last executing test programs: 11.279903913s ago: executing program 3 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x54) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0xa) memfd_create(0x0, 0x6) preadv2(0xffffffffffffffff, &(0x7f00000044c0), 0x0, 0x0, 0x8, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008020) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000042f4ffffffffffffff00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000000000007b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e98509de050800000000f2170e65e3f503ef5abf12361095d90000000000020005001900", 0x3f}, 0x60) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.537451505s ago: executing program 0 (id=824): socket(0x1, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x41a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x11e210, 0x10004, 0x9, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r3], 0x38}}, 0x10) 7.204610716s ago: executing program 2 (id=830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x164e, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex_waitv(&(0x7f0000001480)=[{0x9, &(0x7f0000001440)=0x9, 0x2}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x200600, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x423, &(0x7f0000000980)="$eJzs3E9v2zYfwHEqsfv4cYFgQLEmTXNg2x2yQ11ZWRwYPWky7bCVJYGSi+Q0FItdBHO6Ye2ANafl0m3A9hqG7rgXsfPeTLDrDgM8SHIy54/dNk0Wo/h+gJaU9Av5Iy2IsQJJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYXkN265awtdBZ0OO5zVM2J5w/KC920eKCf0KYaX/RKkkFvJdC9f+Pfxh3sh8vjUvSmlRErtXr39w/1qhkDdhiQkJnc289Vbhz17sfvG43+9+LctCnH82U6+lAh2Huu22lNRxKOu1mn1vvRnLpvZVvBknqi09o9wkNHLZ+1hW6/UVqf7eDDtBq+H66mDn2l3HtmvyQSVSronD4N6DSuyta9/XQSuLSQ+nMWvpifhQJzJRblvK3na/u/K6JNOg6psEOVIWJn6Mju041arjVGur9dU12y6c2GEfI05EXMBJi2lXGj2tzvX6DbyLwXD9BwAAAAAA7y8ru8eefv8vZvfhLdHUvrIvOy0AAAAAAHCOsr/8z6dFMa0tCIvv/wAAAAAAvG9+GPeM3YwQs8OY/1m//ymM+n++teOm/7s7w6Ozx1tMmovW3LCRrKgVhlueWrJu5EE3rPzOg9jPt/d7WR4zwzb+GgxG8sieFbSMKVp70cZH1tkTED+JxTxmcSsvtw6O5L2Um9pXFS/071eF687NJGoj+ebp9rdCpL3/GLTnLNHb7ncrn3/Z38py2Utb2dsZPkBx4jmKCbk8P3zucWTmr+STkOZSzG7EDPst5/3ao+MfTtbMW/T5UtzMb/TcLOex5aPjL13RvqpWjo7+1z/E0SyqIyO/mrfzy6uxWQwGg0G6YzSLpTxmaflOWtxZPpZFOnKnMu4zGGbhjM7/mebiDbJYeV0W1nfvlgUAXJbewSpUzIvS8XVXnFh3z3CV6034LeP8VveX4lYec2sxu7AWFk+5ottjr+je6Bp79nX9N3E7n5vDdyCckkW2xqb9/nxsVc3W0Vdj+419x0qncPb5zlfi+rMXu3e3dx4/6T7pPnWclZr9iW2vOqKYDUMUe7P9rs3aAwA4hTL7Vjn53jJGR59V6/Wqm6wraULvoTS60VJSB4ky3robtJSMTJiEXuinlUe6oWIZd6IoNIlshkZGYaw3sje/yOGrX2LVdoNEe3HkKzdW0guDxPUS2dCxJ6POp76O15XJfjiOlKeb2nMTHQYyDjvGUxUpY6VGAnVDBYlu6rQayMjotms25aPQ77SVbKjYMzpKwrzBg7500AxNO2u2ctmTDQDAlDh8g90FVi57jAAA4ChWaQAAAAAAAAAAAAAAAAAAAAAApt9/8fwfFSrTUSmIqUjjHCsLviUupuXLvjIBuGj/BAAA///lz6Vu") r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0xffffffff], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00', {0xff}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x81, 0x27, "646cd28546d0928f2ac430a4c71216767ed9a0b773cc13584bb1d76211fc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="611240006d854ad6fb74b90000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040009}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 7.05357986s ago: executing program 0 (id=833): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000abaff9), 0x10) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc123c05006269746d61703a69702c6d61630000000500040000000000adfaf5021a9df2f90ff66a0900020073797a310000e4ff2000078005000c00018008000140ffffffff08000840000000ed050005000200050001000600000049dc3e015053d8d8decdd2a946c9c791eb8c9f1a5aee75314cc4c6cc0dfb7ed6c7798ffeb3735be8cb8d6680c9d9f77654a5f6ad97c3826c25772f0738d9bc6170424967ac6aaef3859c00d329101c50d98472e8c943c25396c62c4870b430bc38f48744228279f95aea9ae895ead65aa5ee63fd5e98"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) prlimit64(0x0, 0x5, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000080)=0x6222, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x7}, 0x8000) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) 6.937366434s ago: executing program 4 (id=834): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="87565835b02f030600000000feffdfff947a00000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x280000000000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 6.76596412s ago: executing program 3 (id=835): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 6.181856299s ago: executing program 1 (id=836): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000180)={[{@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@dioread_lock}, {@resuid}, {@usrjquota}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) rmdir(&(0x7f00000000c0)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) futex(&(0x7f0000000180), 0x5, 0xfffffffd, 0x0, &(0x7f0000004000)=0x2, 0x9a020006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r1, &(0x7f0000002700)=0x23, 0x1c) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x242000, 0x0) dup(r4) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x101000, 0xc8, 0x10}, 0x18) ppoll(&(0x7f00000003c0)=[{r5, 0x11}, {r2, 0x220}], 0x2, &(0x7f0000000400), &(0x7f0000000440)={[0x4]}, 0x8) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000280)={0x60, 0x3, &(0x7f0000000000/0xb000)=nil, &(0x7f000000b000/0x400000)=nil, 0xf6, &(0x7f00000001c0)=[{0x0, 0xffff, 0x3}, {0x8, 0x2, 0x70}, {0x6, 0x200, 0x10}, {0x5, 0x2d4, 0x9}, {0x7fff, 0x0, 0x9}, {0x1, 0x9, 0x3}], 0x6, 0x5, 0x1c, 0x2, 0x54, 0x10}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, r8) setresgid(0x0, 0x0, r8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) exit(0x1ff) 6.12876612s ago: executing program 2 (id=837): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000abaff9), 0x10) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc123c05006269746d61703a69702c6d61630000000500040000000000adfaf5021a9df2f90ff66a0900020073797a310000e4ff2000078005000c00018008000140ffffffff08000840000000ed050005000200050001000600000049dc3e015053d8d8decdd2a946c9c791eb8c9f1a5aee75314cc4c6cc0dfb7ed6c7798ffeb3735be8cb8d6680c9d9f77654a5f6ad97c3826c25772f0738d9bc6170424967ac6aaef3859c00d329101c50d98472e8c943c25396c62c4870b430bc38f48744228279f95aea9ae895ead65aa5ee63fd5e98"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) prlimit64(0x0, 0x5, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000080)=0x6222, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x7}, 0x8000) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) 5.969124006s ago: executing program 0 (id=838): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4028800) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 5.624601797s ago: executing program 0 (id=839): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(0x0, 0x4827e, 0x195) socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 5.598529748s ago: executing program 4 (id=840): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xaa}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210704000000fcdbdf", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d"], 0x50}}, 0xc080) 5.592129468s ago: executing program 3 (id=841): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioperm(0x1000, 0x1000, 0x8000000000000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x3, 0x2, 0x6, 0x6db1, 0xb1, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.539684299s ago: executing program 2 (id=842): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f80"], 0x4c}}, 0x0) 5.509097771s ago: executing program 4 (id=843): socket(0x1, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x41a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x11e210, 0x10004, 0x9, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r3], 0x38}}, 0x10) 5.443215613s ago: executing program 0 (id=844): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="87565835b02f030600000000feffdfff947a00000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) r7 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 5.439712763s ago: executing program 2 (id=845): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 5.323454377s ago: executing program 2 (id=846): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="87565835b02f030600000000feffdfff947a00000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x280000000000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 5.313159867s ago: executing program 4 (id=847): openat$ppp(0xffffffffffffff9c, 0x0, 0x40c42, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5, @loopback={0xff00000000000000}, 0x2000400}, 0x39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 4.350904708s ago: executing program 4 (id=848): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000abaff9), 0x10) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc123c05006269746d61703a69702c6d61630000000500040000000000adfaf5021a9df2f90ff66a0900020073797a310000e4ff2000078005000c00018008000140ffffffff08000840000000ed050005000200050001000600000049dc3e015053d8d8decdd2a946c9c791eb8c9f1a5aee75314cc4c6cc0dfb7ed6c7798ffeb3735be8cb8d6680c9d9f77654a5f6ad97c3826c25772f0738d9bc6170424967ac6aaef3859c00d329101c50d98472e8c943c25396c62c4870b430bc38f48744228279f95aea9ae895ead65aa5ee63fd5e98"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) prlimit64(0x0, 0x5, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000080)=0x6222, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x7}, 0x8000) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) 4.146574235s ago: executing program 3 (id=849): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) 4.104208537s ago: executing program 1 (id=850): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4028800) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 3.834694135s ago: executing program 0 (id=851): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="87565835b02f030600000000feffdfff947a00000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x280000000000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 3.441501948s ago: executing program 1 (id=852): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 3.441107658s ago: executing program 3 (id=853): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xab) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 522.254942ms ago: executing program 4 (id=854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000abaff9), 0x10) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc123c05006269746d61703a69702c6d61630000000500040000000000adfaf5021a9df2f90ff66a0900020073797a310000e4ff2000078005000c00018008000140ffffffff08000840000000ed050005000200050001000600000049dc3e015053d8d8decdd2a946c9c791eb8c9f1a5aee75314cc4c6cc0dfb7ed6c7798ffeb3735be8cb8d6680c9d9f77654a5f6ad97c3826c25772f0738d9bc6170424967ac6aaef3859c00d329101c50d98472e8c943c25396c62c4870b430bc38f48744228279f95aea9ae895ead65aa5ee63fd5e98"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) prlimit64(0x0, 0x5, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000080)=0x6222, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x7}, 0x8000) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) 521.695513ms ago: executing program 1 (id=864): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 216.160263ms ago: executing program 1 (id=855): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(0x0, 0x4827e, 0x195) socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 48.873498ms ago: executing program 2 (id=856): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f80"], 0x4c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x5, 0x0, 0x3, 0xa, 0x60, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf25350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e658664657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x64}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.916899ms ago: executing program 1 (id=857): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 0s ago: executing program 3 (id=858): openat$ppp(0xffffffffffffff9c, 0x0, 0x40c42, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5, @loopback={0xff00000000000000}, 0x2000400}, 0x39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): ][ T5198] cache 0 [ 100.632614][ T5198] rss 0 [ 100.632623][ T5198] shmem 0 [ 100.632630][ T5198] mapped_file 0 [ 100.632639][ T5198] dirty 0 [ 100.632647][ T5198] writeback 0 [ 100.632654][ T5198] workingset_refault_anon 201 [ 100.632664][ T5198] workingset_refault_file 2616 [ 100.671063][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 100.672534][ T5198] swap 4423680 [ 100.672545][ T5198] swapcached 135802880 [ 100.672554][ T5198] pgpgin 87009 [ 100.672562][ T5198] pgpgout 87009 [ 100.672571][ T5198] pgfault 62038 [ 100.672580][ T5198] pgmajfault 149 [ 100.857120][ T5198] inactive_anon 0 [ 100.860853][ T5198] active_anon 0 [ 100.864350][ T5198] inactive_file 0 [ 100.867975][ T5198] active_file 0 [ 100.871453][ T5198] unevictable 0 [ 100.874900][ T5198] hierarchical_memory_limit 314572800 [ 100.880283][ T5198] hierarchical_memsw_limit 9223372036854771712 [ 100.886441][ T5198] total_cache 0 [ 100.889885][ T5198] total_rss 0 [ 100.893205][ T5198] total_shmem 0 [ 100.896654][ T5198] total_mapped_file 0 [ 100.900642][ T5198] total_dirty 0 [ 100.904096][ T5198] total_writeback 0 [ 100.907951][ T5198] total_workingset_refault_anon 201 [ 100.913207][ T5198] total_workingset_refault_file 2616 [ 100.918480][ T5198] total_swap 4423680 [ 100.922385][ T5198] total_swapcached 135802880 [ 100.926964][ T5198] total_pgpgin 87009 [ 100.930904][ T5198] total_pgpgout 87009 [ 100.934875][ T5198] total_pgfault 62038 [ 100.938845][ T5198] total_pgmajfault 149 [ 100.942926][ T5198] total_inactive_anon 0 [ 100.947074][ T5198] total_active_anon 0 [ 100.951068][ T5198] total_inactive_file 0 [ 100.955209][ T5198] total_active_file 0 [ 100.959229][ T5198] total_unevictable 0 [ 100.963258][ T5198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.526,pid=5186,uid=0 [ 100.978147][ T5198] Memory cgroup out of memory: Killed process 5186 (syz.0.526) total-vm:96348kB, anon-rss:1232kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 102.389708][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 102.436273][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 102.626191][ T5139] syz.1.511 (5139) used greatest stack depth: 7800 bytes left [ 103.125048][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 103.160990][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 103.920379][ T5243] syz.1.540 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 103.934551][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: syz.1.540 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.934580][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.934595][ T5243] Call Trace: [ 103.934603][ T5243] [ 103.934613][ T5243] __dump_stack+0x1d/0x30 [ 103.934684][ T5243] dump_stack_lvl+0x95/0xd0 [ 103.934709][ T5243] dump_stack+0x15/0x1b [ 103.934764][ T5243] dump_header+0x80/0x240 [ 103.934826][ T5243] oom_kill_process+0x295/0x350 [ 103.934862][ T5243] out_of_memory+0x97d/0xb80 [ 103.934899][ T5243] try_charge_memcg+0x62f/0xa10 [ 103.934941][ T5243] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 103.934977][ T5243] __alloc_frozen_pages_noprof+0x18a/0x350 [ 103.935008][ T5243] alloc_pages_mpol+0xb3/0x260 [ 103.935036][ T5243] alloc_pages_noprof+0x8f/0x140 [ 103.935144][ T5243] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 103.935180][ T5243] __kvmalloc_node_noprof+0x3d4/0x640 [ 103.935206][ T5243] ? futex_hash_allocate+0x190/0x9a0 [ 103.935279][ T5243] ? futex_hash_allocate+0x190/0x9a0 [ 103.935375][ T5243] futex_hash_allocate+0x190/0x9a0 [ 103.935407][ T5243] ? cap_task_prctl+0x13f/0x6b0 [ 103.935437][ T5243] futex_hash_prctl+0xd8/0xf0 [ 103.935478][ T5243] __se_sys_prctl+0x4f4/0x1400 [ 103.935543][ T5243] __x64_sys_prctl+0x67/0x80 [ 103.935573][ T5243] x64_sys_call+0x2533/0x3020 [ 103.935600][ T5243] do_syscall_64+0x12c/0x3b0 [ 103.935689][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.935716][ T5243] RIP: 0033:0x7fb28eccce59 [ 103.935739][ T5243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.935757][ T5243] RSP: 002b:00007fb28d2ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 103.935779][ T5243] RAX: ffffffffffffffda RBX: 00007fb28ef46270 RCX: 00007fb28eccce59 [ 103.935795][ T5243] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 103.935852][ T5243] RBP: 00007fb28ed62d6f R08: 0000000000000000 R09: 0000000000000000 [ 103.935868][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.935883][ T5243] R13: 00007fb28ef46308 R14: 00007fb28ef46270 R15: 00007ffed622db28 [ 103.935905][ T5243] [ 103.935913][ T5243] memory: usage 307200kB, limit 307200kB, failcnt 1006 [ 104.157318][ T5243] memory+swap: usage 311704kB, limit 9007199254740988kB, failcnt 0 [ 104.165224][ T5243] kmem: usage 307044kB, limit 9007199254740988kB, failcnt 0 [ 104.172533][ T5243] Memory cgroup stats for /syz1: [ 104.172878][ T5243] cache 0 [ 104.180745][ T5243] rss 0 [ 104.183499][ T5243] shmem 0 [ 104.186489][ T5243] mapped_file 0 [ 104.189944][ T5243] dirty 0 [ 104.192920][ T5243] writeback 0 [ 104.196205][ T5243] workingset_refault_anon 398 [ 104.201020][ T5243] workingset_refault_file 3258 [ 104.205849][ T5243] swap 4612096 [ 104.209236][ T5243] swapcached 167575552 [ 104.213329][ T5243] pgpgin 125182 [ 104.216803][ T5243] pgpgout 125182 [ 104.220420][ T5243] pgfault 78281 [ 104.223889][ T5243] pgmajfault 238 [ 104.227450][ T5243] inactive_anon 0 [ 104.231095][ T5243] active_anon 0 [ 104.234546][ T5243] inactive_file 0 [ 104.238204][ T5243] active_file 0 [ 104.241675][ T5243] unevictable 0 [ 104.245266][ T5243] hierarchical_memory_limit 314572800 [ 104.250652][ T5243] hierarchical_memsw_limit 9223372036854771712 [ 104.256800][ T5243] total_cache 0 [ 104.260256][ T5243] total_rss 0 [ 104.263549][ T5243] total_shmem 0 [ 104.267000][ T5243] total_mapped_file 0 [ 104.271006][ T5243] total_dirty 0 [ 104.274454][ T5243] total_writeback 0 [ 104.278251][ T5243] total_workingset_refault_anon 398 [ 104.283454][ T5243] total_workingset_refault_file 3258 [ 104.288730][ T5243] total_swap 4612096 [ 104.292673][ T5243] total_swapcached 167575552 [ 104.297253][ T5243] total_pgpgin 125182 [ 104.301259][ T5243] total_pgpgout 125182 [ 104.305317][ T5243] total_pgfault 78281 [ 104.309355][ T5243] total_pgmajfault 238 [ 104.313428][ T5243] total_inactive_anon 0 [ 104.317577][ T5243] total_active_anon 0 [ 104.321571][ T5243] total_inactive_file 0 [ 104.325716][ T5243] total_active_file 0 [ 104.329702][ T5243] total_unevictable 0 [ 104.333772][ T5243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.540,pid=5235,uid=0 [ 104.348366][ T5243] Memory cgroup out of memory: Killed process 5235 (syz.1.540) total-vm:100512kB, anon-rss:1236kB, file-rss:26448kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 105.864084][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 105.878616][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 106.164178][ T5262] syzkaller0: entered promiscuous mode [ 106.169759][ T5262] syzkaller0: entered allmulticast mode [ 106.229229][ T5260] tipc: Enabled bearer , priority 0 [ 106.270877][ T5257] tipc: Resetting bearer [ 106.293484][ T5257] tipc: Disabling bearer [ 107.707459][ T5288] netlink: 88 bytes leftover after parsing attributes in process `syz.1.557'. [ 107.718467][ T5289] block device autoloading is deprecated and will be removed. [ 108.554130][ T5296] syzkaller0: entered promiscuous mode [ 108.571263][ T5296] syzkaller0: entered allmulticast mode [ 108.641869][ T5303] syz.0.556 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 108.655925][ T5303] CPU: 1 UID: 0 PID: 5303 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.655975][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.655989][ T5303] Call Trace: [ 108.655996][ T5303] [ 108.656005][ T5303] __dump_stack+0x1d/0x30 [ 108.656030][ T5303] dump_stack_lvl+0x95/0xd0 [ 108.656091][ T5303] dump_stack+0x15/0x1b [ 108.656107][ T5303] dump_header+0x80/0x240 [ 108.656127][ T5303] oom_kill_process+0x295/0x350 [ 108.656170][ T5303] out_of_memory+0x97d/0xb80 [ 108.656221][ T5303] try_charge_memcg+0x62f/0xa10 [ 108.656252][ T5303] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 108.656274][ T5303] __alloc_frozen_pages_noprof+0x18a/0x350 [ 108.656359][ T5303] alloc_pages_mpol+0xb3/0x260 [ 108.656381][ T5303] alloc_pages_noprof+0x8f/0x140 [ 108.656404][ T5303] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 108.656499][ T5303] __kvmalloc_node_noprof+0x3d4/0x640 [ 108.656526][ T5303] ? futex_hash_allocate+0x190/0x9a0 [ 108.656552][ T5303] ? futex_hash_allocate+0x190/0x9a0 [ 108.656594][ T5303] futex_hash_allocate+0x190/0x9a0 [ 108.656621][ T5303] ? cap_task_prctl+0x13f/0x6b0 [ 108.656643][ T5303] futex_hash_prctl+0xd8/0xf0 [ 108.656743][ T5303] __se_sys_prctl+0x4f4/0x1400 [ 108.656768][ T5303] __x64_sys_prctl+0x67/0x80 [ 108.656789][ T5303] x64_sys_call+0x2533/0x3020 [ 108.656853][ T5303] do_syscall_64+0x12c/0x3b0 [ 108.656930][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.657005][ T5303] RIP: 0033:0x7f12f5c6ce59 [ 108.657033][ T5303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.657048][ T5303] RSP: 002b:00007f12f425a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 108.657067][ T5303] RAX: ffffffffffffffda RBX: 00007f12f5ee6270 RCX: 00007f12f5c6ce59 [ 108.657079][ T5303] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 108.657090][ T5303] RBP: 00007f12f5d02d6f R08: 0000000000000000 R09: 0000000000000000 [ 108.657101][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.657179][ T5303] R13: 00007f12f5ee6308 R14: 00007f12f5ee6270 R15: 00007ffe707587d8 [ 108.657197][ T5303] [ 108.657204][ T5303] memory: usage 307200kB, limit 307200kB, failcnt 1040 [ 108.879296][ T5303] memory+swap: usage 311524kB, limit 9007199254740988kB, failcnt 0 [ 108.887228][ T5303] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 108.894569][ T5303] Memory cgroup stats for /syz0: [ 108.894841][ T5303] cache 0 [ 108.902724][ T5303] rss 0 [ 108.905533][ T5303] shmem 0 [ 108.908462][ T5303] mapped_file 0 [ 108.911960][ T5303] dirty 0 [ 108.914892][ T5303] writeback 0 [ 108.918161][ T5303] workingset_refault_anon 253 [ 108.922863][ T5303] workingset_refault_file 2810 [ 108.927620][ T5303] swap 4427776 [ 108.931091][ T5303] swapcached 140382208 [ 108.935162][ T5303] pgpgin 93582 [ 108.938534][ T5303] pgpgout 93581 [ 108.942018][ T5303] pgfault 68777 [ 108.945511][ T5303] pgmajfault 197 [ 108.949060][ T5303] inactive_anon 0 [ 108.952736][ T5303] active_anon 4096 [ 108.956447][ T5303] inactive_file 0 [ 108.960073][ T5303] active_file 0 [ 108.963628][ T5303] unevictable 0 [ 108.967116][ T5303] hierarchical_memory_limit 314572800 [ 108.972546][ T5303] hierarchical_memsw_limit 9223372036854771712 [ 108.978697][ T5303] total_cache 0 [ 108.982182][ T5303] total_rss 0 [ 108.985491][ T5303] total_shmem 0 [ 108.988991][ T5303] total_mapped_file 0 [ 108.993021][ T5303] total_dirty 0 [ 108.996475][ T5303] total_writeback 0 [ 109.000305][ T5303] total_workingset_refault_anon 253 [ 109.005612][ T5303] total_workingset_refault_file 2810 [ 109.010912][ T5303] total_swap 4427776 [ 109.014791][ T5303] total_swapcached 140382208 [ 109.019478][ T5303] total_pgpgin 93582 [ 109.023398][ T5303] total_pgpgout 93581 [ 109.027410][ T5303] total_pgfault 68777 [ 109.031413][ T5303] total_pgmajfault 197 [ 109.035469][ T5303] total_inactive_anon 0 [ 109.039621][ T5303] total_active_anon 4096 [ 109.043863][ T5303] total_inactive_file 0 [ 109.048024][ T5303] total_active_file 0 [ 109.052066][ T5303] total_unevictable 0 [ 109.056031][ T5303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.556,pid=5285,uid=0 [ 109.070536][ T5303] Memory cgroup out of memory: Killed process 5285 (syz.0.556) total-vm:100584kB, anon-rss:1232kB, file-rss:26440kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 109.114693][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 109.145070][ T5314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 110.335918][ T5342] syzkaller0: entered promiscuous mode [ 110.383756][ T5342] syzkaller0: entered allmulticast mode [ 110.448882][ T5339] syz.3.571 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 110.459885][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.3.571 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.459909][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.459921][ T5339] Call Trace: [ 110.459928][ T5339] [ 110.459936][ T5339] __dump_stack+0x1d/0x30 [ 110.459958][ T5339] dump_stack_lvl+0x95/0xd0 [ 110.460027][ T5339] dump_stack+0x15/0x1b [ 110.460044][ T5339] dump_header+0x80/0x240 [ 110.460064][ T5339] oom_kill_process+0x295/0x350 [ 110.460091][ T5339] out_of_memory+0x97d/0xb80 [ 110.460191][ T5339] try_charge_memcg+0x62f/0xa10 [ 110.460222][ T5339] charge_memcg+0x6d/0x120 [ 110.460245][ T5339] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 110.460303][ T5339] __swap_cache_prepare_and_add+0x69/0x4a0 [ 110.460327][ T5339] ? alloc_pages_mpol+0x217/0x260 [ 110.460405][ T5339] swap_cache_alloc_folio+0xa2/0x120 [ 110.460428][ T5339] swap_cluster_readahead+0x25f/0x3c0 [ 110.460482][ T5339] swapin_readahead+0xde/0x840 [ 110.460510][ T5339] ? _raw_spin_unlock+0x9/0x30 [ 110.460527][ T5339] ? swap_put_entries_cluster+0x46c/0x490 [ 110.460575][ T5339] ? __css_rstat_updated+0xbb/0x280 [ 110.460626][ T5339] ? __rcu_read_unlock+0x4e/0x70 [ 110.460646][ T5339] ? swap_cache_get_folio+0x1e0/0x1f0 [ 110.460668][ T5339] do_swap_page+0x31e/0x2180 [ 110.460773][ T5339] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 110.460792][ T5339] ? __rcu_read_lock+0x36/0x50 [ 110.460810][ T5339] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 110.460894][ T5339] handle_mm_fault+0xb30/0x2e70 [ 110.460955][ T5339] ? vma_start_read+0x1c7/0x2c0 [ 110.460986][ T5339] do_user_addr_fault+0x62f/0x1050 [ 110.461012][ T5339] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 110.461110][ T5339] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 110.461132][ T5339] ? trace_page_fault_user+0x1f/0xa0 [ 110.461157][ T5339] exc_page_fault+0x62/0xa0 [ 110.461203][ T5339] asm_exc_page_fault+0x26/0x30 [ 110.461221][ T5339] RIP: 0033:0x7ff6fa631f0b [ 110.461236][ T5339] Code: fa 03 48 0f bd d2 48 63 d2 48 01 d2 e8 8e b3 ff ff 49 81 fc 80 00 00 00 0f 87 94 00 00 00 48 8b 3c 24 48 89 ee e8 35 b5 ff ff <48> 8b 14 24 eb 1d 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 [ 110.461252][ T5339] RSP: 002b:00007ffd2fd54730 EFLAGS: 00010246 [ 110.461313][ T5339] RAX: 00007ff6fa5b6ff0 RBX: 00007ff6fb505720 RCX: ffffffff859a845e [ 110.461326][ T5339] RDX: ffffffff859a845e RSI: 00007ff6fa5b6ff8 RDI: 00007ff6fa1b7008 [ 110.461338][ T5339] RBP: 00007ff6fa5b7000 R08: 00007ff6fa9c0000 R09: 00007ff6fa9d6038 [ 110.461351][ T5339] R10: 0000000000000001 R11: 000000000000000f R12: 00007ff6fa5b7000 [ 110.461363][ T5339] R13: 00007ff6fa9d6038 R14: 00007ff6fa1b7008 R15: 0000000000000001 [ 110.461378][ T5339] ? schedule_timeout+0x4e/0x180 [ 110.461457][ T5339] ? schedule_timeout+0x4e/0x180 [ 110.461484][ T5339] [ 110.726264][ T5339] memory: usage 307200kB, limit 307200kB, failcnt 328 [ 110.733098][ T5339] memory+swap: usage 311528kB, limit 9007199254740988kB, failcnt 0 [ 110.740990][ T5339] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 110.748388][ T5339] Memory cgroup stats for /syz3: [ 110.748673][ T5339] cache 0 [ 110.756540][ T5339] rss 0 [ 110.759291][ T5339] shmem 0 [ 110.762351][ T5339] mapped_file 0 [ 110.765803][ T5339] dirty 0 [ 110.768723][ T5339] writeback 0 [ 110.772015][ T5339] workingset_refault_anon 235 [ 110.776681][ T5339] workingset_refault_file 551 [ 110.781464][ T5339] swap 4431872 [ 110.784833][ T5339] swapcached 30457856 [ 110.788796][ T5339] pgpgin 88470 [ 110.792179][ T5339] pgpgout 88470 [ 110.795647][ T5339] pgfault 67508 [ 110.799110][ T5339] pgmajfault 177 [ 110.802670][ T5339] inactive_anon 0 [ 110.806375][ T5339] active_anon 0 [ 110.809818][ T5339] inactive_file 0 [ 110.813530][ T5339] active_file 0 [ 110.816984][ T5339] unevictable 0 [ 110.820475][ T5339] hierarchical_memory_limit 314572800 [ 110.825869][ T5339] hierarchical_memsw_limit 9223372036854771712 [ 110.832038][ T5339] total_cache 0 [ 110.835524][ T5339] total_rss 0 [ 110.838858][ T5339] total_shmem 0 [ 110.842333][ T5339] total_mapped_file 0 [ 110.846421][ T5339] total_dirty 0 [ 110.850017][ T5339] total_writeback 0 [ 110.853861][ T5339] total_workingset_refault_anon 235 [ 110.859176][ T5339] total_workingset_refault_file 551 [ 110.864456][ T5339] total_swap 4431872 [ 110.868402][ T5339] total_swapcached 30457856 [ 110.872928][ T5339] total_pgpgin 88470 [ 110.876810][ T5339] total_pgpgout 88470 [ 110.880800][ T5339] total_pgfault 67508 [ 110.884790][ T5339] total_pgmajfault 177 [ 110.888844][ T5339] total_inactive_anon 0 [ 110.893021][ T5339] total_active_anon 0 [ 110.897060][ T5339] total_inactive_file 0 [ 110.901432][ T5339] total_active_file 0 [ 110.905441][ T5339] total_unevictable 0 [ 110.909026][ T5355] netlink: 88 bytes leftover after parsing attributes in process `syz.1.573'. [ 110.909446][ T5339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.571,pid=5339,uid=0 [ 110.932977][ T5339] Memory cgroup out of memory: Killed process 5339 (syz.3.571) total-vm:100584kB, anon-rss:1232kB, file-rss:26432kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 111.001039][ T5351] tipc: Enabled bearer , priority 0 [ 111.066564][ T5332] tipc: Resetting bearer [ 111.082345][ T5332] tipc: Disabling bearer [ 111.178067][ T5363] block device autoloading is deprecated and will be removed. [ 111.271338][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 111.309624][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 112.633896][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 112.643541][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 112.909114][ T5370] syz.4.575 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 112.923285][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.4.575 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.923313][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.923355][ T5370] Call Trace: [ 112.923362][ T5370] [ 112.923371][ T5370] __dump_stack+0x1d/0x30 [ 112.923399][ T5370] dump_stack_lvl+0x95/0xd0 [ 112.923450][ T5370] dump_stack+0x15/0x1b [ 112.923469][ T5370] dump_header+0x80/0x240 [ 112.923493][ T5370] oom_kill_process+0x295/0x350 [ 112.923592][ T5370] out_of_memory+0x97d/0xb80 [ 112.923636][ T5370] try_charge_memcg+0x62f/0xa10 [ 112.923676][ T5370] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 112.923776][ T5370] __alloc_frozen_pages_noprof+0x18a/0x350 [ 112.923805][ T5370] alloc_pages_mpol+0xb3/0x260 [ 112.923829][ T5370] alloc_pages_noprof+0x8f/0x140 [ 112.923858][ T5370] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 112.923893][ T5370] __kvmalloc_node_noprof+0x3d4/0x640 [ 112.923919][ T5370] ? futex_hash_allocate+0x190/0x9a0 [ 112.923953][ T5370] ? futex_hash_allocate+0x190/0x9a0 [ 112.923994][ T5370] futex_hash_allocate+0x190/0x9a0 [ 112.924026][ T5370] ? cap_task_prctl+0x13f/0x6b0 [ 112.924055][ T5370] futex_hash_prctl+0xd8/0xf0 [ 112.924121][ T5370] __se_sys_prctl+0x4f4/0x1400 [ 112.924197][ T5370] __x64_sys_prctl+0x67/0x80 [ 112.924235][ T5370] x64_sys_call+0x2533/0x3020 [ 112.924260][ T5370] do_syscall_64+0x12c/0x3b0 [ 112.924298][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.924379][ T5370] RIP: 0033:0x7fecf3aace59 [ 112.924399][ T5370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.924419][ T5370] RSP: 002b:00007fecf24bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 112.924443][ T5370] RAX: ffffffffffffffda RBX: 00007fecf3d26180 RCX: 00007fecf3aace59 [ 112.924519][ T5370] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 112.924533][ T5370] RBP: 00007fecf3b42d6f R08: 0000000000000000 R09: 0000000000000000 [ 112.924553][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.924568][ T5370] R13: 00007fecf3d26218 R14: 00007fecf3d26180 R15: 00007ffc0c47bc98 [ 112.924590][ T5370] [ 112.924614][ T5370] memory: usage 307200kB, limit 307200kB, failcnt 3848 [ 113.146004][ T5370] memory+swap: usage 377548kB, limit 9007199254740988kB, failcnt 0 [ 113.153912][ T5370] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 113.161246][ T5370] Memory cgroup stats for /syz4: [ 113.161480][ T5370] cache 0 [ 113.169315][ T5370] rss 8192 [ 113.172341][ T5370] shmem 0 [ 113.175259][ T5370] mapped_file 0 [ 113.178746][ T5370] dirty 0 [ 113.181775][ T5370] writeback 0 [ 113.185120][ T5370] workingset_refault_anon 106 [ 113.189795][ T5370] workingset_refault_file 4707 [ 113.197107][ T5370] swap 72036352 [ 113.200554][ T5370] swapcached 76840960 [ 113.204541][ T5370] pgpgin 139038 [ 113.208009][ T5370] pgpgout 139036 [ 113.211794][ T5370] pgfault 53239 [ 113.215246][ T5370] pgmajfault 91 [ 113.218762][ T5370] inactive_anon 8192 [ 113.222670][ T5370] active_anon 0 [ 113.226210][ T5370] inactive_file 0 [ 113.229849][ T5370] active_file 0 [ 113.233313][ T5370] unevictable 0 [ 113.236776][ T5370] hierarchical_memory_limit 314572800 [ 113.242202][ T5370] hierarchical_memsw_limit 9223372036854771712 [ 113.248385][ T5370] total_cache 0 [ 113.251912][ T5370] total_rss 8192 [ 113.255447][ T5370] total_shmem 0 [ 113.258945][ T5370] total_mapped_file 0 [ 113.262985][ T5370] total_dirty 0 [ 113.266429][ T5370] total_writeback 0 [ 113.270219][ T5370] total_workingset_refault_anon 106 [ 113.275421][ T5370] total_workingset_refault_file 4707 [ 113.280782][ T5370] total_swap 72036352 [ 113.284816][ T5370] total_swapcached 76840960 [ 113.289307][ T5370] total_pgpgin 139038 [ 113.293285][ T5370] total_pgpgout 139036 [ 113.297341][ T5370] total_pgfault 53239 [ 113.301324][ T5370] total_pgmajfault 91 [ 113.305291][ T5370] total_inactive_anon 8192 [ 113.309689][ T5370] total_active_anon 0 [ 113.313670][ T5370] total_inactive_file 0 [ 113.317806][ T5370] total_active_file 0 [ 113.321781][ T5370] total_unevictable 0 [ 113.325752][ T5370] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.575,pid=5358,uid=0 [ 113.340351][ T5370] Memory cgroup out of memory: Killed process 5358 (syz.4.575) total-vm:96348kB, anon-rss:1232kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 113.645659][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 113.665851][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 113.820332][ T5407] syzkaller0: entered promiscuous mode [ 113.842835][ T5407] syzkaller0: entered allmulticast mode [ 113.875998][ T5408] tipc: Enabled bearer , priority 0 [ 114.272990][ T5403] tipc: Resetting bearer [ 114.293249][ T5403] tipc: Disabling bearer [ 114.525479][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 114.536158][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 116.262926][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 116.293324][ T5425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 116.346705][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 116.372404][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 116.386810][ T5435] blktrace: Concurrent blktraces are not allowed on loop6 [ 116.594373][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 116.604401][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 117.360732][ T5457] block device autoloading is deprecated and will be removed. [ 117.477358][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 117.541255][ T5467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.609'. [ 117.563797][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 118.457024][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 121.025775][ T5509] syz.1.622 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 121.039949][ T5509] CPU: 0 UID: 0 PID: 5509 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.039978][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.039992][ T5509] Call Trace: [ 121.040000][ T5509] [ 121.040009][ T5509] __dump_stack+0x1d/0x30 [ 121.040081][ T5509] dump_stack_lvl+0x95/0xd0 [ 121.040105][ T5509] dump_stack+0x15/0x1b [ 121.040155][ T5509] dump_header+0x80/0x240 [ 121.040178][ T5509] oom_kill_process+0x295/0x350 [ 121.040208][ T5509] out_of_memory+0x97d/0xb80 [ 121.040243][ T5509] try_charge_memcg+0x62f/0xa10 [ 121.040314][ T5509] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 121.040349][ T5509] __alloc_frozen_pages_noprof+0x18a/0x350 [ 121.040440][ T5509] alloc_pages_mpol+0xb3/0x260 [ 121.040464][ T5509] alloc_pages_noprof+0x8f/0x140 [ 121.040487][ T5509] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 121.040522][ T5509] __kvmalloc_node_noprof+0x3d4/0x640 [ 121.040566][ T5509] ? futex_hash_allocate+0x190/0x9a0 [ 121.040642][ T5509] ? futex_hash_allocate+0x190/0x9a0 [ 121.040705][ T5509] futex_hash_allocate+0x190/0x9a0 [ 121.040741][ T5509] ? cap_task_prctl+0x13f/0x6b0 [ 121.040774][ T5509] futex_hash_prctl+0xd8/0xf0 [ 121.040808][ T5509] __se_sys_prctl+0x4f4/0x1400 [ 121.040839][ T5509] __x64_sys_prctl+0x67/0x80 [ 121.040862][ T5509] x64_sys_call+0x2533/0x3020 [ 121.040899][ T5509] do_syscall_64+0x12c/0x3b0 [ 121.040936][ T5509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.040961][ T5509] RIP: 0033:0x7fb28eccce59 [ 121.041000][ T5509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.041018][ T5509] RSP: 002b:00007fb28d6dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 121.041045][ T5509] RAX: ffffffffffffffda RBX: 00007fb28ef46180 RCX: 00007fb28eccce59 [ 121.041100][ T5509] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 121.041113][ T5509] RBP: 00007fb28ed62d6f R08: 0000000000000000 R09: 0000000000000000 [ 121.041125][ T5509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.041136][ T5509] R13: 00007fb28ef46218 R14: 00007fb28ef46180 R15: 00007ffed622db28 [ 121.041155][ T5509] [ 121.254804][ T5509] memory: usage 307148kB, limit 307200kB, failcnt 1177 [ 121.261665][ T5509] memory+swap: usage 309664kB, limit 9007199254740988kB, failcnt 0 [ 121.269545][ T5509] kmem: usage 306928kB, limit 9007199254740988kB, failcnt 0 [ 121.277098][ T5509] Memory cgroup stats for /syz1: [ 121.277483][ T5509] cache 188416 [ 121.285781][ T5509] rss 4096 [ 121.288793][ T5509] shmem 188416 [ 121.292172][ T5509] mapped_file 184320 [ 121.296058][ T5509] dirty 0 [ 121.299044][ T5509] writeback 0 [ 121.302402][ T5509] workingset_refault_anon 416 [ 121.307089][ T5509] workingset_refault_file 3258 [ 121.311854][ T5509] swap 2605056 [ 121.315218][ T5509] swapcached 170016768 [ 121.319353][ T5509] pgpgin 136156 [ 121.372962][ T5509] pgpgout 136108 [ 121.376561][ T5509] pgfault 91535 [ 121.380018][ T5509] pgmajfault 256 [ 121.383578][ T5509] inactive_anon 4096 [ 121.387538][ T5509] active_anon 114688 [ 121.391444][ T5509] inactive_file 0 [ 121.395136][ T5509] active_file 0 [ 121.398589][ T5509] unevictable 0 [ 121.402098][ T5509] hierarchical_memory_limit 314572800 [ 121.407471][ T5509] hierarchical_memsw_limit 9223372036854771712 [ 121.413946][ T5509] total_cache 188416 [ 121.417840][ T5509] total_rss 4096 [ 121.421417][ T5509] total_shmem 188416 [ 121.425385][ T5509] total_mapped_file 184320 [ 121.429828][ T5509] total_dirty 0 [ 121.433543][ T5509] total_writeback 0 [ 121.437365][ T5509] total_workingset_refault_anon 416 [ 121.442593][ T5509] total_workingset_refault_file 3258 [ 121.447886][ T5509] total_swap 2605056 [ 121.451851][ T5509] total_swapcached 170016768 [ 121.456531][ T5509] total_pgpgin 136156 [ 121.460557][ T5509] total_pgpgout 136108 [ 121.464640][ T5509] total_pgfault 91535 [ 121.468656][ T5509] total_pgmajfault 256 [ 121.472735][ T5509] total_inactive_anon 4096 [ 121.477244][ T5509] total_active_anon 114688 [ 121.481713][ T5509] total_inactive_file 0 [ 121.485893][ T5509] total_active_file 0 [ 121.489924][ T5509] total_unevictable 0 [ 121.493929][ T5509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.622,pid=5504,uid=0 [ 121.508492][ T5509] Memory cgroup out of memory: Killed process 5504 (syz.1.622) total-vm:94228kB, anon-rss:1244kB, file-rss:22224kB, shmem-rss:472kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 122.002874][ T5539] __nla_validate_parse: 1 callbacks suppressed [ 122.002900][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 122.041116][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 122.122444][ T5545] loop0: detected capacity change from 0 to 512 [ 122.126200][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 122.129968][ T5545] EXT4-fs: Ignoring removed nobh option [ 122.143541][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 122.153205][ T5545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.174462][ T5545] EXT4-fs (loop0): 1 truncate cleaned up [ 122.182330][ T5545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.212122][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 122.212137][ T28] audit: type=1400 audit(1780725592.672:975): avc: denied { write } for pid=5544 comm="syz.0.638" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.546061][ T5557] block device autoloading is deprecated and will be removed. [ 122.726010][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 122.735812][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 122.994009][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.138572][ T5591] loop0: detected capacity change from 0 to 512 [ 123.172058][ T5593] netlink: 88 bytes leftover after parsing attributes in process `syz.4.657'. [ 123.312398][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 123.331362][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 123.441352][ T5604] syzkaller0: entered promiscuous mode [ 123.456011][ T5604] syzkaller0: entered allmulticast mode [ 123.499841][ T5607] loop4: detected capacity change from 0 to 512 [ 124.344997][ T5608] syz.0.664 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 124.355997][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz.0.664 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.356021][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.356032][ T5608] Call Trace: [ 124.356039][ T5608] [ 124.356047][ T5608] __dump_stack+0x1d/0x30 [ 124.356145][ T5608] dump_stack_lvl+0x95/0xd0 [ 124.356163][ T5608] dump_stack+0x15/0x1b [ 124.356222][ T5608] dump_header+0x80/0x240 [ 124.356241][ T5608] oom_kill_process+0x295/0x350 [ 124.356268][ T5608] out_of_memory+0x97d/0xb80 [ 124.356296][ T5608] try_charge_memcg+0x62f/0xa10 [ 124.356399][ T5608] charge_memcg+0x6d/0x120 [ 124.356422][ T5608] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 124.356470][ T5608] __swap_cache_prepare_and_add+0x69/0x4a0 [ 124.356493][ T5608] ? alloc_pages_mpol+0x217/0x260 [ 124.356536][ T5608] swap_cache_alloc_folio+0xa2/0x120 [ 124.356559][ T5608] swap_cluster_readahead+0x25f/0x3c0 [ 124.356585][ T5608] swapin_readahead+0xde/0x840 [ 124.356641][ T5608] ? _raw_spin_unlock+0x9/0x30 [ 124.356658][ T5608] ? swap_put_entries_cluster+0x46c/0x490 [ 124.356728][ T5608] ? __entry_text_end+0x1d848/0x102179 [ 124.356752][ T5608] ? __rcu_read_unlock+0x4e/0x70 [ 124.356789][ T5608] ? swap_cache_get_folio+0x1e0/0x1f0 [ 124.356897][ T5608] do_swap_page+0x31e/0x2180 [ 124.356960][ T5608] ? __css_rstat_updated+0xbb/0x280 [ 124.356981][ T5608] ? __rcu_read_lock+0x36/0x50 [ 124.356998][ T5608] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 124.357074][ T5608] handle_mm_fault+0xb30/0x2e70 [ 124.357097][ T5608] ? vma_start_read+0x1c7/0x2c0 [ 124.357128][ T5608] do_user_addr_fault+0x62f/0x1050 [ 124.357206][ T5608] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 124.357229][ T5608] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 124.357250][ T5608] ? trace_page_fault_user+0x1f/0xa0 [ 124.357295][ T5608] exc_page_fault+0x62/0xa0 [ 124.357319][ T5608] asm_exc_page_fault+0x26/0x30 [ 124.357338][ T5608] RIP: 0033:0x7f12f5b3a83e [ 124.357352][ T5608] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 76 d5 3a 00 85 c0 0f 8e 53 fd ff ff 9d 7f fe ff 49 39 c4 73 88 48 8d 1d 51 b7 3a 00 83 3d 56 d5 3a [ 124.357446][ T5608] RSP: 002b:00007ffe70758940 EFLAGS: 00010202 [ 124.357461][ T5608] RAX: 0000000000000002 RBX: 00007f12f5ee7da0 RCX: 000055555fc51808 [ 124.357474][ T5608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.357485][ T5608] RBP: 00007f12f5ee7da0 R08: 0000000000000000 R09: 0000000000000000 [ 124.357497][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001e5d5 [ 124.357509][ T5608] R13: 00007f12f5ee618c R14: 000000000001e3ba R15: 00007ffe70758a40 [ 124.357527][ T5608] [ 124.357561][ T5608] memory: usage 307200kB, limit 307200kB, failcnt 1307 [ 124.619040][ T5608] memory+swap: usage 311512kB, limit 9007199254740988kB, failcnt 0 [ 124.627002][ T5608] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 124.634297][ T5608] Memory cgroup stats for /syz0: [ 124.634597][ T5608] cache 0 [ 124.642438][ T5608] rss 0 [ 124.645183][ T5608] shmem 0 [ 124.648128][ T5608] mapped_file 0 [ 124.651598][ T5608] dirty 0 [ 124.654599][ T5608] writeback 0 [ 124.657908][ T5608] workingset_refault_anon 352 [ 124.662579][ T5608] workingset_refault_file 2961 [ 124.667323][ T5608] swap 4415488 [ 124.670693][ T5608] swapcached 145137664 [ 124.674742][ T5608] pgpgin 104501 [ 124.678182][ T5608] pgpgout 104499 [ 124.681729][ T5608] pgfault 81951 [ 124.685195][ T5608] pgmajfault 267 [ 124.688722][ T5608] inactive_anon 0 [ 124.692348][ T5608] active_anon 8192 [ 124.696048][ T5608] inactive_file 0 [ 124.699661][ T5608] active_file 0 [ 124.703165][ T5608] unevictable 0 [ 124.706607][ T5608] hierarchical_memory_limit 314572800 [ 124.712014][ T5608] hierarchical_memsw_limit 9223372036854771712 [ 124.718155][ T5608] total_cache 0 [ 124.721634][ T5608] total_rss 0 [ 124.724909][ T5608] total_shmem 0 [ 124.728364][ T5608] total_mapped_file 0 [ 124.732352][ T5608] total_dirty 0 [ 124.735795][ T5608] total_writeback 0 [ 124.739583][ T5608] total_workingset_refault_anon 352 [ 124.744783][ T5608] total_workingset_refault_file 2961 [ 124.750048][ T5608] total_swap 4415488 [ 124.753936][ T5608] total_swapcached 145137664 [ 124.758505][ T5608] total_pgpgin 104501 [ 124.762509][ T5608] total_pgpgout 104499 [ 124.766561][ T5608] total_pgfault 81951 [ 124.770522][ T5608] total_pgmajfault 267 [ 124.774671][ T5608] total_inactive_anon 0 [ 124.778805][ T5608] total_active_anon 8192 [ 124.783087][ T5608] total_inactive_file 0 [ 124.787222][ T5608] total_active_file 0 [ 124.791237][ T5608] total_unevictable 0 [ 124.795202][ T5608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.664,pid=5608,uid=0 [ 124.809944][ T5608] Memory cgroup out of memory: Killed process 5608 (syz.0.664) total-vm:96348kB, anon-rss:1232kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 124.954956][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 125.360254][ T5636] syzkaller0: entered promiscuous mode [ 125.373846][ T5636] syzkaller0: entered allmulticast mode [ 125.980756][ T5651] blktrace: Concurrent blktraces are not allowed on loop4 [ 126.911329][ T5660] syz.0.680 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 126.925562][ T5660] CPU: 0 UID: 0 PID: 5660 Comm: syz.0.680 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.925587][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.925598][ T5660] Call Trace: [ 126.925605][ T5660] [ 126.925613][ T5660] __dump_stack+0x1d/0x30 [ 126.925678][ T5660] dump_stack_lvl+0x95/0xd0 [ 126.925703][ T5660] dump_stack+0x15/0x1b [ 126.925721][ T5660] dump_header+0x80/0x240 [ 126.925741][ T5660] oom_kill_process+0x295/0x350 [ 126.925769][ T5660] out_of_memory+0x97d/0xb80 [ 126.925852][ T5660] try_charge_memcg+0x62f/0xa10 [ 126.925907][ T5660] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 126.925937][ T5660] __alloc_frozen_pages_noprof+0x18a/0x350 [ 126.925964][ T5660] alloc_pages_mpol+0xb3/0x260 [ 126.925991][ T5660] alloc_pages_noprof+0x8f/0x140 [ 126.926060][ T5660] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 126.926089][ T5660] __kvmalloc_node_noprof+0x3d4/0x640 [ 126.926115][ T5660] ? futex_hash_allocate+0x190/0x9a0 [ 126.926151][ T5660] ? futex_hash_allocate+0x190/0x9a0 [ 126.926198][ T5660] futex_hash_allocate+0x190/0x9a0 [ 126.926252][ T5660] ? cap_task_prctl+0x13f/0x6b0 [ 126.926281][ T5660] futex_hash_prctl+0xd8/0xf0 [ 126.926308][ T5660] __se_sys_prctl+0x4f4/0x1400 [ 126.926334][ T5660] __x64_sys_prctl+0x67/0x80 [ 126.926431][ T5660] x64_sys_call+0x2533/0x3020 [ 126.926452][ T5660] do_syscall_64+0x12c/0x3b0 [ 126.926482][ T5660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.926502][ T5660] RIP: 0033:0x7f12f5c6ce59 [ 126.926535][ T5660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.926567][ T5660] RSP: 002b:00007f12f467d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 126.926586][ T5660] RAX: ffffffffffffffda RBX: 00007f12f5ee6180 RCX: 00007f12f5c6ce59 [ 126.926599][ T5660] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 126.926611][ T5660] RBP: 00007f12f5d02d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.926623][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.926704][ T5660] R13: 00007f12f5ee6218 R14: 00007f12f5ee6180 R15: 00007ffe707587d8 [ 126.926734][ T5660] [ 126.926936][ T5660] memory: usage 307200kB, limit 307200kB, failcnt 1369 [ 127.148769][ T5660] memory+swap: usage 307688kB, limit 9007199254740988kB, failcnt 0 [ 127.156792][ T5660] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 127.164182][ T5660] Memory cgroup stats for /syz0: [ 127.164451][ T5660] cache 4096 [ 127.172599][ T5660] rss 4096 [ 127.175662][ T5660] shmem 0 [ 127.178599][ T5660] mapped_file 4096 [ 127.182380][ T5660] dirty 4096 [ 127.185622][ T5660] writeback 0 [ 127.188895][ T5660] workingset_refault_anon 400 [ 127.193874][ T5660] workingset_refault_file 3089 [ 127.198657][ T5660] swap 507904 [ 127.201958][ T5660] swapcached 145784832 [ 127.206083][ T5660] pgpgin 107760 [ 127.209529][ T5660] pgpgout 107753 [ 127.213090][ T5660] pgfault 85423 [ 127.216536][ T5660] pgmajfault 286 [ 127.220132][ T5660] inactive_anon 0 [ 127.223841][ T5660] active_anon 24576 [ 127.227707][ T5660] inactive_file 4096 [ 127.231633][ T5660] active_file 0 [ 127.235084][ T5660] unevictable 0 [ 127.238528][ T5660] hierarchical_memory_limit 314572800 [ 127.243911][ T5660] hierarchical_memsw_limit 9223372036854771712 [ 127.250047][ T5660] total_cache 4096 [ 127.253767][ T5660] total_rss 4096 [ 127.257326][ T5660] total_shmem 0 [ 127.260814][ T5660] total_mapped_file 4096 [ 127.265094][ T5660] total_dirty 4096 [ 127.268796][ T5660] total_writeback 0 [ 127.272682][ T5660] total_workingset_refault_anon 400 [ 127.277888][ T5660] total_workingset_refault_file 3089 [ 127.283201][ T5660] total_swap 507904 [ 127.287006][ T5660] total_swapcached 145784832 [ 127.291736][ T5660] total_pgpgin 107760 [ 127.295736][ T5660] total_pgpgout 107753 [ 127.299806][ T5660] total_pgfault 85423 [ 127.303803][ T5660] total_pgmajfault 286 [ 127.307922][ T5660] total_inactive_anon 0 [ 127.312086][ T5660] total_active_anon 24576 [ 127.316405][ T5660] total_inactive_file 4096 [ 127.320826][ T5660] total_active_file 0 [ 127.324790][ T5660] total_unevictable 0 [ 127.328758][ T5660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.680,pid=5652,uid=0 [ 127.343338][ T5660] Memory cgroup out of memory: Killed process 5652 (syz.0.680) total-vm:94300kB, anon-rss:1232kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 127.419432][ T5657] syz.4.682 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 127.430340][ T5657] CPU: 0 UID: 0 PID: 5657 Comm: syz.4.682 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.430413][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.430424][ T5657] Call Trace: [ 127.430430][ T5657] [ 127.430438][ T5657] __dump_stack+0x1d/0x30 [ 127.430460][ T5657] dump_stack_lvl+0x95/0xd0 [ 127.430478][ T5657] dump_stack+0x15/0x1b [ 127.430537][ T5657] dump_header+0x80/0x240 [ 127.430557][ T5657] oom_kill_process+0x295/0x350 [ 127.430584][ T5657] out_of_memory+0x97d/0xb80 [ 127.430660][ T5657] try_charge_memcg+0x62f/0xa10 [ 127.430691][ T5657] charge_memcg+0x6d/0x120 [ 127.430713][ T5657] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 127.430739][ T5657] __swap_cache_prepare_and_add+0x69/0x4a0 [ 127.430855][ T5657] ? alloc_pages_mpol+0x217/0x260 [ 127.430878][ T5657] swap_cache_alloc_folio+0xa2/0x120 [ 127.430901][ T5657] swap_cluster_readahead+0x35c/0x3c0 [ 127.430927][ T5657] swapin_readahead+0xde/0x840 [ 127.430995][ T5657] ? _raw_spin_unlock+0x9/0x30 [ 127.431033][ T5657] ? swap_put_entries_cluster+0x46c/0x490 [ 127.431057][ T5657] ? __entry_text_end+0x1d848/0x102179 [ 127.431140][ T5657] ? __rcu_read_unlock+0x4e/0x70 [ 127.431224][ T5657] ? swap_cache_get_folio+0x1e0/0x1f0 [ 127.431247][ T5657] do_swap_page+0x31e/0x2180 [ 127.431269][ T5657] ? __css_rstat_updated+0xbb/0x280 [ 127.431290][ T5657] ? __rcu_read_lock+0x36/0x50 [ 127.431332][ T5657] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 127.431366][ T5657] handle_mm_fault+0xb30/0x2e70 [ 127.431440][ T5657] ? vma_start_read+0x1c7/0x2c0 [ 127.431513][ T5657] do_user_addr_fault+0x62f/0x1050 [ 127.431547][ T5657] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 127.431624][ T5657] ? trace_page_fault_user+0x1f/0xa0 [ 127.431649][ T5657] exc_page_fault+0x62/0xa0 [ 127.431736][ T5657] asm_exc_page_fault+0x26/0x30 [ 127.431754][ T5657] RIP: 0033:0x7fecf39607fc [ 127.431818][ T5657] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 127.431888][ T5657] RSP: 002b:00007ffc0c47bd28 EFLAGS: 00010246 [ 127.431904][ T5657] RAX: 0000000000000000 RBX: ffffffff81550c51 RCX: ffffffff81550c51 [ 127.431916][ T5657] RDX: 0000000000000c51 RSI: ffffffff81550c51 RDI: 000000000000001a [ 127.431928][ T5657] RBP: 0000000000000004 R08: 00007fecf3d10000 R09: 00007fecf3d12000 [ 127.431941][ T5657] R10: 0000000081550c55 R11: 000000000000001a R12: 00007fecf3d26218 [ 127.431953][ T5657] R13: 0000000000000004 R14: ffffffff815503f1 R15: 00007fecf4855720 [ 127.431965][ T5657] ? __cgroup_account_cputime+0x81/0xa0 [ 127.432064][ T5657] ? copy_cgroup_ns+0x1a1/0x400 [ 127.432085][ T5657] ? copy_cgroup_ns+0x1a1/0x400 [ 127.432123][ T5657] ? copy_cgroup_ns+0x1a1/0x400 [ 127.432169][ T5657] [ 127.700193][ T5657] memory: usage 307200kB, limit 307200kB, failcnt 4179 [ 127.707053][ T5657] memory+swap: usage 312060kB, limit 9007199254740988kB, failcnt 0 [ 127.714949][ T5657] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 127.722366][ T5657] Memory cgroup stats for /syz4: [ 127.722585][ T5657] cache 0 [ 127.730491][ T5657] rss 0 [ 127.733346][ T5657] shmem 0 [ 127.736332][ T5657] mapped_file 0 [ 127.739900][ T5657] dirty 0 [ 127.742884][ T5657] writeback 0 [ 127.746200][ T5657] workingset_refault_anon 185 [ 127.750951][ T5657] workingset_refault_file 7703 [ 127.755745][ T5657] swap 4976640 [ 127.759107][ T5657] swapcached 81719296 [ 127.763101][ T5657] pgpgin 172857 [ 127.766547][ T5657] pgpgout 172856 [ 127.770076][ T5657] pgfault 67540 [ 127.773537][ T5657] pgmajfault 148 [ 127.777072][ T5657] inactive_anon 0 [ 127.780705][ T5657] active_anon 4096 [ 127.784468][ T5657] inactive_file 0 [ 127.788107][ T5657] active_file 0 [ 127.791623][ T5657] unevictable 0 [ 127.795069][ T5657] hierarchical_memory_limit 314572800 [ 127.800422][ T5657] hierarchical_memsw_limit 9223372036854771712 [ 127.806587][ T5657] total_cache 0 [ 127.810029][ T5657] total_rss 0 [ 127.813316][ T5657] total_shmem 0 [ 127.816762][ T5657] total_mapped_file 0 [ 127.820764][ T5657] total_dirty 0 [ 127.824211][ T5657] total_writeback 0 [ 127.828005][ T5657] total_workingset_refault_anon 185 [ 127.833304][ T5657] total_workingset_refault_file 7703 [ 127.838570][ T5657] total_swap 4976640 [ 127.842465][ T5657] total_swapcached 81719296 [ 127.846957][ T5657] total_pgpgin 172857 [ 127.851041][ T5657] total_pgpgout 172856 [ 127.855098][ T5657] total_pgfault 67540 [ 127.859062][ T5657] total_pgmajfault 148 [ 127.863210][ T5657] total_inactive_anon 0 [ 127.867384][ T5657] total_active_anon 4096 [ 127.871672][ T5657] total_inactive_file 0 [ 127.875817][ T5657] total_active_file 0 [ 127.879851][ T5657] total_unevictable 0 [ 127.883858][ T5657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.682,pid=5657,uid=0 [ 127.898573][ T5657] Memory cgroup out of memory: Killed process 5657 (syz.4.682) total-vm:96348kB, anon-rss:1232kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 127.923552][ T3298] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 127.942070][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 127.942094][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.942106][ T3298] Call Trace: [ 127.942113][ T3298] [ 127.942181][ T3298] __dump_stack+0x1d/0x30 [ 127.942215][ T3298] dump_stack_lvl+0x95/0xd0 [ 127.942331][ T3298] dump_stack+0x15/0x1b [ 127.942351][ T3298] dump_header+0x80/0x240 [ 127.942372][ T3298] oom_kill_process+0x295/0x350 [ 127.942469][ T3298] out_of_memory+0x97d/0xb80 [ 127.942496][ T3298] try_charge_memcg+0x62f/0xa10 [ 127.942543][ T3298] charge_memcg+0x6d/0x120 [ 127.942644][ T3298] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 127.942693][ T3298] __swap_cache_prepare_and_add+0x69/0x4a0 [ 127.942715][ T3298] ? alloc_pages_mpol+0x217/0x260 [ 127.942740][ T3298] swap_cache_alloc_folio+0xa2/0x120 [ 127.942789][ T3298] swap_cluster_readahead+0x25f/0x3c0 [ 127.942820][ T3298] swapin_readahead+0xde/0x840 [ 127.942913][ T3298] ? _raw_spin_unlock+0x9/0x30 [ 127.942936][ T3298] ? swap_put_entries_cluster+0x46c/0x490 [ 127.942957][ T3298] ? __entry_text_end+0x1d848/0x102179 [ 127.943015][ T3298] ? wait_consider_task+0xc18/0x1670 [ 127.943040][ T3298] ? __rcu_read_unlock+0x4e/0x70 [ 127.943060][ T3298] ? swap_cache_get_folio+0x1e0/0x1f0 [ 127.943102][ T3298] do_swap_page+0x31e/0x2180 [ 127.943207][ T3298] ? __rcu_read_lock+0x36/0x50 [ 127.943225][ T3298] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 127.943250][ T3298] handle_mm_fault+0xb30/0x2e70 [ 127.943310][ T3298] ? vma_start_read+0x1c7/0x2c0 [ 127.943404][ T3298] do_user_addr_fault+0x62f/0x1050 [ 127.943473][ T3298] ? trace_page_fault_user+0x1f/0xa0 [ 127.943502][ T3298] exc_page_fault+0x62/0xa0 [ 127.943527][ T3298] asm_exc_page_fault+0x26/0x30 [ 127.943565][ T3298] RIP: 0033:0x7fecf397ae32 [ 127.943579][ T3298] Code: ff ff ff ff e8 3f 04 13 00 39 c3 0f 84 af 04 00 00 4c 8b 25 80 a8 ed 00 48 8b 05 81 a8 ed 00 4c 89 fe bf 01 00 00 00 4d 89 e5 <48> 89 44 24 10 49 c1 e5 04 4d 29 e5 49 c1 e5 03 e8 a9 ad 12 00 85 [ 127.943594][ T3298] RSP: 002b:00007ffc0c47c000 EFLAGS: 00010202 [ 127.943612][ T3298] RAX: 0000000000000032 RBX: 00000000000001c1 RCX: 00007fecf3aad9b3 [ 127.943624][ T3298] RDX: 0000000000000000 RSI: 00007ffc0c47c090 RDI: 0000000000000001 [ 127.943635][ T3298] RBP: 00007ffc0c47c03c R08: 0000000000000000 R09: 0000000000000000 [ 127.943649][ T3298] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 127.943662][ T3298] R13: 0000000000001388 R14: 000000000001ef58 R15: 00007ffc0c47c090 [ 127.943758][ T3298] [ 127.943775][ T3298] memory: usage 307200kB, limit 307200kB, failcnt 4258 [ 128.199147][ T3298] memory+swap: usage 312052kB, limit 9007199254740988kB, failcnt 0 [ 128.207271][ T3298] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 128.214860][ T3298] Memory cgroup stats for /syz4: [ 128.215028][ T3298] cache 0 [ 128.223024][ T3298] rss 4096 [ 128.226064][ T3298] shmem 0 [ 128.229010][ T3298] mapped_file 0 [ 128.232704][ T3298] dirty 0 [ 128.235665][ T3298] writeback 0 [ 128.238972][ T3298] workingset_refault_anon 188 [ 128.243880][ T3298] workingset_refault_file 7703 [ 128.248712][ T3298] swap 4968448 [ 128.252254][ T3298] swapcached 81731584 [ 128.256258][ T3298] pgpgin 172860 [ 128.259736][ T3298] pgpgout 172857 [ 128.263542][ T3298] pgfault 67543 [ 128.267008][ T3298] pgmajfault 151 [ 128.270809][ T3298] inactive_anon 0 [ 128.274467][ T3298] active_anon 12288 [ 128.278272][ T3298] inactive_file 0 [ 128.282357][ T3298] active_file 0 [ 128.285861][ T3298] unevictable 0 [ 128.289441][ T3298] hierarchical_memory_limit 314572800 [ 128.295066][ T3298] hierarchical_memsw_limit 9223372036854771712 [ 128.301482][ T3298] total_cache 0 [ 128.304985][ T3298] total_rss 4096 [ 128.308828][ T3298] total_shmem 0 [ 128.325475][ T3298] total_mapped_file 0 [ 128.331522][ T3298] total_dirty 0 [ 128.338192][ T3298] total_writeback 0 [ 128.343053][ T5677] __nla_validate_parse: 3 callbacks suppressed [ 128.343071][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 128.358760][ T3298] total_workingset_refault_anon 188 [ 128.364118][ T3298] total_workingset_refault_file 7703 [ 128.370393][ T3298] total_swap 4968448 [ 128.380661][ T3298] total_swapcached 81731584 [ 128.388314][ T3298] total_pgpgin 172860 [ 128.396251][ T3298] total_pgpgout 172857 [ 128.405735][ T3298] total_pgfault 67543 [ 128.414000][ T3298] total_pgmajfault 151 [ 128.421219][ T3298] total_inactive_anon 0 [ 128.430973][ T3298] total_active_anon 12288 [ 128.440808][ T3298] total_inactive_file 0 [ 128.447940][ T3298] total_active_file 0 [ 128.453847][ T5679] syzkaller0: entered promiscuous mode [ 128.459333][ T5679] syzkaller0: entered allmulticast mode [ 128.465055][ T3298] total_unevictable 0 [ 128.469036][ T3298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.33,pid=3648,uid=0 [ 128.485666][ T3298] Memory cgroup out of memory: Killed process 3648 (syz.4.33) total-vm:96012kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 128.766773][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 128.795329][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 128.947180][ T5699] netlink: 88 bytes leftover after parsing attributes in process `syz.2.695'. [ 129.234916][ T5712] syzkaller0: entered promiscuous mode [ 129.240591][ T5712] syzkaller0: entered allmulticast mode [ 129.631718][ T5710] syz.2.698 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 129.645801][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.645874][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.645886][ T5710] Call Trace: [ 129.645892][ T5710] [ 129.645900][ T5710] __dump_stack+0x1d/0x30 [ 129.645923][ T5710] dump_stack_lvl+0x95/0xd0 [ 129.646013][ T5710] dump_stack+0x15/0x1b [ 129.646030][ T5710] dump_header+0x80/0x240 [ 129.646050][ T5710] oom_kill_process+0x295/0x350 [ 129.646140][ T5710] out_of_memory+0x97d/0xb80 [ 129.646169][ T5710] try_charge_memcg+0x62f/0xa10 [ 129.646268][ T5710] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 129.646291][ T5710] __alloc_frozen_pages_noprof+0x18a/0x350 [ 129.646315][ T5710] alloc_pages_bulk_noprof+0x4d1/0x560 [ 129.646401][ T5710] ? policy_nodemask+0x417/0x5e0 [ 129.646421][ T5710] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 129.646448][ T5710] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 129.646520][ T5710] ? alloc_pages_mpol+0x217/0x260 [ 129.646543][ T5710] __vmalloc_node_range_noprof+0x891/0x11c0 [ 129.646572][ T5710] __kvmalloc_node_noprof+0x3d4/0x640 [ 129.646592][ T5710] ? futex_hash_allocate+0x190/0x9a0 [ 129.646625][ T5710] ? futex_hash_allocate+0x190/0x9a0 [ 129.646682][ T5710] futex_hash_allocate+0x190/0x9a0 [ 129.646711][ T5710] ? cap_task_prctl+0x13f/0x6b0 [ 129.646768][ T5710] futex_hash_prctl+0xd8/0xf0 [ 129.646794][ T5710] __se_sys_prctl+0x4f4/0x1400 [ 129.646819][ T5710] __x64_sys_prctl+0x67/0x80 [ 129.646841][ T5710] x64_sys_call+0x2533/0x3020 [ 129.646863][ T5710] do_syscall_64+0x12c/0x3b0 [ 129.646900][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.646920][ T5710] RIP: 0033:0x7f0faec4ce59 [ 129.646935][ T5710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.646952][ T5710] RSP: 002b:00007f0fad686028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 129.647043][ T5710] RAX: ffffffffffffffda RBX: 00007f0faeec6090 RCX: 00007f0faec4ce59 [ 129.647056][ T5710] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 129.647068][ T5710] RBP: 00007f0faece2d6f R08: 0000000000000000 R09: 0000000000000000 [ 129.647080][ T5710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.647092][ T5710] R13: 00007f0faeec6128 R14: 00007f0faeec6090 R15: 00007fff838c1e18 [ 129.647125][ T5710] [ 129.647132][ T5710] memory: usage 307200kB, limit 307200kB, failcnt 325 [ 129.887377][ T5710] memory+swap: usage 311652kB, limit 9007199254740988kB, failcnt 0 [ 129.895310][ T5710] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 129.902637][ T5710] Memory cgroup stats for /syz2: [ 129.902954][ T5710] cache 28672 [ 129.911496][ T5710] rss 0 [ 129.914343][ T5710] shmem 0 [ 129.917279][ T5710] mapped_file 28672 [ 129.921093][ T5710] dirty 0 [ 129.924063][ T5710] writeback 28672 [ 129.927770][ T5710] workingset_refault_anon 52 [ 129.932365][ T5710] workingset_refault_file 192 [ 129.937077][ T5710] swap 4583424 [ 129.940446][ T5710] swapcached 9170944 [ 129.944546][ T5710] pgpgin 103197 [ 129.948036][ T5710] pgpgout 103187 [ 129.951595][ T5710] pgfault 69783 [ 129.955048][ T5710] pgmajfault 41 [ 129.958492][ T5710] inactive_anon 0 [ 129.962161][ T5710] active_anon 8192 [ 129.965872][ T5710] inactive_file 0 [ 129.969489][ T5710] active_file 28672 [ 129.973336][ T5710] unevictable 0 [ 129.976787][ T5710] hierarchical_memory_limit 314572800 [ 129.982235][ T5710] hierarchical_memsw_limit 9223372036854771712 [ 129.988476][ T5710] total_cache 28672 [ 129.992302][ T5710] total_rss 0 [ 129.995570][ T5710] total_shmem 0 [ 129.999014][ T5710] total_mapped_file 28672 [ 130.003367][ T5710] total_dirty 0 [ 130.006816][ T5710] total_writeback 28672 [ 130.011146][ T5710] total_workingset_refault_anon 52 [ 130.016251][ T5710] total_workingset_refault_file 192 [ 130.021524][ T5710] total_swap 4583424 [ 130.025414][ T5710] total_swapcached 9170944 [ 130.029898][ T5710] total_pgpgin 103197 [ 130.033910][ T5710] total_pgpgout 103187 [ 130.037993][ T5710] total_pgfault 69783 [ 130.042001][ T5710] total_pgmajfault 41 [ 130.045965][ T5710] total_inactive_anon 0 [ 130.050133][ T5710] total_active_anon 8192 [ 130.054395][ T5710] total_inactive_file 0 [ 130.058539][ T5710] total_active_file 28672 [ 130.062917][ T5710] total_unevictable 0 [ 130.066884][ T5710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.698,pid=5705,uid=0 [ 130.081447][ T5710] Memory cgroup out of memory: Killed process 5705 (syz.2.698) total-vm:96216kB, anon-rss:1240kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 130.098514][ T5701] syz.3.696 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 130.112592][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: syz.3.696 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.112618][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.112684][ T5701] Call Trace: [ 130.112691][ T5701] [ 130.112701][ T5701] __dump_stack+0x1d/0x30 [ 130.112792][ T5701] dump_stack_lvl+0x95/0xd0 [ 130.112811][ T5701] dump_stack+0x15/0x1b [ 130.112846][ T5701] dump_header+0x80/0x240 [ 130.112869][ T5701] oom_kill_process+0x295/0x350 [ 130.112900][ T5701] out_of_memory+0x97d/0xb80 [ 130.112933][ T5701] try_charge_memcg+0x62f/0xa10 [ 130.113056][ T5701] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 130.113090][ T5701] __alloc_frozen_pages_noprof+0x18a/0x350 [ 130.113118][ T5701] alloc_pages_mpol+0xb3/0x260 [ 130.113210][ T5701] alloc_pages_noprof+0x8f/0x140 [ 130.113238][ T5701] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 130.113275][ T5701] __kvmalloc_node_noprof+0x3d4/0x640 [ 130.113323][ T5701] ? futex_hash_allocate+0x190/0x9a0 [ 130.113424][ T5701] ? futex_hash_allocate+0x190/0x9a0 [ 130.113455][ T5701] futex_hash_allocate+0x190/0x9a0 [ 130.113485][ T5701] ? cap_task_prctl+0x13f/0x6b0 [ 130.113584][ T5701] futex_hash_prctl+0xd8/0xf0 [ 130.113658][ T5701] __se_sys_prctl+0x4f4/0x1400 [ 130.113717][ T5701] __x64_sys_prctl+0x67/0x80 [ 130.113748][ T5701] x64_sys_call+0x2533/0x3020 [ 130.113775][ T5701] do_syscall_64+0x12c/0x3b0 [ 130.113805][ T5701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.113854][ T5701] RIP: 0033:0x7ff6fa75ce59 [ 130.113869][ T5701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.113886][ T5701] RSP: 002b:00007ff6f91af028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 130.113909][ T5701] RAX: ffffffffffffffda RBX: 00007ff6fa9d5fa0 RCX: 00007ff6fa75ce59 [ 130.113957][ T5701] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 130.113973][ T5701] RBP: 00007ff6fa7f2d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.114058][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.114070][ T5701] R13: 00007ff6fa9d6038 R14: 00007ff6fa9d5fa0 R15: 00007ffd2fd54688 [ 130.114090][ T5701] [ 130.114126][ T5701] memory: usage 290292kB, limit 307200kB, failcnt 451 [ 130.335953][ T5701] memory+swap: usage 129588kB, limit 9007199254740988kB, failcnt 0 [ 130.343881][ T5701] kmem: usage 124396kB, limit 9007199254740988kB, failcnt 0 [ 130.351189][ T5701] Memory cgroup stats for /syz3: [ 130.351501][ T5701] cache 524288 [ 130.359799][ T5701] rss 102400 [ 130.363110][ T5701] shmem 0 [ 130.366069][ T5701] mapped_file 65536 [ 130.369907][ T5701] dirty 4096 [ 130.373265][ T5701] writeback 0 [ 130.376565][ T5701] workingset_refault_anon 287 [ 130.381310][ T5701] workingset_refault_file 641 [ 130.386035][ T5701] swap 524288 [ 130.389313][ T5701] swapcached 31232000 [ 130.393315][ T5701] pgpgin 98709 [ 130.396704][ T5701] pgpgout 98556 [ 130.400205][ T5701] pgfault 79007 [ 130.403702][ T5701] pgmajfault 219 [ 130.407241][ T5701] inactive_anon 0 [ 130.410902][ T5701] active_anon 102400 [ 130.414790][ T5701] inactive_file 0 [ 130.418417][ T5701] active_file 524288 [ 130.422329][ T5701] unevictable 0 [ 130.425845][ T5701] hierarchical_memory_limit 314572800 [ 130.431238][ T5701] hierarchical_memsw_limit 9223372036854771712 [ 130.437394][ T5701] total_cache 524288 [ 130.441376][ T5701] total_rss 102400 [ 130.445151][ T5701] total_shmem 0 [ 130.448604][ T5701] total_mapped_file 65536 [ 130.452947][ T5701] total_dirty 4096 [ 130.456789][ T5701] total_writeback 0 [ 130.460654][ T5701] total_workingset_refault_anon 287 [ 130.465852][ T5701] total_workingset_refault_file 641 [ 130.471078][ T5701] total_swap 524288 [ 130.474949][ T5701] total_swapcached 31232000 [ 130.479433][ T5701] total_pgpgin 98709 [ 130.483363][ T5701] total_pgpgout 98556 [ 130.487389][ T5701] total_pgfault 79007 [ 130.491386][ T5701] total_pgmajfault 219 [ 130.495445][ T5701] total_inactive_anon 0 [ 130.499667][ T5701] total_active_anon 102400 [ 130.501206][ T5721] netlink: 88 bytes leftover after parsing attributes in process `syz.0.702'. [ 130.504125][ T5701] total_inactive_file 0 [ 130.504136][ T5701] total_active_file 524288 [ 130.521539][ T5701] total_unevictable 0 [ 130.525607][ T5701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.696,pid=5700,uid=0 [ 130.540188][ T5701] Memory cgroup out of memory: Killed process 5701 (syz.3.696) total-vm:94168kB, anon-rss:1340kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 130.656358][ T5732] netlink: 88 bytes leftover after parsing attributes in process `syz.1.707'. [ 131.002745][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 131.911973][ T5755] syz.2.716 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 131.926017][ T5755] CPU: 1 UID: 0 PID: 5755 Comm: syz.2.716 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.926045][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.926099][ T5755] Call Trace: [ 131.926106][ T5755] [ 131.926116][ T5755] __dump_stack+0x1d/0x30 [ 131.926139][ T5755] dump_stack_lvl+0x95/0xd0 [ 131.926158][ T5755] dump_stack+0x15/0x1b [ 131.926176][ T5755] dump_header+0x80/0x240 [ 131.926237][ T5755] oom_kill_process+0x295/0x350 [ 131.926282][ T5755] out_of_memory+0x97d/0xb80 [ 131.926339][ T5755] try_charge_memcg+0x62f/0xa10 [ 131.926377][ T5755] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 131.926476][ T5755] __alloc_frozen_pages_noprof+0x18a/0x350 [ 131.926507][ T5755] alloc_pages_bulk_noprof+0x4d1/0x560 [ 131.926534][ T5755] ? policy_nodemask+0x417/0x5e0 [ 131.926583][ T5755] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 131.926605][ T5755] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 131.926635][ T5755] ? alloc_pages_mpol+0x217/0x260 [ 131.926663][ T5755] __vmalloc_node_range_noprof+0x891/0x11c0 [ 131.926760][ T5755] __kvmalloc_node_noprof+0x3d4/0x640 [ 131.926784][ T5755] ? futex_hash_allocate+0x190/0x9a0 [ 131.926817][ T5755] ? futex_hash_allocate+0x190/0x9a0 [ 131.926852][ T5755] futex_hash_allocate+0x190/0x9a0 [ 131.926943][ T5755] ? cap_task_prctl+0x13f/0x6b0 [ 131.926980][ T5755] futex_hash_prctl+0xd8/0xf0 [ 131.927015][ T5755] __se_sys_prctl+0x4f4/0x1400 [ 131.927045][ T5755] __x64_sys_prctl+0x67/0x80 [ 131.927071][ T5755] x64_sys_call+0x2533/0x3020 [ 131.927104][ T5755] do_syscall_64+0x12c/0x3b0 [ 131.927136][ T5755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.927200][ T5755] RIP: 0033:0x7f0faec4ce59 [ 131.927215][ T5755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.927232][ T5755] RSP: 002b:00007f0fad665028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 131.927254][ T5755] RAX: ffffffffffffffda RBX: 00007f0faeec6180 RCX: 00007f0faec4ce59 [ 131.927268][ T5755] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 131.927352][ T5755] RBP: 00007f0faece2d6f R08: 0000000000000000 R09: 0000000000000000 [ 131.927366][ T5755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.927380][ T5755] R13: 00007f0faeec6218 R14: 00007f0faeec6180 R15: 00007fff838c1e18 [ 131.927402][ T5755] [ 131.927409][ T5755] memory: usage 307200kB, limit 307200kB, failcnt 392 [ 131.972449][ T5765] netlink: 88 bytes leftover after parsing attributes in process `syz.0.721'. [ 131.975312][ T5755] memory+swap: usage 311540kB, limit 9007199254740988kB, failcnt 0 [ 132.185234][ T5755] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 132.192622][ T5755] Memory cgroup stats for /syz2: [ 132.193393][ T5755] cache 4096 [ 132.202180][ T5755] rss 8192 [ 132.205204][ T5755] shmem 0 [ 132.208129][ T5755] mapped_file 4096 [ 132.211863][ T5755] dirty 4096 [ 132.215055][ T5755] writeback 0 [ 132.218357][ T5755] workingset_refault_anon 117 [ 132.223040][ T5755] workingset_refault_file 211 [ 132.227702][ T5755] swap 4521984 [ 132.231309][ T5755] swapcached 13803520 [ 132.235409][ T5755] pgpgin 106332 [ 132.238859][ T5755] pgpgout 106307 [ 132.242443][ T5755] pgfault 73134 [ 132.246008][ T5755] pgmajfault 86 [ 132.249518][ T5755] inactive_anon 98304 [ 132.253672][ T5755] active_anon 0 [ 132.257117][ T5755] inactive_file 4096 [ 132.261034][ T5755] active_file 0 [ 132.264610][ T5755] unevictable 0 [ 132.268280][ T5755] hierarchical_memory_limit 314572800 [ 132.273821][ T5755] hierarchical_memsw_limit 9223372036854771712 [ 132.280092][ T5755] total_cache 4096 [ 132.283845][ T5755] total_rss 8192 [ 132.287387][ T5755] total_shmem 0 [ 132.290856][ T5755] total_mapped_file 4096 [ 132.295093][ T5755] total_dirty 4096 [ 132.298892][ T5755] total_writeback 0 [ 132.302723][ T5755] total_workingset_refault_anon 117 [ 132.307934][ T5755] total_workingset_refault_file 211 [ 132.313154][ T5755] total_swap 4521984 [ 132.317047][ T5755] total_swapcached 13803520 [ 132.321571][ T5755] total_pgpgin 106332 [ 132.325547][ T5755] total_pgpgout 106307 [ 132.329693][ T5755] total_pgfault 73134 [ 132.333682][ T5755] total_pgmajfault 86 [ 132.337656][ T5755] total_inactive_anon 98304 [ 132.342190][ T5755] total_active_anon 0 [ 132.346164][ T5755] total_inactive_file 4096 [ 132.350573][ T5755] total_active_file 0 [ 132.354628][ T5755] total_unevictable 0 [ 132.358678][ T5755] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.716,pid=5752,uid=0 [ 132.373258][ T5755] Memory cgroup out of memory: Killed process 5752 (syz.2.716) total-vm:94300kB, anon-rss:1340kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 132.604541][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 132.637934][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 133.999673][ T5797] syz.4.725 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 134.014003][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: syz.4.725 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.014034][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.014056][ T5797] Call Trace: [ 134.014084][ T5797] [ 134.014092][ T5797] __dump_stack+0x1d/0x30 [ 134.014115][ T5797] dump_stack_lvl+0x95/0xd0 [ 134.014159][ T5797] dump_stack+0x15/0x1b [ 134.014179][ T5797] dump_header+0x80/0x240 [ 134.014205][ T5797] oom_kill_process+0x295/0x350 [ 134.014300][ T5797] out_of_memory+0x97d/0xb80 [ 134.014329][ T5797] try_charge_memcg+0x62f/0xa10 [ 134.014396][ T5797] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 134.014425][ T5797] __alloc_frozen_pages_noprof+0x18a/0x350 [ 134.014512][ T5797] alloc_pages_mpol+0xb3/0x260 [ 134.014550][ T5797] alloc_pages_noprof+0x8f/0x140 [ 134.014634][ T5797] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 134.014688][ T5797] __kvmalloc_node_noprof+0x3d4/0x640 [ 134.014707][ T5797] ? futex_hash_allocate+0x190/0x9a0 [ 134.014739][ T5797] ? futex_hash_allocate+0x190/0x9a0 [ 134.014826][ T5797] futex_hash_allocate+0x190/0x9a0 [ 134.014859][ T5797] ? cap_task_prctl+0x13f/0x6b0 [ 134.014887][ T5797] futex_hash_prctl+0xd8/0xf0 [ 134.014925][ T5797] __se_sys_prctl+0x4f4/0x1400 [ 134.014956][ T5797] __x64_sys_prctl+0x67/0x80 [ 134.014981][ T5797] x64_sys_call+0x2533/0x3020 [ 134.015146][ T5797] do_syscall_64+0x12c/0x3b0 [ 134.015183][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.015213][ T5797] RIP: 0033:0x7fecf3aace59 [ 134.015232][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.015250][ T5797] RSP: 002b:00007fecf209a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 134.015350][ T5797] RAX: ffffffffffffffda RBX: 00007fecf3d26270 RCX: 00007fecf3aace59 [ 134.015423][ T5797] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 134.015436][ T5797] RBP: 00007fecf3b42d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.015451][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.015466][ T5797] R13: 00007fecf3d26308 R14: 00007fecf3d26270 R15: 00007ffc0c47bc98 [ 134.015545][ T5797] [ 134.015692][ T5797] memory: usage 307200kB, limit 307200kB, failcnt 4372 [ 134.128943][ T5803] __nla_validate_parse: 1 callbacks suppressed [ 134.128965][ T5803] netlink: 88 bytes leftover after parsing attributes in process `syz.3.734'. [ 134.252539][ T5797] memory+swap: usage 311880kB, limit 9007199254740988kB, failcnt 0 [ 134.260758][ T5797] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 134.268074][ T5797] Memory cgroup stats for /syz4: [ 134.268362][ T5797] cache 0 [ 134.276227][ T5797] rss 8192 [ 134.279240][ T5797] shmem 0 [ 134.282223][ T5797] mapped_file 0 [ 134.285672][ T5797] dirty 0 [ 134.288596][ T5797] writeback 0 [ 134.291896][ T5797] workingset_refault_anon 227 [ 134.296598][ T5797] workingset_refault_file 7831 [ 134.301364][ T5797] swap 4792320 [ 134.304729][ T5797] swapcached 86253568 [ 134.308721][ T5797] pgpgin 182058 [ 134.312176][ T5797] pgpgout 182054 [ 134.315710][ T5797] pgfault 77076 [ 134.319232][ T5797] pgmajfault 167 [ 134.322805][ T5797] inactive_anon 0 [ 134.326421][ T5797] active_anon 16384 [ 134.330298][ T5797] inactive_file 0 [ 134.333939][ T5797] active_file 0 [ 134.337388][ T5797] unevictable 0 [ 134.340861][ T5797] hierarchical_memory_limit 314572800 [ 134.346305][ T5797] hierarchical_memsw_limit 9223372036854771712 [ 134.352532][ T5797] total_cache 0 [ 134.355988][ T5797] total_rss 8192 [ 134.359545][ T5797] total_shmem 0 [ 134.363112][ T5797] total_mapped_file 0 [ 134.367090][ T5797] total_dirty 0 [ 134.370635][ T5797] total_writeback 0 [ 134.374485][ T5797] total_workingset_refault_anon 227 [ 134.379673][ T5797] total_workingset_refault_file 7831 [ 134.385006][ T5797] total_swap 4792320 [ 134.388898][ T5797] total_swapcached 86253568 [ 134.393453][ T5797] total_pgpgin 182058 [ 134.397440][ T5797] total_pgpgout 182054 [ 134.401560][ T5797] total_pgfault 77076 [ 134.405544][ T5797] total_pgmajfault 167 [ 134.409609][ T5797] total_inactive_anon 0 [ 134.413863][ T5797] total_active_anon 16384 [ 134.418191][ T5797] total_inactive_file 0 [ 134.422375][ T5797] total_active_file 0 [ 134.426350][ T5797] total_unevictable 0 [ 134.430413][ T5797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.725,pid=5779,uid=0 [ 134.445098][ T5797] Memory cgroup out of memory: Killed process 5779 (syz.4.725) total-vm:100584kB, anon-rss:1232kB, file-rss:26472kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 134.505153][ T5814] netlink: 88 bytes leftover after parsing attributes in process `syz.3.737'. [ 134.521789][ T5815] block device autoloading is deprecated and will be removed. [ 134.700934][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 136.220883][ T5844] syzkaller0: entered promiscuous mode [ 136.663079][ T5835] syz.1.741 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 136.665722][ T5844] syzkaller0: entered allmulticast mode [ 136.677184][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz.1.741 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.677234][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.677249][ T5835] Call Trace: [ 136.677302][ T5835] [ 136.677311][ T5835] __dump_stack+0x1d/0x30 [ 136.677337][ T5835] dump_stack_lvl+0x95/0xd0 [ 136.677361][ T5835] dump_stack+0x15/0x1b [ 136.677380][ T5835] dump_header+0x80/0x240 [ 136.677405][ T5835] oom_kill_process+0x295/0x350 [ 136.677458][ T5835] out_of_memory+0x97d/0xb80 [ 136.677492][ T5835] try_charge_memcg+0x62f/0xa10 [ 136.677587][ T5835] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 136.677614][ T5835] __alloc_frozen_pages_noprof+0x18a/0x350 [ 136.677697][ T5835] alloc_pages_mpol+0xb3/0x260 [ 136.677724][ T5835] alloc_pages_noprof+0x8f/0x140 [ 136.677751][ T5835] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 136.677785][ T5835] __kvmalloc_node_noprof+0x3d4/0x640 [ 136.677836][ T5835] ? futex_hash_allocate+0x190/0x9a0 [ 136.677868][ T5835] ? futex_hash_allocate+0x190/0x9a0 [ 136.677919][ T5835] futex_hash_allocate+0x190/0x9a0 [ 136.677954][ T5835] ? cap_task_prctl+0x13f/0x6b0 [ 136.677981][ T5835] futex_hash_prctl+0xd8/0xf0 [ 136.678036][ T5835] __se_sys_prctl+0x4f4/0x1400 [ 136.678066][ T5835] __x64_sys_prctl+0x67/0x80 [ 136.678154][ T5835] x64_sys_call+0x2533/0x3020 [ 136.678180][ T5835] do_syscall_64+0x12c/0x3b0 [ 136.678216][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.678290][ T5835] RIP: 0033:0x7fb28eccce59 [ 136.678307][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.678326][ T5835] RSP: 002b:00007fb28d6dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 136.678389][ T5835] RAX: ffffffffffffffda RBX: 00007fb28ef46180 RCX: 00007fb28eccce59 [ 136.678406][ T5835] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 136.678421][ T5835] RBP: 00007fb28ed62d6f R08: 0000000000000000 R09: 0000000000000000 [ 136.678436][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.678450][ T5835] R13: 00007fb28ef46218 R14: 00007fb28ef46180 R15: 00007ffed622db28 [ 136.678534][ T5835] [ 136.678542][ T5835] memory: usage 307200kB, limit 307200kB, failcnt 1355 [ 136.843511][ T5849] tipc: Enabled bearer , priority 0 [ 136.846119][ T5835] memory+swap: usage 312056kB, limit 9007199254740988kB, failcnt 0 [ 136.919242][ T5835] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0 [ 136.926640][ T5835] Memory cgroup stats for /syz1: [ 136.926917][ T5835] cache 0 [ 136.934852][ T5835] rss 0 [ 136.937607][ T5835] shmem 0 [ 136.940529][ T5835] mapped_file 0 [ 136.944072][ T5835] dirty 0 [ 136.946994][ T5835] writeback 0 [ 136.950264][ T5835] workingset_refault_anon 438 [ 136.954959][ T5835] workingset_refault_file 3322 [ 136.959702][ T5835] swap 4972544 [ 136.963136][ T5835] swapcached 217952256 [ 136.967233][ T5835] pgpgin 167006 [ 136.970700][ T5835] pgpgout 167006 [ 136.974233][ T5835] pgfault 98767 [ 136.977721][ T5835] pgmajfault 272 [ 136.981296][ T5835] inactive_anon 0 [ 136.984996][ T5835] active_anon 0 [ 136.988466][ T5835] inactive_file 0 [ 136.992130][ T5835] active_file 0 [ 136.995635][ T5835] unevictable 0 [ 136.999080][ T5835] hierarchical_memory_limit 314572800 [ 137.004523][ T5835] hierarchical_memsw_limit 9223372036854771712 [ 137.010695][ T5835] total_cache 0 [ 137.014149][ T5835] total_rss 0 [ 137.017457][ T5835] total_shmem 0 [ 137.020960][ T5835] total_mapped_file 0 [ 137.024924][ T5835] total_dirty 0 [ 137.028438][ T5835] total_writeback 0 [ 137.032258][ T5835] total_workingset_refault_anon 438 [ 137.037452][ T5835] total_workingset_refault_file 3322 [ 137.042893][ T5835] total_swap 4972544 [ 137.046830][ T5835] total_swapcached 217952256 [ 137.051448][ T5835] total_pgpgin 167006 [ 137.055427][ T5835] total_pgpgout 167006 [ 137.059495][ T5835] total_pgfault 98767 [ 137.063553][ T5835] total_pgmajfault 272 [ 137.067686][ T5835] total_inactive_anon 0 [ 137.071892][ T5835] total_active_anon 0 [ 137.076087][ T5835] total_inactive_file 0 [ 137.080392][ T5835] total_active_file 0 [ 137.084430][ T5835] total_unevictable 0 [ 137.088398][ T5835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.741,pid=5823,uid=0 [ 137.103003][ T5835] Memory cgroup out of memory: Killed process 5823 (syz.1.741) total-vm:96276kB, anon-rss:1236kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 137.133328][ T5842] tipc: Resetting bearer [ 137.161799][ T5853] netlink: 88 bytes leftover after parsing attributes in process `syz.3.749'. [ 137.232112][ T5842] tipc: Disabling bearer [ 137.257342][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 137.455149][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 137.480361][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 137.978370][ T5882] block device autoloading is deprecated and will be removed. [ 138.410812][ T5892] netlink: 88 bytes leftover after parsing attributes in process `syz.4.767'. [ 138.524731][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 140.129780][ T5904] syz.2.769 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 140.143904][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: syz.2.769 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.143933][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.143969][ T5904] Call Trace: [ 140.143976][ T5904] [ 140.143984][ T5904] __dump_stack+0x1d/0x30 [ 140.144008][ T5904] dump_stack_lvl+0x95/0xd0 [ 140.144031][ T5904] dump_stack+0x15/0x1b [ 140.144052][ T5904] dump_header+0x80/0x240 [ 140.144076][ T5904] oom_kill_process+0x295/0x350 [ 140.144186][ T5904] out_of_memory+0x97d/0xb80 [ 140.144282][ T5904] try_charge_memcg+0x62f/0xa10 [ 140.144318][ T5904] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 140.144348][ T5904] __alloc_frozen_pages_noprof+0x18a/0x350 [ 140.144447][ T5904] alloc_pages_mpol+0xb3/0x260 [ 140.144476][ T5904] alloc_pages_noprof+0x8f/0x140 [ 140.144503][ T5904] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 140.144540][ T5904] __kvmalloc_node_noprof+0x3d4/0x640 [ 140.144591][ T5904] ? futex_hash_allocate+0x190/0x9a0 [ 140.144621][ T5904] ? futex_hash_allocate+0x190/0x9a0 [ 140.144658][ T5904] futex_hash_allocate+0x190/0x9a0 [ 140.144692][ T5904] ? cap_task_prctl+0x13f/0x6b0 [ 140.144788][ T5904] futex_hash_prctl+0xd8/0xf0 [ 140.144846][ T5904] __se_sys_prctl+0x4f4/0x1400 [ 140.144880][ T5904] __x64_sys_prctl+0x67/0x80 [ 140.144938][ T5904] x64_sys_call+0x2533/0x3020 [ 140.144963][ T5904] do_syscall_64+0x12c/0x3b0 [ 140.145015][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.145080][ T5904] RIP: 0033:0x7f0faec4ce59 [ 140.145098][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.145166][ T5904] RSP: 002b:00007f0fad665028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 140.145190][ T5904] RAX: ffffffffffffffda RBX: 00007f0faeec6180 RCX: 00007f0faec4ce59 [ 140.145206][ T5904] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 140.145222][ T5904] RBP: 00007f0faece2d6f R08: 0000000000000000 R09: 0000000000000000 [ 140.145235][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.145247][ T5904] R13: 00007f0faeec6218 R14: 00007f0faeec6180 R15: 00007fff838c1e18 [ 140.145291][ T5904] [ 140.145332][ T5904] memory: usage 307200kB, limit 307200kB, failcnt 552 [ 140.367088][ T5904] memory+swap: usage 311708kB, limit 9007199254740988kB, failcnt 0 [ 140.375004][ T5904] kmem: usage 307016kB, limit 9007199254740988kB, failcnt 0 [ 140.382341][ T5904] Memory cgroup stats for /syz2: [ 140.382763][ T5904] cache 159744 [ 140.391064][ T5904] rss 4096 [ 140.394079][ T5904] shmem 0 [ 140.397003][ T5904] mapped_file 65536 [ 140.400823][ T5904] dirty 0 [ 140.403753][ T5904] writeback 0 [ 140.407034][ T5904] workingset_refault_anon 165 [ 140.411739][ T5904] workingset_refault_file 263 [ 140.416462][ T5904] swap 4616192 [ 140.419827][ T5904] swapcached 18247680 [ 140.423869][ T5904] pgpgin 112868 [ 140.427406][ T5904] pgpgout 112828 [ 140.431008][ T5904] pgfault 80296 [ 140.434461][ T5904] pgmajfault 115 [ 140.438000][ T5904] inactive_anon 4096 [ 140.441942][ T5904] active_anon 0 [ 140.445403][ T5904] inactive_file 159744 [ 140.449522][ T5904] active_file 0 [ 140.452999][ T5904] unevictable 0 [ 140.456454][ T5904] hierarchical_memory_limit 314572800 [ 140.461855][ T5904] hierarchical_memsw_limit 9223372036854771712 [ 140.468115][ T5904] total_cache 159744 [ 140.472028][ T5904] total_rss 4096 [ 140.475567][ T5904] total_shmem 0 [ 140.479075][ T5904] total_mapped_file 65536 [ 140.483419][ T5904] total_dirty 0 [ 140.486918][ T5904] total_writeback 0 [ 140.490837][ T5904] total_workingset_refault_anon 165 [ 140.496140][ T5904] total_workingset_refault_file 263 [ 140.501445][ T5904] total_swap 4616192 [ 140.505331][ T5904] total_swapcached 18247680 [ 140.509929][ T5904] total_pgpgin 112868 [ 140.513933][ T5904] total_pgpgout 112828 [ 140.517995][ T5904] total_pgfault 80296 [ 140.521992][ T5904] total_pgmajfault 115 [ 140.526094][ T5904] total_inactive_anon 4096 [ 140.530551][ T5904] total_active_anon 0 [ 140.534849][ T5904] total_inactive_file 159744 [ 140.539424][ T5904] total_active_file 0 [ 140.543428][ T5904] total_unevictable 0 [ 140.547424][ T5904] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.769,pid=5899,uid=0 [ 140.562002][ T5904] Memory cgroup out of memory: Killed process 5904 (syz.2.769) total-vm:96348kB, anon-rss:1264kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 140.686444][ T5924] loop4: detected capacity change from 0 to 512 [ 140.704005][ T5924] EXT4-fs: Ignoring removed nobh option [ 140.732192][ T5924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.791777][ T5924] EXT4-fs (loop4): 1 truncate cleaned up [ 140.824402][ T5924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.943533][ T28] audit: type=1400 audit(1780725611.412:976): avc: denied { write } for pid=5923 comm="syz.4.777" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.277683][ T5941] netlink: 88 bytes leftover after parsing attributes in process `syz.0.784'. [ 141.534871][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.172512][ T3298] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 143.186677][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 143.203723][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 143.203748][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.203761][ T3298] Call Trace: [ 143.203767][ T3298] [ 143.203775][ T3298] __dump_stack+0x1d/0x30 [ 143.203796][ T3298] dump_stack_lvl+0x95/0xd0 [ 143.203815][ T3298] dump_stack+0x15/0x1b [ 143.203833][ T3298] dump_header+0x80/0x240 [ 143.203854][ T3298] oom_kill_process+0x295/0x350 [ 143.203880][ T3298] out_of_memory+0x97d/0xb80 [ 143.203904][ T3298] try_charge_memcg+0x62f/0xa10 [ 143.203942][ T3298] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 143.203967][ T3298] __alloc_frozen_pages_noprof+0x18a/0x350 [ 143.203989][ T3298] alloc_pages_mpol+0xb3/0x260 [ 143.204008][ T3298] ? mod_lruvec_state+0x10c/0x120 [ 143.204035][ T3298] alloc_pages_noprof+0x8f/0x140 [ 143.204058][ T3298] __pmd_alloc+0x47/0x430 [ 143.204083][ T3298] copy_page_range+0x2fdc/0x3310 [ 143.204100][ T3298] ? should_failslab+0x8c/0xb0 [ 143.204130][ T3298] ? mas_prealloc_calc+0x253/0x2a0 [ 143.204156][ T3298] ? vma_interval_tree_insert_after+0x197/0x1b0 [ 143.204177][ T3298] dup_mmap+0x899/0x10c0 [ 143.204198][ T3298] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 143.204214][ T3298] ? __list_add_valid_or_report+0x38/0xe0 [ 143.204236][ T3298] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 143.204253][ T3298] ? __percpu_counter_init_many+0x2fa/0x310 [ 143.204289][ T3298] copy_mm+0x119/0x370 [ 143.204311][ T3298] copy_process+0x1087/0x2370 [ 143.204338][ T3298] kernel_clone+0x1c0/0x5f0 [ 143.204362][ T3298] __x64_sys_clone+0x143/0x180 [ 143.204391][ T3298] x64_sys_call+0x1222/0x3020 [ 143.204413][ T3298] do_syscall_64+0x12c/0x3b0 [ 143.204443][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.204460][ T3298] RIP: 0033:0x7fecf3ad58d2 [ 143.204475][ T3298] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 143.204489][ T3298] RSP: 002b:00007ffc0c47beb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 143.204505][ T3298] RAX: ffffffffffffffda RBX: 00007ffc0c47beb0 RCX: 00007fecf3ad58d2 [ 143.204517][ T3298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 143.204530][ T3298] RBP: 00007ffc0c47c03c R08: 0000000000000000 R09: 0000000000000001 [ 143.204543][ T3298] R10: 0000555580a4d7d0 R11: 0000000000000246 R12: 0000000000000000 [ 143.204556][ T3298] R13: 00000000000927c0 R14: 0000000000022e71 R15: 00007ffc0c47c090 [ 143.204575][ T3298] [ 143.204582][ T3298] memory: usage 307200kB, limit 307200kB, failcnt 4689 [ 143.532730][ T3298] memory+swap: usage 86248kB, limit 9007199254740988kB, failcnt 0 [ 143.547707][ T3298] kmem: usage 85308kB, limit 9007199254740988kB, failcnt 0 [ 143.562564][ T3298] Memory cgroup stats for /syz4: [ 143.562695][ T3298] cache 0 [ 143.575339][ T3298] rss 0 [ 143.581002][ T3298] shmem 0 [ 143.600269][ T3298] mapped_file 0 [ 143.608071][ T3298] dirty 0 [ 143.616797][ T3298] writeback 0 [ 143.625865][ T3298] workingset_refault_anon 390 [ 143.638502][ T3298] workingset_refault_file 8126 [ 143.646303][ T5982] syzkaller0: entered promiscuous mode [ 143.647838][ T3298] swap 581632 [ 143.662782][ T5982] syzkaller0: entered allmulticast mode [ 143.666502][ T3298] swapcached 87265280 [ 143.678336][ T3298] pgpgin 188676 [ 143.687867][ T3298] pgpgout 188669 [ 143.695926][ T3298] pgfault 83950 [ 143.703668][ T3298] pgmajfault 291 [ 143.709778][ T5985] tipc: Enabled bearer , priority 0 [ 143.716853][ T3298] inactive_anon 24576 [ 143.727197][ T3298] active_anon 4096 [ 143.733283][ T3298] inactive_file 0 [ 143.738542][ T3298] active_file 0 [ 143.742217][ T3298] unevictable 0 [ 143.747224][ T5987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.798'. [ 143.756285][ T3298] hierarchical_memory_limit 314572800 [ 143.756357][ T5978] tipc: Resetting bearer [ 143.761795][ T3298] hierarchical_memsw_limit 9223372036854771712 [ 143.785967][ T5978] tipc: Disabling bearer [ 143.791870][ T3298] total_cache 0 [ 143.798295][ T3298] total_rss 0 [ 143.803252][ T3298] total_shmem 0 [ 143.808174][ T3298] total_mapped_file 0 [ 143.816256][ T3298] total_dirty 0 [ 143.819745][ T3298] total_writeback 0 [ 143.825908][ T3298] total_workingset_refault_anon 390 [ 143.831306][ T3298] total_workingset_refault_file 8126 [ 143.836634][ T3298] total_swap 581632 [ 143.840467][ T3298] total_swapcached 87265280 [ 143.845281][ T3298] total_pgpgin 188676 [ 143.849303][ T3298] total_pgpgout 188669 [ 143.853579][ T3298] total_pgfault 83950 [ 143.857610][ T3298] total_pgmajfault 291 [ 143.861731][ T3298] total_inactive_anon 24576 [ 143.866292][ T3298] total_active_anon 4096 [ 143.872053][ T3298] total_inactive_file 0 [ 143.902993][ T3298] total_active_file 0 [ 143.905732][ T5993] netlink: 88 bytes leftover after parsing attributes in process `syz.1.801'. [ 143.917409][ T3298] total_unevictable 0 [ 143.922580][ T3298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.767,pid=5898,uid=0 [ 143.937636][ T3298] Memory cgroup out of memory: Killed process 5898 (syz.4.767) total-vm:94168kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 143.981180][ T5991] syzkaller0: entered promiscuous mode [ 143.993628][ T5991] syzkaller0: entered allmulticast mode [ 144.021231][ T5991] tipc: Enabled bearer , priority 0 [ 144.039818][ T5990] tipc: Resetting bearer [ 144.069903][ T5990] tipc: Disabling bearer [ 144.115693][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 144.174191][ T6011] netlink: 88 bytes leftover after parsing attributes in process `syz.0.806'. [ 144.472640][ T6005] syz.2.804 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 144.483610][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.2.804 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.483638][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.483653][ T6005] Call Trace: [ 144.483659][ T6005] [ 144.483667][ T6005] __dump_stack+0x1d/0x30 [ 144.483687][ T6005] dump_stack_lvl+0x95/0xd0 [ 144.483704][ T6005] dump_stack+0x15/0x1b [ 144.483722][ T6005] dump_header+0x80/0x240 [ 144.483781][ T6005] oom_kill_process+0x295/0x350 [ 144.483811][ T6005] out_of_memory+0x97d/0xb80 [ 144.483853][ T6005] try_charge_memcg+0x62f/0xa10 [ 144.483890][ T6005] charge_memcg+0x6d/0x120 [ 144.483918][ T6005] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 144.483945][ T6005] __swap_cache_prepare_and_add+0x69/0x4a0 [ 144.484026][ T6005] ? alloc_pages_mpol+0x217/0x260 [ 144.484054][ T6005] swap_cache_alloc_folio+0xa2/0x120 [ 144.484079][ T6005] swap_cluster_readahead+0x25f/0x3c0 [ 144.484103][ T6005] swapin_readahead+0xde/0x840 [ 144.484187][ T6005] ? _raw_spin_unlock+0x9/0x30 [ 144.484203][ T6005] ? swap_put_entries_cluster+0x46c/0x490 [ 144.484279][ T6005] ? __entry_text_end+0x1d848/0x102179 [ 144.484368][ T6005] ? __rcu_read_unlock+0x4e/0x70 [ 144.484388][ T6005] ? swap_cache_get_folio+0x1e0/0x1f0 [ 144.484408][ T6005] do_swap_page+0x31e/0x2180 [ 144.484506][ T6005] ? __css_rstat_updated+0xbb/0x280 [ 144.484608][ T6005] ? __rcu_read_lock+0x36/0x50 [ 144.484625][ T6005] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 144.484682][ T6005] handle_mm_fault+0xb30/0x2e70 [ 144.484704][ T6005] ? vma_start_read+0x1c7/0x2c0 [ 144.484794][ T6005] do_user_addr_fault+0x62f/0x1050 [ 144.484902][ T6005] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 144.484998][ T6005] ? trace_page_fault_user+0x1f/0xa0 [ 144.485026][ T6005] exc_page_fault+0x62/0xa0 [ 144.485048][ T6005] asm_exc_page_fault+0x26/0x30 [ 144.485141][ T6005] RIP: 0033:0x7f0faec07f83 [ 144.485158][ T6005] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 144.485177][ T6005] RSP: 002b:00007fff838c1f10 EFLAGS: 00010246 [ 144.485196][ T6005] RAX: 0000000000000000 RBX: 0000555570fa7500 RCX: 0000000000000000 [ 144.485211][ T6005] RDX: 00007fff838c1f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.485224][ T6005] RBP: 00007f0faeec7da0 R08: 0000000000000000 R09: 0000000000000000 [ 144.485235][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002361e [ 144.485281][ T6005] R13: 00007f0faeec609c R14: 00000000000233b2 R15: 00007fff838c2080 [ 144.485303][ T6005] [ 144.485310][ T6005] memory: usage 307200kB, limit 307200kB, failcnt 667 [ 144.741388][ T6005] memory+swap: usage 179552kB, limit 9007199254740988kB, failcnt 0 [ 144.749382][ T6005] kmem: usage 178584kB, limit 9007199254740988kB, failcnt 0 [ 144.756721][ T6005] Memory cgroup stats for /syz2: [ 144.756902][ T6005] cache 524288 [ 144.765310][ T6005] rss 4096 [ 144.768374][ T6005] shmem 0 [ 144.771353][ T6005] mapped_file 65536 [ 144.775231][ T6005] dirty 0 [ 144.778200][ T6005] writeback 4096 [ 144.781843][ T6005] workingset_refault_anon 198 [ 144.786610][ T6005] workingset_refault_file 455 [ 144.791333][ T6005] swap 360448 [ 144.794691][ T6005] swapcached 18509824 [ 144.798738][ T6005] pgpgin 116672 [ 144.802223][ T6005] pgpgout 116533 [ 144.805923][ T6005] pgfault 84559 [ 144.809429][ T6005] pgmajfault 139 [ 144.813159][ T6005] inactive_anon 45056 [ 144.817160][ T6005] active_anon 0 [ 144.820665][ T6005] inactive_file 0 [ 144.824363][ T6005] active_file 524288 [ 144.828327][ T6005] unevictable 0 [ 144.831828][ T6005] hierarchical_memory_limit 314572800 [ 144.837204][ T6005] hierarchical_memsw_limit 9223372036854771712 [ 144.843385][ T6005] total_cache 524288 [ 144.847275][ T6005] total_rss 4096 [ 144.850896][ T6005] total_shmem 0 [ 144.854345][ T6005] total_mapped_file 65536 [ 144.858658][ T6005] total_dirty 0 [ 144.862195][ T6005] total_writeback 4096 [ 144.866248][ T6005] total_workingset_refault_anon 198 [ 144.871511][ T6005] total_workingset_refault_file 455 [ 144.876688][ T6005] total_swap 360448 [ 144.880482][ T6005] total_swapcached 18509824 [ 144.885050][ T6005] total_pgpgin 116672 [ 144.889043][ T6005] total_pgpgout 116533 [ 144.893127][ T6005] total_pgfault 84559 [ 144.897138][ T6005] total_pgmajfault 139 [ 144.901221][ T6005] total_inactive_anon 45056 [ 144.905709][ T6005] total_active_anon 0 [ 144.909689][ T6005] total_inactive_file 0 [ 144.913866][ T6005] total_active_file 524288 [ 144.918273][ T6005] total_unevictable 0 [ 144.922286][ T6005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.804,pid=6005,uid=0 [ 144.936837][ T6005] Memory cgroup out of memory: Killed process 6005 (syz.2.804) total-vm:94168kB, anon-rss:1232kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 145.160464][ T6029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.812'. [ 145.352576][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 145.441939][ T6044] netlink: 88 bytes leftover after parsing attributes in process `syz.0.818'. [ 146.155148][ T6038] syz.1.816 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 146.166130][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.1.816 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.166232][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.166242][ T6038] Call Trace: [ 146.166248][ T6038] [ 146.166255][ T6038] __dump_stack+0x1d/0x30 [ 146.166333][ T6038] dump_stack_lvl+0x95/0xd0 [ 146.166405][ T6038] dump_stack+0x15/0x1b [ 146.166420][ T6038] dump_header+0x80/0x240 [ 146.166438][ T6038] oom_kill_process+0x295/0x350 [ 146.166532][ T6038] out_of_memory+0x97d/0xb80 [ 146.166555][ T6038] try_charge_memcg+0x62f/0xa10 [ 146.166577][ T6038] ? radix_tree_lookup+0xfa/0x140 [ 146.166669][ T6038] charge_memcg+0x6d/0x120 [ 146.166688][ T6038] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 146.166730][ T6038] __swap_cache_prepare_and_add+0x69/0x4a0 [ 146.166751][ T6038] ? alloc_pages_mpol+0x217/0x260 [ 146.166772][ T6038] swap_cache_alloc_folio+0xa2/0x120 [ 146.166792][ T6038] swap_cluster_readahead+0x25f/0x3c0 [ 146.166863][ T6038] swapin_readahead+0xde/0x840 [ 146.166881][ T6038] ? _raw_spin_unlock+0x9/0x30 [ 146.166958][ T6038] ? swap_put_entries_cluster+0x46c/0x490 [ 146.167054][ T6038] ? plist_check_list+0x184/0x1b0 [ 146.167073][ T6038] ? __rcu_read_unlock+0x4e/0x70 [ 146.167089][ T6038] ? swap_cache_get_folio+0x1e0/0x1f0 [ 146.167170][ T6038] do_swap_page+0x31e/0x2180 [ 146.167189][ T6038] ? trace_call_bpf+0x33b/0x420 [ 146.167210][ T6038] ? __rcu_read_lock+0x36/0x50 [ 146.167231][ T6038] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 146.167343][ T6038] handle_mm_fault+0xb30/0x2e70 [ 146.167416][ T6038] ? vma_start_read+0x1c7/0x2c0 [ 146.167444][ T6038] do_user_addr_fault+0x62f/0x1050 [ 146.167584][ T6038] ? arch_exit_work+0x30/0x40 [ 146.167663][ T6038] ? irqentry_exit+0x40/0x5d0 [ 146.167682][ T6038] ? trace_page_fault_user+0x1f/0xa0 [ 146.167704][ T6038] exc_page_fault+0x62/0xa0 [ 146.167724][ T6038] asm_exc_page_fault+0x26/0x30 [ 146.167811][ T6038] RIP: 0033:0x7fb28eba1c50 [ 146.167824][ T6038] Code: 49 89 f5 41 54 55 53 48 89 fb 48 83 ec 18 4c 8b 76 38 4c 03 76 18 80 3d 8f 3a ed 00 00 8b 6e 04 4c 89 34 24 0f 85 73 02 00 00 <80> 7b 60 00 8b 53 50 89 e8 0f 85 1b 04 00 00 85 d2 0f 85 0e 04 00 [ 146.167839][ T6038] RSP: 002b:00007ffed622dbd0 EFLAGS: 00010202 [ 146.167852][ T6038] RAX: 00007fb28e727008 RBX: 00007fb28fa75720 RCX: ffffffff859a845e [ 146.167888][ T6038] RDX: 0000000000000820 RSI: ffffffff81282102 RDI: 00007fb28e727008 [ 146.167899][ T6038] RBP: 0000000000000104 R08: 00007fb28ef30000 R09: 00007fb28ef46038 [ 146.167910][ T6038] R10: 0000000000000001 R11: 000000000000000f R12: 00007fb28eb27000 [ 146.167927][ T6038] R13: 00007fb28ef46038 R14: 00007fb28e727008 R15: 0000000000000001 [ 146.167960][ T6038] ? schedule_timeout+0x4e/0x180 [ 146.168034][ T6038] ? perf_arch_instruction_pointer+0x12/0x1a0 [ 146.168084][ T6038] [ 146.168100][ T6038] memory: usage 307200kB, limit 307200kB, failcnt 1520 [ 146.442180][ T6038] memory+swap: usage 312232kB, limit 9007199254740988kB, failcnt 0 [ 146.450085][ T6038] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 146.457384][ T6038] Memory cgroup stats for /syz1: [ 146.457583][ T6038] cache 0 [ 146.465445][ T6038] rss 0 [ 146.468244][ T6038] shmem 0 [ 146.471183][ T6038] mapped_file 0 [ 146.474693][ T6038] dirty 0 [ 146.477615][ T6038] writeback 4096 [ 146.481160][ T6038] workingset_refault_anon 482 [ 146.485845][ T6038] workingset_refault_file 3322 [ 146.490596][ T6038] swap 5152768 [ 146.493982][ T6038] swapcached 222674944 [ 146.498034][ T6038] pgpgin 177850 [ 146.501516][ T6038] pgpgout 177849 [ 146.505048][ T6038] pgfault 111426 [ 146.508644][ T6038] pgmajfault 314 [ 146.512205][ T6038] inactive_anon 4096 [ 146.516083][ T6038] active_anon 0 [ 146.519520][ T6038] inactive_file 0 [ 146.523173][ T6038] active_file 0 [ 146.526620][ T6038] unevictable 0 [ 146.530081][ T6038] hierarchical_memory_limit 314572800 [ 146.535454][ T6038] hierarchical_memsw_limit 9223372036854771712 [ 146.541644][ T6038] total_cache 0 [ 146.545170][ T6038] total_rss 0 [ 146.548438][ T6038] total_shmem 0 [ 146.551962][ T6038] total_mapped_file 0 [ 146.555929][ T6038] total_dirty 0 [ 146.559367][ T6038] total_writeback 4096 [ 146.563478][ T6038] total_workingset_refault_anon 482 [ 146.568672][ T6038] total_workingset_refault_file 3322 [ 146.573998][ T6038] total_swap 5152768 [ 146.577887][ T6038] total_swapcached 222674944 [ 146.582496][ T6038] total_pgpgin 177850 [ 146.586475][ T6038] total_pgpgout 177849 [ 146.590560][ T6038] total_pgfault 111426 [ 146.594781][ T6038] total_pgmajfault 314 [ 146.599037][ T6038] total_inactive_anon 4096 [ 146.603484][ T6038] total_active_anon 0 [ 146.607495][ T6038] total_inactive_file 0 [ 146.611683][ T6038] total_active_file 0 [ 146.615786][ T6038] total_unevictable 0 [ 146.619885][ T6038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.816,pid=6038,uid=0 [ 146.634498][ T6038] Memory cgroup out of memory: Killed process 6038 (syz.1.816) total-vm:100512kB, anon-rss:1236kB, file-rss:26436kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 147.468585][ T6067] syz.1.823 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 147.482696][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.1.823 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.482802][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.482815][ T6067] Call Trace: [ 147.482822][ T6067] [ 147.482830][ T6067] __dump_stack+0x1d/0x30 [ 147.482866][ T6067] dump_stack_lvl+0x95/0xd0 [ 147.482887][ T6067] dump_stack+0x15/0x1b [ 147.482906][ T6067] dump_header+0x80/0x240 [ 147.482928][ T6067] oom_kill_process+0x295/0x350 [ 147.482958][ T6067] out_of_memory+0x97d/0xb80 [ 147.483000][ T6067] try_charge_memcg+0x62f/0xa10 [ 147.483059][ T6067] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 147.483085][ T6067] __alloc_frozen_pages_noprof+0x18a/0x350 [ 147.483112][ T6067] alloc_pages_mpol+0xb3/0x260 [ 147.483175][ T6067] alloc_pages_noprof+0x8f/0x140 [ 147.483219][ T6067] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 147.483317][ T6067] __kvmalloc_node_noprof+0x3d4/0x640 [ 147.483339][ T6067] ? futex_hash_allocate+0x190/0x9a0 [ 147.483432][ T6067] ? futex_hash_allocate+0x190/0x9a0 [ 147.483466][ T6067] futex_hash_allocate+0x190/0x9a0 [ 147.483498][ T6067] ? cap_task_prctl+0x13f/0x6b0 [ 147.483554][ T6067] futex_hash_prctl+0xd8/0xf0 [ 147.483583][ T6067] __se_sys_prctl+0x4f4/0x1400 [ 147.483611][ T6067] __x64_sys_prctl+0x67/0x80 [ 147.483713][ T6067] x64_sys_call+0x2533/0x3020 [ 147.483737][ T6067] do_syscall_64+0x12c/0x3b0 [ 147.483768][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.483790][ T6067] RIP: 0033:0x7fb28eccce59 [ 147.483881][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.483898][ T6067] RSP: 002b:00007fb28d6dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 147.483919][ T6067] RAX: ffffffffffffffda RBX: 00007fb28ef46180 RCX: 00007fb28eccce59 [ 147.483933][ T6067] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 147.483947][ T6067] RBP: 00007fb28ed62d6f R08: 0000000000000000 R09: 0000000000000000 [ 147.484032][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.484047][ T6067] R13: 00007fb28ef46218 R14: 00007fb28ef46180 R15: 00007ffed622db28 [ 147.484139][ T6067] [ 147.484146][ T6067] memory: usage 307200kB, limit 307200kB, failcnt 1702 [ 147.520727][ T6058] syzkaller0: entered promiscuous mode [ 147.522539][ T6067] memory+swap: usage 312216kB, limit 9007199254740988kB, failcnt 0 [ 147.540879][ T6058] syzkaller0: entered allmulticast mode [ 147.541168][ T6067] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 147.575293][ T6068] tipc: Enabled bearer , priority 0 [ 147.578761][ T6067] Memory cgroup stats for /syz1: [ 147.579001][ T6067] cache 0 [ 147.746261][ T6067] rss 4096 [ 147.749278][ T6067] shmem 0 [ 147.752327][ T6067] mapped_file 0 [ 147.755782][ T6067] dirty 0 [ 147.758742][ T6067] writeback 0 [ 147.762090][ T6067] workingset_refault_anon 577 [ 147.766768][ T6067] workingset_refault_file 3322 [ 147.771542][ T6067] swap 5136384 [ 147.774908][ T6067] swapcached 227381248 [ 147.778960][ T6067] pgpgin 181127 [ 147.782522][ T6067] pgpgout 181124 [ 147.786058][ T6067] pgfault 114756 [ 147.789590][ T6067] pgmajfault 385 [ 147.793160][ T6067] inactive_anon 0 [ 147.796843][ T6067] active_anon 12288 [ 147.800724][ T6067] inactive_file 0 [ 147.804366][ T6067] active_file 0 [ 147.807819][ T6067] unevictable 0 [ 147.811379][ T6067] hierarchical_memory_limit 314572800 [ 147.816736][ T6067] hierarchical_memsw_limit 9223372036854771712 [ 147.822966][ T6067] total_cache 0 [ 147.826485][ T6067] total_rss 4096 [ 147.830024][ T6067] total_shmem 0 [ 147.833508][ T6067] total_mapped_file 0 [ 147.837485][ T6067] total_dirty 0 [ 147.840977][ T6067] total_writeback 0 [ 147.844772][ T6067] total_workingset_refault_anon 577 [ 147.849963][ T6067] total_workingset_refault_file 3322 [ 147.855334][ T6067] total_swap 5136384 [ 147.859222][ T6067] total_swapcached 227381248 [ 147.863879][ T6067] total_pgpgin 181127 [ 147.867856][ T6067] total_pgpgout 181124 [ 147.872006][ T6067] total_pgfault 114756 [ 147.876119][ T6067] total_pgmajfault 385 [ 147.880184][ T6067] total_inactive_anon 0 [ 147.884427][ T6067] total_active_anon 12288 [ 147.888752][ T6067] total_inactive_file 0 [ 147.892916][ T6067] total_active_file 0 [ 147.907705][ T6052] tipc: Resetting bearer [ 147.917391][ T6052] tipc: Disabling bearer [ 147.950685][ T6067] total_unevictable 0 [ 147.954721][ T6067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.823,pid=6063,uid=0 [ 147.969353][ T6067] Memory cgroup out of memory: Killed process 6063 (syz.1.823) total-vm:96276kB, anon-rss:1236kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 148.089835][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.826'. [ 148.244730][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 148.316500][ T6087] netlink: 88 bytes leftover after parsing attributes in process `syz.4.832'. [ 148.437637][ T6093] netlink: 88 bytes leftover after parsing attributes in process `syz.0.833'. [ 149.289932][ T6102] syz.4.834 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 149.304040][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.304066][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.304080][ T6102] Call Trace: [ 149.304087][ T6102] [ 149.304147][ T6102] __dump_stack+0x1d/0x30 [ 149.304173][ T6102] dump_stack_lvl+0x95/0xd0 [ 149.304196][ T6102] dump_stack+0x15/0x1b [ 149.304215][ T6102] dump_header+0x80/0x240 [ 149.304305][ T6102] oom_kill_process+0x295/0x350 [ 149.304342][ T6102] out_of_memory+0x97d/0xb80 [ 149.304437][ T6102] try_charge_memcg+0x62f/0xa10 [ 149.304479][ T6102] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 149.304505][ T6102] __alloc_frozen_pages_noprof+0x18a/0x350 [ 149.304558][ T6102] alloc_pages_bulk_noprof+0x4d1/0x560 [ 149.304585][ T6102] ? policy_nodemask+0x417/0x5e0 [ 149.304611][ T6102] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 149.304649][ T6102] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 149.304676][ T6102] ? alloc_pages_mpol+0x217/0x260 [ 149.304708][ T6102] __vmalloc_node_range_noprof+0x891/0x11c0 [ 149.304742][ T6102] __kvmalloc_node_noprof+0x3d4/0x640 [ 149.304773][ T6102] ? futex_hash_allocate+0x190/0x9a0 [ 149.304810][ T6102] ? futex_hash_allocate+0x190/0x9a0 [ 149.304841][ T6102] futex_hash_allocate+0x190/0x9a0 [ 149.304883][ T6102] ? cap_task_prctl+0x13f/0x6b0 [ 149.304907][ T6102] futex_hash_prctl+0xd8/0xf0 [ 149.304935][ T6102] __se_sys_prctl+0x4f4/0x1400 [ 149.305033][ T6102] __x64_sys_prctl+0x67/0x80 [ 149.305062][ T6102] x64_sys_call+0x2533/0x3020 [ 149.305088][ T6102] do_syscall_64+0x12c/0x3b0 [ 149.305119][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.305220][ T6102] RIP: 0033:0x7fecf3aace59 [ 149.305240][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.305261][ T6102] RSP: 002b:00007fecf24bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 149.305312][ T6102] RAX: ffffffffffffffda RBX: 00007fecf3d26180 RCX: 00007fecf3aace59 [ 149.305326][ T6102] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 149.305338][ T6102] RBP: 00007fecf3b42d6f R08: 0000000000000000 R09: 0000000000000000 [ 149.305352][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.305367][ T6102] R13: 00007fecf3d26218 R14: 00007fecf3d26180 R15: 00007ffc0c47bc98 [ 149.305391][ T6102] [ 149.305398][ T6102] memory: usage 307200kB, limit 307200kB, failcnt 4751 [ 149.348966][ T6106] netlink: 88 bytes leftover after parsing attributes in process `syz.2.837'. [ 149.353307][ T6102] memory+swap: usage 311928kB, limit 9007199254740988kB, failcnt 0 [ 149.562471][ T6102] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 149.569784][ T6102] Memory cgroup stats for /syz4: [ 149.570091][ T6102] cache 0 [ 149.577977][ T6102] rss 118784 [ 149.581184][ T6102] shmem 0 [ 149.584116][ T6102] mapped_file 0 [ 149.587639][ T6102] dirty 0 [ 149.590559][ T6102] writeback 0 [ 149.593866][ T6102] workingset_refault_anon 475 [ 149.598534][ T6102] workingset_refault_file 8126 [ 149.603360][ T6102] swap 4841472 [ 149.606722][ T6102] swapcached 92164096 [ 149.610765][ T6102] pgpgin 195127 [ 149.614208][ T6102] pgpgout 195093 [ 149.617790][ T6102] pgfault 90977 [ 149.621246][ T6102] pgmajfault 340 [ 149.624792][ T6102] inactive_anon 0 [ 149.628411][ T6102] active_anon 139264 [ 149.632386][ T6102] inactive_file 0 [ 149.636045][ T6102] active_file 0 [ 149.639492][ T6102] unevictable 0 [ 149.643035][ T6102] hierarchical_memory_limit 314572800 [ 149.648396][ T6102] hierarchical_memsw_limit 9223372036854771712 [ 149.654640][ T6102] total_cache 0 [ 149.658085][ T6102] total_rss 118784 [ 149.661816][ T6102] total_shmem 0 [ 149.665279][ T6102] total_mapped_file 0 [ 149.669244][ T6102] total_dirty 0 [ 149.672710][ T6102] total_writeback 0 [ 149.676545][ T6102] total_workingset_refault_anon 475 [ 149.681764][ T6102] total_workingset_refault_file 8126 [ 149.687041][ T6102] total_swap 4841472 [ 149.690959][ T6102] total_swapcached 92164096 [ 149.695456][ T6102] total_pgpgin 195127 [ 149.699431][ T6102] total_pgpgout 195093 [ 149.703518][ T6102] total_pgfault 90977 [ 149.707494][ T6102] total_pgmajfault 340 [ 149.711589][ T6102] total_inactive_anon 0 [ 149.715842][ T6102] total_active_anon 139264 [ 149.720252][ T6102] total_inactive_file 0 [ 149.724457][ T6102] total_active_file 0 [ 149.728440][ T6102] total_unevictable 0 [ 149.732436][ T6102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.834,pid=6094,uid=0 [ 149.747045][ T6102] Memory cgroup out of memory: Killed process 6094 (syz.4.834) total-vm:96348kB, anon-rss:1348kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 149.863807][ T6116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.840'. [ 149.917145][ T6117] block device autoloading is deprecated and will be removed. [ 149.948663][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 151.633057][ T6137] netlink: 88 bytes leftover after parsing attributes in process `syz.4.848'. [ 151.840562][ T6135] syz.2.846 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 151.854688][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.854766][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.854778][ T6135] Call Trace: [ 151.854785][ T6135] [ 151.854794][ T6135] __dump_stack+0x1d/0x30 [ 151.854821][ T6135] dump_stack_lvl+0x95/0xd0 [ 151.854844][ T6135] dump_stack+0x15/0x1b [ 151.854862][ T6135] dump_header+0x80/0x240 [ 151.854947][ T6135] oom_kill_process+0x295/0x350 [ 151.854977][ T6135] out_of_memory+0x97d/0xb80 [ 151.855036][ T6135] try_charge_memcg+0x62f/0xa10 [ 151.855171][ T6135] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 151.855200][ T6135] __alloc_frozen_pages_noprof+0x18a/0x350 [ 151.855255][ T6135] alloc_pages_mpol+0xb3/0x260 [ 151.855330][ T6135] alloc_pages_noprof+0x8f/0x140 [ 151.855358][ T6135] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 151.855454][ T6135] __kvmalloc_node_noprof+0x3d4/0x640 [ 151.855505][ T6135] ? futex_hash_allocate+0x190/0x9a0 [ 151.855540][ T6135] ? futex_hash_allocate+0x190/0x9a0 [ 151.855574][ T6135] futex_hash_allocate+0x190/0x9a0 [ 151.855637][ T6135] ? cap_task_prctl+0x13f/0x6b0 [ 151.855666][ T6135] futex_hash_prctl+0xd8/0xf0 [ 151.855702][ T6135] __se_sys_prctl+0x4f4/0x1400 [ 151.855797][ T6135] __x64_sys_prctl+0x67/0x80 [ 151.855821][ T6135] x64_sys_call+0x2533/0x3020 [ 151.855883][ T6135] do_syscall_64+0x12c/0x3b0 [ 151.855920][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.855946][ T6135] RIP: 0033:0x7f0faec4ce59 [ 151.855963][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.856018][ T6135] RSP: 002b:00007f0fad665028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 151.856041][ T6135] RAX: ffffffffffffffda RBX: 00007f0faeec6180 RCX: 00007f0faec4ce59 [ 151.856076][ T6135] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 151.856090][ T6135] RBP: 00007f0faece2d6f R08: 0000000000000000 R09: 0000000000000000 [ 151.856103][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.856115][ T6135] R13: 00007f0faeec6218 R14: 00007f0faeec6180 R15: 00007fff838c1e18 [ 151.856133][ T6135] [ 151.856141][ T6135] memory: usage 307200kB, limit 307200kB, failcnt 968 [ 152.079491][ T6135] memory+swap: usage 335496kB, limit 9007199254740988kB, failcnt 0 [ 152.089021][ T6135] kmem: usage 306792kB, limit 9007199254740988kB, failcnt 0 [ 152.096476][ T6135] Memory cgroup stats for /syz2: [ 152.096853][ T6135] cache 315392 [ 152.105169][ T6135] rss 4096 [ 152.108181][ T6135] shmem 311296 [ 152.111633][ T6135] mapped_file 4096 [ 152.115492][ T6135] dirty 0 [ 152.118416][ T6135] writeback 0 [ 152.121795][ T6135] workingset_refault_anon 221 [ 152.126485][ T6135] workingset_refault_file 557 [ 152.131252][ T6135] swap 29073408 [ 152.134713][ T6135] swapcached 47386624 [ 152.138677][ T6135] pgpgin 129962 [ 152.142151][ T6135] pgpgout 129884 [ 152.145679][ T6135] pgfault 92857 [ 152.149187][ T6135] pgmajfault 159 [ 152.152733][ T6135] inactive_anon 315392 [ 152.156782][ T6135] active_anon 0 [ 152.160325][ T6135] inactive_file 0 [ 152.164030][ T6135] active_file 0 [ 152.167480][ T6135] unevictable 0 [ 152.171000][ T6135] hierarchical_memory_limit 314572800 [ 152.176356][ T6135] hierarchical_memsw_limit 9223372036854771712 [ 152.182516][ T6135] total_cache 315392 [ 152.186399][ T6135] total_rss 4096 [ 152.189928][ T6135] total_shmem 311296 [ 152.193869][ T6135] total_mapped_file 4096 [ 152.198142][ T6135] total_dirty 0 [ 152.245937][ T6135] total_writeback 0 [ 152.249784][ T6135] total_workingset_refault_anon 221 [ 152.255038][ T6135] total_workingset_refault_file 557 [ 152.260232][ T6135] total_swap 29073408 [ 152.264233][ T6135] total_swapcached 47386624 [ 152.268755][ T6135] total_pgpgin 129962 [ 152.272744][ T6135] total_pgpgout 129884 [ 152.276800][ T6135] total_pgfault 92857 [ 152.280787][ T6135] total_pgmajfault 159 [ 152.284896][ T6135] total_inactive_anon 315392 [ 152.289468][ T6135] total_active_anon 0 [ 152.293475][ T6135] total_inactive_file 0 [ 152.297667][ T6135] total_active_file 0 [ 152.301661][ T6135] total_unevictable 0 [ 152.305629][ T6135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.837,pid=6107,uid=0 [ 152.320218][ T6135] Memory cgroup out of memory: Killed process 6107 (syz.2.837) total-vm:96084kB, anon-rss:1232kB, file-rss:40724kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 153.302128][ T6135] syz.2.846 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 153.316207][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.316276][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.316288][ T6135] Call Trace: [ 153.316295][ T6135] [ 153.316304][ T6135] __dump_stack+0x1d/0x30 [ 153.316347][ T6135] dump_stack_lvl+0x95/0xd0 [ 153.316367][ T6135] dump_stack+0x15/0x1b [ 153.316406][ T6135] dump_header+0x80/0x240 [ 153.316430][ T6135] oom_kill_process+0x295/0x350 [ 153.316522][ T6135] out_of_memory+0x97d/0xb80 [ 153.316624][ T6135] try_charge_memcg+0x62f/0xa10 [ 153.316664][ T6135] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 153.316700][ T6135] __alloc_frozen_pages_noprof+0x18a/0x350 [ 153.316725][ T6135] alloc_pages_mpol+0xb3/0x260 [ 153.316794][ T6135] alloc_pages_noprof+0x8f/0x140 [ 153.316820][ T6135] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 153.316857][ T6135] __kvmalloc_node_noprof+0x3d4/0x640 [ 153.316913][ T6135] ? futex_hash_allocate+0x190/0x9a0 [ 153.317005][ T6135] ? futex_hash_allocate+0x190/0x9a0 [ 153.317140][ T6135] futex_hash_allocate+0x190/0x9a0 [ 153.317170][ T6135] ? cap_task_prctl+0x13f/0x6b0 [ 153.317199][ T6135] futex_hash_prctl+0xd8/0xf0 [ 153.317257][ T6135] __se_sys_prctl+0x4f4/0x1400 [ 153.317289][ T6135] __x64_sys_prctl+0x67/0x80 [ 153.317318][ T6135] x64_sys_call+0x2533/0x3020 [ 153.317378][ T6135] do_syscall_64+0x12c/0x3b0 [ 153.317408][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.317433][ T6135] RIP: 0033:0x7f0faec4ce59 [ 153.317476][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.317497][ T6135] RSP: 002b:00007f0fad665028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 153.317532][ T6135] RAX: ffffffffffffffda RBX: 00007f0faeec6180 RCX: 00007f0faec4ce59 [ 153.317546][ T6135] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 153.317597][ T6135] RBP: 00007f0faece2d6f R08: 0000000000000000 R09: 0000000000000000 [ 153.317612][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.317652][ T6135] R13: 00007f0faeec6218 R14: 00007f0faeec6180 R15: 00007fff838c1e18 [ 153.317671][ T6135] [ 153.317678][ T6135] memory: usage 307200kB, limit 307200kB, failcnt 4376 [ 153.539065][ T6135] memory+swap: usage 335900kB, limit 9007199254740988kB, failcnt 0 [ 153.546982][ T6135] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 153.554272][ T6135] Memory cgroup stats for /syz2: [ 153.554464][ T6135] cache 118784 [ 153.562778][ T6135] rss 0 [ 153.565534][ T6135] shmem 0 [ 153.568496][ T6135] mapped_file 0 [ 153.572023][ T6135] dirty 0 [ 153.574975][ T6135] writeback 0 [ 153.578244][ T6135] workingset_refault_anon 221 [ 153.583109][ T6135] workingset_refault_file 586 [ 153.587809][ T6135] swap 29388800 [ 153.591267][ T6135] swapcached 47702016 [ 153.595227][ T6135] pgpgin 129992 [ 153.598669][ T6135] pgpgout 129962 [ 153.602239][ T6135] pgfault 92857 [ 153.605771][ T6135] pgmajfault 160 [ 153.609305][ T6135] inactive_anon 0 [ 153.612954][ T6135] active_anon 4096 [ 153.616660][ T6135] inactive_file 0 [ 153.620277][ T6135] active_file 118784 [ 153.624183][ T6135] unevictable 0 [ 153.627646][ T6135] hierarchical_memory_limit 314572800 [ 153.633041][ T6135] hierarchical_memsw_limit 9223372036854771712 [ 153.639191][ T6135] total_cache 118784 [ 153.643092][ T6135] total_rss 0 [ 153.646367][ T6135] total_shmem 0 [ 153.649958][ T6135] total_mapped_file 0 [ 153.653953][ T6135] total_dirty 0 [ 153.657395][ T6135] total_writeback 0 [ 153.661278][ T6135] total_workingset_refault_anon 221 [ 153.666465][ T6135] total_workingset_refault_file 586 [ 153.671685][ T6135] total_swap 29388800 [ 153.675655][ T6135] total_swapcached 47702016 [ 153.680150][ T6135] total_pgpgin 129992 [ 153.684243][ T6135] total_pgpgout 129962 [ 153.688293][ T6135] total_pgfault 92857 [ 153.692368][ T6135] total_pgmajfault 160 [ 153.696418][ T6135] total_inactive_anon 0 [ 153.700639][ T6135] total_active_anon 4096 [ 153.704939][ T6135] total_inactive_file 0 [ 153.709078][ T6135] total_active_file 118784 [ 153.713499][ T6135] total_unevictable 0 [ 153.717465][ T6135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.846,pid=6130,uid=0 [ 153.732074][ T6135] Memory cgroup out of memory: Killed process 6130 (syz.2.846) total-vm:96348kB, anon-rss:1232kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 154.962015][ T6158] netlink: 88 bytes leftover after parsing attributes in process `syz.4.854'. [ 155.086848][ T6149] syz.0.851 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 155.100901][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.0.851 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.100985][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.101064][ T6149] Call Trace: [ 155.101072][ T6149] [ 155.101079][ T6149] __dump_stack+0x1d/0x30 [ 155.101102][ T6149] dump_stack_lvl+0x95/0xd0 [ 155.101200][ T6149] dump_stack+0x15/0x1b [ 155.101217][ T6149] dump_header+0x80/0x240 [ 155.101243][ T6149] oom_kill_process+0x295/0x350 [ 155.101280][ T6149] out_of_memory+0x97d/0xb80 [ 155.101356][ T6149] try_charge_memcg+0x62f/0xa10 [ 155.101394][ T6149] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 155.101421][ T6149] __alloc_frozen_pages_noprof+0x18a/0x350 [ 155.101458][ T6149] alloc_pages_mpol+0xb3/0x260 [ 155.101543][ T6149] alloc_pages_noprof+0x8f/0x140 [ 155.101571][ T6149] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 155.101609][ T6149] __kvmalloc_node_noprof+0x3d4/0x640 [ 155.101640][ T6149] ? futex_hash_allocate+0x190/0x9a0 [ 155.101725][ T6149] ? futex_hash_allocate+0x190/0x9a0 [ 155.101765][ T6149] futex_hash_allocate+0x190/0x9a0 [ 155.101830][ T6149] ? cap_task_prctl+0x13f/0x6b0 [ 155.101854][ T6149] futex_hash_prctl+0xd8/0xf0 [ 155.101902][ T6149] __se_sys_prctl+0x4f4/0x1400 [ 155.101960][ T6149] __x64_sys_prctl+0x67/0x80 [ 155.101984][ T6149] x64_sys_call+0x2533/0x3020 [ 155.102009][ T6149] do_syscall_64+0x12c/0x3b0 [ 155.102047][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.102098][ T6149] RIP: 0033:0x7f12f5c6ce59 [ 155.102117][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.102138][ T6149] RSP: 002b:00007f12f467d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 155.102161][ T6149] RAX: ffffffffffffffda RBX: 00007f12f5ee6180 RCX: 00007f12f5c6ce59 [ 155.102178][ T6149] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 155.102194][ T6149] RBP: 00007f12f5d02d6f R08: 0000000000000000 R09: 0000000000000000 [ 155.102246][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.102261][ T6149] R13: 00007f12f5ee6218 R14: 00007f12f5ee6180 R15: 00007ffe707587d8 [ 155.102285][ T6149] [ 155.102292][ T6149] memory: usage 307200kB, limit 307200kB, failcnt 2105 [ 155.308561][ T6164] block device autoloading is deprecated and will be removed. [ 155.314361][ T6149] memory+swap: usage 295608kB, limit 9007199254740988kB, failcnt 0 [ 155.340248][ T6149] kmem: usage 222440kB, limit 9007199254740988kB, failcnt 0 [ 155.347563][ T6149] Memory cgroup stats for /syz0: [ 155.347850][ T6149] cache 0 [ 155.355817][ T6149] rss 0 [ 155.358612][ T6149] shmem 0 [ 155.361564][ T6149] mapped_file 0 [ 155.365056][ T6149] dirty 0 [ 155.367983][ T6149] writeback 0 [ 155.371280][ T6149] workingset_refault_anon 425 [ 155.375941][ T6149] workingset_refault_file 4690 [ 155.380731][ T6149] swap 58683392 [ 155.384191][ T6149] swapcached 204492800 [ 155.388408][ T6149] pgpgin 172356 [ 155.392047][ T6149] pgpgout 172355 [ 155.395736][ T6149] pgfault 97895 [ 155.399188][ T6149] pgmajfault 311 [ 155.402778][ T6149] inactive_anon 0 [ 155.406409][ T6149] active_anon 4096 [ 155.410115][ T6149] inactive_file 0 [ 155.415183][ T6149] active_file 0 [ 155.418733][ T6149] unevictable 0 [ 155.422235][ T6149] hierarchical_memory_limit 314572800 [ 155.427719][ T6149] hierarchical_memsw_limit 9223372036854771712 [ 155.434069][ T6149] total_cache 0 [ 155.437851][ T6149] total_rss 0 [ 155.442626][ T6149] total_shmem 0 [ 155.446175][ T6149] total_mapped_file 0 [ 155.450175][ T6149] total_dirty 0 [ 155.453756][ T6149] total_writeback 0 [ 155.457615][ T6149] total_workingset_refault_anon 425 [ 155.462854][ T6149] total_workingset_refault_file 4690 [ 155.468161][ T6149] total_swap 58683392 [ 155.472182][ T6149] total_swapcached 204492800 [ 155.476983][ T6149] total_pgpgin 172356 [ 155.479849][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 155.490287][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 155.579681][ T6149] total_pgpgout 172355 [ 155.591048][ T6149] total_pgfault 97895 [ 155.595025][ T6149] total_pgmajfault 311 [ 155.599086][ T6149] total_inactive_anon 0 [ 155.603315][ T6149] total_active_anon 4096 [ 155.607553][ T6149] total_inactive_file 0 [ 155.611729][ T6149] total_active_file 0 [ 155.615703][ T6149] total_unevictable 0 [ 155.619746][ T6149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.833,pid=6096,uid=0 [ 155.634359][ T6149] Memory cgroup out of memory: Killed process 6096 (syz.0.833) total-vm:96084kB, anon-rss:1232kB, file-rss:28324kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 155.980721][ T6149] ================================================================== [ 155.988851][ T6149] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 155.998685][ T6149] [ 156.001003][ T6149] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 156.009064][ T6149] tick_do_update_jiffies64+0x113/0x1c0 [ 156.014632][ T6149] tick_nohz_handler+0x8d/0x3d0 [ 156.019579][ T6149] __hrtimer_run_queues+0x276/0x4f0 [ 156.024789][ T6149] hrtimer_interrupt+0x261/0x850 [ 156.029735][ T6149] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 156.035624][ T6149] sysvec_apic_timer_interrupt+0x6f/0x80 [ 156.041264][ T6149] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.047249][ T6149] __tsan_read8+0x117/0x190 [ 156.051764][ T6149] next_uptodate_folio+0x3a/0x7e0 [ 156.056791][ T6149] filemap_map_pages+0xa00/0xea0 [ 156.061730][ T6149] handle_mm_fault+0x1508/0x2e70 [ 156.066674][ T6149] __get_user_pages+0x1290/0x1f10 [ 156.071706][ T6149] __mm_populate+0x242/0x390 [ 156.076304][ T6149] vm_mmap_pgoff+0x23b/0x2d0 [ 156.080907][ T6149] ksys_mmap_pgoff+0xc1/0x310 [ 156.085588][ T6149] x64_sys_call+0x14df/0x3020 [ 156.090271][ T6149] do_syscall_64+0x12c/0x3b0 [ 156.094877][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.100770][ T6149] [ 156.103096][ T6149] read to 0xffffffff86c07a00 of 8 bytes by task 6149 on cpu 1: [ 156.110634][ T6149] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 156.116896][ T6149] count_shadow_nodes+0x6a/0x250 [ 156.121833][ T6149] do_shrink_slab+0x63/0x660 [ 156.126443][ T6149] shrink_slab+0x545/0x8f0 [ 156.130872][ T6149] shrink_node+0x6d4/0x20a0 [ 156.135386][ T6149] do_try_to_free_pages+0x408/0xc90 [ 156.140593][ T6149] try_to_free_mem_cgroup_pages+0x201/0x420 [ 156.146511][ T6149] try_charge_memcg+0x373/0xa10 [ 156.151382][ T6149] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 156.156932][ T6149] __alloc_frozen_pages_noprof+0x18a/0x350 [ 156.162741][ T6149] alloc_pages_mpol+0xb3/0x260 [ 156.167520][ T6149] alloc_pages_noprof+0x8f/0x140 [ 156.172484][ T6149] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 156.178393][ T6149] __kvmalloc_node_noprof+0x3d4/0x640 [ 156.183780][ T6149] futex_hash_allocate+0x190/0x9a0 [ 156.188922][ T6149] futex_hash_prctl+0xd8/0xf0 [ 156.193614][ T6149] __se_sys_prctl+0x4f4/0x1400 [ 156.198385][ T6149] __x64_sys_prctl+0x67/0x80 [ 156.202980][ T6149] x64_sys_call+0x2533/0x3020 [ 156.207664][ T6149] do_syscall_64+0x12c/0x3b0 [ 156.212267][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.218157][ T6149] [ 156.220464][ T6149] value changed: 0x00000000ffffc791 -> 0x00000000ffffc792 [ 156.227553][ T6149] [ 156.229859][ T6149] Reported by Kernel Concurrency Sanitizer on: [ 156.235994][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.0.851 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.245181][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.255223][ T6149] ================================================================== [ 156.274267][ T6149] syz.0.851 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 156.288543][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.0.851 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.288616][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.288645][ T6149] Call Trace: [ 156.288653][ T6149] [ 156.288662][ T6149] __dump_stack+0x1d/0x30 [ 156.288685][ T6149] dump_stack_lvl+0x95/0xd0 [ 156.288704][ T6149] dump_stack+0x15/0x1b [ 156.288723][ T6149] dump_header+0x80/0x240 [ 156.288747][ T6149] oom_kill_process+0x295/0x350 [ 156.288837][ T6149] out_of_memory+0x97d/0xb80 [ 156.288869][ T6149] try_charge_memcg+0x62f/0xa10 [ 156.288948][ T6149] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 156.288977][ T6149] __alloc_frozen_pages_noprof+0x18a/0x350 [ 156.289026][ T6149] alloc_pages_mpol+0xb3/0x260 [ 156.289052][ T6149] alloc_pages_noprof+0x8f/0x140 [ 156.289074][ T6149] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 156.289184][ T6149] __kvmalloc_node_noprof+0x3d4/0x640 [ 156.289209][ T6149] ? futex_hash_allocate+0x190/0x9a0 [ 156.289255][ T6149] ? futex_hash_allocate+0x190/0x9a0 [ 156.289291][ T6149] futex_hash_allocate+0x190/0x9a0 [ 156.289468][ T6149] ? cap_task_prctl+0x13f/0x6b0 [ 156.289497][ T6149] futex_hash_prctl+0xd8/0xf0 [ 156.289534][ T6149] __se_sys_prctl+0x4f4/0x1400 [ 156.289618][ T6149] __x64_sys_prctl+0x67/0x80 [ 156.289645][ T6149] x64_sys_call+0x2533/0x3020 [ 156.289674][ T6149] do_syscall_64+0x12c/0x3b0 [ 156.289753][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.289775][ T6149] RIP: 0033:0x7f12f5c6ce59 [ 156.289791][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.289884][ T6149] RSP: 002b:00007f12f467d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 156.289903][ T6149] RAX: ffffffffffffffda RBX: 00007f12f5ee6180 RCX: 00007f12f5c6ce59 [ 156.289917][ T6149] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 156.289930][ T6149] RBP: 00007f12f5d02d6f R08: 0000000000000000 R09: 0000000000000000 [ 156.290004][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.290019][ T6149] R13: 00007f12f5ee6218 R14: 00007f12f5ee6180 R15: 00007ffe707587d8 [ 156.290037][ T6149] [ 156.555082][ T6149] memory: usage 239600kB, limit 307200kB, failcnt 2728 [ 156.562140][ T6149] memory+swap: usage 289084kB, limit 9007199254740988kB, failcnt 0 [ 156.570175][ T6149] kmem: usage 231676kB, limit 9007199254740988kB, failcnt 0 [ 156.577570][ T6149] Memory cgroup stats for /syz0: [ 156.577943][ T6149] cache 0 [ 156.585906][ T6149] rss 28672 [ 156.589177][ T6149] shmem 0 [ 156.592239][ T6149] mapped_file 0 [ 156.595691][ T6149] dirty 0 [ 156.598618][ T6149] writeback 0 [ 156.601934][ T6149] workingset_refault_anon 433 [ 156.606693][ T6149] workingset_refault_file 4690 [ 156.611480][ T6149] swap 58658816 [ 156.614927][ T6149] swapcached 204529664 [ 156.619055][ T6149] pgpgin 172365 [ 156.622557][ T6149] pgpgout 172357 [ 156.626097][ T6149] pgfault 97902 [ 156.629548][ T6149] pgmajfault 318 [ 156.633105][ T6149] inactive_anon 0 [ 156.636719][ T6149] active_anon 16384 [ 156.640514][ T6149] inactive_file 0 [ 156.644219][ T6149] active_file 0 [ 156.647675][ T6149] unevictable 0 [ 156.651205][ T6149] hierarchical_memory_limit 314572800 [ 156.656625][ T6149] hierarchical_memsw_limit 9223372036854771712 [ 156.662851][ T6149] total_cache 0 [ 156.666324][ T6149] total_rss 28672 [ 156.669941][ T6149] total_shmem 0 [ 156.673419][ T6149] total_mapped_file 0 [ 156.677391][ T6149] total_dirty 0 [ 156.680867][ T6149] total_writeback 0 [ 156.684682][ T6149] total_workingset_refault_anon 433 [ 156.689863][ T6149] total_workingset_refault_file 4690 [ 156.695157][ T6149] total_swap 58658816 [ 156.699197][ T6149] total_swapcached 204529664 [ 156.703808][ T6149] total_pgpgin 172365 [ 156.707781][ T6149] total_pgpgout 172357 [ 156.711896][ T6149] total_pgfault 97902 [ 156.715861][ T6149] total_pgmajfault 318 [ 156.719911][ T6149] total_inactive_anon 0 [ 156.724064][ T6149] total_active_anon 16384 [ 156.728382][ T6149] total_inactive_file 0 [ 156.732540][ T6149] total_active_file 0 [ 156.736542][ T6149] total_unevictable 0 [ 156.740518][ T6149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.851,pid=6144,uid=0 [ 156.748209][ T6096] syz.0.833 (6096) used greatest stack depth: 7224 bytes left [ 156.755130][ T6149] Memory cgroup out of memory: Killed process 6149 (syz.0.851) total-vm:96348kB, anon-rss:1260kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000