, limit 9007199254740988kB, failcnt 0 [ 283.706876][ T3304] kmem: usage 302704kB, limit 9007199254740988kB, failcnt 0 [ 283.714196][ T3304] Memory cgroup stats for /syz2: [ 283.714357][ T3304] cache 0 [ 283.722532][ T3304] rss 0 [ 283.736539][ T3304] shmem 0 [ 283.741937][ T3304] mapped_file 0 [ 283.755410][ T3304] dirty 0 [ 283.769961][ T3304] writeback 0 [ 283.778219][ T3304] workingset_refault_anon 721 [ 283.794531][ T3304] workingset_refault_file 1589 [ 283.807520][ T3304] swap 1081344 [ 283.818023][ T3304] swapcached 6877184 [ 283.828253][ T3304] pgpgin 218115 [ 283.834708][ T3304] pgpgout 218115 [ 283.844756][ T3304] pgfault 192176 [ 283.857883][ T3304] pgmajfault 524 [ 283.868474][ T3304] inactive_anon 0 [ 283.876574][ T3304] active_anon 0 [ 283.888017][ T3304] inactive_file 0 [ 283.898307][ T3304] active_file 0 [ 283.907112][ T3304] unevictable 0 [ 283.914995][ T3304] hierarchical_memory_limit 314572800 [ 283.938583][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 283.944993][ T3304] total_cache 0 [ 283.948836][ T3304] total_rss 0 [ 283.952163][ T3304] total_shmem 0 [ 283.955647][ T3304] total_mapped_file 0 [ 283.959936][ T3304] total_dirty 0 [ 283.963436][ T3304] total_writeback 0 [ 283.964909][ T6930] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.827'. [ 283.967752][ T3304] total_workingset_refault_anon 721 [ 283.967766][ T3304] total_workingset_refault_file 1589 [ 283.967778][ T3304] total_swap 1081344 [ 283.967788][ T3304] total_swapcached 6877184 [ 283.967800][ T3304] total_pgpgin 218115 [ 283.967810][ T3304] total_pgpgout 218115 [ 283.967820][ T3304] total_pgfault 192176 [ 283.967830][ T3304] total_pgmajfault 524 [ 283.967841][ T3304] total_inactive_anon 0 [ 283.967851][ T3304] total_active_anon 0 [ 283.967861][ T3304] total_inactive_file 0 [ 283.967872][ T3304] total_active_file 0 [ 283.967882][ T3304] total_unevictable 0 [ 283.967893][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.646,pid=6229,uid=0 [ 283.967986][ T3304] Memory cgroup out of memory: Killed process 6229 (syz.2.646) total-vm:96216kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 284.108100][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 285.052973][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 285.193336][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 285.193370][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.193386][ T3304] Call Trace: [ 285.193395][ T3304] [ 285.193405][ T3304] __dump_stack+0x1d/0x30 [ 285.193434][ T3304] dump_stack_lvl+0x95/0xd0 [ 285.193508][ T3304] dump_stack+0x15/0x1b [ 285.193549][ T3304] dump_header+0x80/0x240 [ 285.193571][ T3304] oom_kill_process+0x295/0x350 [ 285.193657][ T3304] out_of_memory+0x981/0xbc0 [ 285.193689][ T3304] try_charge_memcg+0x621/0xa00 [ 285.193729][ T3304] charge_memcg+0x6d/0x120 [ 285.193798][ T3304] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 285.193896][ T3304] swap_cache_alloc_folio+0x47b/0x5e0 [ 285.194013][ T3304] swap_cluster_readahead+0x2b1/0x460 [ 285.194058][ T3304] swapin_readahead+0xd8/0x8a0 [ 285.194103][ T3304] ? alloc_pages_bulk_noprof+0x4c3/0x550 [ 285.194176][ T3304] ? __vmap_pages_range_noflush+0xb8d/0xca0 [ 285.194203][ T3304] ? __rcu_read_unlock+0x4e/0x70 [ 285.194233][ T3304] ? swap_cache_get_folio+0x1f7/0x200 [ 285.194270][ T3304] do_swap_page+0x2a2/0x1ec0 [ 285.194374][ T3304] ? __rcu_read_lock+0x36/0x50 [ 285.194398][ T3304] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 285.194508][ T3304] handle_mm_fault+0xb3c/0x2da0 [ 285.194554][ T3304] do_user_addr_fault+0x402/0x1060 [ 285.194687][ T3304] exc_page_fault+0x62/0xa0 [ 285.194729][ T3304] asm_exc_page_fault+0x26/0x30 [ 285.194750][ T3304] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 285.194856][ T3304] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 1e 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 285.194875][ T3304] RSP: 0018:ffffc900014bfc40 EFLAGS: 00050206 [ 285.194901][ T3304] RAX: ffff888103b56030 RBX: 0000000000000358 RCX: 0000000000000218 [ 285.194942][ T3304] RDX: 0000000000000001 RSI: 00007f6eb2e59000 RDI: ffff88811ab09980 [ 285.194960][ T3304] RBP: 0000000000000000 R08: 0000000000000420 R09: 0000000000000000 [ 285.194983][ T3304] R10: 000188811ab09840 R11: 000188811ab09b97 R12: 0000000000000060 [ 285.194997][ T3304] R13: ffff88811ab09840 R14: ffff88811ab09840 R15: 00007f6eb2e58ec0 [ 285.195017][ T3304] _copy_from_user+0x6f/0xb0 [ 285.195092][ T3304] copy_from_sockptr_offset+0x66/0xa0 [ 285.195123][ T3304] do_ip6t_set_ctl+0x67e/0x990 [ 285.195171][ T3304] ? __rcu_read_unlock+0x4e/0x70 [ 285.195208][ T3304] nf_setsockopt+0x199/0x1b0 [ 285.195236][ T3304] ipv6_setsockopt+0x11a/0x130 [ 285.195349][ T3304] tcp_setsockopt+0x98/0xb0 [ 285.195383][ T3304] sock_common_setsockopt+0x69/0x80 [ 285.195417][ T3304] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 285.195512][ T3304] __sys_setsockopt+0x184/0x200 [ 285.195541][ T3304] __x64_sys_setsockopt+0x64/0x80 [ 285.195566][ T3304] x64_sys_call+0x2327/0x3020 [ 285.195590][ T3304] do_syscall_64+0x136/0x3c0 [ 285.195665][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.195692][ T3304] RIP: 0033:0x7f6eb2c0e69a [ 285.195781][ T3304] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 285.195799][ T3304] RSP: 002b:00007ffdfbd1abe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 285.195890][ T3304] RAX: ffffffffffffffda RBX: 00007ffdfbd1ac70 RCX: 00007f6eb2c0e69a [ 285.195982][ T3304] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 285.195998][ T3304] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0000000000000000 [ 285.196011][ T3304] R10: 00007f6eb2e58e60 R11: 0000000000000202 R12: 00007f6eb2e58e00 [ 285.196024][ T3304] R13: 00007ffdfbd1ac0c R14: 0000000000000000 R15: 00007f6eb2e5afc0 [ 285.196043][ T3304] [ 285.566620][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 6558 [ 285.595259][ T3304] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 285.617260][ T3304] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 285.624596][ T3304] Memory cgroup stats for /syz4: [ 285.624894][ T3304] cache 0 [ 285.633227][ T3304] rss 0 [ 285.636020][ T3304] shmem 0 [ 285.639235][ T3304] mapped_file 0 [ 285.642777][ T3304] dirty 0 [ 285.645749][ T3304] writeback 0 [ 285.649573][ T3304] workingset_refault_anon 766 [ 285.654296][ T3304] workingset_refault_file 3843 [ 285.661214][ T3304] swap 765952 [ 285.664532][ T3304] swapcached 4734976 [ 285.674318][ T3304] pgpgin 216040 [ 285.680984][ T3304] pgpgout 216038 [ 285.696771][ T3304] pgfault 200131 [ 285.700465][ T3304] pgmajfault 589 [ 285.704091][ T3304] inactive_anon 4096 [ 285.716996][ T3304] active_anon 4096 [ 285.720816][ T3304] inactive_file 0 [ 285.727950][ T3304] active_file 0 [ 285.736311][ T3304] unevictable 0 [ 285.745381][ T3304] hierarchical_memory_limit 314572800 [ 285.756573][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 285.765661][ T3304] total_cache 0 [ 285.779869][ T3304] total_rss 0 [ 285.790512][ T3304] total_shmem 0 [ 285.801086][ T3304] total_mapped_file 0 [ 285.813154][ T3304] total_dirty 0 [ 285.824911][ T3304] total_writeback 0 [ 285.836856][ T3304] total_workingset_refault_anon 766 [ 285.855217][ T3304] total_workingset_refault_file 3843 [ 285.869540][ T3304] total_swap 765952 [ 285.881382][ T3304] total_swapcached 4734976 [ 285.899475][ T3304] total_pgpgin 216040 [ 285.906390][ T3304] total_pgpgout 216038 [ 285.918115][ T3304] total_pgfault 200131 [ 285.933757][ T3304] total_pgmajfault 589 [ 285.941103][ T3304] total_inactive_anon 4096 [ 285.956558][ T3304] total_active_anon 4096 [ 285.965230][ T3304] total_inactive_file 0 [ 285.982468][ T3304] total_active_file 0 [ 285.989556][ T3304] total_unevictable 0 [ 285.998046][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.720,pid=6543,uid=0 [ 286.037188][ T3304] Memory cgroup out of memory: Killed process 6543 (syz.4.720) total-vm:96216kB, anon-rss:1228kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 286.809255][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 286.846565][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 286.846672][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.846729][ T3302] Call Trace: [ 286.846738][ T3302] [ 286.846810][ T3302] __dump_stack+0x1d/0x30 [ 286.846840][ T3302] dump_stack_lvl+0x95/0xd0 [ 286.846866][ T3302] dump_stack+0x15/0x1b [ 286.846904][ T3302] dump_header+0x80/0x240 [ 286.846958][ T3302] oom_kill_process+0x295/0x350 [ 286.847009][ T3302] out_of_memory+0x981/0xbc0 [ 286.847104][ T3302] try_charge_memcg+0x621/0xa00 [ 286.847147][ T3302] charge_memcg+0x6d/0x120 [ 286.847184][ T3302] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 286.847247][ T3302] swap_cache_alloc_folio+0x47b/0x5e0 [ 286.847282][ T3302] swap_cluster_readahead+0x3d2/0x460 [ 286.847369][ T3302] swapin_readahead+0xd8/0x8a0 [ 286.847401][ T3302] ? tick_program_event+0x79/0xc0 [ 286.847437][ T3302] ? _raw_spin_unlock+0x9/0x30 [ 286.847518][ T3302] ? __rcu_read_unlock+0x4e/0x70 [ 286.847594][ T3302] ? swap_cache_get_folio+0x1f7/0x200 [ 286.847622][ T3302] do_swap_page+0x2a2/0x1ec0 [ 286.847731][ T3302] ? __schedule+0x799/0xd10 [ 286.847762][ T3302] ? __rcu_read_lock+0x36/0x50 [ 286.847810][ T3302] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 286.847897][ T3302] handle_mm_fault+0xb3c/0x2da0 [ 286.847944][ T3302] do_user_addr_fault+0x634/0x1060 [ 286.847982][ T3302] ? trace_page_fault_user+0x1f/0xa0 [ 286.848019][ T3302] exc_page_fault+0x62/0xa0 [ 286.848094][ T3302] asm_exc_page_fault+0x26/0x30 [ 286.848116][ T3302] RIP: 0033:0x7f04672b7fd7 [ 286.848132][ T3302] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 286.848315][ T3302] RSP: 002b:00007fff4804eaa0 EFLAGS: 00010202 [ 286.848337][ T3302] RAX: 0000000000000000 RBX: 000055558efe0500 RCX: 00007f04672b7fd7 [ 286.848381][ T3302] RDX: 00007fff4804eae0 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.848398][ T3302] RBP: 00007fff4804eb4c R08: 0000000000000000 R09: 0000000000000000 [ 286.848416][ T3302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 286.848433][ T3302] R13: 00000000000927c0 R14: 0000000000045fe7 R15: 00007fff4804eba0 [ 286.848457][ T3302] [ 286.852443][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 1994 [ 287.296617][ T3302] memory+swap: usage 4868kB, limit 9007199254740988kB, failcnt 0 [ 287.317229][ T3302] kmem: usage 4092kB, limit 9007199254740988kB, failcnt 0 [ 287.335117][ T3302] Memory cgroup stats for /syz3: [ 287.335569][ T3302] cache 4096 [ 287.356559][ T3302] rss 0 [ 287.359384][ T3302] shmem 0 [ 287.362331][ T3302] mapped_file 0 [ 287.365823][ T3302] dirty 0 [ 287.386596][ T3302] writeback 0 [ 287.389941][ T3302] workingset_refault_anon 678 [ 287.394640][ T3302] workingset_refault_file 1869 [ 287.408087][ T3302] swap 581632 [ 287.411434][ T3302] swapcached 5074944 [ 287.415396][ T3302] pgpgin 228907 [ 287.428040][ T3302] pgpgout 228906 [ 287.433061][ T3302] pgfault 197207 [ 287.451098][ T3302] pgmajfault 494 [ 287.454729][ T3302] inactive_anon 0 [ 287.458591][ T3302] active_anon 0 [ 287.462080][ T3302] inactive_file 0 [ 287.465804][ T3302] active_file 4096 [ 287.478853][ T3302] unevictable 0 [ 287.486125][ T3302] hierarchical_memory_limit 314572800 [ 287.496812][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 287.506845][ T3302] total_cache 4096 [ 287.511120][ T3302] total_rss 0 [ 287.514544][ T3302] total_shmem 0 [ 287.518309][ T3302] total_mapped_file 0 [ 287.522395][ T3302] total_dirty 0 [ 287.525953][ T3302] total_writeback 0 [ 287.530184][ T3302] total_workingset_refault_anon 678 [ 287.535564][ T3302] total_workingset_refault_file 1869 [ 287.541162][ T3302] total_swap 581632 [ 287.545016][ T3302] total_swapcached 5074944 [ 287.549845][ T3302] total_pgpgin 228907 [ 287.554040][ T3302] total_pgpgout 228906 [ 287.558761][ T3302] total_pgfault 197207 [ 287.562968][ T3302] total_pgmajfault 494 [ 287.567347][ T3302] total_inactive_anon 0 [ 287.571639][ T3302] total_active_anon 0 [ 287.575757][ T3302] total_inactive_file 0 [ 287.587576][ T3302] total_active_file 4096 [ 287.593571][ T3302] total_unevictable 0 [ 287.599340][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.834,pid=6956,uid=0 [ 287.616940][ T3302] Memory cgroup out of memory: Killed process 6956 (syz.3.834) total-vm:98536kB, anon-rss:1232kB, file-rss:26384kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 288.583863][ T6985] syz.0.841 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 288.693733][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.0.841 Not tainted syzkaller #0 PREEMPT(lazy) [ 288.693819][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.693832][ T6985] Call Trace: [ 288.693839][ T6985] [ 288.693850][ T6985] __dump_stack+0x1d/0x30 [ 288.693880][ T6985] dump_stack_lvl+0x95/0xd0 [ 288.693906][ T6985] dump_stack+0x15/0x1b [ 288.693926][ T6985] dump_header+0x80/0x240 [ 288.693957][ T6985] oom_kill_process+0x295/0x350 [ 288.694044][ T6985] out_of_memory+0x981/0xbc0 [ 288.694106][ T6985] try_charge_memcg+0x621/0xa00 [ 288.694181][ T6985] charge_memcg+0x6d/0x120 [ 288.694212][ T6985] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 288.694258][ T6985] swap_cache_alloc_folio+0x47b/0x5e0 [ 288.694359][ T6985] swap_cluster_readahead+0x2b1/0x460 [ 288.694405][ T6985] swapin_readahead+0xd8/0x8a0 [ 288.694508][ T6985] ? _raw_spin_unlock+0x9/0x30 [ 288.694608][ T6985] ? swap_put_entries_cluster+0x49c/0x4c0 [ 288.694645][ T6985] ? __entry_text_end+0x10258/0x102179 [ 288.694748][ T6985] ? __rcu_read_unlock+0x4e/0x70 [ 288.694773][ T6985] ? swap_cache_get_folio+0x1f7/0x200 [ 288.694806][ T6985] do_swap_page+0x2a2/0x1ec0 [ 288.694904][ T6985] ? __css_rstat_updated+0xbb/0x280 [ 288.694935][ T6985] ? __rcu_read_lock+0x36/0x50 [ 288.694958][ T6985] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 288.695055][ T6985] handle_mm_fault+0xb3c/0x2da0 [ 288.695107][ T6985] do_user_addr_fault+0x634/0x1060 [ 288.695146][ T6985] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 288.695267][ T6985] ? trace_page_fault_user+0x1f/0xa0 [ 288.695335][ T6985] exc_page_fault+0x62/0xa0 [ 288.695378][ T6985] asm_exc_page_fault+0x26/0x30 [ 288.695400][ T6985] RIP: 0033:0x7f22761615eb [ 288.695469][ T6985] Code: 00 4c 89 ff be 04 00 00 00 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 89 68 fc 41 8b 47 30 48 83 c4 28 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00 00 c6 [ 288.695493][ T6985] RSP: 002b:00007fff17ad09e8 EFLAGS: 00010206 [ 288.695515][ T6985] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 288.695532][ T6985] RDX: 0000001b32d23ffc RSI: 00000000005ffde8 RDI: 00007f2277035700 [ 288.695567][ T6985] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f22764f2000 [ 288.695584][ T6985] R10: 00007f2277035700 R11: 0000000000000000 R12: 0000000000000000 [ 288.695601][ T6985] R13: 0000000000000389 R14: ffffffff812f753f R15: 00007f2277035720 [ 288.695620][ T6985] ? switch_fpu_return+0xdf/0x1b0 [ 288.695700][ T6985] [ 288.695753][ T6985] memory: usage 307200kB, limit 307200kB, failcnt 5739 [ 289.217995][ T6985] memory+swap: usage 308136kB, limit 9007199254740988kB, failcnt 0 [ 289.233240][ T6985] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 289.240804][ T6985] Memory cgroup stats for /syz2: [ 289.241125][ T6985] cache 0 [ 289.257022][ T6985] rss 0 [ 289.259849][ T6985] shmem 0 [ 289.262818][ T6985] mapped_file 0 [ 289.387588][ T6985] dirty 0 [ 289.399226][ T6985] writeback 0 [ 289.418778][ T6985] workingset_refault_anon 742 [ 289.440620][ T6985] workingset_refault_file 1589 [ 289.458893][ T6985] swap 958464 [ 289.468051][ T6985] swapcached 7118848 [ 289.483294][ T6985] pgpgin 221468 [ 289.498510][ T6985] pgpgout 221467 [ 289.513281][ T6985] pgfault 195709 [ 289.526257][ T6985] pgmajfault 537 [ 289.535447][ T6985] inactive_anon 0 [ 289.545514][ T6985] active_anon 4096 [ 289.556809][ T6985] inactive_file 0 [ 289.565339][ T6985] active_file 0 [ 289.579679][ T6985] unevictable 0 [ 289.592830][ T6985] hierarchical_memory_limit 314572800 [ 289.620985][ T6985] hierarchical_memsw_limit 9223372036854771712 [ 289.648248][ T6985] total_cache 0 [ 289.661252][ T6985] total_rss 0 [ 289.671711][ T6985] total_shmem 0 [ 289.675224][ T6985] total_mapped_file 0 [ 289.679305][ T6985] total_dirty 0 [ 289.682784][ T6985] total_writeback 0 [ 289.686742][ T6985] total_workingset_refault_anon 742 [ 289.692220][ T6985] total_workingset_refault_file 1589 [ 289.697688][ T6985] total_swap 958464 [ 289.701524][ T6985] total_swapcached 7118848 [ 289.705957][ T6985] total_pgpgin 221468 [ 289.710036][ T6985] total_pgpgout 221467 [ 289.714221][ T6985] total_pgfault 195709 [ 289.718358][ T6985] total_pgmajfault 537 [ 289.722440][ T6985] total_inactive_anon 0 [ 289.726646][ T6985] total_active_anon 4096 [ 289.730914][ T6985] total_inactive_file 0 [ 289.735093][ T6985] total_active_file 0 [ 289.739183][ T6985] total_unevictable 0 [ 289.743224][ T6985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.615,pid=6112,uid=0 [ 289.758108][ T6985] Memory cgroup out of memory: Killed process 6112 (syz.2.615) total-vm:94300kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 289.862315][ T6986] netlink: 168 bytes leftover after parsing attributes in process `syz.0.841'. [ 290.565912][ T28] audit: type=1400 audit(1782021674.253:626): avc: denied { ioctl } for pid=7035 comm="syz.0.854" path="socket:[16556]" dev="sockfs" ino=16556 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.264113][ T7043] syz.0.857 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 291.280163][ T7043] CPU: 0 UID: 0 PID: 7043 Comm: syz.0.857 Not tainted syzkaller #0 PREEMPT(lazy) [ 291.280199][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 291.280217][ T7043] Call Trace: [ 291.280226][ T7043] [ 291.280234][ T7043] __dump_stack+0x1d/0x30 [ 291.280288][ T7043] dump_stack_lvl+0x95/0xd0 [ 291.280313][ T7043] dump_stack+0x15/0x1b [ 291.280337][ T7043] dump_header+0x80/0x240 [ 291.280392][ T7043] oom_kill_process+0x295/0x350 [ 291.280490][ T7043] out_of_memory+0x981/0xbc0 [ 291.280522][ T7043] try_charge_memcg+0x621/0xa00 [ 291.280631][ T7043] ? __rcu_read_unlock+0x4e/0x70 [ 291.280670][ T7043] __memcg_kmem_charge_page+0x199/0x3a0 [ 291.280704][ T7043] __alloc_frozen_pages_noprof+0x18a/0x350 [ 291.280793][ T7043] alloc_pages_mpol+0xa9/0x1d0 [ 291.280832][ T7043] alloc_pages_noprof+0x8f/0x140 [ 291.280871][ T7043] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 291.280967][ T7043] __kvmalloc_node_noprof+0x3d4/0x640 [ 291.281002][ T7043] ? futex_hash_allocate+0x192/0x920 [ 291.281029][ T7043] ? futex_hash_allocate+0x192/0x920 [ 291.281067][ T7043] futex_hash_allocate+0x192/0x920 [ 291.281171][ T7043] ? cap_task_prctl+0x13f/0x6b0 [ 291.281282][ T7043] futex_hash_prctl+0xd8/0xf0 [ 291.281302][ T7043] __se_sys_prctl+0x4f4/0x13b0 [ 291.281333][ T7043] __x64_sys_prctl+0x67/0x80 [ 291.281367][ T7043] x64_sys_call+0x2533/0x3020 [ 291.281424][ T7043] do_syscall_64+0x136/0x3c0 [ 291.281453][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.281477][ T7043] RIP: 0033:0x7f227628ce59 [ 291.281493][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.281512][ T7043] RSP: 002b:00007f2274ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 291.281615][ T7043] RAX: ffffffffffffffda RBX: 00007f2276505fa0 RCX: 00007f227628ce59 [ 291.281629][ T7043] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 291.281645][ T7043] RBP: 00007f2276322e6f R08: 0000000000000000 R09: 0000000000000000 [ 291.281663][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.281680][ T7043] R13: 00007f2276506038 R14: 00007f2276505fa0 R15: 00007fff17ad0978 [ 291.281773][ T7043] [ 291.281797][ T7043] memory: usage 307200kB, limit 307200kB, failcnt 5316 [ 291.553885][ T7043] memory+swap: usage 307940kB, limit 9007199254740988kB, failcnt 0 [ 291.562010][ T7043] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 291.569924][ T7043] Memory cgroup stats for /syz0: [ 291.570279][ T7043] cache 0 [ 291.578385][ T7043] rss 0 [ 291.581265][ T7043] shmem 0 [ 291.584336][ T7043] mapped_file 0 [ 291.587910][ T7043] dirty 0 [ 291.590929][ T7043] writeback 0 [ 291.790425][ T7043] workingset_refault_anon 569 [ 291.803160][ T7043] workingset_refault_file 3456 [ 291.821131][ T7043] swap 757760 [ 291.833824][ T7056] netlink: 168 bytes leftover after parsing attributes in process `syz.3.862'. [ 291.851020][ T7043] swapcached 10428416 [ 291.894759][ T7043] pgpgin 316320 [ 291.934218][ T7043] pgpgout 316319 [ 291.968169][ T7043] pgfault 230107 [ 292.010115][ T7043] pgmajfault 444 [ 292.042851][ T7043] inactive_anon 0 [ 292.225059][ T7043] active_anon 4096 [ 292.247736][ T7043] inactive_file 0 [ 292.264828][ T7043] active_file 0 [ 292.288930][ T7043] unevictable 0 [ 292.310267][ T7043] hierarchical_memory_limit 314572800 [ 292.340102][ T7043] hierarchical_memsw_limit 9223372036854771712 [ 292.349267][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 292.371442][ T7043] total_cache 0 [ 292.382609][ T7043] total_rss 0 [ 292.396196][ T7043] total_shmem 0 [ 292.410228][ T7043] total_mapped_file 0 [ 292.429742][ T7043] total_dirty 0 [ 292.455268][ T7043] total_writeback 0 [ 292.474693][ T7043] total_workingset_refault_anon 569 [ 292.502471][ T7043] total_workingset_refault_file 3456 [ 292.528855][ T7043] total_swap 757760 [ 292.551973][ T7043] total_swapcached 10428416 [ 292.569881][ T7043] total_pgpgin 316320 [ 292.587546][ T7043] total_pgpgout 316319 [ 292.606342][ T7043] total_pgfault 230107 [ 292.622239][ T7043] total_pgmajfault 444 [ 292.641159][ T7043] total_inactive_anon 0 [ 292.671062][ T7043] total_active_anon 4096 [ 292.690827][ T7043] total_inactive_file 0 [ 292.715687][ T7043] total_active_file 0 [ 292.730292][ T7043] total_unevictable 0 [ 292.751217][ T7043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.857,pid=7042,uid=0 [ 292.811325][ T7043] Memory cgroup out of memory: Killed process 7042 (syz.0.857) total-vm:94168kB, anon-rss:1236kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 292.887598][ T7077] futex_wake_op: syz.2.865 tries to shift op by 144; fix this program [ 293.052874][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 293.213058][ T7079] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.866'. [ 293.492938][ T28] audit: type=1400 audit(1782021677.193:627): avc: denied { kexec_image_load } for pid=7080 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 295.334438][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.873'. [ 296.001675][ T3298] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 296.098060][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 296.098091][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.098106][ T3298] Call Trace: [ 296.098112][ T3298] [ 296.098123][ T3298] __dump_stack+0x1d/0x30 [ 296.098151][ T3298] dump_stack_lvl+0x95/0xd0 [ 296.098172][ T3298] dump_stack+0x15/0x1b [ 296.098238][ T3298] dump_header+0x80/0x240 [ 296.098260][ T3298] oom_kill_process+0x295/0x350 [ 296.098341][ T3298] out_of_memory+0x981/0xbc0 [ 296.098381][ T3298] try_charge_memcg+0x621/0xa00 [ 296.098470][ T3298] charge_memcg+0x6d/0x120 [ 296.098510][ T3298] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 296.098557][ T3298] swap_cache_alloc_folio+0x47b/0x5e0 [ 296.098589][ T3298] swap_cluster_readahead+0x3d2/0x460 [ 296.098624][ T3298] swapin_readahead+0xd8/0x8a0 [ 296.098710][ T3298] ? hrtimer_start_range_ns+0xfd/0x120 [ 296.098748][ T3298] ? __rcu_read_unlock+0x4e/0x70 [ 296.098777][ T3298] ? swap_cache_get_folio+0x1f7/0x200 [ 296.098823][ T3298] do_swap_page+0x2a2/0x1ec0 [ 296.098856][ T3298] ? __schedule+0x799/0xd10 [ 296.098888][ T3298] ? __rcu_read_lock+0x36/0x50 [ 296.098912][ T3298] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 296.098961][ T3298] handle_mm_fault+0xb3c/0x2da0 [ 296.099004][ T3298] do_user_addr_fault+0x634/0x1060 [ 296.099049][ T3298] ? trace_page_fault_user+0x1f/0xa0 [ 296.099134][ T3298] exc_page_fault+0x62/0xa0 [ 296.099178][ T3298] asm_exc_page_fault+0x26/0x30 [ 296.099277][ T3298] RIP: 0033:0x7f6040e47fd7 [ 296.099293][ T3298] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 296.099313][ T3298] RSP: 002b:00007fffe9ea6460 EFLAGS: 00010202 [ 296.099378][ T3298] RAX: 0000000000000000 RBX: 0000555577cf5500 RCX: 00007f6040e47fd7 [ 296.099396][ T3298] RDX: 00007fffe9ea64a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.099423][ T3298] RBP: 00007fffe9ea650c R08: 0000000000000000 R09: 0000000000000000 [ 296.099458][ T3298] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 296.099470][ T3298] R13: 00000000000927c0 R14: 00000000000482c0 R15: 00007fffe9ea6560 [ 296.099490][ T3298] [ 296.100926][ T3298] memory: usage 307200kB, limit 307200kB, failcnt 6811 [ 296.360001][ T3298] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 296.368358][ T3298] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 296.375804][ T3298] Memory cgroup stats for /syz4: [ 296.376039][ T3298] cache 0 [ 296.431874][ T3298] rss 0 [ 296.434731][ T3298] shmem 0 [ 296.439300][ T3298] mapped_file 0 [ 296.442814][ T3298] dirty 0 [ 296.447824][ T3298] writeback 0 [ 296.454121][ T3298] workingset_refault_anon 826 [ 296.463060][ T3298] workingset_refault_file 4161 [ 296.473048][ T3298] swap 561152 [ 296.479363][ T3298] swapcached 5120000 [ 296.495001][ T3298] pgpgin 231107 [ 296.501213][ T3298] pgpgout 231106 [ 296.512306][ T3298] pgfault 217872 [ 296.515981][ T3298] pgmajfault 628 [ 296.519934][ T3298] inactive_anon 0 [ 296.523625][ T3298] active_anon 4096 [ 296.527560][ T3298] inactive_file 0 [ 296.531226][ T3298] active_file 0 [ 296.534753][ T3298] unevictable 0 [ 296.538503][ T3298] hierarchical_memory_limit 314572800 [ 296.543987][ T3298] hierarchical_memsw_limit 9223372036854771712 [ 296.551059][ T3298] total_cache 0 [ 296.554629][ T3298] total_rss 0 [ 296.558174][ T3298] total_shmem 0 [ 296.561783][ T3298] total_mapped_file 0 [ 296.565837][ T3298] total_dirty 0 [ 296.569601][ T3298] total_writeback 0 [ 296.573475][ T3298] total_workingset_refault_anon 826 [ 296.585920][ T3298] total_workingset_refault_file 4161 [ 296.591524][ T3298] total_swap 561152 [ 296.595383][ T3298] total_swapcached 5120000 [ 296.600164][ T3298] total_pgpgin 231107 [ 296.604910][ T3298] total_pgpgout 231106 [ 296.611450][ T3298] total_pgfault 217872 [ 296.616014][ T3298] total_pgmajfault 628 [ 296.622012][ T3298] total_inactive_anon 0 [ 296.679345][ T3298] total_active_anon 4096 [ 296.759992][ T3298] total_inactive_file 0 [ 296.775545][ T3298] total_active_file 0 [ 296.789666][ T3298] total_unevictable 0 [ 296.798155][ T3298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.876,pid=7112,uid=0 [ 296.842090][ T3298] Memory cgroup out of memory: Killed process 7112 (syz.4.876) total-vm:94168kB, anon-rss:1228kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 298.286591][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 298.688150][ T7131] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.881'. [ 299.333431][ T7141] syz.1.883 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 299.456551][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.1.883 Not tainted syzkaller #0 PREEMPT(lazy) [ 299.456661][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.456679][ T7141] Call Trace: [ 299.456686][ T7141] [ 299.456696][ T7141] __dump_stack+0x1d/0x30 [ 299.456726][ T7141] dump_stack_lvl+0x95/0xd0 [ 299.456747][ T7141] dump_stack+0x15/0x1b [ 299.456767][ T7141] dump_header+0x80/0x240 [ 299.456797][ T7141] oom_kill_process+0x295/0x350 [ 299.456842][ T7141] out_of_memory+0x981/0xbc0 [ 299.456881][ T7141] try_charge_memcg+0x621/0xa00 [ 299.456921][ T7141] ? __rcu_read_unlock+0x4e/0x70 [ 299.456962][ T7141] __memcg_kmem_charge_page+0x199/0x3a0 [ 299.457040][ T7141] __alloc_frozen_pages_noprof+0x18a/0x350 [ 299.457083][ T7141] alloc_pages_mpol+0xa9/0x1d0 [ 299.457125][ T7141] alloc_pages_noprof+0x8f/0x140 [ 299.457194][ T7141] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 299.457245][ T7141] __kvmalloc_node_noprof+0x3d4/0x640 [ 299.457281][ T7141] ? futex_hash_allocate+0x192/0x920 [ 299.457359][ T7141] ? futex_hash_allocate+0x192/0x920 [ 299.457380][ T7141] ? file_ioctl+0x14a/0x5b0 [ 299.457428][ T7141] futex_hash_allocate+0x192/0x920 [ 299.457516][ T7141] ? cap_task_prctl+0x13f/0x6b0 [ 299.457563][ T7141] futex_hash_prctl+0xd8/0xf0 [ 299.457590][ T7141] __se_sys_prctl+0x4f4/0x13b0 [ 299.457628][ T7141] __x64_sys_prctl+0x67/0x80 [ 299.457671][ T7141] x64_sys_call+0x2533/0x3020 [ 299.457703][ T7141] do_syscall_64+0x136/0x3c0 [ 299.457740][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.457795][ T7141] RIP: 0033:0x7f8c9898ce59 [ 299.457818][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.457844][ T7141] RSP: 002b:00007f8c973c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 299.457875][ T7141] RAX: ffffffffffffffda RBX: 00007f8c98c06090 RCX: 00007f8c9898ce59 [ 299.457896][ T7141] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 299.457912][ T7141] RBP: 00007f8c98a22e6f R08: 0000000000000000 R09: 0000000000000000 [ 299.457927][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.457997][ T7141] R13: 00007f8c98c06128 R14: 00007f8c98c06090 R15: 00007ffd155bbd18 [ 299.458025][ T7141] [ 299.691451][ T7141] memory: usage 297324kB, limit 307200kB, failcnt 913 [ 299.725052][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.878'. [ 299.764994][ T7141] memory+swap: usage 210092kB, limit 9007199254740988kB, failcnt 0 [ 299.813313][ T7141] kmem: usage 98820kB, limit 9007199254740988kB, failcnt 0 [ 299.825972][ T7161] IPVS: length: 24 != 185957657016 [ 299.866575][ T7141] Memory cgroup stats for /syz1: [ 299.866833][ T7141] cache 0 [ 299.910164][ T7141] rss 32768 [ 299.930562][ T7141] shmem 0 [ 299.944587][ T7141] mapped_file 0 [ 299.958020][ T7141] dirty 0 [ 299.986660][ T7141] writeback 0 [ 299.990050][ T7141] workingset_refault_anon 293 [ 300.001810][ T7141] workingset_refault_file 270 [ 300.019780][ T7141] swap 2527232 [ 300.029796][ T7141] swapcached 6705152 [ 300.042789][ T7141] pgpgin 230991 [ 300.050920][ T7141] pgpgout 230982 [ 300.060714][ T7141] pgfault 221764 [ 300.086678][ T7141] pgmajfault 217 [ 300.094958][ T7141] inactive_anon 32768 [ 300.105198][ T7141] active_anon 4096 [ 300.113533][ T7141] inactive_file 0 [ 300.123530][ T7141] active_file 0 [ 300.133674][ T7141] unevictable 0 [ 300.144848][ T7141] hierarchical_memory_limit 314572800 [ 300.162158][ T7141] hierarchical_memsw_limit 9223372036854771712 [ 300.175770][ T7141] total_cache 0 [ 300.188315][ T7141] total_rss 32768 [ 300.200837][ T7141] total_shmem 0 [ 300.208791][ T7141] total_mapped_file 0 [ 300.216718][ T7141] total_dirty 0 [ 300.223105][ T7141] total_writeback 0 [ 300.228810][ T7141] total_workingset_refault_anon 293 [ 300.236762][ T7141] total_workingset_refault_file 270 [ 300.248661][ T7141] total_swap 2527232 [ 300.254074][ T7141] total_swapcached 6705152 [ 300.265810][ T7141] total_pgpgin 230991 [ 300.282053][ T7141] total_pgpgout 230982 [ 300.300676][ T7141] total_pgfault 221764 [ 300.319049][ T7141] total_pgmajfault 217 [ 300.328921][ T7141] total_inactive_anon 32768 [ 300.340867][ T7141] total_active_anon 4096 [ 300.358000][ T7141] total_inactive_file 0 [ 300.366669][ T7141] total_active_file 0 [ 300.375684][ T7141] total_unevictable 0 [ 300.388165][ T7141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.883,pid=7136,uid=0 [ 300.431565][ T7141] Memory cgroup out of memory: Killed process 7141 (syz.1.883) total-vm:94300kB, anon-rss:1352kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 300.738495][ T7192] netlink: 6760 bytes leftover after parsing attributes in process `syz.4.897'. [ 301.182610][ T7175] syz.0.894 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 301.233800][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.0.894 Not tainted syzkaller #0 PREEMPT(lazy) [ 301.233835][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.233858][ T7175] Call Trace: [ 301.233867][ T7175] [ 301.233914][ T7175] __dump_stack+0x1d/0x30 [ 301.233943][ T7175] dump_stack_lvl+0x95/0xd0 [ 301.233990][ T7175] dump_stack+0x15/0x1b [ 301.234062][ T7175] dump_header+0x80/0x240 [ 301.234085][ T7175] oom_kill_process+0x295/0x350 [ 301.234122][ T7175] out_of_memory+0x981/0xbc0 [ 301.234228][ T7175] try_charge_memcg+0x621/0xa00 [ 301.234269][ T7175] charge_memcg+0x6d/0x120 [ 301.234300][ T7175] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 301.234370][ T7175] swap_cache_alloc_folio+0x47b/0x5e0 [ 301.234403][ T7175] swap_cluster_readahead+0x2b1/0x460 [ 301.234437][ T7175] swapin_readahead+0xd8/0x8a0 [ 301.234499][ T7175] ? _raw_spin_unlock+0x9/0x30 [ 301.234677][ T7175] ? swap_put_entries_cluster+0x49c/0x4c0 [ 301.234708][ T7175] ? __entry_text_end+0x10258/0x102179 [ 301.234738][ T7175] ? __rcu_read_unlock+0x4e/0x70 [ 301.234770][ T7175] ? swap_cache_get_folio+0x1f7/0x200 [ 301.234843][ T7175] do_swap_page+0x2a2/0x1ec0 [ 301.234882][ T7175] ? __css_rstat_updated+0xbb/0x280 [ 301.234918][ T7175] ? __rcu_read_lock+0x36/0x50 [ 301.234998][ T7175] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 301.235030][ T7175] handle_mm_fault+0xb3c/0x2da0 [ 301.235122][ T7175] do_user_addr_fault+0x634/0x1060 [ 301.235176][ T7175] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 301.235259][ T7175] ? trace_page_fault_user+0x1f/0xa0 [ 301.235297][ T7175] exc_page_fault+0x62/0xa0 [ 301.235403][ T7175] asm_exc_page_fault+0x26/0x30 [ 301.235430][ T7175] RIP: 0033:0x7f227628d9c7 [ 301.235526][ T7175] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 e8 93 19 00 00 0f 1f 00 48 83 ec 10 48 63 d2 48 63 ff 45 31 c9 [ 301.235548][ T7175] RSP: 002b:00007fff17ad0ad8 EFLAGS: 00010206 [ 301.235565][ T7175] RAX: 0000000000000000 RBX: 00007f2276505fa0 RCX: 0000555570ab8808 [ 301.235581][ T7175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.235597][ T7175] RBP: 00007f2276507da0 R08: 0000000000000000 R09: 0000000000000000 [ 301.235614][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000049845 [ 301.235690][ T7175] R13: 00007f227650609c R14: 000000000004956f R15: 00007f2276506090 [ 301.235716][ T7175] [ 301.646795][ T7175] memory: usage 307200kB, limit 307200kB, failcnt 6289 [ 301.653847][ T7175] memory+swap: usage 307936kB, limit 9007199254740988kB, failcnt 0 [ 301.668025][ T7175] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 301.683360][ T7175] Memory cgroup stats for /syz0: [ 301.683600][ T7175] cache 0 [ 301.700722][ T7175] rss 0 [ 301.706694][ T7175] shmem 0 [ 301.712758][ T7175] mapped_file 0 [ 301.719313][ T7175] dirty 0 [ 301.725274][ T7175] writeback 0 [ 301.748484][ T7175] workingset_refault_anon 781 [ 301.762986][ T7175] workingset_refault_file 4094 [ 301.777703][ T7175] swap 753664 [ 301.786649][ T7175] swapcached 11911168 [ 301.792181][ T7175] pgpgin 323835 [ 301.800732][ T7175] pgpgout 323834 [ 301.805899][ T7175] pgfault 231929 [ 301.813392][ T7175] pgmajfault 605 [ 301.833145][ T7175] inactive_anon 0 [ 301.849553][ T7175] active_anon 4096 [ 301.861445][ T7175] inactive_file 0 [ 301.875772][ T7175] active_file 0 [ 301.891461][ T7175] unevictable 0 [ 301.905628][ T7175] hierarchical_memory_limit 314572800 [ 301.928225][ T7175] hierarchical_memsw_limit 9223372036854771712 [ 301.950967][ T7175] total_cache 0 [ 301.959602][ T7175] total_rss 0 [ 301.970063][ T7175] total_shmem 0 [ 301.979134][ T7175] total_mapped_file 0 [ 301.988224][ T7175] total_dirty 0 [ 301.994726][ T7175] total_writeback 0 [ 302.006306][ T7175] total_workingset_refault_anon 781 [ 302.014786][ T7175] total_workingset_refault_file 4094 [ 302.029269][ T7175] total_swap 753664 [ 302.036349][ T7175] total_swapcached 11911168 [ 302.047103][ T7175] total_pgpgin 323835 [ 302.054140][ T7175] total_pgpgout 323834 [ 302.063134][ T7175] total_pgfault 231929 [ 302.072014][ T7175] total_pgmajfault 605 [ 302.080974][ T7175] total_inactive_anon 0 [ 302.089802][ T7175] total_active_anon 4096 [ 302.098102][ T7175] total_inactive_file 0 [ 302.105962][ T7175] total_active_file 0 [ 302.114585][ T7175] total_unevictable 0 [ 302.123444][ T7175] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.894,pid=7175,uid=0 [ 302.153296][ T7175] Memory cgroup out of memory: Killed process 7175 (syz.0.894) total-vm:94168kB, anon-rss:1236kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 302.684612][ T7206] IPVS: length: 24 != 185957657016 [ 302.894272][ T7216] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.901'. [ 304.220829][ T7238] syz.3.913 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 304.276632][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.3.913 Not tainted syzkaller #0 PREEMPT(lazy) [ 304.276670][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.276687][ T7238] Call Trace: [ 304.276695][ T7238] [ 304.276754][ T7238] __dump_stack+0x1d/0x30 [ 304.276785][ T7238] dump_stack_lvl+0x95/0xd0 [ 304.276812][ T7238] dump_stack+0x15/0x1b [ 304.276831][ T7238] dump_header+0x80/0x240 [ 304.276856][ T7238] oom_kill_process+0x295/0x350 [ 304.276931][ T7238] out_of_memory+0x981/0xbc0 [ 304.276968][ T7238] try_charge_memcg+0x621/0xa00 [ 304.277096][ T7238] charge_memcg+0x6d/0x120 [ 304.277191][ T7238] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 304.277317][ T7238] swap_cache_alloc_folio+0x47b/0x5e0 [ 304.277356][ T7238] swap_cluster_readahead+0x2b1/0x460 [ 304.277401][ T7238] swapin_readahead+0xd8/0x8a0 [ 304.277438][ T7238] ? _raw_spin_unlock+0x9/0x30 [ 304.277530][ T7238] ? swap_put_entries_cluster+0x49c/0x4c0 [ 304.277575][ T7238] ? __rcu_read_unlock+0x4e/0x70 [ 304.277606][ T7238] ? swap_cache_get_folio+0x1f7/0x200 [ 304.277719][ T7238] do_swap_page+0x2a2/0x1ec0 [ 304.277755][ T7238] ? __css_rstat_updated+0xbb/0x280 [ 304.277791][ T7238] ? __rcu_read_lock+0x36/0x50 [ 304.277824][ T7238] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 304.277858][ T7238] handle_mm_fault+0xb3c/0x2da0 [ 304.277914][ T7238] do_user_addr_fault+0x634/0x1060 [ 304.277952][ T7238] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 304.278010][ T7238] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 304.278049][ T7238] ? trace_page_fault_user+0x1f/0xa0 [ 304.278121][ T7238] exc_page_fault+0x62/0xa0 [ 304.278165][ T7238] asm_exc_page_fault+0x26/0x30 [ 304.278193][ T7238] RIP: 0033:0x7f04671ca80c [ 304.278214][ T7238] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 304.278256][ T7238] RSP: 002b:00007fff4804e910 EFLAGS: 00010202 [ 304.278278][ T7238] RAX: 0000000000000000 RBX: 00007f0467575fa0 RCX: 000055558efe0808 [ 304.278295][ T7238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.278312][ T7238] RBP: 00007f0467577da0 R08: 0000000000000000 R09: 0000000000000000 [ 304.278329][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004a654 [ 304.278347][ T7238] R13: 00007f046757609c R14: 000000000004a37e R15: 00007f0467576090 [ 304.278366][ T7238] [ 304.279819][ T7238] memory: usage 307200kB, limit 307200kB, failcnt 2171 [ 304.523014][ T7238] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 304.531198][ T7238] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 304.539447][ T7238] Memory cgroup stats for /syz3: [ 304.539954][ T7238] cache 0 [ 304.548142][ T7238] rss 0 [ 304.551031][ T7238] shmem 0 [ 304.554008][ T7238] mapped_file 0 [ 304.558589][ T7238] dirty 0 [ 304.561655][ T7238] writeback 0 [ 304.564984][ T7238] workingset_refault_anon 733 [ 304.570493][ T7238] workingset_refault_file 1869 [ 304.575389][ T7238] swap 540672 [ 304.578917][ T7238] swapcached 5554176 [ 304.582878][ T7238] pgpgin 243110 [ 304.586402][ T7238] pgpgout 243107 [ 304.590299][ T7238] pgfault 209456 [ 304.593969][ T7238] pgmajfault 525 [ 304.598162][ T7238] inactive_anon 8192 [ 304.602270][ T7238] active_anon 4096 [ 304.606020][ T7238] inactive_file 0 [ 304.610183][ T7238] active_file 0 [ 304.613745][ T7238] unevictable 0 [ 304.617535][ T7238] hierarchical_memory_limit 314572800 [ 304.622943][ T7238] hierarchical_memsw_limit 9223372036854771712 [ 304.651769][ T7238] total_cache 0 [ 304.665091][ T7238] total_rss 0 [ 304.681190][ T7238] total_shmem 0 [ 304.694786][ T7238] total_mapped_file 0 [ 304.720002][ T7238] total_dirty 0 [ 304.820634][ T7238] total_writeback 0 [ 304.846048][ T7238] total_workingset_refault_anon 733 [ 304.883071][ T7238] total_workingset_refault_file 1869 [ 304.917753][ T7238] total_swap 540672 [ 304.939445][ T7238] total_swapcached 5554176 [ 304.970394][ T7238] total_pgpgin 243110 [ 304.993623][ T7238] total_pgpgout 243107 [ 305.179047][ T7238] total_pgfault 209456 [ 305.192244][ T7238] total_pgmajfault 525 [ 305.205316][ T7238] total_inactive_anon 8192 [ 305.222454][ T7238] total_active_anon 4096 [ 305.232381][ T7238] total_inactive_file 0 [ 305.245955][ T7238] total_active_file 0 [ 305.258767][ T7238] total_unevictable 0 [ 305.272370][ T7238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.913,pid=7238,uid=0 [ 305.311236][ T7238] Memory cgroup out of memory: Killed process 7238 (syz.3.913) total-vm:94168kB, anon-rss:1232kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 305.612360][ T3302] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 305.652395][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 305.652427][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.652444][ T3302] Call Trace: [ 305.652452][ T3302] [ 305.652461][ T3302] __dump_stack+0x1d/0x30 [ 305.652485][ T3302] dump_stack_lvl+0x95/0xd0 [ 305.652506][ T3302] dump_stack+0x15/0x1b [ 305.652524][ T3302] dump_header+0x80/0x240 [ 305.652551][ T3302] oom_kill_process+0x295/0x350 [ 305.652585][ T3302] out_of_memory+0x981/0xbc0 [ 305.652622][ T3302] try_charge_memcg+0x621/0xa00 [ 305.652669][ T3302] __memcg_kmem_charge_page+0x199/0x3a0 [ 305.652699][ T3302] __alloc_frozen_pages_noprof+0x18a/0x350 [ 305.652730][ T3302] alloc_pages_mpol+0xa9/0x1d0 [ 305.652766][ T3302] alloc_pages_noprof+0x8f/0x140 [ 305.652801][ T3302] pte_alloc_one+0x1c/0xc0 [ 305.652836][ T3302] __pte_alloc+0x32/0x2a0 [ 305.652857][ T3302] ? percpu_counter_add_batch+0x117/0x120 [ 305.652888][ T3302] copy_page_range+0x2d0f/0x3400 [ 305.652941][ T3302] dup_mmap+0x870/0x10b0 [ 305.652972][ T3302] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 305.653002][ T3302] ? __list_add_valid_or_report+0x38/0xe0 [ 305.653049][ T3302] copy_mm+0xfa/0x340 [ 305.653069][ T3302] copy_process+0x10cd/0x2350 [ 305.653097][ T3302] kernel_clone+0x1c0/0x5f0 [ 305.653122][ T3302] __x64_sys_clone+0x143/0x180 [ 305.653151][ T3302] x64_sys_call+0x1222/0x3020 [ 305.653174][ T3302] do_syscall_64+0x136/0x3c0 [ 305.653205][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.653233][ T3302] RIP: 0033:0x7f04673258d2 [ 305.653252][ T3302] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 305.653273][ T3302] RSP: 002b:00007fff4804e9c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 305.653293][ T3302] RAX: ffffffffffffffda RBX: 00007fff4804e9c0 RCX: 00007f04673258d2 [ 305.653307][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 305.653331][ T3302] RBP: 00007fff4804eb4c R08: 0000000000000000 R09: 0000000000000001 [ 305.653347][ T3302] R10: 000055558efe07d0 R11: 0000000000000246 R12: 0000000000000000 [ 305.653364][ T3302] R13: 00000000000927c0 R14: 000000000004a352 R15: 00007fff4804eba0 [ 305.653388][ T3302] [ 305.653397][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 2406 [ 306.319368][ T3302] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 306.338031][ T3302] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 306.349508][ T3302] Memory cgroup stats for /syz3: [ 306.349663][ T3302] cache 0 [ 306.369354][ T3302] rss 0 [ 306.372230][ T3302] shmem 0 [ 306.378218][ T3302] mapped_file 0 [ 306.386060][ T3302] dirty 0 [ 306.394680][ T3302] writeback 0 [ 306.402849][ T3302] workingset_refault_anon 746 [ 306.418010][ T3302] workingset_refault_file 1869 [ 306.422830][ T3302] swap 405504 [ 306.426134][ T3302] swapcached 5595136 [ 306.438027][ T3302] pgpgin 243123 [ 306.441591][ T3302] pgpgout 243123 [ 306.453150][ T3302] pgfault 209476 [ 306.456901][ T3302] pgmajfault 538 [ 306.464639][ T3302] inactive_anon 0 [ 306.471506][ T3302] active_anon 0 [ 306.486605][ T3302] inactive_file 0 [ 306.490389][ T3302] active_file 0 [ 306.493871][ T3302] unevictable 0 [ 306.507613][ T3302] hierarchical_memory_limit 314572800 [ 306.519221][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 306.533661][ T3302] total_cache 0 [ 306.537440][ T3302] total_rss 0 [ 306.631632][ T3302] total_shmem 0 [ 306.635242][ T3302] total_mapped_file 0 [ 306.639441][ T3302] total_dirty 0 [ 306.643000][ T3302] total_writeback 0 [ 306.655340][ T3302] total_workingset_refault_anon 746 [ 306.660983][ T3302] total_workingset_refault_file 1869 [ 306.667338][ T3302] total_swap 405504 [ 306.674157][ T3302] total_swapcached 5595136 [ 306.686030][ T3302] total_pgpgin 243123 [ 306.697414][ T3302] total_pgpgout 243123 [ 306.707447][ T3302] total_pgfault 209476 [ 306.719738][ T3302] total_pgmajfault 538 [ 306.746289][ T3302] total_inactive_anon 0 [ 306.755739][ T3302] total_active_anon 0 [ 306.766939][ T3302] total_inactive_file 0 [ 306.788081][ T3302] total_active_file 0 [ 306.793531][ T3302] total_unevictable 0 [ 306.797630][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.526,pid=5829,uid=0 [ 306.831673][ T3302] Memory cgroup out of memory: Killed process 5829 (syz.3.526) total-vm:94036kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 307.450362][ T3296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 307.501403][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 307.501436][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.501449][ T3296] Call Trace: [ 307.501455][ T3296] [ 307.501463][ T3296] __dump_stack+0x1d/0x30 [ 307.501490][ T3296] dump_stack_lvl+0x95/0xd0 [ 307.501571][ T3296] dump_stack+0x15/0x1b [ 307.501594][ T3296] dump_header+0x80/0x240 [ 307.501620][ T3296] oom_kill_process+0x295/0x350 [ 307.501662][ T3296] out_of_memory+0x981/0xbc0 [ 307.501763][ T3296] try_charge_memcg+0x621/0xa00 [ 307.501822][ T3296] charge_memcg+0x6d/0x120 [ 307.501857][ T3296] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 307.501955][ T3296] swap_cache_alloc_folio+0x47b/0x5e0 [ 307.501998][ T3296] swap_cluster_readahead+0x2b1/0x460 [ 307.502041][ T3296] swapin_readahead+0xd8/0x8a0 [ 307.502091][ T3296] ? __pfx_lapic_next_event+0x10/0x10 [ 307.502128][ T3296] ? __rcu_read_unlock+0x4e/0x70 [ 307.502159][ T3296] ? swap_cache_get_folio+0x1f7/0x200 [ 307.502203][ T3296] do_swap_page+0x2a2/0x1ec0 [ 307.502231][ T3296] ? __schedule+0x799/0xd10 [ 307.502341][ T3296] ? __rcu_read_lock+0x36/0x50 [ 307.502444][ T3296] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 307.502499][ T3296] handle_mm_fault+0xb3c/0x2da0 [ 307.502551][ T3296] do_user_addr_fault+0x634/0x1060 [ 307.502582][ T3296] ? trace_page_fault_user+0x1f/0xa0 [ 307.502659][ T3296] exc_page_fault+0x62/0xa0 [ 307.502707][ T3296] asm_exc_page_fault+0x26/0x30 [ 307.502733][ T3296] RIP: 0033:0x7f8c98947fd7 [ 307.502749][ T3296] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 307.502767][ T3296] RSP: 002b:00007ffd155bc010 EFLAGS: 00010202 [ 307.502787][ T3296] RAX: 0000000000000000 RBX: 000055558bca7500 RCX: 00007f8c98947fd7 [ 307.502805][ T3296] RDX: 00007ffd155bc050 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.502859][ T3296] RBP: 00007ffd155bc0bc R08: 0000000000000000 R09: 0000000000000000 [ 307.502871][ T3296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 307.502888][ T3296] R13: 00000000000927c0 R14: 000000000004af0d R15: 00007ffd155bc110 [ 307.502914][ T3296] [ 307.504679][ T3296] memory: usage 307200kB, limit 307200kB, failcnt 3331 [ 307.731808][ T3296] memory+swap: usage 309708kB, limit 9007199254740988kB, failcnt 0 [ 307.763064][ T3296] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 307.775980][ T3296] Memory cgroup stats for /syz1: [ 307.776289][ T3296] cache 0 [ 307.794870][ T3296] rss 0 [ 307.801325][ T3296] shmem 0 [ 307.808871][ T3296] mapped_file 0 [ 307.824811][ T3296] dirty 0 [ 307.832374][ T3296] writeback 0 [ 307.840745][ T3296] workingset_refault_anon 494 [ 307.852452][ T3296] workingset_refault_file 270 [ 307.861992][ T3296] swap 2572288 [ 307.871187][ T3296] swapcached 7708672 [ 307.887385][ T3296] pgpgin 239101 [ 307.894484][ T3296] pgpgout 239101 [ 307.910039][ T3296] pgfault 225521 [ 307.914416][ T3296] pgmajfault 338 [ 307.924091][ T3296] inactive_anon 0 [ 307.940749][ T3296] active_anon 0 [ 307.956052][ T3296] inactive_file 0 [ 307.970619][ T3296] active_file 0 [ 307.982405][ T3296] unevictable 0 [ 307.984245][ T7287] netlink: 6760 bytes leftover after parsing attributes in process `syz.2.924'. [ 307.995634][ T3296] hierarchical_memory_limit 314572800 [ 307.995649][ T3296] hierarchical_memsw_limit 9223372036854771712 [ 307.995662][ T3296] total_cache 0 [ 307.995672][ T3296] total_rss 0 [ 307.995682][ T3296] total_shmem 0 [ 307.995738][ T3296] total_mapped_file 0 [ 307.995749][ T3296] total_dirty 0 [ 307.995759][ T3296] total_writeback 0 [ 307.995769][ T3296] total_workingset_refault_anon 494 [ 307.995781][ T3296] total_workingset_refault_file 270 [ 307.995793][ T3296] total_swap 2572288 [ 307.995803][ T3296] total_swapcached 7708672 [ 307.995813][ T3296] total_pgpgin 239101 [ 307.995824][ T3296] total_pgpgout 239101 [ 307.995834][ T3296] total_pgfault 225521 [ 307.995844][ T3296] total_pgmajfault 338 [ 307.995930][ T3296] total_inactive_anon 0 [ 307.995942][ T3296] total_active_anon 0 [ 307.995952][ T3296] total_inactive_file 0 [ 307.995962][ T3296] total_active_file 0 [ 307.995973][ T3296] total_unevictable 0 [ 307.995983][ T3296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.921,pid=7265,uid=0 [ 308.145259][ T3296] Memory cgroup out of memory: Killed process 7265 (syz.1.921) total-vm:98536kB, anon-rss:1228kB, file-rss:26448kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 308.299047][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 308.379824][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 308.379860][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.379878][ T3302] Call Trace: [ 308.379886][ T3302] [ 308.379895][ T3302] __dump_stack+0x1d/0x30 [ 308.379995][ T3302] dump_stack_lvl+0x95/0xd0 [ 308.380024][ T3302] dump_stack+0x15/0x1b [ 308.380048][ T3302] dump_header+0x80/0x240 [ 308.380077][ T3302] oom_kill_process+0x295/0x350 [ 308.380192][ T3302] out_of_memory+0x981/0xbc0 [ 308.380293][ T3302] try_charge_memcg+0x621/0xa00 [ 308.380345][ T3302] charge_memcg+0x6d/0x120 [ 308.380386][ T3302] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 308.380462][ T3302] swap_cache_alloc_folio+0x47b/0x5e0 [ 308.380501][ T3302] swap_cluster_readahead+0x3d2/0x460 [ 308.380548][ T3302] swapin_readahead+0xd8/0x8a0 [ 308.380648][ T3302] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 308.380684][ T3302] ? hrtimer_start_range_ns+0x108/0x120 [ 308.380767][ T3302] ? __rcu_read_unlock+0x4e/0x70 [ 308.380793][ T3302] ? swap_cache_get_folio+0x1f7/0x200 [ 308.380849][ T3302] do_swap_page+0x2a2/0x1ec0 [ 308.380883][ T3302] ? __schedule+0x799/0xd10 [ 308.380966][ T3302] ? __rcu_read_lock+0x36/0x50 [ 308.381001][ T3302] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 308.381034][ T3302] handle_mm_fault+0xb3c/0x2da0 [ 308.381078][ T3302] do_user_addr_fault+0x634/0x1060 [ 308.381141][ T3302] ? trace_page_fault_user+0x1f/0xa0 [ 308.381195][ T3302] exc_page_fault+0x62/0xa0 [ 308.381230][ T3302] asm_exc_page_fault+0x26/0x30 [ 308.381257][ T3302] RIP: 0033:0x7f04672b7fd7 [ 308.381278][ T3302] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 308.381350][ T3302] RSP: 002b:00007fff4804eaa0 EFLAGS: 00010202 [ 308.381370][ T3302] RAX: 0000000000000000 RBX: 000055558efe0500 RCX: 00007f04672b7fd7 [ 308.381388][ T3302] RDX: 00007fff4804eae0 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.381401][ T3302] RBP: 00007fff4804eb4c R08: 0000000000000000 R09: 0000000000000000 [ 308.381414][ T3302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 308.381427][ T3302] R13: 00000000000927c0 R14: 000000000004b067 R15: 00007fff4804eba0 [ 308.381447][ T3302] [ 308.666792][ T3302] memory: usage 60628kB, limit 307200kB, failcnt 2720 [ 308.673887][ T3302] memory+swap: usage 60940kB, limit 9007199254740988kB, failcnt 0 [ 308.686886][ T3302] kmem: usage 46236kB, limit 9007199254740988kB, failcnt 0 [ 308.714564][ T3302] Memory cgroup stats for /syz3: [ 308.714837][ T3302] cache 0 [ 308.798673][ T3302] rss 73728 [ 308.825653][ T3302] shmem 0 [ 308.839355][ T3302] mapped_file 0 [ 308.868216][ T3302] dirty 0 [ 308.889981][ T3302] writeback 0 [ 308.903323][ T3302] workingset_refault_anon 990 [ 308.920021][ T3302] workingset_refault_file 1869 [ 308.932638][ T3302] swap 307200 [ 308.943345][ T3302] swapcached 6770688 [ 308.956559][ T3302] pgpgin 243669 [ 308.960109][ T3302] pgpgout 243645 [ 308.963716][ T3302] pgfault 209813 [ 308.967922][ T3302] pgmajfault 722 [ 308.973443][ T3302] inactive_anon 90112 [ 308.977799][ T3302] active_anon 0 [ 308.980966][ T7299] netlink: 6760 bytes leftover after parsing attributes in process `syz.2.927'. [ 308.981503][ T3302] inactive_file 0 [ 308.981515][ T3302] active_file 0 [ 308.981526][ T3302] unevictable 0 [ 308.981536][ T3302] hierarchical_memory_limit 314572800 [ 308.981548][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 308.981613][ T3302] total_cache 0 [ 308.981623][ T3302] total_rss 73728 [ 308.981632][ T3302] total_shmem 0 [ 308.981669][ T3302] total_mapped_file 0 [ 308.981680][ T3302] total_dirty 0 [ 308.981690][ T3302] total_writeback 0 [ 308.981701][ T3302] total_workingset_refault_anon 990 [ 308.981713][ T3302] total_workingset_refault_file 1869 [ 308.981724][ T3302] total_swap 307200 [ 308.981734][ T3302] total_swapcached 6770688 [ 308.981745][ T3302] total_pgpgin 243669 [ 308.981755][ T3302] total_pgpgout 243645 [ 308.981765][ T3302] total_pgfault 209813 [ 308.981775][ T3302] total_pgmajfault 722 [ 308.981851][ T3302] total_inactive_anon 90112 [ 308.981862][ T3302] total_active_anon 0 [ 308.981872][ T3302] total_inactive_file 0 [ 308.981928][ T3302] total_active_file 0 [ 308.981940][ T3302] total_unevictable 0 [ 308.981951][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.919,pid=7273,uid=0 [ 308.982107][ T3302] Memory cgroup out of memory: OOM victim 7273 (syz.3.919) is already exiting. Skip killing the task [ 309.922214][ T7307] syz.1.925 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 310.128591][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.1.925 Not tainted syzkaller #0 PREEMPT(lazy) [ 310.128630][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.128648][ T7307] Call Trace: [ 310.128657][ T7307] [ 310.128667][ T7307] __dump_stack+0x1d/0x30 [ 310.128699][ T7307] dump_stack_lvl+0x95/0xd0 [ 310.128732][ T7307] dump_stack+0x15/0x1b [ 310.128768][ T7307] dump_header+0x80/0x240 [ 310.128836][ T7307] oom_kill_process+0x295/0x350 [ 310.128875][ T7307] out_of_memory+0x981/0xbc0 [ 310.128947][ T7307] try_charge_memcg+0x621/0xa00 [ 310.129057][ T7307] __memcg_kmem_charge_page+0x199/0x3a0 [ 310.129087][ T7307] __alloc_frozen_pages_noprof+0x18a/0x350 [ 310.129180][ T7307] alloc_pages_bulk_noprof+0x4c3/0x550 [ 310.129206][ T7307] ? policy_nodemask+0x417/0x5e0 [ 310.129238][ T7307] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 310.129335][ T7307] ? alloc_pages_mpol+0xd9/0x1d0 [ 310.129378][ T7307] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 310.129428][ T7307] __kvmalloc_node_noprof+0x3d4/0x640 [ 310.129570][ T7307] ? futex_hash_allocate+0x192/0x920 [ 310.129590][ T7307] ? futex_hash_allocate+0x192/0x920 [ 310.129677][ T7307] ? file_ioctl+0x14a/0x5b0 [ 310.129720][ T7307] futex_hash_allocate+0x192/0x920 [ 310.129749][ T7307] ? cap_task_prctl+0x13f/0x6b0 [ 310.129795][ T7307] futex_hash_prctl+0xd8/0xf0 [ 310.129817][ T7307] __se_sys_prctl+0x4f4/0x13b0 [ 310.129854][ T7307] __x64_sys_prctl+0x67/0x80 [ 310.129888][ T7307] x64_sys_call+0x2533/0x3020 [ 310.129919][ T7307] do_syscall_64+0x136/0x3c0 [ 310.130013][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.130111][ T7307] RIP: 0033:0x7f8c9898ce59 [ 310.130132][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.130157][ T7307] RSP: 002b:00007f8c973c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 310.130184][ T7307] RAX: ffffffffffffffda RBX: 00007f8c98c06090 RCX: 00007f8c9898ce59 [ 310.130200][ T7307] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 310.130238][ T7307] RBP: 00007f8c98a22e6f R08: 0000000000000000 R09: 0000000000000000 [ 310.130251][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.130265][ T7307] R13: 00007f8c98c06128 R14: 00007f8c98c06090 R15: 00007ffd155bbd18 [ 310.130291][ T7307] [ 310.130439][ T7307] memory: usage 307200kB, limit 307200kB, failcnt 3811 [ 310.281567][ T28] audit: type=1400 audit(1782021693.003:628): avc: denied { getopt } for pid=7300 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.329300][ T7307] memory+swap: usage 309472kB, limit 9007199254740988kB, failcnt 0 [ 310.398698][ T7307] kmem: usage 306976kB, limit 9007199254740988kB, failcnt 0 [ 310.406022][ T7307] Memory cgroup stats for /syz1: [ 310.406257][ T7307] cache 0 [ 310.414464][ T7307] rss 0 [ 310.433397][ T7307] shmem 0 [ 310.444414][ T7307] mapped_file 0 [ 310.448247][ T7307] dirty 0 [ 310.451241][ T7307] writeback 0 [ 310.454575][ T7307] workingset_refault_anon 808 [ 310.459653][ T7307] workingset_refault_file 270 [ 310.464424][ T7307] swap 2551808 [ 310.468072][ T7307] swapcached 9138176 [ 310.472129][ T7307] pgpgin 239695 [ 310.475634][ T7307] pgpgout 239694 [ 310.479594][ T7307] pgfault 225930 [ 310.483196][ T7307] pgmajfault 541 [ 310.486954][ T7307] inactive_anon 0 [ 310.490684][ T7307] active_anon 4096 [ 310.494472][ T7307] inactive_file 0 [ 310.498405][ T7307] active_file 0 [ 310.501993][ T7307] unevictable 0 [ 310.505566][ T7307] hierarchical_memory_limit 314572800 [ 310.513102][ T7307] hierarchical_memsw_limit 9223372036854771712 [ 310.519518][ T7307] total_cache 0 [ 310.523128][ T7307] total_rss 0 [ 310.526438][ T7307] total_shmem 0 [ 310.530175][ T7307] total_mapped_file 0 [ 310.534268][ T7307] total_dirty 0 [ 310.537983][ T7307] total_writeback 0 [ 310.541955][ T7307] total_workingset_refault_anon 808 [ 310.549466][ T7307] total_workingset_refault_file 270 [ 310.556631][ T7307] total_swap 2551808 [ 310.562625][ T7307] total_swapcached 9138176 [ 310.573475][ T7307] total_pgpgin 239695 [ 310.578904][ T7307] total_pgpgout 239694 [ 310.583549][ T7307] total_pgfault 225930 [ 310.588444][ T7307] total_pgmajfault 541 [ 310.595432][ T7307] total_inactive_anon 0 [ 310.600144][ T7307] total_active_anon 4096 [ 310.604477][ T7307] total_inactive_file 0 [ 310.608922][ T7307] total_active_file 0 [ 310.612970][ T7307] total_unevictable 0 [ 310.630391][ T7307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.925,pid=7291,uid=0 [ 310.645530][ T7307] Memory cgroup out of memory: Killed process 7291 (syz.1.925) total-vm:94168kB, anon-rss:1228kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 311.391067][ T7323] netlink: 168 bytes leftover after parsing attributes in process `syz.4.937'. [ 311.457989][ T28] audit: type=1400 audit(1782021695.163:629): avc: denied { mount } for pid=7314 comm="syz.0.934" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 311.483366][ T28] audit: type=1400 audit(1782021695.183:630): avc: denied { unmount } for pid=7314 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 313.451862][ T7364] netlink: 68 bytes leftover after parsing attributes in process `syz.3.946'. [ 313.490146][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 315.712527][ T7376] netlink: 4116 bytes leftover after parsing attributes in process `syz.3.949'. [ 316.927515][ T28] audit: type=1400 audit(1782021700.623:631): avc: denied { create } for pid=7393 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 316.996763][ T28] audit: type=1400 audit(1782021700.693:632): avc: denied { search } for pid=7393 comm="syz.3.954" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 317.263059][ T7374] netlink: 32 bytes leftover after parsing attributes in process `syz.4.948'. [ 317.584614][ T28] audit: type=1400 audit(1782021701.273:633): avc: denied { mount } for pid=7407 comm="syz.4.958" name="/" dev="autofs" ino=16204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 317.744757][ T28] audit: type=1400 audit(1782021701.443:634): avc: denied { write } for pid=7417 comm="syz.4.961" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.781472][ T7416] sctp: [Deprecated]: syz.1.960 (pid 7416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.781472][ T7416] Use struct sctp_sack_info instead [ 317.829566][ T28] audit: type=1400 audit(1782021701.513:635): avc: denied { write } for pid=7417 comm="syz.4.961" path="socket:[16224]" dev="sockfs" ino=16224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 317.835747][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 318.125954][ T7404] syz.0.957 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 318.239831][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.0.957 Not tainted syzkaller #0 PREEMPT(lazy) [ 318.239930][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.239975][ T7404] Call Trace: [ 318.239984][ T7404] [ 318.239992][ T7404] __dump_stack+0x1d/0x30 [ 318.240024][ T7404] dump_stack_lvl+0x95/0xd0 [ 318.240048][ T7404] dump_stack+0x15/0x1b [ 318.240081][ T7404] dump_header+0x80/0x240 [ 318.240113][ T7404] oom_kill_process+0x295/0x350 [ 318.240153][ T7404] out_of_memory+0x981/0xbc0 [ 318.240231][ T7404] try_charge_memcg+0x621/0xa00 [ 318.240365][ T7404] ? __rcu_read_unlock+0x4e/0x70 [ 318.240406][ T7404] __memcg_kmem_charge_page+0x199/0x3a0 [ 318.240444][ T7404] __alloc_frozen_pages_noprof+0x18a/0x350 [ 318.240541][ T7404] alloc_pages_mpol+0xa9/0x1d0 [ 318.240582][ T7404] alloc_pages_noprof+0x8f/0x140 [ 318.240618][ T7404] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 318.240701][ T7404] __kvmalloc_node_noprof+0x3d4/0x640 [ 318.240735][ T7404] ? futex_hash_allocate+0x192/0x920 [ 318.240805][ T7404] ? futex_hash_allocate+0x192/0x920 [ 318.240824][ T7404] ? file_ioctl+0x14a/0x5b0 [ 318.240871][ T7404] futex_hash_allocate+0x192/0x920 [ 318.240931][ T7404] ? cap_task_prctl+0x13f/0x6b0 [ 318.240990][ T7404] futex_hash_prctl+0xd8/0xf0 [ 318.241010][ T7404] __se_sys_prctl+0x4f4/0x13b0 [ 318.241061][ T7404] __x64_sys_prctl+0x67/0x80 [ 318.241095][ T7404] x64_sys_call+0x2533/0x3020 [ 318.241122][ T7404] do_syscall_64+0x136/0x3c0 [ 318.241190][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.241243][ T7404] RIP: 0033:0x7f227628ce59 [ 318.241281][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.241300][ T7404] RSP: 002b:00007f2274cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 318.241398][ T7404] RAX: ffffffffffffffda RBX: 00007f2276506090 RCX: 00007f227628ce59 [ 318.241418][ T7404] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 318.241436][ T7404] RBP: 00007f2276322e6f R08: 0000000000000000 R09: 0000000000000000 [ 318.241453][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.241469][ T7404] R13: 00007f2276506128 R14: 00007f2276506090 R15: 00007fff17ad0978 [ 318.241493][ T7404] [ 318.244201][ T7404] memory: usage 307200kB, limit 307200kB, failcnt 7910 [ 318.690667][ T7404] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0 [ 318.711928][ T7404] kmem: usage 293900kB, limit 9007199254740988kB, failcnt 0 [ 318.762042][ T7404] Memory cgroup stats for /syz0: [ 318.762906][ T7404] cache 16384 [ 318.933099][ T7404] rss 0 [ 319.418765][ T7404] shmem 0 [ 319.433392][ T7404] mapped_file 0 [ 319.445847][ T7404] dirty 0 [ 319.455091][ T7404] writeback 0 [ 319.462771][ T7404] workingset_refault_anon 1428 [ 319.477005][ T7404] workingset_refault_file 5124 [ 319.492225][ T7404] swap 778240 [ 319.568709][ T7404] swapcached 14721024 [ 319.585938][ T7404] pgpgin 343168 [ 319.600571][ T7404] pgpgout 343164 [ 319.615063][ T7404] pgfault 245649 [ 319.628028][ T7404] pgmajfault 1118 [ 319.643702][ T7404] inactive_anon 0 [ 319.656633][ T7404] active_anon 0 [ 319.663795][ T7439] netlink: 4116 bytes leftover after parsing attributes in process `syz.1.967'. [ 319.686796][ T7404] inactive_file 0 [ 319.696981][ T7404] active_file 8192 [ 319.703311][ T7404] unevictable 0 [ 319.716940][ T7404] hierarchical_memory_limit 314572800 [ 319.737536][ T7404] hierarchical_memsw_limit 9223372036854771712 [ 319.761690][ T7404] total_cache 16384 [ 319.780970][ T7404] total_rss 0 [ 319.793560][ T7404] total_shmem 0 [ 319.808082][ T7404] total_mapped_file 0 [ 319.821046][ T7404] total_dirty 0 [ 319.831898][ T7404] total_writeback 0 [ 319.844538][ T7404] total_workingset_refault_anon 1428 [ 319.858969][ T7404] total_workingset_refault_file 5124 [ 319.875857][ T7404] total_swap 778240 [ 319.890130][ T7404] total_swapcached 14721024 [ 319.909922][ T7404] total_pgpgin 343168 [ 319.949511][ T7404] total_pgpgout 343164 [ 319.958040][ T7404] total_pgfault 245649 [ 319.962378][ T28] audit: type=1400 audit(1782021703.663:636): avc: denied { ioctl } for pid=7442 comm="syz.1.968" path="socket:[16295]" dev="sockfs" ino=16295 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 319.976668][ T7404] total_pgmajfault 1118 [ 319.999720][ T7404] total_inactive_anon 0 [ 320.009740][ T7404] total_active_anon 0 [ 320.022758][ T7404] total_inactive_file 0 [ 320.035619][ T7404] total_active_file 8192 [ 320.050005][ T7404] total_unevictable 0 [ 320.064898][ T7404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.957,pid=7400,uid=0 [ 320.133763][ T7404] Memory cgroup out of memory: Killed process 7401 (syz.0.957) total-vm:94300kB, anon-rss:1244kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 321.421254][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.969'. [ 322.535458][ T7455] bond0: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 322.555158][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.002618][ T7503] futex_wake_op: syz.0.983 tries to shift op by 144; fix this program [ 324.169308][ T7505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'. [ 325.691472][ T28] audit: type=1400 audit(1782021709.393:637): avc: denied { accept } for pid=7512 comm="syz.2.996" lport=3618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 326.205896][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 326.205922][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 326.282713][ T7532] tipc: Started in network mode [ 326.297438][ T7532] tipc: Node identity 7f000001, cluster identity 4711 [ 326.297554][ T7532] tipc: Enabling of bearer rejected, failed to enable media [ 326.316772][ T7532] tipc: Enabling of bearer rejected, failed to enable media [ 326.352074][ T7530] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.990'. [ 326.662031][ T7518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.985'. [ 326.931758][ T28] audit: type=1400 audit(1782021710.593:638): avc: denied { connect } for pid=7545 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 326.951497][ T28] audit: type=1400 audit(1782021710.593:639): avc: denied { bind } for pid=7545 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 327.524628][ T7566] netlink: 6760 bytes leftover after parsing attributes in process `syz.3.1004'. [ 327.911910][ T7574] veth1_to_bond: entered allmulticast mode [ 328.908646][ T7572] veth1_to_bond: left allmulticast mode [ 329.042955][ T3304] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 329.094689][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 329.094719][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.094732][ T3304] Call Trace: [ 329.094741][ T3304] [ 329.094752][ T3304] __dump_stack+0x1d/0x30 [ 329.094783][ T3304] dump_stack_lvl+0x95/0xd0 [ 329.094810][ T3304] dump_stack+0x15/0x1b [ 329.094830][ T3304] dump_header+0x80/0x240 [ 329.094852][ T3304] oom_kill_process+0x295/0x350 [ 329.094884][ T3304] out_of_memory+0x981/0xbc0 [ 329.094931][ T3304] try_charge_memcg+0x621/0xa00 [ 329.094981][ T3304] __memcg_kmem_charge_page+0x199/0x3a0 [ 329.095016][ T3304] __alloc_frozen_pages_noprof+0x18a/0x350 [ 329.095046][ T3304] alloc_pages_mpol+0xa9/0x1d0 [ 329.095079][ T3304] alloc_pages_noprof+0x8f/0x140 [ 329.095116][ T3304] pte_alloc_one+0x1c/0xc0 [ 329.095149][ T3304] __pte_alloc+0x32/0x2a0 [ 329.095170][ T3304] ? percpu_counter_add_batch+0x117/0x120 [ 329.095199][ T3304] copy_page_range+0x2d0f/0x3400 [ 329.095249][ T3304] dup_mmap+0x870/0x10b0 [ 329.095281][ T3304] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 329.095315][ T3304] ? __list_add_valid_or_report+0x38/0xe0 [ 329.095372][ T3304] copy_mm+0xfa/0x340 [ 329.095405][ T3304] copy_process+0x10cd/0x2350 [ 329.095435][ T3304] kernel_clone+0x1c0/0x5f0 [ 329.095460][ T3304] __x64_sys_clone+0x143/0x180 [ 329.095497][ T3304] x64_sys_call+0x1222/0x3020 [ 329.095526][ T3304] do_syscall_64+0x136/0x3c0 [ 329.095555][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.095583][ T3304] RIP: 0033:0x7f6eb2c358d2 [ 329.095609][ T3304] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 329.095633][ T3304] RSP: 002b:00007ffdfbd1b190 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 329.095657][ T3304] RAX: ffffffffffffffda RBX: 00007ffdfbd1b190 RCX: 00007f6eb2c358d2 [ 329.095672][ T3304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 329.095687][ T3304] RBP: 00007ffdfbd1b31c R08: 0000000000000000 R09: 0000000000000001 [ 329.095704][ T3304] R10: 00005555615e27d0 R11: 0000000000000246 R12: 0000000000000000 [ 329.095721][ T3304] R13: 00000000000927c0 R14: 000000000004ffc1 R15: 00007ffdfbd1b370 [ 329.095745][ T3304] [ 329.095752][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 6216 [ 329.516589][ T3304] memory+swap: usage 25552kB, limit 9007199254740988kB, failcnt 0 [ 329.614749][ T3304] kmem: usage 1092kB, limit 9007199254740988kB, failcnt 0 [ 329.635064][ T3304] Memory cgroup stats for /syz2: [ 329.635232][ T3304] cache 0 [ 329.659561][ T3304] rss 0 [ 329.668557][ T3304] shmem 0 [ 329.677332][ T3304] mapped_file 0 [ 329.688082][ T3304] dirty 0 [ 329.696882][ T3304] writeback 0 [ 329.706028][ T3304] workingset_refault_anon 932 [ 329.721378][ T3304] workingset_refault_file 1589 [ 329.739494][ T3304] swap 995328 [ 329.749729][ T3304] swapcached 8994816 [ 329.759922][ T3304] pgpgin 274376 [ 329.770644][ T3304] pgpgout 274373 [ 329.812007][ T3304] pgfault 231958 [ 329.826464][ T3304] pgmajfault 672 [ 329.847968][ T3304] inactive_anon 12288 [ 329.858321][ T3304] active_anon 0 [ 329.861839][ T3304] inactive_file 0 [ 329.865493][ T3304] active_file 0 [ 329.869004][ T3304] unevictable 0 [ 329.872483][ T3304] hierarchical_memory_limit 314572800 [ 329.888473][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 329.953254][ T3304] total_cache 0 [ 329.956770][ T3304] total_rss 0 [ 329.960077][ T3304] total_shmem 0 [ 329.963553][ T3304] total_mapped_file 0 [ 329.967551][ T3304] total_dirty 0 [ 329.971028][ T3304] total_writeback 0 [ 329.974885][ T3304] total_workingset_refault_anon 932 [ 329.980125][ T3304] total_workingset_refault_file 1589 [ 329.985422][ T3304] total_swap 995328 [ 329.989252][ T3304] total_swapcached 8994816 [ 329.993681][ T3304] total_pgpgin 274376 [ 329.995491][ T7588] bridge0: port 3(gretap0) entered blocking state [ 330.017800][ T7588] bridge0: port 3(gretap0) entered disabled state [ 330.037270][ T7588] gretap0: entered allmulticast mode [ 330.046037][ T3304] total_pgpgout 274373 [ 330.050149][ T3304] total_pgfault 231958 [ 330.054233][ T3304] total_pgmajfault 672 [ 330.058317][ T3304] total_inactive_anon 12288 [ 330.062838][ T3304] total_active_anon 0 [ 330.065638][ T7588] gretap0: entered promiscuous mode [ 330.066836][ T3304] total_inactive_file 0 [ 330.066849][ T3304] total_active_file 0 [ 330.066858][ T3304] total_unevictable 0 [ 330.066869][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.978,pid=7484,uid=0 [ 330.066967][ T3304] Memory cgroup out of memory: Killed process 7484 (syz.2.978) total-vm:94300kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 330.165817][ T7588] bridge0: port 3(gretap0) entered blocking state [ 330.173799][ T7588] bridge0: port 3(gretap0) entered forwarding state [ 330.341611][ T7601] bridge0: port 3(gretap0) entered disabled state [ 330.364388][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.371661][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.999508][ T7601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 331.527606][ T7620] syz.1.1017 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 331.556575][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.1.1017 Not tainted syzkaller #0 PREEMPT(lazy) [ 331.556698][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.556716][ T7620] Call Trace: [ 331.556726][ T7620] [ 331.556736][ T7620] __dump_stack+0x1d/0x30 [ 331.556820][ T7620] dump_stack_lvl+0x95/0xd0 [ 331.556930][ T7620] dump_stack+0x15/0x1b [ 331.556958][ T7620] dump_header+0x80/0x240 [ 331.557051][ T7620] oom_kill_process+0x295/0x350 [ 331.557099][ T7620] out_of_memory+0x981/0xbc0 [ 331.557165][ T7620] try_charge_memcg+0x621/0xa00 [ 331.557211][ T7620] ? __rcu_read_unlock+0x4e/0x70 [ 331.557318][ T7620] __memcg_kmem_charge_page+0x199/0x3a0 [ 331.557398][ T7620] __alloc_frozen_pages_noprof+0x18a/0x350 [ 331.557441][ T7620] alloc_pages_mpol+0xa9/0x1d0 [ 331.557551][ T7620] alloc_pages_noprof+0x8f/0x140 [ 331.557626][ T7620] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 331.557710][ T7620] __kvmalloc_node_noprof+0x3d4/0x640 [ 331.557765][ T7620] ? futex_hash_allocate+0x192/0x920 [ 331.557793][ T7620] ? futex_hash_allocate+0x192/0x920 [ 331.557822][ T7620] futex_hash_allocate+0x192/0x920 [ 331.557849][ T7620] ? cap_task_prctl+0x13f/0x6b0 [ 331.557955][ T7620] futex_hash_prctl+0xd8/0xf0 [ 331.557981][ T7620] __se_sys_prctl+0x4f4/0x13b0 [ 331.558010][ T7620] __x64_sys_prctl+0x67/0x80 [ 331.558060][ T7620] x64_sys_call+0x2533/0x3020 [ 331.558093][ T7620] do_syscall_64+0x136/0x3c0 [ 331.558184][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.558234][ T7620] RIP: 0033:0x7f8c9898ce59 [ 331.558255][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.558277][ T7620] RSP: 002b:00007f8c973e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 331.558308][ T7620] RAX: ffffffffffffffda RBX: 00007f8c98c05fa0 RCX: 00007f8c9898ce59 [ 331.558329][ T7620] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 331.558389][ T7620] RBP: 00007f8c98a22e6f R08: 0000000000000000 R09: 0000000000000000 [ 331.558407][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.558424][ T7620] R13: 00007f8c98c06038 R14: 00007f8c98c05fa0 R15: 00007ffd155bbd18 [ 331.558448][ T7620] [ 331.558511][ T7620] memory: usage 307200kB, limit 307200kB, failcnt 4846 [ 331.603852][ T7632] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 331.723129][ T7620] memory+swap: usage 309488kB, limit 9007199254740988kB, failcnt 0 [ 331.827503][ T7620] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0 [ 331.835055][ T7620] Memory cgroup stats for /syz1: [ 331.835825][ T7620] cache 0 [ 331.864609][ T7620] rss 204800 [ 331.870758][ T7620] shmem 0 [ 331.872877][ T7637] netlink: 'syz.2.1020': attribute type 5 has an invalid length. [ 331.881926][ T7620] mapped_file 0 [ 331.885613][ T7620] dirty 0 [ 331.888834][ T7620] writeback 0 [ 331.892735][ T7620] workingset_refault_anon 1631 [ 331.902241][ T7636] bond0: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 331.907936][ T7620] workingset_refault_file 270 [ 331.912401][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.935935][ T7620] swap 2342912 [ 331.948911][ T7620] swapcached 12587008 [ 331.962905][ T7620] pgpgin 264346 [ 331.978557][ T7620] pgpgout 264296 [ 331.982305][ T7620] pgfault 247084 [ 331.985883][ T7620] pgmajfault 1131 [ 331.989673][ T7620] inactive_anon 131072 [ 331.994327][ T7620] active_anon 73728 [ 331.998436][ T7620] inactive_file 0 [ 332.002134][ T7620] active_file 0 [ 332.005673][ T7620] unevictable 0 [ 332.009383][ T7620] hierarchical_memory_limit 314572800 [ 332.014788][ T7620] hierarchical_memsw_limit 9223372036854771712 [ 332.021029][ T7620] total_cache 0 [ 332.024614][ T7620] total_rss 204800 [ 332.028572][ T7620] total_shmem 0 [ 332.032132][ T7620] total_mapped_file 0 [ 332.036276][ T7620] total_dirty 0 [ 332.039916][ T7620] total_writeback 0 [ 332.043763][ T7620] total_workingset_refault_anon 1631 [ 332.076634][ T7620] total_workingset_refault_file 270 [ 332.082356][ T7620] total_swap 2342912 [ 332.089714][ T7620] total_swapcached 12587008 [ 332.107745][ T7620] total_pgpgin 264346 [ 332.120421][ T7620] total_pgpgout 264296 [ 332.137090][ T7620] total_pgfault 247084 [ 332.151987][ T7620] total_pgmajfault 1131 [ 332.163632][ T7620] total_inactive_anon 131072 [ 332.179886][ T7620] total_active_anon 73728 [ 332.189003][ T7620] total_inactive_file 0 [ 332.203699][ T7620] total_active_file 0 [ 332.222286][ T7620] total_unevictable 0 [ 332.234884][ T7620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1017,pid=7617,uid=0 [ 332.291289][ T7620] Memory cgroup out of memory: Killed process 7620 (syz.1.1017) total-vm:96216kB, anon-rss:1416kB, file-rss:22268kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 332.310172][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 332.341231][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 335.849682][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 335.920035][ T28] audit: type=1400 audit(1782021719.623:640): avc: denied { read } for pid=3020 comm="dhcpcd" name="n31" dev="tmpfs" ino=4313 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.001538][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 336.010663][ T28] audit: type=1400 audit(1782021719.623:641): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4313 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.099363][ T7696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.110203][ T28] audit: type=1400 audit(1782021719.623:642): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4313 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.138461][ T7705] netlink: 'syz.3.1038': attribute type 5 has an invalid length. [ 336.156236][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 336.182887][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 336.191920][ T28] audit: type=1400 audit(1782021719.843:643): avc: denied { write } for pid=7698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.244432][ T28] audit: type=1400 audit(1782021719.843:644): avc: denied { create } for pid=7698 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.278512][ T7696] netlink: 'syz.1.1039': attribute type 10 has an invalid length. [ 336.312301][ T28] audit: type=1400 audit(1782021719.843:645): avc: denied { write } for pid=7698 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4314 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.359374][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.369024][ T7709] bond1: (slave bond0): Enslaving as an active interface with an up link [ 336.377952][ T7696] bridge0: port 3(gretap0) entered disabled state [ 336.384527][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.384605][ T28] audit: type=1400 audit(1782021719.843:646): avc: denied { append } for pid=7698 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4314 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.391833][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.581236][ T28] audit: type=1400 audit(1782021719.993:647): avc: denied { write } for pid=7712 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.800657][ T28] audit: type=1400 audit(1782021719.993:648): avc: denied { unlink } for pid=7712 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4314 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.024933][ T28] audit: type=1400 audit(1782021720.713:649): avc: denied { bind } for pid=7719 comm="syz.3.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 339.462338][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 340.008005][ T7759] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 341.278424][ T7789] siw: device registration error -23 [ 341.549863][ T7794] netlink: 'syz.1.1053': attribute type 5 has an invalid length. [ 347.803023][ T7841] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1070'. [ 347.839200][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 349.040291][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 349.040307][ T28] audit: type=1400 audit(1782021732.743:652): avc: denied { associate } for pid=7843 comm="syz.1.1073" name="blkio.bfq.time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 353.614955][ T28] audit: type=1400 audit(1782021737.293:653): avc: denied { ioctl } for pid=7883 comm="syz.1.1080" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 356.937914][ T7919] netlink: 6760 bytes leftover after parsing attributes in process `syz.4.1090'. [ 357.687087][ T7897] syz.2.1082 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 357.701235][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: syz.2.1082 Not tainted syzkaller #0 PREEMPT(lazy) [ 357.701271][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.701288][ T7897] Call Trace: [ 357.701296][ T7897] [ 357.701304][ T7897] __dump_stack+0x1d/0x30 [ 357.701334][ T7897] dump_stack_lvl+0x95/0xd0 [ 357.701360][ T7897] dump_stack+0x15/0x1b [ 357.701386][ T7897] dump_header+0x80/0x240 [ 357.701415][ T7897] oom_kill_process+0x295/0x350 [ 357.701476][ T7897] out_of_memory+0x981/0xbc0 [ 357.701569][ T7897] try_charge_memcg+0x621/0xa00 [ 357.701609][ T7897] ? __rcu_read_unlock+0x4e/0x70 [ 357.701642][ T7897] __memcg_kmem_charge_page+0x199/0x3a0 [ 357.701753][ T7897] __alloc_frozen_pages_noprof+0x18a/0x350 [ 357.701799][ T7897] alloc_pages_mpol+0xa9/0x1d0 [ 357.701833][ T7897] alloc_pages_noprof+0x8f/0x140 [ 357.701883][ T7897] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 357.701936][ T7897] __kvmalloc_node_noprof+0x3d4/0x640 [ 357.702013][ T7897] ? futex_hash_allocate+0x192/0x920 [ 357.702033][ T7897] ? futex_hash_allocate+0x192/0x920 [ 357.702053][ T7897] ? file_ioctl+0x14a/0x5b0 [ 357.702133][ T7897] futex_hash_allocate+0x192/0x920 [ 357.702178][ T7897] ? cap_task_prctl+0x13f/0x6b0 [ 357.702275][ T7897] futex_hash_prctl+0xd8/0xf0 [ 357.702302][ T7897] __se_sys_prctl+0x4f4/0x13b0 [ 357.702400][ T7897] __x64_sys_prctl+0x67/0x80 [ 357.702430][ T7897] x64_sys_call+0x2533/0x3020 [ 357.702455][ T7897] do_syscall_64+0x136/0x3c0 [ 357.702488][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.702525][ T7897] RIP: 0033:0x7f6eb2c0ce59 [ 357.702558][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.702577][ T7897] RSP: 002b:00007f6eb163e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 357.702651][ T7897] RAX: ffffffffffffffda RBX: 00007f6eb2e86090 RCX: 00007f6eb2c0ce59 [ 357.702670][ T7897] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 357.702696][ T7897] RBP: 00007f6eb2ca2e6f R08: 0000000000000000 R09: 0000000000000000 [ 357.702714][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.702729][ T7897] R13: 00007f6eb2e86128 R14: 00007f6eb2e86090 R15: 00007ffdfbd1af78 [ 357.702749][ T7897] [ 357.702831][ T7897] memory: usage 307200kB, limit 307200kB, failcnt 6314 [ 358.071021][ T7897] memory+swap: usage 341072kB, limit 9007199254740988kB, failcnt 0 [ 358.078973][ T7897] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 358.086275][ T7897] Memory cgroup stats for /syz2: [ 358.086588][ T7897] cache 4096 [ 358.094738][ T7897] rss 0 [ 358.097523][ T7897] shmem 0 [ 358.100478][ T7897] mapped_file 0 [ 358.104012][ T7897] dirty 0 [ 358.106974][ T7897] writeback 0 [ 358.110275][ T7897] workingset_refault_anon 943 [ 358.114963][ T7897] workingset_refault_file 1590 [ 358.119739][ T7897] swap 34684928 [ 358.123224][ T7897] swapcached 51580928 [ 358.127214][ T7897] pgpgin 308281 [ 358.130689][ T7897] pgpgout 308280 [ 358.134298][ T7897] pgfault 254008 [ 358.137860][ T7897] pgmajfault 683 [ 358.141421][ T7897] inactive_anon 0 [ 358.188485][ T7897] active_anon 0 [ 358.193398][ T7897] inactive_file 0 [ 358.198110][ T7897] active_file 4096 [ 358.202069][ T7897] unevictable 0 [ 358.270259][ T7932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 358.303735][ T7897] hierarchical_memory_limit 314572800 [ 358.309205][ T7897] hierarchical_memsw_limit 9223372036854771712 [ 358.315382][ T7897] total_cache 4096 [ 358.319153][ T7897] total_rss 0 [ 358.322485][ T7897] total_shmem 0 [ 358.325966][ T7897] total_mapped_file 0 [ 358.329966][ T7897] total_dirty 0 [ 358.333513][ T7897] total_writeback 0 [ 358.337328][ T7897] total_workingset_refault_anon 943 [ 358.342544][ T7897] total_workingset_refault_file 1590 [ 358.347842][ T7897] total_swap 34684928 [ 358.351888][ T7897] total_swapcached 51580928 [ 358.356479][ T7897] total_pgpgin 308281 [ 358.360477][ T7897] total_pgpgout 308280 [ 358.364558][ T7897] total_pgfault 254008 [ 358.368646][ T7897] total_pgmajfault 683 [ 358.395741][ T7897] total_inactive_anon 0 [ 358.441757][ T7897] total_active_anon 0 [ 358.445807][ T7897] total_inactive_file 0 [ 358.449980][ T7897] total_active_file 4096 [ 358.454232][ T7897] total_unevictable 0 [ 358.458231][ T7897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1082,pid=7893,uid=0 [ 358.472852][ T7897] Memory cgroup out of memory: Killed process 7893 (syz.2.1082) total-vm:94300kB, anon-rss:1244kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 358.899850][ T7946] bridge0: port 3(gretap0) entered disabled state [ 359.080647][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.087970][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.672136][ T7946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 363.254535][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 363.308458][ T7987] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 363.392906][ T7970] syz.3.1103 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 363.407151][ T7970] CPU: 1 UID: 0 PID: 7970 Comm: syz.3.1103 Not tainted syzkaller #0 PREEMPT(lazy) [ 363.407187][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.407205][ T7970] Call Trace: [ 363.407213][ T7970] [ 363.407221][ T7970] __dump_stack+0x1d/0x30 [ 363.407246][ T7970] dump_stack_lvl+0x95/0xd0 [ 363.407289][ T7970] dump_stack+0x15/0x1b [ 363.407316][ T7970] dump_header+0x80/0x240 [ 363.407346][ T7970] oom_kill_process+0x295/0x350 [ 363.407389][ T7970] out_of_memory+0x981/0xbc0 [ 363.407447][ T7970] try_charge_memcg+0x621/0xa00 [ 363.407555][ T7970] ? __rcu_read_unlock+0x4e/0x70 [ 363.407589][ T7970] __memcg_kmem_charge_page+0x199/0x3a0 [ 363.407624][ T7970] __alloc_frozen_pages_noprof+0x18a/0x350 [ 363.407676][ T7970] alloc_pages_mpol+0xa9/0x1d0 [ 363.407767][ T7970] alloc_pages_noprof+0x8f/0x140 [ 363.407810][ T7970] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 363.407892][ T7970] __kvmalloc_node_noprof+0x3d4/0x640 [ 363.407976][ T7970] ? futex_hash_allocate+0x192/0x920 [ 363.407996][ T7970] ? futex_hash_allocate+0x192/0x920 [ 363.408071][ T7970] futex_hash_allocate+0x192/0x920 [ 363.408092][ T7970] ? cap_task_prctl+0x13f/0x6b0 [ 363.408133][ T7970] futex_hash_prctl+0xd8/0xf0 [ 363.408153][ T7970] __se_sys_prctl+0x4f4/0x13b0 [ 363.408182][ T7970] __x64_sys_prctl+0x67/0x80 [ 363.408229][ T7970] x64_sys_call+0x2533/0x3020 [ 363.408256][ T7970] do_syscall_64+0x136/0x3c0 [ 363.408352][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.408377][ T7970] RIP: 0033:0x7f04672fce59 [ 363.408454][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.408473][ T7970] RSP: 002b:00007f0465d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 363.408493][ T7970] RAX: ffffffffffffffda RBX: 00007f0467575fa0 RCX: 00007f04672fce59 [ 363.408508][ T7970] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 363.408521][ T7970] RBP: 00007f0467392e6f R08: 0000000000000000 R09: 0000000000000000 [ 363.408539][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.408551][ T7970] R13: 00007f0467576038 R14: 00007f0467575fa0 R15: 00007fff4804e7a8 [ 363.408599][ T7970] [ 363.408607][ T7970] memory: usage 307200kB, limit 307200kB, failcnt 3341 [ 363.758993][ T7970] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 363.767029][ T7970] kmem: usage 302460kB, limit 9007199254740988kB, failcnt 0 [ 363.774430][ T7970] Memory cgroup stats for /syz3: [ 363.774678][ T7970] cache 0 [ 363.782721][ T7970] rss 8192 [ 363.785776][ T7970] shmem 0 [ 363.788792][ T7970] mapped_file 0 [ 363.792268][ T7970] dirty 0 [ 363.795257][ T7970] writeback 0 [ 363.798765][ T7970] workingset_refault_anon 1520 [ 363.803554][ T7970] workingset_refault_file 1869 [ 363.808462][ T7970] swap 364544 [ 363.838670][ T7970] swapcached 9465856 [ 363.850022][ T7970] pgpgin 300525 [ 363.864388][ T7996] netlink: 6760 bytes leftover after parsing attributes in process `syz.0.1107'. [ 363.869843][ T7970] pgpgout 300519 [ 363.911797][ T7970] pgfault 255021 [ 363.915520][ T7970] pgmajfault 1095 [ 363.919215][ T7970] inactive_anon 0 [ 363.922878][ T7970] active_anon 20480 [ 363.926710][ T7970] inactive_file 0 [ 363.930430][ T7970] active_file 0 [ 363.933954][ T7970] unevictable 0 [ 363.937538][ T7970] hierarchical_memory_limit 314572800 [ 363.942959][ T7970] hierarchical_memsw_limit 9223372036854771712 [ 363.949219][ T7970] total_cache 0 [ 363.952730][ T7970] total_rss 8192 [ 363.956412][ T7970] total_shmem 0 [ 363.959964][ T7970] total_mapped_file 0 [ 363.964088][ T7970] total_dirty 0 [ 363.967585][ T7970] total_writeback 0 [ 363.971473][ T7970] total_workingset_refault_anon 1520 [ 363.977812][ T7970] total_workingset_refault_file 1869 [ 363.983394][ T7970] total_swap 364544 [ 363.987329][ T7970] total_swapcached 9465856 [ 363.991873][ T7970] total_pgpgin 300525 [ 363.995963][ T7970] total_pgpgout 300519 [ 364.000197][ T7970] total_pgfault 255021 [ 364.004390][ T7970] total_pgmajfault 1095 [ 364.008920][ T7970] total_inactive_anon 0 [ 364.013156][ T7970] total_active_anon 20480 [ 364.021334][ T7970] total_inactive_file 0 [ 364.025554][ T7970] total_active_file 0 [ 364.029649][ T7970] total_unevictable 0 [ 364.033706][ T7970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1103,pid=7969,uid=0 [ 364.076681][ T7970] Memory cgroup out of memory: Killed process 7969 (syz.3.1103) total-vm:94300kB, anon-rss:1340kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 364.700864][ T8002] ================================================================== [ 364.709009][ T8002] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 364.716345][ T8002] [ 364.718689][ T8002] read-write to 0xffffc900014afe30 of 8 bytes by task 8003 on cpu 0: [ 364.726774][ T8002] shmem_writeout+0x2eb/0x8f0 [ 364.731479][ T8002] shrink_folio_list+0x1ebb/0x2780 [ 364.737047][ T8002] evict_folios+0x20e2/0x2d80 [ 364.741757][ T8002] try_to_shrink_lruvec+0x7c5/0xb10 [ 364.746988][ T8002] shrink_lruvec+0x25e/0x1b60 [ 364.751696][ T8002] shrink_node+0x69d/0x20f0 [ 364.756233][ T8002] do_try_to_free_pages+0x408/0xc90 [ 364.761469][ T8002] try_to_free_mem_cgroup_pages+0x201/0x420 [ 364.767392][ T8002] try_charge_memcg+0x375/0xa00 [ 364.772272][ T8002] __memcg_kmem_charge_page+0x199/0x3a0 [ 364.777933][ T8002] __alloc_frozen_pages_noprof+0x18a/0x350 [ 364.783773][ T8002] alloc_pages_mpol+0xa9/0x1d0 [ 364.788565][ T8002] alloc_pages_noprof+0x8f/0x140 [ 364.793540][ T8002] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 364.799458][ T8002] __kvmalloc_node_noprof+0x3d4/0x640 [ 364.804854][ T8002] futex_hash_allocate+0x192/0x920 [ 364.809995][ T8002] futex_hash_prctl+0xd8/0xf0 [ 364.814720][ T8002] __se_sys_prctl+0x4f4/0x13b0 [ 364.819506][ T8002] __x64_sys_prctl+0x67/0x80 [ 364.824118][ T8002] x64_sys_call+0x2533/0x3020 [ 364.828817][ T8002] do_syscall_64+0x136/0x3c0 [ 364.833434][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.839345][ T8002] [ 364.841682][ T8002] read to 0xffffc900014afe30 of 8 bytes by task 8002 on cpu 1: [ 364.849241][ T8002] shmem_fallocate+0x589/0x8f0 [ 364.854034][ T8002] vfs_fallocate+0x3ac/0x400 [ 364.858648][ T8002] __x64_sys_fallocate+0x7a/0xd0 [ 364.863606][ T8002] x64_sys_call+0x298e/0x3020 [ 364.868311][ T8002] do_syscall_64+0x136/0x3c0 [ 364.872925][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.878841][ T8002] [ 364.881174][ T8002] value changed: 0x0000000000000273 -> 0x0000000000000280 [ 364.888287][ T8002] [ 364.890620][ T8002] Reported by Kernel Concurrency Sanitizer on: [ 364.896788][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(lazy) [ 364.906100][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.916176][ T8002] ================================================================== [ 365.112752][ T8003] syz.3.1110 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 365.129642][ T8003] CPU: 1 UID: 0 PID: 8003 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(lazy) [ 365.129702][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.129716][ T8003] Call Trace: [ 365.129722][ T8003] [ 365.129797][ T8003] __dump_stack+0x1d/0x30 [ 365.129821][ T8003] dump_stack_lvl+0x95/0xd0 [ 365.129842][ T8003] dump_stack+0x15/0x1b [ 365.129866][ T8003] dump_header+0x80/0x240 [ 365.129935][ T8003] oom_kill_process+0x295/0x350 [ 365.130047][ T8003] out_of_memory+0x981/0xbc0 [ 365.130090][ T8003] try_charge_memcg+0x621/0xa00 [ 365.130191][ T8003] ? __rcu_read_unlock+0x4e/0x70 [ 365.130224][ T8003] __memcg_kmem_charge_page+0x199/0x3a0 [ 365.130266][ T8003] __alloc_frozen_pages_noprof+0x18a/0x350 [ 365.130361][ T8003] alloc_pages_mpol+0xa9/0x1d0 [ 365.130397][ T8003] alloc_pages_noprof+0x8f/0x140 [ 365.130427][ T8003] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 365.130549][ T8003] __kvmalloc_node_noprof+0x3d4/0x640 [ 365.130575][ T8003] ? futex_hash_allocate+0x192/0x920 [ 365.130606][ T8003] ? futex_hash_allocate+0x192/0x920 [ 365.130630][ T8003] ? file_ioctl+0x14a/0x5b0 [ 365.130664][ T8003] futex_hash_allocate+0x192/0x920 [ 365.130693][ T8003] ? cap_task_prctl+0x13f/0x6b0 [ 365.130772][ T8003] futex_hash_prctl+0xd8/0xf0 [ 365.130798][ T8003] __se_sys_prctl+0x4f4/0x13b0 [ 365.130826][ T8003] __x64_sys_prctl+0x67/0x80 [ 365.130853][ T8003] x64_sys_call+0x2533/0x3020 [ 365.130880][ T8003] do_syscall_64+0x136/0x3c0 [ 365.130907][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.130951][ T8003] RIP: 0033:0x7f04672fce59 [ 365.130996][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.131031][ T8003] RSP: 002b:00007f0465d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 365.131051][ T8003] RAX: ffffffffffffffda RBX: 00007f0467576090 RCX: 00007f04672fce59 [ 365.131066][ T8003] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 365.131083][ T8003] RBP: 00007f0467392e6f R08: 0000000000000000 R09: 0000000000000000 [ 365.131107][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.131123][ T8003] R13: 00007f0467576128 R14: 00007f0467576090 R15: 00007fff4804e7a8 [ 365.131144][ T8003] [ 365.131271][ T8003] memory: usage 307200kB, limit 307200kB, failcnt 3455 [ 365.371450][ T8003] memory+swap: usage 35632kB, limit 9007199254740988kB, failcnt 0 [ 365.379401][ T8003] kmem: usage 23460kB, limit 9007199254740988kB, failcnt 0 [ 365.386660][ T8003] Memory cgroup stats for /syz3: [ 365.386948][ T8003] cache 0 [ 365.394838][ T8003] rss 0 [ 365.397653][ T8003] shmem 0 [ 365.400607][ T8003] mapped_file 0 [ 365.404080][ T8003] dirty 0 [ 365.407081][ T8003] writeback 0 [ 365.410384][ T8003] workingset_refault_anon 1590 [ 365.415158][ T8003] workingset_refault_file 1869 [ 365.420025][ T8003] swap 401408 [ 365.423327][ T8003] swapcached 9805824 [ 365.427314][ T8003] pgpgin 301717 [ 365.430787][ T8003] pgpgout 301717 [ 365.434437][ T8003] pgfault 255204 [ 365.438084][ T8003] pgmajfault 1146 [ 365.441881][ T8003] inactive_anon 0 [ 365.445528][ T8003] active_anon 0 [ 365.449054][ T8003] inactive_file 0 [ 365.452710][ T8003] active_file 0 [ 365.456231][ T8003] unevictable 0 [ 365.459748][ T8003] hierarchical_memory_limit 314572800 [ 365.465137][ T8003] hierarchical_memsw_limit 9223372036854771712 [ 365.471339][ T8003] total_cache 0 [ 365.474867][ T8003] total_rss 0 [ 365.478233][ T8003] total_shmem 0 [ 365.481900][ T8003] total_mapped_file 0 [ 365.485933][ T8003] total_dirty 0 [ 365.489457][ T8003] total_writeback 0 [ 365.493285][ T8003] total_workingset_refault_anon 1590 [ 365.498767][ T8003] total_workingset_refault_file 1869 [ 365.504059][ T8003] total_swap 401408 [ 365.508021][ T8003] total_swapcached 9805824 [ 365.512655][ T8003] total_pgpgin 301717 [ 365.516967][ T8003] total_pgpgout 301717 [ 365.521136][ T8003] total_pgfault 255204 [ 365.525207][ T8003] total_pgmajfault 1146 [ 365.529611][ T8003] total_inactive_anon 0 [ 365.533877][ T8003] total_active_anon 0 [ 365.537928][ T8003] total_inactive_file 0 [ 365.542097][ T8003] total_active_file 0 [ 365.546149][ T8003] total_unevictable 0 [ 365.550251][ T8003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1110,pid=8001,uid=0 [ 365.564944][ T8003] Memory cgroup out of memory: Killed process 8001 (syz.3.1110) total-vm:98536kB, anon-rss:1232kB, file-rss:26448kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000