{0x40, 0x3}, {0x9, 0x4}, {0x20, 0x4}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x6}, {0x8, 0x6}], "2b942fb52a0d04d6"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xff, 0x2}, {0x7, 0x3}, {0x80, 0x4}, {0x9, 0x3}, {0xff, 0x5}], "da8411c026cf2037"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3e, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x45, 0x1}, {0x6f, 0x4}, {0x7, 0x1}, {0x80, 0x7}, {0x2, 0x3}, {0x5, 0x1}, {0x51, 0x2}, {0x8}, {0x40, 0x4}, {0xc5, 0x5}, {0x1f, 0x1}, {0x0, 0x5}, {0x81, 0x1}, {0x3f, 0x6}], "f0bc9bfe631a0a3b"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3, 0x1}, {0x6}, {0xbf, 0x4}, {0x3}, {0x0, 0x4}, {0x5}, {0xff, 0x1}, {0xd8, 0x6}, {0x3, 0x6}, {0x7f, 0x7}], "cc0381727d100737"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0329f4852215a6e2"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3f, 0x2}, {0xa3, 0x4}, {0xff, 0x6}, {0x2}, {0x8}, {0x79, 0x4}, {0x2, 0x5}, {0x7, 0x3}, {0x3f, 0x4}, {0x40, 0x4}, {0x6, 0x1}, {0x7f, 0x1}, {0x80, 0x1}, {0xff, 0x1}, {0xff, 0x6}, {0x3, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x2}], "b38f9052326c56b1"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x4}, {0xff, 0x3}, {0xe6, 0x3}, {0x7f, 0x5}, {0xea, 0x3}, {0x5, 0x7}], "e25d693fba1d3e55"}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:01:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1172.440123] Memory cgroup stats for /syz7:
[ 1172.480639] anon 1638400
[ 1172.481236] file 307421184
[ 1172.481487] kernel 5513216
[ 1172.481751] kernel_stack 622592
[ 1172.482044] pagetables 2314240
[ 1172.482304] sec_pagetables 0
[ 1172.482548] percpu 5952
[ 1172.482765] sock 0
[ 1172.482962] vmalloc 0
[ 1172.483162] shmem 307417088
[ 1172.483439] file_mapped 0
[ 1172.483716] file_dirty 4096
[ 1172.484055] file_writeback 0
[ 1172.484307] swapcached 0
[ 1172.484525] inactive_anon 308994048
[ 1172.484819] active_anon 61440
[ 1172.485094] inactive_file 0
[ 1172.485331] active_file 4096
[ 1172.485583] unevictable 0
[ 1172.485809] slab_reclaimable 1003656
[ 1172.486121] slab_unreclaimable 1583288
[ 1172.486432] slab 2586944
[ 1172.486649] workingset_refault_anon 0
[ 1172.486965] workingset_refault_file 1
[ 1172.487269] workingset_activate_anon 0
[ 1172.487576] workingset_activate_file 0
[ 1172.487902] workingset_restore_anon 0
[ 1172.488241] workingset_restore_file 0
[ 1172.488607] workingset_nodereclaim 0
[ 1172.488961] pgdemote_kswapd 0
[ 1172.489214] pgdemote_direct 0
[ 1172.489466] pgdemote_khugepaged 0
[ 1172.489749] pgdemote_proactive 0
[ 1172.490037] pgscan 327
[ 1172.490245] pgsteal 77
[ 1172.490448] pswpin 0
[ 1172.490644] pswpout 0
[ 1172.490840] pgscan_kswapd 0
[ 1172.491093] pgscan_direct 327
[ 1172.491348] pgscan_khugepaged 0
[ 1172.491658] pgscan_proactive 0
[ 1172.491976] pgsteal_kswapd 0
[ 1172.492277] pgsteal_direct 77
[ 1172.492584] pgsteal_khugepaged 0
[ 1172.492931] pgsteal_proactive 0
[ 1172.493198] pgfault 87014
[ 1172.493420] pgmajfault 3
[ 1172.493645] pgrefill 327
[ 1172.493864] pgactivate 395
[ 1172.494112] pgdeactivate 327
[ 1172.494359] pglazyfree 0
[ 1172.494578] pglazyfreed 0
[ 1172.494801] swpin_zero 0
[ 1172.495034] swpout_zero 0
[ 1172.495257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=9302,uid=0
[ 1172.496587] Memory cgroup out of memory: Killed process 9302 (syz-executor.7) total-vm:93684kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 1172.838458] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1172.839393] CPU: 1 UID: 0 PID: 10628 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1172.839410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1172.839417] Call Trace:
[ 1172.839422]  <TASK>
[ 1172.839428]  dump_stack_lvl+0xfa/0x120
[ 1172.839456]  dump_header+0x107/0x950
[ 1172.839481]  oom_kill_process+0x278/0xa00
[ 1172.839502]  out_of_memory+0x34b/0x1690
[ 1172.839527]  ? __pfx_out_of_memory+0x10/0x10
[ 1172.839552]  mem_cgroup_out_of_memory+0x164/0x190
[ 1172.839567]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1172.839585]  ? mark_held_locks+0x49/0x80
[ 1172.839605]  try_charge_memcg+0x81f/0xf30
[ 1172.839630]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1172.839655]  charge_memcg+0x7b/0x290
[ 1172.839672]  __mem_cgroup_charge+0x28/0x90
[ 1172.839692]  shmem_get_folio_gfp.constprop.0+0x547/0x13a0
[ 1172.839718]  ? perf_trace_lock+0xb5/0x5d0
[ 1172.839734]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1172.839758]  ? __lock_acquire+0x694/0x1b70
[ 1172.839777]  shmem_fault+0x1f3/0x9f0
[ 1172.839794]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1172.839810]  ? __pfx_shmem_fault+0x10/0x10
[ 1172.839829]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1172.839854]  __do_fault+0x10d/0x480
[ 1172.839871]  __handle_mm_fault+0x119c/0x30f0
[ 1172.839896]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1172.839910]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1172.839928]  ? __pte_offset_map_lock+0x190/0x330
[ 1172.839953]  ? no_page_table+0xc7/0x220
[ 1172.839972]  ? follow_page_pte.constprop.0+0x4f9/0x1170
[ 1172.839996]  handle_mm_fault+0x2c3/0x900
[ 1172.840018]  __get_user_pages+0x58a/0x2f10
[ 1172.840052]  ? __pfx___get_user_pages+0x10/0x10
[ 1172.840074]  ? lock_is_held_type+0x9e/0x120
[ 1172.840095]  populate_vma_page_range+0x282/0x410
[ 1172.840109]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1172.840121]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1172.840139]  ? do_mmap+0x6a4/0x11d0
[ 1172.840158]  __mm_populate+0x100/0x3a0
[ 1172.840172]  ? __pfx___mm_populate+0x10/0x10
[ 1172.840186]  ? up_write+0x195/0x520
[ 1172.840200]  ? lock_is_held_type+0x9e/0x120
[ 1172.840219]  do_shmat+0xdd4/0x1310
[ 1172.840240]  ? __pfx_do_shmat+0x10/0x10
[ 1172.840254]  ? __might_fault+0x138/0x190
[ 1172.840268]  ? lock_release+0xc8/0x290
[ 1172.840285]  __x64_sys_shmat+0xcf/0x160
[ 1172.840299]  ? syscall_trace_enter+0x1cf/0x240
[ 1172.840316]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1172.840336]  ? syscall_trace_enter+0xf2/0x240
[ 1172.840349]  do_syscall_64+0xbf/0x360
[ 1172.840370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.840383] RIP: 0033:0x7f88aea1cb19
[ 1172.840394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1172.840405] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1172.840417] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1172.840425] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000000050
[ 1172.840432] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1172.840440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1172.840447] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1172.840467]  </TASK>
[ 1172.864163] memory: usage 307200kB, limit 307200kB, failcnt 229
[ 1172.864647] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1172.865141] Memory cgroup stats for /syz7:
[ 1172.886044] anon 1507328
[ 1172.888060] file 308056064
[ 1172.888300] kernel 4902912
[ 1172.888529] kernel_stack 557056
[ 1172.888800] pagetables 2179072
[ 1172.889975] sec_pagetables 0
[ 1172.890237] percpu 1088
[ 1172.890449] sock 0
[ 1172.890627] vmalloc 0
[ 1172.891020] shmem 308051968
[ 1172.891262] file_mapped 634880
[ 1172.891524] file_dirty 4096
[ 1172.891760] file_writeback 0
[ 1172.892071] swapcached 0
[ 1172.892291] inactive_anon 308862976
[ 1172.892580] active_anon 61440
[ 1172.892828] inactive_file 0
[ 1172.893083] active_file 4096
[ 1172.893328] unevictable 634880
[ 1172.893605] slab_reclaimable 963672
[ 1172.893916] slab_unreclaimable 1214512
[ 1172.894233] slab 2178184
[ 1172.894447] workingset_refault_anon 0
[ 1172.894750] workingset_refault_file 1
[ 1172.895081] workingset_activate_anon 0
[ 1172.895391] workingset_activate_file 0
[ 1172.895708] workingset_restore_anon 0
[ 1172.896022] workingset_restore_file 0
[ 1172.896332] workingset_nodereclaim 0
[ 1172.896625] pgdemote_kswapd 0
[ 1172.896874] pgdemote_direct 0
[ 1172.897143] pgdemote_khugepaged 0
[ 1172.897428] pgdemote_proactive 0
[ 1172.897713] pgscan 406
[ 1172.897934] pgsteal 77
[ 1172.898141] pswpin 0
[ 1172.898333] pswpout 0
[ 1172.898537] pgscan_kswapd 0
[ 1172.898774] pgscan_direct 406
[ 1172.899041] pgscan_khugepaged 0
[ 1172.899307] pgscan_proactive 0
[ 1172.899561] pgsteal_kswapd 0
[ 1172.899807] pgsteal_direct 77
[ 1172.900075] pgsteal_khugepaged 0
[ 1172.900348] pgsteal_proactive 0
[ 1172.900610] pgfault 87169
[ 1172.900831] pgmajfault 3
[ 1172.901068] pgrefill 378
[ 1172.901285] pgactivate 446
[ 1172.901512] pgdeactivate 378
[ 1172.901769] pglazyfree 0
[ 1172.902004] pglazyfreed 0
[ 1172.902229] swpin_zero 0
[ 1172.902446] swpout_zero 0
[ 1172.902668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10621,uid=0
[ 1172.903853] Memory cgroup out of memory: Killed process 10621 (syz-executor.7) total-vm:105680kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:512kB, UID:0 pgtables:140kB oom_score_adj:1000
13:01:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:50 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:01:50 executing program 7:
mlockall(0x2)
r0 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r0)
shmdt(r0)

13:01:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x282, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:01:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:50 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:01:50 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
close_range(r0, r0, 0x0)
r1 = dup2(r0, r0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0}, &(0x7f00000002c0)=0xc)
r3 = openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x1, 0x0, 0x0, 0x5, 0x40}, &(0x7f0000000480)=0x20)
clone3(&(0x7f0000000380)={0x92000100, &(0x7f0000000080)=<r4=>0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x18}, &(0x7f0000000140)=""/211, 0xd3, &(0x7f0000000240)=""/23, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x5, {r3}}, 0x58)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0xbd0}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="67ace831bcc99825f0a7a3af481ee645b7a7427e85482d8bdb46a479815a0b378f29bfd0beea22fafb37fd4c57", 0x2d}, {&(0x7f0000001540)="b7c9505cff3538b5d4dc20ea8f27c7e31c676f0356b943e0c83921f616cc7aef6e007afcaeee05a8043d159a23acd4ee67dbe67293d2a29591beab26b958c2ec5d1d3a55495d3c2c4db2e2d4d52c74137b0b459685f6c98748e6", 0x5a}, {&(0x7f00000015c0)="f78532bfc6792e218db4489ce93e582c150b472e15c26114136131e06c25843bfad77c0f28971c686a24f82ff3bb490f0ae41af9e1940d1fa515e20579535541023551dc7251e8ba9edcf3ce3b55e357937b1c180486a9af02e5db75ebd24755d32cf40472ca08894284d999f24603ebcadba38b9dc4c06f6a3a13440c1ffc109a13d704940e5127afeb9e0b88458791a81e9329d724ede95954dd199a19c4cb238c76a17a6a6dd6", 0xa8}, {&(0x7f0000001680)="044fe313a9ff6f38efadeaa9e4c20bf3134878be81b6337e33ff5b98ddc4a3a99cd57c81a15079c875c56a00aa478cc14e9689f8b7ac0e994b", 0x39}, {&(0x7f00000016c0)="8d3f48850d5f093c35c8b154a5e44aff23d2766e1c10e8f7822058b39b23d934f2a08e360f1905d33792e8bdc85bc447d5e4f0434015503ad9828c64ca52162babdbbb493d8a8e433c20f570f5c0b61030a3c75e85ae06da4bb3a22ebf9bb5ada2c197ef46edcd67cb5b93d3977d619454bd9e9999bd7739ab1fc0648bc7e6f95c9f0b07762cfcc8c2c38c4c5f62e107bf79e81913f5f049f300232df8a30a6fd44270445d5e135725968839342daffdf4ee36cb848bc33bee19026010d63e5e4ff338a6d118874946701db36d8b0e30921faf69313058127339b6ea98a9236ad46e4b3fba3b", 0xe6}, {&(0x7f00000017c0)="f1e39b2a1b31186276ea93514084c4a08796306fb743f049d8d26708f30f0a53c3e49ec30a2338d1b03944bc0aab605e8e23681df54149355b874b4a3cfb771f4a04741b0a272fed3681566f31101b9fb18256be42577235db8cf48056af73e7ad71f440b1c4a9fe4d704c07e9b0479bfe0d528d2f15006e6dd015116782db07c0c71d3904313ba46c48e0d5cbc0765e518d529911ac822108063a82d816a44fb767ef794e28fa0dbdd1ec739cb038c29a409c74f77e4972", 0xb8}, {&(0x7f0000001880)="0ccf3e0054d81b1c0f8db12a15e92575beb0b354595be8", 0x17}], 0x8, &(0x7f0000001940)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2, 0x8, 0x2, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x1, 0x6d, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}]}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x6, 0x16, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7f, 0x2, [0xfffffffffffffffc, 0x2, 0x6, 0xdca, 0x0, 0x0, 0x9, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x7, [0x1, 0x10001, 0x6f, 0xfffffffffffff801]}}, @hao={0xc9, 0x10, @empty}, @pad1]}}}], 0x1a0}}, {{&(0x7f0000001b00)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c, &(0x7f0000004e80)=[{&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000001b40)="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", 0xfd}, {&(0x7f0000002e80)="ddc216efbc9b08411ca1138763c16b7a52ae88c86389c1edb7487e1d235297d9809adcc8cd9d63f34c463f9300f500ea9e87028da49708e4bd188a35aba9060152354692902960f2291acc3f4ee27d2c0b433bb30255d6161ef1a797608897814fd158a322f23fa48f8ac57920f54802b3d0c717d8247de9da67537754849bdda985b0e9639f0aa9812ec63e31fb5ccf773a4586fd7dae6bb92f89f885e611e4f875a6d17d48d6d9f457806437b2803d5fa1e0bf35b684af2b9e3323b30fad7227eee50f60e3d761b034c81d6279204eacee17f55772ddbe32f7b88a78b3f7dae3181fc44285b7204500fba2696748835a0cf0b6f01c8c050f58223e8837a8d13ca5f3a9343371348903b06a170156a7a0273925c0aca14a68f0724dca94b47a573648e2a7576dd00a885325907c8b360c720bef8bbdeb7a744d68736ccdbdc96d10a3e5f7afcfb1869111be7c70b81f1accc1d42f90baf8dc8be48688a2e03f7bc969b3765281d5892caabeb1456c2b70ed92b43f5325118ec424192614f6087953160d684d80eba6b9bfb8c41c3d1ba4937b431b206e8c5fdda5fba280cf2a944cd7e699da407ef8ac5af250c5b941bec3530765d9269c8dee90b9c1bba02bc05dcd112bd491eb744bb2fcb0d6b69a8cdeeb8017884374dbc84b7ee1ef99f003fbd17c58819521866b16925b8768a8d723c7401213832c652327698c90332e82b725cbf11741919bb29a6089d6e3ffb5275bcc6e0ec03f8a103b553832e0c12d15e093d18f25e548a153ed3537bce51a07f67905038a45762279616a05333706b7d7da12451cf3e534fb287732f35529658499d61b5e27a84e85d845987496e131bc7d6f38d1d69af0134748f41c33ee0492cd3d3740391d0849ce10481eedc54db65f51a2467258ce57240e26fe958f7be0baa570313d0331ee6a62cb1e8f51eb260c6c7c1297a62c1cf4de20adda6dd000d93b70f15e6f9f43ba7ae7470912166675f9a57db5265367b1ae0abd53fc8774a636a9bd6c53c7c206804cb35f1f3cc74f202131c4a3a1067c793ebe102b4882cefa06ed4e510f639b786d6c611e7ef44488e9ec7883e5875e1b0cce92d062775b8275c76c2fcfd64e6f36480aee9b37bcb0466f7073522e9ece59818db0450b3706ae4e58dc012bcba12d129ffd39cb38febc23cf4672c4e3c8b2898d43f66dc8f79e4b2c4c0872845f1f0330fa1d0fb8cc474fe72a58b99cda9b4015bd1a577c2a11823ac70d3ddddcfc6f746a36e63a25aa084ac1712eda4a9c7e2b60d13c411d3d1cbabfc141c3f1cbf06ca53261d7697422b7ce15ef6ada1aea395b12bf569c2775ef238bb2a596be5f29a4d784762cbd457b8a195ef5ffe712b7f7a5caa5c81fb70c794a6c8dc5a51236a71294dcf3b694632512808723bd6757f39a7fe36f8eae91a2489da9fd4868535c022e1ba93a84e5fbab02b46132ae2a2471865a1eae857a66149e491abc388eef9d73a22f13613bb7e2cb872425d1d4e9d91c4e45f4bb4b39bfd1108d674a848881c163b99bd0d5c3f39387520ad5eac3c479de4b82e988f36ddb5073fce10b4469c15fe03830e6dfe768fc5a421fb95756e97ec78d87daf866adf2cfba5d6d2b9eae280c50f6cbdb1afb721498e1897c60afec3daff07f6c3bd298e07dd485e237ac4f873a3002efbbeab9f6e5211ad12acb37f3c79cca0654ed34034fb0cb6a188f2f8e6dfd0fdf36d3fa99b3f14d2d36a4c2ae6df66384d4e76e3d1ed5d804ad051c480f9210dad06f7ab4c43aa1b288cd394c25f39795147de252414db8421aa7ec5f822655bdbe3d7bc9ab23d6245cdc6a8b9b99f4853f657d9ba83bc1418ae680ff9c64accdcec54d53d71035166444a94cec7fb5037ae84cd3d885f011b1293c7077b95eec403c4a4f4c7775cd0b50bc6aa6ea21e5278f0bf5bf6bf368b80802c738fa6d6e7bccf75d428eb16ebcc444d4a7a560b6b535d733a24d0d548f1399c437fdfa2c26047c4b50480db337d5b4d75ba8d3cc07e59d9f2638dfc34898aea8617f37f1301e9b4b690b177b5000a3edd2667c0a623f49d9f9151c37e0e3987f43afc623bff0c8d043656de6c195ba4011a7c41d1c14aff708275b841471ca6cb6b7b7d4b2af320bbc4a35aa41ef225a65ca51d11c946046a530e0d4136037ae6eddc2ad857f57fd3c7aa8ca02704313d5714ae07063d33a29d4c7aea8d20928d016230de3346565ae6032660c30afa0b6a8ddf7395b8bf2650eb747aa403760e050a5c783010b0a3b2f788b919599ca1f085ba789e93a93b7a0d478fb26faf6ef8ce5cde8dcf03da3e98f64ef1227b14db261810dc4e6b495d07e4ee25ff35735e25d42813d59fd047737e770dd588d808237bafe3792e396d5d18f759b8f50a8306cc65f8f38a77510fca33c26e43092ea72a5cd8192972c7550813dafe0dc1eb94564735e9a8cf8b26d72205eaa25061da72cd1b2bf822db1910b95eaa10a37dc83df188f2848d992a3bb3400af795d3524f3a64a90b0df412c6d5791765d8a67b90dbcd58a4567bf020aa04b53ff4a39e3169bb982a7ad08e4c15a31ffb011e55080b36bfd872b7602fe536a80761e349af8f55271843a8765df6b2879be32c683ae66b4104f2c06c03f15e48d5c5378e5b94566544d57f47292327df51cf174c619e405b2e5b68ec4305466b2958fe311243365779979642b1a4b7011c315fa802f465b17bec4cae6e3938cabe0d7eae5d82ace113182f488e911ac4ecf46de6f77f74886df5b0ba2dcdf3105363aca1694556b84f7126879b4ac3fee1c2bff59ee72c5ded426dde30c45818487827e6ffb994b913dda0607fc86ba23e123014ace314dfe10cb3a65c8e149c2fdb20aa98bc4b52f4f81b855eb54e2a910f8952755114296fabbf7bc7d6dfb7f49c307721b4d05ae845b83f6e3ee38ca96ae115da307638ac60d1befa65614711058d6026d94636206ae87fb166f1dd7372ed6084ca8275d2ece7031a6cf8e82de8884989f42c6fab5800ddad39f4c93fc3916256a389c6491c700bf74037590ca8d3b54367db83fdcba7e3c6d035d8e83acb3f0f45999cb25faabca374bfb11c86bf3f1ba8bd14d7ccc7b129123caec8b307cb269d936d84c61fb801a7eaa776dd8a286f96131dc3e7f30839e03da27f4c22097fe7046a928e1a1cd69c7d3f13ccf8c8066b2587974a4a52cc56b39d8b96adfc0f138f34896b512ed78dade48a3645bbb4805c33194e59ccada63719a6a2e1fd1081bfc5ca4607d5c921238133bfa6b3af5d6a3d9c26f0b78fa2d4ed79d03096be57ae792a637c9f61742985ed1b3553e2e55c7e6b7789e278491f81fa8eddcb51afcbdab3c9852432f161e96356d52c9ae9738d83c6ffbdd893846eb0d4542925475cd0c627582187b1ff24cdd351d2dc024bb441199acc119a60226a2afdebc07a17b3f6b52bc7c8fd784d4adb746ace646ca1d05ad5f8b3660c4b9448fefa1586e9c217a838cbb2876b12740041635f7d02e842f41d48eb29774c668e19fbb6afe141792cc4461d804b56fb7d8d445ca63e7e0228c0cbc18d9d99607364fbcc7c1c9173e3f8b88bf511619afa450b7ebc04925cb8a3efbfe2528ae8f82d3d2b3908ca38d9f8878aa0b69a7d53444b32773a0f36e0cd93209d200543e3a5359acbab577ffa05317bd7bb1d65a1b730405300c256dad3ec67cd2657a82d2fd246f7b53d7b1f2dd6709ce53f5d2b396687ad02b0d2df5ee3e9711c02f8fca94a7dbf12d3294332c794b84b78fae15b75ddf5a235168e66b6506b4e988faef92c03524ae81512d8853182e17137f78b24b516b0481eef24ed3ecacafbb0284bf93540da4f9ec75df065bc4e2a242c9288fe41f6952a1875e605a7509ad61562a816e9434bf4b3000499128283f54a436d539223df0d11109b1643693391b6ac8c89e632e0ddace57430714eba102fa280947980f46e4ba521dac8a3da24a2c56ba9122989687c70b587aa99c96863108cc33e46cca22bd23267b84335e6af5cc42236d1dc8d510da43f9ddc33d24cbbbba0c05342a1ca4cc1883f7546b4039dc653df879a2da7f9ab7a05b1b09dedd8e462a33ade7bd4dbcb7cb7a68bd23f1849f83762dcf6daa518050d025fb2afb05897e7ecaf0a29fac26a6995c5493b7819dd8c7edca8832dd82a79f12ba3c502dc116fc0a66f9f0550ce4104dc0015c2ecd480e17401a40357de90b43e528554d6e2b8ce6e068e853683ea1aff0e8845b7d04b12cccc723a0d9804dc1e7e27f84eba529d84658f8f119ef944fcaee32603d77b461a8438e8e9889e80a40f06216af0f698134ba3a5a8da4cbcd2f31f29b8178e4b989c971757a935db27ea760614e8abfa6c8d75b55bdefef70057825ed73ca47fbff97661efb2b31f3ea363e3b96a60b4e3f55e1ccf21dd274ca747387827cd61d736aa72d8c6a9a10040f91f1c725861d442d187b99dcc909aa8cb1b041d7b6d63a8745c667c234213df167a4ab13236a9cdc47dd5b52512563367e54b24434f6ca90f5b769a15870b66f06bc86cde4ed5a77c7f859550d1a958d3a749d3d6ad4bb58d7575eda37061f7398c4a89d741b4435087fcd8faa3ad2afbdfd285f58bf7a1495619eecf5315e05a0e23bd7280394b23289a68d69d6bbd6753fb90f54ab2a74e14b0a4807a7cf43a17eb2a87c364f9b91617a4539a40dc5b0f56bbcb3626eaa9a40b552866e10f8598180a0e1365b1127d1d0ef9c0a13d4d1e1d0e2bf7ff2f8d8a5e6e6182ec4aaaefb27950838cd11a0188331be6a0f55ff07d9fad518290eac25d406087477c49c7dcf1b8b1c012dbcc5d916a83c5a30664b82e9be1da40b3870f643795f90dc957ee3254480f9f8aa6c41ebf5928c33beaac71930ec3facb68ad639168e492ef13961b7795f126f5d0e3b61f6c3b1ef4b6cf97e4687c7da127e98b57017f8721b809ed1ea529109158e22d843f42911f837471fca4389ef8789d09eb4a565cdb5477ba72a48611ac0bb08384849c416863dbb02c5f38bc68fb53146a024130c043656b619baa51ac9ee301a95c8a92b716ec7c1bfbc5190d10e4b86881ecc62121f21f8a394cb56fd027f560277569553d68531ccadfd7fb101511db183ec9259bc87fabb05d7eaeaf2947b35e31df70beb73dcf6b17b5b9f38a26c3cff5b716bae16437c09d363683ac9a0d437a569601df5b3d515e672a2375836c826e3bb92b4d6428f86f50061f660e5b37fd8b6ca08482b2144176017a59773dee0c8ca6e5450d36870412179a9a7a8aee002bdb574b537d4ecc9ba9ce978d571fad242e01391809c8bb4e055ac5b62be1ba4aa225d5855a825d9d7cf7c5157fa80e691b5a44a6b8a6720d0cce3dc21c318dce322678bb09df4d856d12a5d60a8ffb9cbd20d0ba0ef1f6b53bee90b3e6035b24d80a273c08ad5137c7227c96720b53c41ef190c3bdd04f259109f9df5c15bce8a5f3b7f79b71da860b79cef7587607cf7778faeae3461603008588ebbf46c5a62d213cbdba5e67ab936f43a9c230426be76bd94ef12464c0cbc197ddb1049c40c67d76bcaa6eab46da41d8c500ee530feeae0bed7e930260e447327f540dcfbb59d629795c1827fcda547dc7913782986b1f29d5063ee55b7799ad756deed35c8d1484f25ec917eed464eb0b01c25a59f3a858f4054d619867f75002112cc2a388e63fd4f9d4197ed514befd4c24ff8392806829cd5a21e8443116747e986b4a43b7dbe7b57c913d75ba21df2b00d46cd1c841f0410af6336640d8b", 0x1000}, {&(0x7f0000003e80)="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", 0x1000}, {&(0x7f0000001c40)="d997567b3d031ad50b2254b23e99a54e04b36ac2afb0567ee78fd9e961160c2d782f20e8191d7d5e14c9a6c6359a86707d194bf64e314fbf8cccc566bfc73a5efba808c4a411b0ec9f84eda1126160be9bb3627ce256edd0eb095e4e485eba3bde2adb769b7a0feb2fe2fcb4fa542d42cda81e71122deb69be22c922b5e938e7e84ca86c548d31a566a9cddf200b8177f1463748d89bbb6b1de912aad7976e830c4aef47765b34733810f8091509f3d950b85639d1101bb71c998ba17fe750a4cbe4314bea1e4d3092859ec65ef076f080ae78cc0210462e4b16132368027f7a7e91d0f3830db68ee84f446b02b2d530", 0xf0}, {&(0x7f0000001d40)="1ae1ba47ca6764467c3dde0dc075151e8125788264774faea66b563a4ed820de92e1636755d254f7bcd0d41af47fc884d4066562", 0x34}, {&(0x7f0000001d80)="55f7ead8feb26a388a84ef4d51cb66dd2829cdc5f3c2d1ee3f216bf7fb3019ae01622fb38cae6c0e263848add294cf268273356f47c2b1a58a2415488d0c07e491cfadbd256cb82bc077887f8aeb2d0f98f62006c8dce9f1327ff9a2445022423b195eaf6f4410efd0b718811a0933739962686f50cd27598286e7a7b254dda68aa610ed25af2aa75ecc213cd6cf7c980080687d3c", 0x95}], 0x7, &(0x7f0000004f00)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004f80)}, {&(0x7f0000004fc0)="3564d7fc75277ec992fd68803f0532e318db7d6427420f6976d995e8c8fc40fabcbb212b0ff4d469bbeb621d40889dc2e7e4efed6129f344fd23fd2bfd0df869d5228540af2a68609ec7e30d8be61ff4edbc15867ce187c0308e3db73635206204ea8f301cab3384a061aecd7f875865c6049049d64c742b75ee3d7a1b99588105c59f5ca1ca75a44ae113a109baf92f974fb2eb318ade9033920cdd52125bdcbe7c896d6380954a7168bfa405387247576b1cea2a", 0xb5}, {&(0x7f0000005080)="73521d9a683f77aa25759ce03277e5186a45a7d3b032c9fa6a2e56ec75e2b750f5915f4b07f21a81c8867d2832c7a319daaa765d42e82b7c1720b9bc42a82b0068bf9307edb2daf137aadd1e1c3beeced9a1d7a952355f9dd850794f77c3ba698ff57e99c0bf1552de1b9aeeb383d28400c8", 0x72}], 0x3, &(0x7f0000005140)=[@dstopts_2292={{0x78, 0x29, 0x4, {0x6c, 0xc, '\x00', [@pad1, @pad1, @pad1, @generic={0x0, 0x43, "b31ea33389abfe7624dcd45b1cc48e8588cfbb86904c85ee6b80372bb32cc7ef3563fb2e7b5b68377bd69ed9066177e83cd070db1a62c03cc92db2653839189554ea9f"}, @hao={0xc9, 0x10, @local}]}}}], 0x78}}, {{&(0x7f00000051c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x42}, 0x925e}, 0x1c, &(0x7f00000063c0)=[{&(0x7f0000005200)="83550fb4f5ae04a1246dda2497166feae26108c49d18ac87db8e530788b3367798dc0b54c633d0245318b6c55b9f809873a06e08b3ec37e0ab3520ad1b710c2ffd77b828a77796029a7c8587d85f19ea53307ae9464fd6a3c605382c6b8221350857423173a8042231375433e45391243a7df15504ba7912ab72b31af5ff7720f6511e62302296b2972e44693a42908051770788b5bfc3a9abfd134cb5775603dffcb0771c561890f054f4897479faf11736063abd339383057304b7fd7da0acf331fad34e3f7992a29d78a1f2af34c2cf5eb7e3f88b92062a5695a58418158278c2b6583cce8f", 0xe7}, {&(0x7f0000005300)="bb0173a77bdae87e98d9b34b7d0fcf551ae26018bc8fe5435d14511688738f8db90c2fc0a50f1eb87572b8df3d34bdd0a15ec4f8c53d6a69ba6d8aa2a8f55e28037f7d76f0b19332358d598cd32dc61d8e5a103db321", 0x56}, {&(0x7f0000005380)="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", 0x1000}, {&(0x7f0000006380)="bdeb7985aafe58d3a4b1ba9af21e743941849dcd35583ff35c001ecbea8d711ebb80a9747815ab4d4ef160696e00e55e1c20bdec627eef6bd2ff", 0x3a}], 0x4, &(0x7f0000006400)=[@hopopts={{0x20, 0x29, 0x36, {0x43, 0x0, '\x00', [@pad1]}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000006440)="bc077d0e032664bfa733805e344bf1c9270843b4c0f1872337cd00ea587a4c08f135dde1bb700a1ac8fe7a5364af1d89dd7bfb8c60c085032c803c916066277e0f5542a3fbfa4a01edb67cce94d558b5108bde93e9e4e4b0e7e9fd76f8522e530775f7bdd4fe1d657ce9e620b7f62b7a7946bdaeb1e9932f09162c8348813177e8dda2b0da37a06faf02f0d1925051cbdaffe91a20f39084b907d603d820fb3f6e187e3b67f316255166037553b51b0cdcf9d4792e357ecd2f94cb2197f7bb2b2f42309cb7cccd73e0092e9f669df00dc5", 0xd1}, {&(0x7f0000006540)="97b7129794702eafd67e75c10075e1ae339fa0", 0x13}], 0x2, &(0x7f00000065c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x89, 0x10, 0x1, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xb0}}], 0x5, 0x20000000)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r5, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close_range(r1, r5, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000400)={{r6}, 0x78, 0xfff, 0x2})

13:01:50 executing program 0:
mlockall(0x2)
mlockall(0x7)
shmat(0xffffffffffffffff, &(0x7f0000c34000/0x4000)=nil, 0x0)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
mlockall(0x5)
shmdt(r1)

13:01:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:50 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000bc7000/0x3000)=nil, 0x4000)

13:01:50 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x150)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200, 0x100)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x10040804)
write$P9_RSTAT(r1, &(0x7f00000000c0)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x8, 0x4, {0x80, 0x3, 0x1}, 0x4000000, 0x8, 0x8, 0x3, 0x1, '^', 0x1, '-', 0x7, '*:\xab%{)[', 0x4, '+%:.'}}, 0x47)
unlink(&(0x7f0000000000)='./file1\x00')
write$P9_RAUTH(r2, &(0x7f00000002c0)={0x14, 0x67, 0x2, {0x0, 0x1, 0x6}}, 0x14)

13:01:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:01:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bind(r5, &(0x7f0000007fc0)=@can, 0x80)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000008080)=[@timestamp, @sack_perm, @mss={0x2, 0x3c}], 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0)
[ 1183.935296] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1183.936284] CPU: 1 UID: 0 PID: 10669 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1183.936300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1183.936307] Call Trace:
[ 1183.936312]  <TASK>
[ 1183.936317]  dump_stack_lvl+0xfa/0x120
[ 1183.936346]  dump_header+0x107/0x950
[ 1183.936370]  oom_kill_process+0x278/0xa00
[ 1183.936391]  out_of_memory+0x34b/0x1690
[ 1183.936413]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1183.936429]  ? __pfx_out_of_memory+0x10/0x10
[ 1183.936454]  mem_cgroup_out_of_memory+0x164/0x190
[ 1183.936468]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1183.936485]  ? mark_held_locks+0x49/0x80
[ 1183.936504]  try_charge_memcg+0x81f/0xf30
sendmmsg$inet6(r0, &(0x7f0000007d40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x83}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000140)="1fe8ac8eed1bc66b05c47e7a58e9428e5e0268b667cd6111978f7ab3cd53a59f43ef8860daa81756c545459d9fd6cec7adcd65efe21b06a0", 0x38}, {&(0x7f0000000180)="804ccf3d9d4628954223bfca1fe10399968b19c59f5702b5f18c4aa4416b890c0d91851d4bc5499c1a13610b65c939dfc8e03db557f841b2f40cf3c71cb268a9e5c89b467dd586b9efed0647cd183533756f778ae901370643f71fc6e6c1e85b274acb9b7cda8185d35ed3420bb9839d7d93b7cb8f677d57c202ab81303430eb04e82d88729245e8a5fee67a1602758926e4b2", 0x93}, {&(0x7f0000000240)='XK*J', 0x4}, {&(0x7f0000000280)="819c41fae208ba", 0x7}, {&(0x7f00000002c0)="8aee864fa04afb8d1aa782253c0e38d6644e", 0x12}, {&(0x7f0000000300)="8f9762ebb3eb5f08b31abc67aa7cdc354684337d3a25fcb8df3f4cfbcb64924c5c1b95489ebae0e94cee5f749c4e0828d5cef0040b22dd28113f3bd4fa9131b59d80c29a48972e12c3d3a1e42f9034b19e13872536983eb5082694d4ad2d4f91f5f9789e08a6e3801dd3cb5d902566754777c044452c838e45df7457af32f143172f33345ee8188491522ea4ad99c161b63272e2cf95e4004afeab5a24e46f8841b8bda554456c15e3cf", 0xaa}, {&(0x7f00000003c0)="010b356d22a3b9c9e466330186717d7d528c016919cd1dbbb1e84834ec63176a404c14196e038474c55ed48c6d25feda46c76005a72b3b50c6ef077b48b062fec89c135e87e0f1ed1491aa08c3217236df9b2f3506ea913a6d5e7b09344e949f919f824c8cdbc146a00d1de4f9d8fb3de1e8c0c2ab07f3", 0x77}, {&(0x7f0000000440)="be3998f0b8da725e02412658bd20b899c2a725be19c59b3b2aea6ab5fb18facee16c79417eba00d6ae0b84878bc6a4ff42fcb9938912af3d543342fbc052468d76d5f0d222c1c8f3ba97b978f2f6f2e872de203b82c45d86780dd7f2741299d123d23468d531574a47085c74d1d335b6e0315eb81d87c89f62cd1bc6f32f9ed281477394ed7de3af8f69445154316e0a0c6ce685fe06c2a54ca1f62fb04b4e01b2f84a238c90df5df2caa2f995fef9674040759f57245e0869c682", 0xbb}, {&(0x7f0000000500)="100bdbaa132614ece18e94783bdba0aac851d908b24ef35a1e8e82d547e2083bb8b00d858948f5d10921a7e8b8a46824f139eee2878c10964b13cfb77c77dfaa74287fb02ae17df9235bfec3", 0x4c}, {&(0x7f0000000580)="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", 0x1000}], 0xa, &(0x7f0000001640)=[@rthdrdstopts={{0x78, 0x29, 0x37, {0x3b, 0xb, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x7, [0x6, 0x5]}}, @pad1, @enc_lim, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9d, 0x4, [0x800, 0x2, 0x9, 0x6, 0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0x2d3b}]}}}], 0x78}}, {{&(0x7f00000016c0)={0xa, 0x4e21, 0x100, @mcast1, 0x9}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="f3d466939a934023dde049ac3d65a86a66df5cffd3129ce437cd7dbf12ac18029476a77abd76911447b19965edea43ca068f7ff61e9643f5b192bc0b2b64963b6270e142fa96a275dbc9e17f674e51a2e6862108fe5af650e0302c52afee6bbe30222abb73ef6be506ef6d4e2b6d582a9e3fab9431b1dce7d195367c7f10665ad0083b2b1bfaa1f4f3fa1adc73cd54", 0x8f}, {&(0x7f00000027c0)="0fabf6b0d795f00d9dfc03ab47c946e9df2218899014b8ead84559b7ef530f0974dce3e1da77f4665929443795fe34bd8c5b11c09e583fd88ef61cea5ac5fd6d47763bde73d1722fb44d21da5fc9dc0e8701fbce805aa0dc911f2cc005f9ccd3575db496be884e6d2aa30a72bc95d8f20e6248", 0x73}, {&(0x7f0000002840)="2dc755bcd632f4071396157ead8ba7ac44a2db3e035a14e9adedc32d1ab6186e3038a0b9697122f5fe6339c82198c25a276cb3a183da185a89d8ce52103693c12ba7d6a5fd58c7f78bcbbe6254f7e7d10e2dc48c727f3e7428b50460fafa1a758022bc7df80eec41ab4263129a507b3d68848e1db89508a94db0489ebd8c78f10beb2390c9b287ae673b7b067f47c303ab26f00bc2b3", 0x96}, {&(0x7f0000002900)="8e37b4ba903d6f11de20be818eadf80879146862d8f90069713aa0548a2fb3d32eb6c160856cc322", 0x28}, {&(0x7f0000002940)="89ba66aa7e4a2932095c02589c7a3eb958f131a6852bc5ab31c2dc6ca20c734f013b2e502345bc74a1eb5ef9d9a054369143baf88717064482f71db2650b09073e4f4ef7e410ebf51bcfff0fc9cb1683493acdac770407cda4", 0x59}, {&(0x7f00000029c0)="8bef6ac17db544a0401e91502a1c3b7514aa", 0x12}], 0x7, &(0x7f0000002a80)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0xf5}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0xc, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @pad1, @hao={0xc9, 0x10, @private0}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x7fff}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0xa0}}, {{&(0x7f0000002b40)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002b80)="2a83c8f74ef560eee91e497e759d21bc9ecc8ca6575a145566864a96350fb1e11d9f3e30d0aced4cdd1a33348857cdbdfff0d7c0650dadb5cdf27fc3e8723d6c3d58582a106af01536b2ba75452cab51f552b657b186ad101f1a95d7bb5c0958cc7a400977fa4904743a0267d4fe32ff17e3b1e6aded8196c901fcf3e9255d6e1118", 0x82}, {&(0x7f0000002c40)="3ed34e82b4706bfcb6b9283ee857c1326ea3ffcb19be7b43ac172b02423f3d8b9bdd7e21afc8208c1eaa77db51a6c9529267a5521d410c765511b1958c7aa305e0d422e894fd42c7674180e4298c", 0x4e}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)="52e0700ce49c415f688e97dd5c0604989217b2cf8f8a040f8ae2b74b404c060fe4f11bdeb94b868c2fa2a36e572156e9e7071fb69ec8c2add15a6df4a6bd5779b5ddabd26d85f3cbcb901818d798897d1b8baa9130292661405cbb29de982ff71f7e45cfd8d20a26847ef478fb1656027d3b1d8075eb2e78297ce8f3c3f19e7d722dc0f58defaefc1c43c11a6506ac39ad5149914c997969ab9afe8a05a7410dee4f6ac9acf83368891d513a381c3469f7b8be546e912090bea818be09a57dcdcddea27559b812c4b927111a239f4a85f6df6aad068884cd0fb58f3fc6ca2da2666b3dc2777da4507ca6dd5b964c5f2d6a23858e6d72c417a19682", 0xfb}, {&(0x7f0000002e00)="cb06f87ff25d97675149af3f0fd2d5de4d3aff5aae146674aecc4fd24f1592a0a744b62368ddebca0019b9b0b419", 0x2e}, {&(0x7f0000002e40)="f0bfa5b06e07006bd68c2a10bbfa67c245ca66bc54a0542af97a95391aaf8e78236b1436a067884ba524a5920b33c13ddd02d0631c280f7b685f232be53aef19e74add9fcdfa3d95f9276ffbfd735b258fcf24a35281f715b24020cadd53b1dbbdc6f1a35e16498d7b89c29a1c2eba6c3284448759422db718a7dc6bab7852855c4022d7c1976af7233f49835fe7edea27e9bba030", 0x95}, {&(0x7f0000002f00)="79e9e8b983ae1edb30874323cf21aaae657a11d997c734be641bcd9bc7b75e55fe0e182c8988ca3f68a4ce3f3bf4769487016254cadc2c15602a5e0caaebdb84dcd6d6e5c1b5a3b18076647ca816bfa63aa170717d76d4a967f97b9e5a2c9176f00c8d5eebf211c2560dd7b0878863a651c0830346809d19b231cb1c0680b996f751302ff1901c4f56420c2d249521395386032f4abb7389cb04db201b3ca8e8b334bb83ee113759d0f5b59ff2a72d1e064a166f6b3140fffdd866bc591880c9c49bcbdd521fc9450d96efdb411b43", 0xcf}, {&(0x7f0000002cc0)="ad14719aab2b919b71c311e3", 0xc}, {&(0x7f0000003040)="0ca2db71b5b73888bd2ed6b782688ff87463054a44a74aa5da85f1b094a1907ca134c17e753ef06763073b161cbf53f8f5d1dc7c754d9c4e5e4838b0bed0a7caa83c2b3e9e736e6cb5645fe86030c800990ca23231cad82db7", 0x59}, {&(0x7f00000030c0)="3327df1da5539d8ce711960d19e8b27b3c0c6c4285ee95ee6633717f5e19dad66129835f61b28a951dc05aa0466429a4e3b15e85a69bcd24b520b428c14a9928042cb323f89dde9993e0ca83d5b75a897944d0378ed31284205b2348d63469c48be76ae89396d5052908ae8925b3f0868feb75388684d0168fb97c10f35d938bbda747d8b6fe306632c631bfa389d4c359835755eeac87d8b9e10e0f7353437b96463d1f7c46c7c40013ce96a5d2112b992eb03aff9fad0e33f3953b59204bfec6fed1ee1ba04840395d8e94827a53eced299ab8ec9d3134da9acdc08c0659bd0e32719419c0af302e500b62", 0xec}], 0xa}}, {{&(0x7f0000003280)={0xa, 0x4e22, 0xfffff001, @private0, 0x6d}, 0x1c, &(0x7f0000003440)=[{&(0x7f00000032c0)="2b4b1e6728b2857ad1387fc9ba1943560b86552b3f72440d4263f9c282e8fb800f8efe713b4a52cadb24756de22ce00338af6d9ed32455eff58859f701858e9f99b4b5864c68bbc5a941f4e1e1614665fd21a70e7394c8", 0x57}, {&(0x7f0000003340)="99ac53dd808431210c5905144cdad270a805c30d1c1706dc81c6e46fc328510f89e7a4e51bee63f9085bb945b1034c78638bbf90557df07ba8851e9e17f50838511ba077d99dcf9ac322ac90833889ded272c6ed4ed382e2e4f5838ebf468cc38af0f913f22ce5051c058a0b7980395a67fb3ed36b6db6ee3683c9ef51fe1fa864af67487501b3197e412e324adb59e2a6d303128a5a10a658d268b40d123193632087f4400aa510bdd3e24efcc2ce5b019e424065d0e7a8ed5228a727c36a399c8604d03503a9047b2708bbe791a990c142fb32a7cb28d9363a9c7a", 0xdc}], 0x2}}, {{&(0x7f0000003480)={0xa, 0x4e23, 0x40, @loopback, 0x5}, 0x1c, &(0x7f0000003700)=[{&(0x7f00000034c0)="b7590823d850cc5bb75add945c9d52d240a795a362fbfb99513ab286293ea9079183bee49a310c3473b60d2e68f1cd768c831c930925e3dc7ad1d381ccea47a287f2a63a52d991ced04d1ae5490a9a4e280a7b98a2bf7318510f85856502c008b82d59f8b1b98ce6130486624d7c3a48ba6868c6991e78c29cb7e88484d0", 0x7e}, {&(0x7f0000003540)="bb1b36f13e3fb2f9fef1cf022defc40cdce30aa2a9320d2e1bb7f2e3debb3ed295c409f2325eaaef8879e52eacb90a4aa5f87f77e700a76ced836c86bb3fdc932c5d1c2288595163dd7bf12e2d8e6b9f948a845d81c2912bc5a3e0c2de68743d1d3cd738e9389d0bcfc3e94a2df31758677993f673f36b2bf817986ee0a5593c154e315c8a0b45e072d039bf44e4019d1e82bba9532105db8014f6d7b3a9d8286ce608e76f3d5f9214bd9a82aa4d380602be0836650c31a9e199390f6c", 0xbd}, {&(0x7f0000003600)="2a5641e8f81a6c3572d259106b84fb570d3e0ef51882d2c3b22f7c2baf07bcf5367e1060ca914fb2fd626206ea33e21412326e448b8cfc8f19c8937f658217ca804dd889c270874b845bce9f7334947b197560e7f58bb71584be8125801d6b6c91fa812298b26b5e4abc2ecc80ae5502f441558c2abc3d7d614e6634022e9bef3f29863ebd74c4325de6975eb2a044f899b66995a3c2b4b85f1b4e5d9be47ca1235e79d55ba06af5da2deb55c39181f37f4b6e2213421a44dfd2d674a43d9a6f2bcf2ea108a487ce4c7f0bd87985b61710f89c2d1f5967467fb4109e902c8deef0472a", 0xe3}], 0x3, &(0x7f0000003740)=[@hoplimit={{0x14, 0x29, 0x34, 0x401}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @tclass={{0x14}}, @hoplimit={{0x14}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x4, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x3f, [0x1f, 0x7fff, 0x6, 0x2]}}, @enc_lim={0x4, 0x1, 0x47}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x67, 0xa, 0x1, 0x2, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@pad1]}}}], 0x178}}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000038c0)="e9045706c2a5b77f117b1be16b68f9255e0013cfa8a8d555bbb2a92e1e7b4d60f059842e01230869cf86accc10ca11016417b8893ea080be32a2bdc500822daf874068ab4716a1b0117452", 0x4b}, {&(0x7f0000003940)="185619e2752c1b258770bd44c270e33e2dfbcc217875a4aba5fee920444247c4944f9bcb9127ad8c2717249de4be5a1d36652b8fe8d395ace567c94c231c1d446b7a7578148fc7e7a24ea0b07dd7c105f7c8875ad81cda6a80c650ba41971e3fc357aab44a93c1504abbf6f747ff0735efe8f8c724db2d32ab8269e14cd5579cafcac039f127fc4f19d8d45d2b7816933ce26ec9c53049e0bd4b870e34ac95b7937bc47cf4f98a67d2e56301dd47d60c646f9d78b5ca317e9b15a0e80a9743016585156952308f85153ecb95d7e981df9c8ea1787574b69d338d6b3f712b549e99b9cd8254065199d574c81a42db989178670458580d16695cbd3b94f123f903b1c99ec769efea058a66e26e5be917b7675c4eb299dfc2bee73b291c6011ce7f22a99cef80f24b004c10f4c34d30980a5616431a17004ac1cf415b0470ba32fe5ad0d5565e17749d516c3515cb2ff596ca22928671b1bde74109951f648e75513184b777a102ff4728db68b24027c4f99c70acfa29ed823b6918dccb0637425407175738665dcc29cfff8eee8fb09b77d512911da44ebe040f5685725feb8bdd7e7838cffadc8f0a55f7772854c0c51439dbdf4f56d405e6cbb570c88569e886fe2ad46f6f8269823e9bc83c303a1c90dd7420fc7da92efc230097ea9bffa168f55814c2cb3daf2f618f929ba979b7136cde2fb5acf148e64ad8efacea640c251adfea60454c1c2f7a2cfe3e598d06674e9acef6ce2c94a1849be1fd50c65110ddc65c628241879714a3eed34b7e8d1bdf1203211e811553691c96a1905efaaa0cba2dfba456a0ca7f01e419c9713d5faee2103d01a62d164e62e187cdd1f60dede30407b38cd74458ff4e579048cca24cfda630ec45ada44511fcacf587eb5948373c3e22d679aa528eb5c089605478ba32a63f0cfb0ab290994bb10aacf406f24a8ba6ac6c356152b006024920f083a505d210ebd4470fd1a5b2b9c07300886ce3902ae318244fa2c2adb7c88c9fd76ef6f1f94b9cb41504a87c141188d7cb5b9dad11237af847d5f85dc263b292de4b6421d9f3151e6c7ae89dc7473f304a8f315b23ae37591accaedacdf4c0707194b7589f2b77cab8441b1508d59c8e6bed630421275eb1aae05031b8e6d1a5ee9e7e3ed2d738dfba2480e35fffa01c26d4ad9558286f1bebc83236d97c29f0721110138608babffd87ba96d53cc274ee294daa792cecabb77c30d03c71e4895e6a3b969ee6754bbf80821cae685ec7ef4ce9ed26223745fab53ad54adc8d91426f8b52533e6c9748ecae92267bbc5faf488f89055681995b1ec6ae17e1ff43bf2884d0fc576a53776ae8d06b90bf7122085c7d7412ea1b6feb3957f2e0846c9df918deb91766538d677e8eb3ee0ae1a6eec62e575718c5841593960cc5adffacddecbb515fe27f089e5a6abcaeef8f105683331cb6821f7363f211f2880d5369266f81b1f8b41d25d03c765f37dc476e9b6927c72194f909530c584543f22d6be00d5f82ca555ad5aa773acdb788399b47b3410a0f8668404ab71b8cd8b6b389050462414a705665c4b8df213d884e0b51fb7158d224e93a2a85f8ef62432ac289f84378a6c18d30535e2d2103c3f56624c69e18e06e0d5f626e55682cf57aa701500b0ba8388baf164cdb65a8d6389efc9c86f7a9df36164ad0c75c97b91c0d9159cc8bab8497e7bd004d7ce8d70c30a22d8c83892faeac77b93f61b35d62be1fae8d69b9c08f6181e7e64c79ccddb5d53656018f9110a51b1d3f181343829bd994063b5361ca561d6145a0b8b9b4f2f7689267be9543d2b9a55db4dd9e72351629931ef0fd92f11816abd1658896bf4db69964c91d04bfe87df43eecd6b3b6648c627264d5aafeb2d0216acd1bbd88098d1e83fcc39d30cd083a9e7f4a6684ff698d341f2df3e229e77e63cc090043ba60271178a38b22139e86d3e2adfae3c2a99b9cd09ddd2e563f8ece8bf1af17268d196ad7576b6d80841714f2a9b194e562997650bf2932e046ce5408491c4f5597a8347bc32454e24d25578e994949af0f228fb169ddbed0e0a6041f0ba7455a3cd3f977573c14178e3dbf617235766c38cc72f9d4ee2e2e9367a7c07b4cafa80dd5afa1ffbb449b5631c2da0b0e4c402789956e26dafc54ae43bbd473f2ca2b63995cbcecbce91ccb7826a0fc79dd76c765ead2110caeba8910ee734fc07b92939da6090b6d7d2a6f088c55d12590d82c70b1cb1cab6c3e7731e348ce7da27c93e4b98a2a59c09248dce617cdc89b75c4df7d657bcb3c8b38c5e88d0f5bbc07338543b73fa056d43ad906711f7227b23c1120c696c95c5f8afebdaf291c954dea71bd31c9a6303bae85d2c0b95d8f24860fe3c0312c15e5bb51ce9c2c44f847266da8fcb90073e9fbd3a60bbcd22154b7d8f2a5d128e80dc16e62e0dda49b452068f4b49ba30744c9cf094749ce313d9eb579ba05878f7345af408256d85a3d0a51ade00634509c84fb949d3b234effb3197ee82dafd29076bbda9912aa0be9c71f3374a43d24cd1b0bdb74f0808423f8ee45e154d479e96a4861feac2c1b0b024bee1980be8467f9ebc44cd60ee02a1ffd5767986dee6410bc82583386fbc62f2dff43dcc2c7897d8f4426ca6a573782ce371a55807721d7e995a0cbc0bf03082c9d13a94d84e1e8eca287004472e69b5175404a30b96c800b3f8f08dfc0de4ca1db3dca56b2da53c8eb9363e08022af5cd592dbc858015c1853ed7d41661d42090ca65e61fa1e2059d11903b04462d45b8cd6ef9b295a685f9faf0cff8d817cc9519630f43c8693955010dac06745e1bc399191caf946d2975bfaf761f5be56098cd1257208148a5aa2ea34ebbebcd681a26c0a3914976bd904ddb98a78e5a7e894410c81911fb5ce4973e25c591b0b56d09c51620d04741f2ae71c36dbc0f7f1669c1d69eb082729a9d334239954d77544c207aeec17cea1ab409885b6edffcf9f5622dc084596d3968e667fc72350c49b261dd91675cd3964b8199595bad0df8b24d73e9d439afe899119a8368768f2feaf2057070ef2d760f2487bd70583425a81adc75b28750c6111b598b7ec4efe6cf8e83694290b3611b910065c130669e700ec9c5aa1dd422f20b519b72afcc06f87729aec32e308e7e075c0b877e71813cb77467064346fd0be2233b2ca939c8fe7608d54c78551457a2c700d51b69eee0338c205a8cca558145786857bce3ac9befe3b58c36659f7ce2e2d32e42a7f7d5b6d7d22106a11e4c0b0dadf30be9a8d666af58f538e18af26187da27983000b6c4058a7d7d47d6774b54d737a7670ac6b23acdc31b768ac00ac8e61a3a584564bf7584b7013633fe664e6846a067db8cc06f46d7f00706ca93871698f428338406441a63281a9ad54399db98ea916c0dff85128078bfcfc36be35b339d3570c7e6da4bf01f9b623360028a5f703daa9f3ee9c2c6be5f7659498b05fe6194e4148bbafc012b9505ddc24683ddfe23e843c8063bd328b73e3fbe0751cbf5699d418d5f67bd51e8690e825e7a654c95c585dfc30b3f16f73fed99de311ff6b6eda5a3e1267a79070e4a95aac92bdad8c31cacb91c361c01f93d556bea3c885dae02820f85a781d3772fb7f738f0740b6566df796d78b6f09c1f0c03e5c5bfa0f30bd5aa77c22e9df288ae77fc28336bd929c363a9f796f2f785ed5aa0cca830241d2de2cc1678c5a52e0eb6a4b382547f160840cefb6491740f871ddcb2c529bbfc44e9714234d4ae44f06918c74e6132089a371461b51ab90c98a145eb07f0fb2dd49e459503135d0305a57898baf181a142d59bc8ea2a5f7bbbbb616a5c6a331cbcff7e1c23f7c85cb1460d3afaab5745e22d2258d4b1d087671ba220ebe6d625b7b1ea658301504fca317fd85b25449f470dd056ead7e78d863fded299624de0625575929fed085b37255cf60fdd866c290d23c72dea12af5afb7c09926958c1d662633a1a4f04049ef0de8a089f46253c20d2a3d810518e8bb37eb761f5382cdb467fa0cfa40c8e4247308eff78af7904baf6e01732e5a55faf5d0792224c0ca5e3be26b1fc744d0e55b26da054dc03f0e36ef27c08329810d1e4f75b8a2a35edda71c5ac82dd8f0d3500e8ac6e00129badeeba23cfc71fccda90b1075f17f61e14a491a99b8204517fe8fd4212c7ad68a261611b8dd367cbfbcfb2f0f0663116d79cacff1e18b5ba23f211d237e7037bf3d76e233ab25be3d7def1533e2f5d8a0c804a636f97241132b48cb247f4d5aada42532542c4cc2325751d0ddbfd3b6982fdefe24d1b5780109f4f1043f17cda351c33e2163651d64d13be9ae3f21217250e5f6c33b7d4e5dec96a3d7abd20d812458be1487eb21be0bcd3e3a5d0d37493ee249c411ed3ecf628cb4d378b17ffd68596a80f81a66c73673735ed1e435a3b256fe7158d8b4018db27e0653ee8b5c219da38ab29d9a8e8824abb5e676e13768af0c5e337fa8f49d25902c0e109af5b5328c638a1e992f30ab0899f79e5cd03600d4826486597c8f2c42cd078eb69c81c4b8491117f6f023c912d762fe59024b8da26b0abe21e70af420770166e81d5d3013e731dafd396e6c74b8e243bfced460c42d17fa2c4fcaf2d629546c984ae6e45652c7c3fd5672dcc8dbd75d973f06f45667245da61abbe201e8f7d3001054bd80a41c8d702f18aeba94350ae7c4851402baa62f797d3781e69e239d43f398de3013cbb1ef0880fa55113a074d2b287c88d418848f38bb917f9383527d144eac90c83cea503bbd8b22d8b17ed6d65791573b05ac8cbb9696704cc5947508e02534a09b4e876cc226d914927155b28fc34193cafb8ca87729ae9f173938ee62a63012771b3ae0df1344e3aedcc502f0c22dcd2b6e420c3720a3929087e90b3e387403dcba814e4d094e678ed2ecf27fece37f8ee2fc5116fece6098a20c90f2724d26948ccc403780acc31a5f44903ab7f841bf22ae4e47f83254b90bfd9dba779cc19f14c8d55bdb67c7a8b64ee294017d0e720ddafbe546fdf455ade8bd5518ac349da11d6315ebf2074b084179da24ae6230772fb05135d139046cca243b6847aee0656df66d4db4c893fb3d0cf83f152a860dc51b504c1fd55f95b4f1515bd0b520dbb6e78a8b6e3e6639eaacf24dd1617db5ec592fae9061f07e22279a95b2bba022105df78044af6de607c5edd7e8701eeaac740366fe84e6a0f2790a4ed7c97febb99875b6630bac4e8277d1ac6a42ffb5eb9c6c94e7bc942dda2d5b5a4225e79235797fab7e7577c62b9b613da9cddb91bb0e00cb0fa256192e0e8f2277951c29708576c2b3b4d679da753fffd181a53d816966c7acbbd4b455fac3c61b825f5951defa509229f216dc349d8ff90147f89057029da96f555f52cfa64c4a8e2669fdfec4f81e5ff3afb0334bf783b7f2bf8827573562f36d34269ea9ed0be03d2db19e1cc5edb47cc33b9e85ff955ea90cb437e9437609352c4624f04e92dced836337f71927f633f6d4bae6a8c3f412c7f672ca8b73661267493f6a73f1edefede50408e942c56cd743a73b9c4f59ea19a048dedd1e674db0da9fa41eebb3210df22d6f5977398b34cc1bf59322f04e0f24752af549e65d2a63d1246174a72d4ff0a8288e6d983b6b0431bfb39648d2734dcc0ff0f74309ecce0cc096dd451c63fe7e35dae0a213abccbed1d1b64290a9d1e7ae2462caed0f673d1c7011499ce01d617daaaa5b9799b645bcf09347f1a26589fe9de323b1db211b6c1292d6bbc947dd6151", 0x1000}, {&(0x7f0000004940)="4251d1bc89ccd97022ba14fc9359b602003fa3a6991e1843be00bfa804f97c53b2c46056a22fcb03eb7cf8964e1aa7c07a60f51522c1357371e11012510b1fbf83", 0x41}, {&(0x7f00000049c0)="6d5d05e9c87e487ef40d7ca41bb429d392dc6096302a0b5dbc92bf6f53e1236318d621651e", 0x25}, {&(0x7f0000004a00)="da22463237fc7e0f834b30be58100d9693a6b2638bbdd3dfba4871c0e72843798e2ed6ce40261d77c54842cc04f7af009933b02048d6561ff6", 0x39}, {&(0x7f0000004a40)="19a91f56b8f05d175d929ec6726e366be3d1444c53a0652a10b2bbe3a806fb2fc8d801e4345ec6420624d60ca89b362e4a41479d11300f19708738e986b210fe877c89f564673f8971c712a0ff167bd9271be5347d135ae9dd77835816", 0x5d}, {&(0x7f0000004ac0)="77d847a970f35b517050e1f3341fe802e1a730d7b0472f2fdc757ea2781ac355c528668654c0cd31a8ac872771258e2455c9764929780cbd9caffe840f23082e03c9e3aebbc0617e1252b52770fc836ee7c643419c54002b554fff215649cf201f588141c0b000f3", 0x68}, {&(0x7f0000004b40)="116ff9134f16bdbafc278e9f0a6dd5817ea5e2f43c738ff9500d9ddbdeaaafad21719736f4241e1f5ca08562cda2fa0cc63aba5b0ac277c13b74ff4517698740ca10e4b2e0431db209987e5c345a05ce3b16cb59500b2cb0226bbbed1605b056dace5c280922f5475a5b6deafb0f22196a2f99e94553bf6b3ce7f88d397d41ab995e2ee060ef30a51762", 0x8a}, {&(0x7f0000004c00)="8da387c53647e8ef26f32bd52cc11c47b7e9381a365cfbd266f60d22891306061d2e21b2aa77af91d3c95554397b353f961a91efb4c2b7a37226a51131af5767e8ee6877bab816318adec8142c4c29e8deb71b1017e5dfd275e12a35b3f202a3d0e30f3ef3496da528fcc3d79a5256016bf8f6983f6f8d8e20de00863a3d03b2b8f5492d403afcffcb0f540917ce4e1a6a63eba33fdb55651e84a24b5c2d5d5eec84d41b7e7681fe736d9c", 0xab}, {&(0x7f0000004cc0)="2a7d81ccce9fa39b518b34cdd47ecd346e99f98deb59a03249d17e7a57", 0x1d}], 0xa}}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004dc0)="155186468ab16019c244c81d1e78d3d88f1122401d0f32666ed689323b2a222d99dfb27265ee3c02c0046f9818d610d360a25d508cf90a0f865d08c014013d2c69f9346db2cbc06b407e7592ec2df973cde121328bc4aa67db428050560d2af43bca4ee0a5fad31b6767844894a5c6cf0318a2c4c13e20fc1b09797139c92efa8e678d36913e4d6f1345278735075f621032f0864e57aabd8a9b280e4472f4b1d7435edc4b4f4c59d3731fca823376e99b6fb203c552b687655546076eac5f401dba52cf5f52c842587d81238ceac968e8fbc74809592e0232", 0xd9}, {&(0x7f0000004ec0)="ac6fb1a1ac441702e469c5b7ae39686b497fcc80ee24e873bb70e3b60f952ece28038c839f5a53b481608e38777e1bcce91d6ab258bb347a83fe415a6ad0e1a3fbc82780fa01a95834412e52c30f5bebffde252ef3d39a0d7c2765fe3e3503b5b0825e519d71860f31cf16bc181fdc65f56f070c6880c58ebdbef7708dab3a63a8f1de504d9b3d493caebaf2c237af6b4b652f445e6a633826f9ba3e574f5f128111e7726962478225b06fc5147e061c1cc76cb6c0c5af7625b8317845", 0xbd}, {&(0x7f0000004f80)="ceedf0987c478eeb59b44db8df14af2f1461a1166382ba0d6e1f18a2ae0cee5409194d08d94f3169a738785b9897059e6f579ac8b7d8736901e931915784c9ab0c6ba2e5", 0x44}, {&(0x7f0000005000)="a71a7e3a5937e5510e607c52c0e09f8e85a70d65888e498bbe6cb478c3192d947601dc4ee33c49d23281e0f9d5b1e09550b34d6fe2428e4d6ae654805556989689e0a182e3a5c6fd3e01e84dfc9c78772a56a8aecb662d2c856981abf3cd976eeb99b0f53a7c0b69714fa9104aab3ea3cfe0af4a6e4945fe8cf926491c5eeec7503f1dd7bab556c958db7bca6d6170db5a596e1429c84c69eb956e92c82310dcc92663fc7a43c7e778e992e54814c6b2d37b2fc0f5231c3f1b1e5af3d6aff4336142e52472f7bbd2f271c761bd799d791ab0041c28fa5f64053c3f55dce0b26260", 0xe1}, {&(0x7f0000005100)="800a335583fad0e851217b14f2a8c734946511093e679d51292f450e05a74e5944d67f0bffb26ccdb21769862ffec53bc5f560f49581542d2a04", 0x3a}, {&(0x7f0000005140)="d4f46739fcae130ef2e39e1332cb3159c9b763b438835140dee020169003aff4a27c8fc85fc3b1d954b0bc68511de09fe20fa4b442b183a9aeb28af941b37a5c931b5f5c04ce99750536019918b60a2a5b7c6704cfaada9275db2dafa4fef325306fe8c1ec6511e8aa63d8a2d792694b4e8178418a96f9c42103fcc46f0ac9109c88c0d738243869caba9c869bbe1e58f08c613ab0467c97fa48e383ba9ad5e4a392ecd9140081348b25675b577582f01f3956b21e311e7be44f17af59b6e7b6c86af6df5faacab06a6b83b34744ea895ac28092cf6946d795", 0xd9}, {&(0x7f0000005240)}], 0x7, &(0x7f0000005300)=[@dstopts={{0xc0, 0x29, 0x37, {0x3a, 0x14, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x15}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x7ff, [0x5, 0xb47, 0x5]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x283, [0xc9, 0x7fffffff, 0x3015, 0x0, 0x7, 0x3]}}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r4}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xc, 0x6, 0x2, 0x2, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff8001}}], 0x178}}, {{&(0x7f0000005480)={0xa, 0x4e20, 0x400, @remote, 0x5}, 0x1c, &(0x7f00000064c0)=[{&(0x7f00000054c0)="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", 0x1000}], 0x1, &(0x7f0000006500)=[@rthdr={{0x38, 0x29, 0x39, {0xc, 0x4, 0x2, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x38}}, {{&(0x7f0000006540)={0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000006600)=[{&(0x7f0000006580)="421f3f1baea53b16e70e9ed4c506f0fb5a622f0816637c1fbe3581bebb6c4af7e97fa4ad0c38d1c1f912b0f47418cb034515eca3cc211cbbb08e07928fc3347789e2d73ce643830b0faa0bb6d1061f7a15d4af548376b56defa688262f298d", 0x5f}], 0x1, &(0x7f0000006640)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x21, 0x4, 0x0, 0xff, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @hopopts={{0x20, 0x29, 0x36, {0x1, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x21, 0x10, 0x0, 0x7, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @remote, @remote, @local, @remote, @mcast2]}}}, @hopopts={{0xd0, 0x29, 0x36, {0x87, 0x16, '\x00', [@generic={0x9e, 0x93, "7d97ee314d67c4cfc485dc7f8dc2c302844415469930ad14423f9d7af6b28db4e6b96a6205a3e6c2c43ef4b5f37cbec81ed436f9d0d8cd26435f890b0d459309702a5a37f41e98af97251378e7645b04e792eaedacdfbd78e6bcd86807c1d2b0864d8949daaba9435c6c17f9f5bf0346ce78b42ac1f3569b52a9b986f1c751b81746b9bd36def37721fac5f38d70a76082325d"}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1ff}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x7f}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x29, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000000}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x29, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x78}]}}}], 0x228}}, {{0x0, 0x0, &(0x7f0000007b00)=[{&(0x7f0000006880)="6c2952d93dec35db0487a4691ce85bbdcf161c175527849d2da2c12f6ed1ae1b3f5feb1608280c22706b6a2729291ada1fb938226adfbcf3a4abbb510c991ee8eab1d1f767a9796fe6671251afda5106eff6147d2435edf1", 0x58}, {&(0x7f0000006900)="c6b9ccde07fdaeb2d5a7c550afe878146b1c5fd23bdea682f41176b3affc49863c4322124662b34361572d292c492e7ca4b411bb73bd6bcb06df89c5f6f991fe9268d0a3fc6d08aa171ba944c0d2beabd675e6d1a46a4e2adbac7cb94414577b940fe867a0a6c3129046136dbb7573d0e97fc24e0bacf5a65bbc22c4770b4e4a4943e2136ad4ed733e85fa6558b6a00457c9e2e8c4ac8da700026946fa2eaaf76d260dd9252b99e3120d55209d3bde15fb910d5c849bef35628448a307e12402ba", 0xc1}, {&(0x7f0000006a00)="df3384830bbede4eb4c6bab74830242425327ccedf7f9eb8adf12b2f288d321dd87ecb35473914ee610ecf4eed33b4c6ed6ae534a3ed3d0146759b60", 0x3c}, {&(0x7f0000006a40)="c226a66500da4983204d00e70dc7f999a0297a95a0ff7798973b83bf8818bae53795b3cf77354b4a5116172fdc04d3325460ae278208e733acb7ee0c3001e9c95755a36a800e467d03bba98746e54cd333a99f54cb6e55105e383d9086c9aaace0a17c37756e3a3588c689a860ebbf6a205cbf3f72aab5598c5420d077b87b69affaeb696d8d18958bcb39ddffd197cc2bee167e30cf", 0x96}, {&(0x7f0000006b00)="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", 0x1000}], 0x5, &(0x7f0000007b80)=[@dstopts_2292={{0xc0, 0x29, 0x4, {0x32, 0x14, '\x00', [@generic={0x81, 0xa1, "129a27b1b2aea153f202aeccde9fc43c3f268ec286cef37dac4ffa10b5ee3b2bff0ac3e5a3169024e34ed17507839b402b38499db141cca90add49907fa9f00a177213a8f5e9d5df12b4dbab1a1b69763c743970caf3580ffe400d583bfd9d01f7c334b7fbee0ecfc7d676dae130b4b7380db13782306e2abb848bc50f9da2816574915b766130bb01e645e668d714e73319a29809e7f1f010320c72bbe51c809c"}]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x2b, 0x19, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x5}, @enc_lim, @generic={0x3, 0xc0, "4717f75eb2ebf26bcecd57aa6568c26352ad63d3f0f9a04d82327d449fdc351e699c1fbf38ccde934290cfdd4b449e1689bba548d58ef22f6e40ada0355170ea6ae9fc919de054b6f812111282f2c1a3898164017504dae596f17bd8c9d4f4e4d845b68208e1e6656b5fc64fed01ecb24e21dea6c0c4d997a97e7d8ca46bb05ee4b0dca892b1b3acbd9c39d4d4e932c8700b7cf160df26c1e099f70da3de99b2dc47084d027a0aba24f1b54a27402fe1454c71ee787c87768fdbac5e0ce0cc42"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}], 0x1c0}}], 0xa, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003000), 0x4)

[ 1183.936529]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1183.936548]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1183.936565]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1183.936587]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1183.936608]  ? __create_object+0x59/0x80
[ 1183.936629]  kmem_cache_alloc_noprof+0x322/0x3d0
[ 1183.936648]  ? __mmap_region+0xb40/0x2670
[ 1183.936671]  vm_area_dup+0x25/0x6f0
[ 1183.936687]  __split_vma+0x179/0xde0
[ 1183.936706]  ? __pfx___split_vma+0x10/0x10
[ 1183.936722]  ? mas_prev_setup.constprop.0+0xb7/0x9e0
[ 1183.936744]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1183.936758]  ? __pfx_mas_prev+0x10/0x10
[ 1183.936772]  ? lock_is_held_type+0x9e/0x120
[ 1183.936792]  vma_modify+0x16fb/0x2030
[ 1183.936813]  ? lock_acquire+0x15e/0x2f0
[ 1183.936826]  ? __pfx_vma_modify+0x10/0x10
[ 1183.936844]  ? avc_has_perm_noaudit+0x11b/0x3d0
[ 1183.936864]  ? lock_release+0xc8/0x290
[ 1183.936879]  vma_modify_flags+0x1b0/0x250
[ 1183.936902]  ? __pfx_vma_modify_flags+0x10/0x10
[ 1183.936936]  mprotect_fixup+0x1f4/0xba0
[ 1183.936960]  ? __pfx_mprotect_fixup+0x10/0x10
[ 1183.936977]  ? selinux_file_mprotect+0xc8/0x5f0
[ 1183.936989]  ? __pfx_mas_prev+0x10/0x10
[ 1183.937006]  do_mprotect_pkey+0xa0f/0xd30
[ 1183.937031]  ? __pfx_do_mprotect_pkey+0x10/0x10
[ 1183.937049]  ? perf_trace_lock_acquire+0x1/0x700
[ 1183.937070]  ? lock_acquire+0x15e/0x2f0
[ 1183.937089]  ? __might_fault+0xe0/0x190
[ 1183.937103]  ? find_held_lock+0x2b/0x80
[ 1183.937120]  ? syscall_trace_enter+0x1cf/0x240
[ 1183.937134]  ? lock_release+0xc8/0x290
[ 1183.937150]  __x64_sys_mprotect+0x78/0xc0
[ 1183.937162]  do_syscall_64+0xbf/0x360
[ 1183.937182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.937195] RIP: 0033:0x7fc67e18fc27
[ 1183.937206] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1183.937217] RSP: 002b:00007ffc5e9f3b08 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 1183.937229] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007fc67e18fc27
[ 1183.937236] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fc67b6c5000
[ 1183.937243] RBP: 00007ffc5e9f3be0 R08: 00000000ffffffff R09: 00007fc67b6e4700
[ 1183.937251] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc5e9f3cf0
[ 1183.937258] R13: 00007fc67b6e4700 R14: 0000000000000000 R15: 0000000000022000
[ 1183.937281]  </TASK>
[ 1183.964070] memory: usage 307200kB, limit 307200kB, failcnt 626
[ 1183.964612] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1183.965914] Memory cgroup stats for /syz0:
[ 1184.058198] anon 1138688
[ 1184.058876] file 309952512
[ 1184.059316] kernel 3481600
[ 1184.059576] kernel_stack 360448
[ 1184.059877] pagetables 1372160
[ 1184.060210] sec_pagetables 0
[ 1184.060490] percpu 640
[ 1184.060725] sock 0
[ 1184.060960] vmalloc 0
[ 1184.061189] shmem 309952512
[ 1184.061457] file_mapped 0
[ 1184.061724] file_dirty 0
[ 1184.062007] file_writeback 0
[ 1184.062294] swapcached 0
[ 1184.062542] inactive_anon 310771712
[ 1184.062870] active_anon 200704
[ 1184.063189] inactive_file 0
[ 1184.063457] active_file 0
[ 1184.063713] unevictable 118784
[ 1184.064041] slab_reclaimable 969800
[ 1184.064372] slab_unreclaimable 785896
[ 1184.064722] slab 1755696
[ 1184.064999] workingset_refault_anon 0
[ 1184.065345] workingset_refault_file 0
[ 1184.065700] workingset_activate_anon 0
[ 1184.066074] workingset_activate_file 0
[ 1184.066421] workingset_restore_anon 0
[ 1184.066760] workingset_restore_file 0
[ 1184.067131] workingset_nodereclaim 0
[ 1184.067466] pgdemote_kswapd 0
[ 1184.067753] pgdemote_direct 0
[ 1184.068069] pgdemote_khugepaged 0
[ 1184.068397] pgdemote_proactive 0
[ 1184.068711] pgscan 367
[ 1184.068970] pgsteal 76
[ 1184.069200] pswpin 0
[ 1184.069419] pswpout 0
[ 1184.069642] pgscan_kswapd 0
[ 1184.069948] pgscan_direct 367
[ 1184.070234] pgscan_khugepaged 0
[ 1184.070535] pgscan_proactive 0
[ 1184.070825] pgsteal_kswapd 0
[ 1184.071134] pgsteal_direct 76
[ 1184.071418] pgsteal_khugepaged 0
[ 1184.071730] pgsteal_proactive 0
[ 1184.072057] pgfault 87239
[ 1184.072314] pgmajfault 0
[ 1184.072557] pgrefill 275
[ 1184.072803] pgactivate 365
[ 1184.073097] pgdeactivate 278
[ 1184.073379] pglazyfree 0
[ 1184.073623] pglazyfreed 0
[ 1184.073909] swpin_zero 0
[ 1184.074158] swpout_zero 0
[ 1184.074414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10669,uid=0
[ 1184.075747] Memory cgroup out of memory: Killed process 10669 (syz-executor.0) total-vm:93552kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:01:50 executing program 6:
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000000c0)=0x4, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:51 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
setxattr$security_ima(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00), &(0x7f0000000c40)=@md5={0x1, "b3c5458ed2d00984a36abfdb6f2a171e"}, 0x11, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f00000000c0)={0xa64, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xa}, {0xb4}, @device_b, @broadcast, @device_a, {0xe, 0x4}, @broadcast}, {0x7, 0x0, 0x0, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x40}, @random="b2110063c3e3", @device_b, @random="b3a4af9ff908", {0x2}}, {0x5, 0x1, 0x1, 0x1, 0x20}}}, @ver_80211n={0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x3}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x9}}}}, @NL80211_ATTR_FRAME={0x58b, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0xcd}, @device_a, @broadcast, @device_a, {0x1}, @device_b}, @random="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"}}, @NL80211_ATTR_FRAME={0x2f0, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8}, {0x6}, @device_a, @device_a, @initial, {0xb, 0xf7f}}, {0x8, 0x1, 0x3, 0x0, 0x66}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0x1, 0x2}}, {0x2, 0x0, 0x1, 0x1, 0x9}}}, @a_msdu=[{@device_a, @broadcast, 0x22, "bda91d5f69bf9bb668c445e67c828f95f11174b72af4784b707b7efc36dfd40ab94e"}, {@device_a, @device_b, 0xd7, "bb2eaa6a07e3af04994c42311e23c38067b7b250152871abfbac20775d20ec9cad33046f4284cfdcc04b7fe565b44866d6a10b8fd8c315e376af6c35baf7b00cb226368915ca42a73280637ccdb870fb78249df64063055f7bee977e9aa4223c5edaec138c6d07ea9a88ede4462d6f3a1b5c758a889056d5b9a13db9895002cb72c0f318e3dd373e9507fadde367dcdad8dd15641c755c65564e6bcd69f95213ed322b1042b5084bd77b9ebf1524d8c948760c323d2d58302b7ec7daab8b317a742522b2caf2ade88dfaf5ad8acc7559a2f3405380616c"}, {@broadcast, @device_b, 0xe2, "f25283a302b11c9bd3be3b2fa286871411e276a76a2f328ab524c49aaac2dc7ad6ce42a43f081e28582e564d362697d07a21b5293ad2c2c8589a6105bff9dd0c7f27bd220fc40d79a24353bfde13898640cef3c85a09dd9cd5b5d68218b3d09b687cb557f3cbef33eb1a0c16f47d089c30238875fae9087852cbb4d7cd9dd8ef07c9d6180ce526d9b4137e1e2c64535fc6f7cca28300566dbbe9d9f4ab1585418290d2f781ded564e6492363109174fdc5a31908489bd1320ecda878014977b21011cfe2c710d685f3f4abdc73d465708746bba7c04089e16f31aa2e37eb4cc039b7"}, {@device_a, @device_a, 0x2a, "095c4980867141436e2a3e49f34afb51a46040fd4ff7e0cbaa432c138ef4a4d7e7b4a33ba516f45837cf"}, {@broadcast, @device_a, 0x69, "9ff7e0bdfe042e651fe5e5162a6050a009e5b6f669003d250575d95fded94e054e27518465583653e12b0662f42294af916d40ec398d0699bd39d5099b8eb9d39c11d010d99252e29cbca6e6aa8d8e7fc3cd22825238661709c4445393712da264466e3021fae020ae"}]}}, @NL80211_ATTR_FRAME={0x134, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @from_mac, {0x5}}, @random="cb2e7e25e6fd5174daf864c5446a810d4806640617e8f95326ca0a53ff14aa831a82ac54164f771c45b724cf92eda8f2d7b20fb491ed9f553f127ffdf77a4015650bee69883e773ce5ffdba98eab09ee66d1ba3b042affa1fb646026a0c8ba66a6ee94af3a95c64adcaa03dffb09eff3a8c6ad3b23e34e992bbcede0206590584d742800f144314de631498fb5d3d84ec487efe5eea1593a390f059f2b278c3e916bf038e58e4b0934d86ab0ce895d52f8beb24e824647ece229f4849b139537b035c18c9e9c866f3007b87e46bdfa9f3515666eadaabd078f47011d4e1fd0ec5903dd38d78055e59d8d54d41c7f727cee83b223454ec80cde4d10c66368ab22ea7488c158c8341221171b19f6527decaab537f777b2b128"}}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x1}, @broadcast, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x8}, {0x1, 0x8ed}, "87739bdb100366d0"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa64}, 0x1, 0x0, 0x0, 0x4000040}, 0x48000)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1184.224304] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1184.225233] CPU: 1 UID: 0 PID: 10690 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1184.225250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1184.225258] Call Trace:
[ 1184.225263]  <TASK>
[ 1184.225268]  dump_stack_lvl+0xfa/0x120
[ 1184.225298]  dump_header+0x107/0x950
[ 1184.225323]  oom_kill_process+0x278/0xa00
[ 1184.225344]  out_of_memory+0x34b/0x1690
[ 1184.225370]  ? __pfx_out_of_memory+0x10/0x10
[ 1184.225396]  mem_cgroup_out_of_memory+0x164/0x190
[ 1184.225410]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1184.225428]  ? mark_held_locks+0x49/0x80
[ 1184.225448]  try_charge_memcg+0x81f/0xf30
[ 1184.225473]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1184.225498]  charge_memcg+0x7b/0x290
[ 1184.225515]  __mem_cgroup_charge+0x28/0x90
[ 1184.225535]  shmem_get_folio_gfp.constprop.0+0x547/0x13a0
[ 1184.225563]  ? perf_trace_lock+0xb5/0x5d0
[ 1184.225578]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1184.225603]  ? __lock_acquire+0x694/0x1b70
[ 1184.225619]  shmem_fault+0x1f3/0x9f0
[ 1184.225636]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1184.225652]  ? __pfx_shmem_fault+0x10/0x10
[ 1184.225684]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1184.225709]  __do_fault+0x10d/0x480
[ 1184.225727]  __handle_mm_fault+0x119c/0x30f0
[ 1184.225748]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1184.225763]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1184.225781]  ? __pte_offset_map_lock+0x190/0x330
[ 1184.225806]  ? no_page_table+0xc7/0x220
[ 1184.225824]  ? follow_page_pte.constprop.0+0x4f9/0x1170
[ 1184.225848]  handle_mm_fault+0x2c3/0x900
[ 1184.225871]  __get_user_pages+0x58a/0x2f10
[ 1184.225908]  ? __pfx___get_user_pages+0x10/0x10
[ 1184.225930]  ? lock_is_held_type+0x9e/0x120
[ 1184.225951]  populate_vma_page_range+0x282/0x410
[ 1184.225966]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1184.225977]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1184.225996]  ? do_mmap+0x6a4/0x11d0
[ 1184.226015]  __mm_populate+0x100/0x3a0
[ 1184.226029]  ? __pfx___mm_populate+0x10/0x10
[ 1184.226043]  ? up_write+0x195/0x520
[ 1184.226057]  ? lock_is_held_type+0x9e/0x120
[ 1184.226077]  do_shmat+0xdd4/0x1310
[ 1184.226098]  ? __pfx_do_shmat+0x10/0x10
[ 1184.226112]  ? __might_fault+0x138/0x190
[ 1184.226126]  ? lock_release+0xc8/0x290
[ 1184.226143]  __x64_sys_shmat+0xcf/0x160
[ 1184.226157]  ? syscall_trace_enter+0x1cf/0x240
[ 1184.226171]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1184.226189]  ? syscall_trace_enter+0xf2/0x240
[ 1184.226203]  do_syscall_64+0xbf/0x360
[ 1184.226224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1184.226238] RIP: 0033:0x7f88aea1cb19
[ 1184.226249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1184.226262] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1184.226274] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1184.226283] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000000051
[ 1184.226291] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1184.226299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1184.226306] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1184.226327]  </TASK>
[ 1184.254176] memory: usage 307200kB, limit 307200kB, failcnt 253
[ 1184.254729] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1184.256048] Memory cgroup stats for /syz7:
[ 1184.256148] anon 1507328
[ 1184.256770] file 308293632
[ 1184.257060] kernel 4771840
[ 1184.257321] kernel_stack 557056
[ 1184.257623] pagetables 2174976
[ 1184.258290] sec_pagetables 0
[ 1184.258942] percpu 1024
[ 1184.259456] sock 0
[ 1184.259965] vmalloc 0
[ 1184.260447] shmem 308289536
[ 1184.261058] file_mapped 233472
[ 1184.261700] file_dirty 0
[ 1184.262275] file_writeback 0
[ 1184.262844] swapcached 0
[ 1184.263227] inactive_anon 309481472
[ 1184.263694] active_anon 81920
[ 1184.264135] inactive_file 4096
[ 1184.264547] active_file 0
[ 1184.264949] unevictable 233472
[ 1184.265363] slab_reclaimable 964768
[ 1184.265834] slab_unreclaimable 1088224
[ 1184.266363] slab 2052992
[ 1184.266713] workingset_refault_anon 0
[ 1184.267222] workingset_refault_file 1
[ 1184.267710] workingset_activate_anon 0
[ 1184.268232] workingset_activate_file 0
[ 1184.268727] workingset_restore_anon 0
[ 1184.269247] workingset_restore_file 0
[ 1184.269741] workingset_nodereclaim 0
[ 1184.270301] pgdemote_kswapd 0
[ 1184.270706] pgdemote_direct 0
[ 1184.271139] pgdemote_khugepaged 0
[ 1184.271582] pgdemote_proactive 0
[ 1184.272048] pgscan 427
[ 1184.272379] pgsteal 77
[ 1184.272703] pswpin 0
[ 1184.273056] pswpout 0
[ 1184.273374] pgscan_kswapd 0
[ 1184.273762] pgscan_direct 427
[ 1184.274207] pgscan_khugepaged 0
[ 1184.274635] pgscan_proactive 0
[ 1184.275075] pgsteal_kswapd 0
[ 1184.275472] pgsteal_direct 77
[ 1184.275870] pgsteal_khugepaged 0
[ 1184.276334] pgsteal_proactive 0
[ 1184.276756] pgfault 87384
[ 1184.277147] pgmajfault 3
[ 1184.277490] pgrefill 408
[ 1184.277849] pgactivate 486
[ 1184.278253] pgdeactivate 408
[ 1184.278644] pglazyfree 0
[ 1184.279025] pglazyfreed 0
[ 1184.279391] swpin_zero 0
[ 1184.279739] swpout_zero 0
[ 1184.280132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10685,uid=0
[ 1184.282010] Memory cgroup out of memory: Killed process 10685 (syz-executor.7) total-vm:105680kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:128kB, UID:0 pgtables:140kB oom_score_adj:1000
13:01:51 executing program 7:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2c000)
mlockall(0x2)
arch_prctl$ARCH_GET_FS(0x1012, 0x0)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:01:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:51 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:01:51 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf5", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

[ 1184.694734] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1184.696215] CPU: 0 UID: 0 PID: 10705 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1184.696241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1184.696253] Call Trace:
[ 1184.696260]  <TASK>
[ 1184.696267]  dump_stack_lvl+0xfa/0x120
[ 1184.696304]  dump_header+0x107/0x950
[ 1184.696340]  oom_kill_process+0x278/0xa00
[ 1184.696375]  out_of_memory+0x34b/0x1690
[ 1184.696414]  ? __pfx_out_of_memory+0x10/0x10
[ 1184.696456]  mem_cgroup_out_of_memory+0x164/0x190
[ 1184.696477]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1184.696507]  ? mark_held_locks+0x49/0x80
[ 1184.696538]  try_charge_memcg+0x81f/0xf30
[ 1184.696577]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1184.696617]  charge_memcg+0x7b/0x290
[ 1184.696648]  __mem_cgroup_charge+0x28/0x90
[ 1184.696682]  do_wp_page+0x56e/0x31f0
[ 1184.696722]  ? __pfx_do_wp_page+0x10/0x10
[ 1184.696751]  ? do_raw_spin_lock+0x123/0x260
[ 1184.696778]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1184.696804]  ? ___pte_offset_map+0x176/0x370
[ 1184.696836]  __handle_mm_fault+0xde1/0x30f0
[ 1184.696866]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1184.696901]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1184.696929]  ? lock_release+0x121/0x290
[ 1184.696980]  handle_mm_fault+0x2c3/0x900
[ 1184.697009]  ? access_error+0x17d/0x380
[ 1184.697035]  do_user_addr_fault+0x4fa/0xeb0
[ 1184.697065]  exc_page_fault+0xb0/0x180
[ 1184.697096]  asm_exc_page_fault+0x26/0x30
[ 1184.697115] RIP: 0033:0x7f88ae9cad30
[ 1184.697130] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1184.697149] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1184.697165] RAX: 0000000084f5f5de RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1184.697178] RDX: 0000001b2d620030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1184.697190] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2d62001c
[ 1184.697202] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1184.697214] R13: 00007f88aeb24000 R14: ffffffff819c2fdf R15: 00007f88aeb2fff0
[ 1184.697228]  ? __might_fault+0x1f/0x190
[ 1184.697260]  ? __might_fault+0x1f/0x190
[ 1184.697287]  </TASK>
[ 1184.723522] memory: usage 307200kB, limit 307200kB, failcnt 281
[ 1184.724321] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1184.725123] Memory cgroup stats for /syz7:
[ 1184.728074] anon 1490944
[ 1184.728851] file 308297728
[ 1184.729464] kernel 4784128
[ 1184.729796] kernel_stack 557056
[ 1184.730420] pagetables 2174976
[ 1184.730766] sec_pagetables 0
[ 1184.731264] percpu 1088
[ 1184.731545] sock 0
[ 1184.731790] vmalloc 0
[ 1184.732117] shmem 308293632
[ 1184.732441] file_mapped 0
[ 1184.732746] file_dirty 0
[ 1184.733084] file_writeback 0
[ 1184.733429] swapcached 0
[ 1184.733741] inactive_anon 309702656
[ 1184.734166] active_anon 81920
[ 1184.734526] inactive_file 4096
[ 1184.734919] active_file 0
[ 1184.735228] unevictable 0
[ 1184.735542] slab_reclaimable 964768
[ 1184.735974] slab_unreclaimable 1100552
[ 1184.736407] slab 2065320
[ 1184.736705] workingset_refault_anon 0
[ 1184.737144] workingset_refault_file 1
[ 1184.737566] workingset_activate_anon 0
[ 1184.738040] workingset_activate_file 0
[ 1184.738475] workingset_restore_anon 0
[ 1184.738927] workingset_restore_file 0
[ 1184.739367] workingset_nodereclaim 0
[ 1184.739754] pgdemote_kswapd 0
[ 1184.740110] pgdemote_direct 0
[ 1184.740454] pgdemote_khugepaged 0
[ 1184.740815] pgdemote_proactive 0
[ 1184.741197] pgscan 467
[ 1184.741468] pgsteal 77
[ 1184.741748] pswpin 0
[ 1184.742026] pswpout 0
[ 1184.742287] pgscan_kswapd 0
[ 1184.742612] pgscan_direct 467
[ 1184.743005] pgscan_khugepaged 0
[ 1184.743369] pgscan_proactive 0
[ 1184.743726] pgsteal_kswapd 0
[ 1184.744092] pgsteal_direct 77
[ 1184.744447] pgsteal_khugepaged 0
[ 1184.744818] pgsteal_proactive 0
[ 1184.745212] pgfault 87434
[ 1184.745523] pgmajfault 3
[ 1184.745832] pgrefill 452
[ 1184.746160] pgactivate 530
[ 1184.746474] pgdeactivate 452
[ 1184.746822] pglazyfree 0
[ 1184.747165] pglazyfreed 0
[ 1184.747479] swpin_zero 0
[ 1184.747776] swpout_zero 0
[ 1184.748113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10705,uid=0
[ 1184.749733] Memory cgroup out of memory: Killed process 10705 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
13:02:02 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:02 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf5", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:02:02 executing program 5:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x111400, 0x20)
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={<r3=>0xffffffffffffffff, 0x8, 0xffffffff, 0x1})
r4 = dup2(r2, r3)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000)
openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x28200, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xea8}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8844}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8d7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9e9}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa2c}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x73c5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x86}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000040}, 0xc00)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xf}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0xc044}, 0x800)

13:02:02 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x5)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)={0x89, 0x2f, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x401, [0x20080000001, 0x1ff, 0x9773, 0x4]}}, @pad1, @generic={0x4, 0xc, "c1b1c2c4a311b0acb5b32efb"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @pad1, @generic={0x20, 0x38, "b0e2736de4a204dbbf0ecb12ff89ba9e0000000000a2cacfa960f023f11b881d4071a38d737b797d6e41f5f72213c9fa11153e263dd93200"}, @enc_lim={0x4, 0x1, 0x3f}, @hao={0xc9, 0x10, @remote}, @generic={0x0, 0xc6, "4b7e4a73e0477afffb5b50588f81ff17a60a444c883b4c613e4cd2c18c4ea4ae189d66bd509dcb70368e5c5e022cd499bbfeb7f6dc1e08fe0f2c7f12ffaac4fdff5db63e97b632b2c8381087af553de9902d3794beae40f8fdaa6499edf803c06eb6d1e00fc887411a8938993837d5496ba5ecf151e7bf428ad9962d85f40f66df4a86e56a1df42845e8e9cc38d6c9ee3c310e0b5053df9cf423982c0c7cd7f1b4525cef07ca05834f852d1dd5da0c138b942c12c16442b49d7eb2261c13e4939b0755d6afa7"}, @hao={0xc9, 0x10, @private1}]}, 0x188)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000100)={'batadv_slave_0\x00', {0x2, 0x0, @initdev}})

13:02:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:02 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_RMID(r2, 0x0)

13:02:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x500, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:02 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r1)
shmdt(r1)

13:02:02 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x600, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:03 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
r1 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x23)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000500))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dbe8b2f77d05747deb0ae71f911cbe78f67715f93fec1750a53917a461ebea3d044028ceffb338e02bdf967476b7b25414df3fea0a5bc4837faccfb986"], 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x800)

13:02:03 executing program 5:
creat(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
open_tree(r0, &(0x7f0000000080)='./file1/file0\x00', 0x80000)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x280300, 0x0)
r2 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x3, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="71b58a91a69bc71904a3a7bc1324be4931117496e1b5fd89c4190367b86c203fd95ef65c7f5e8772d4d60f245b7b945bcd938145ca1745c8ce4bbe50604a0a998b575762193b5423aa9817a2c2e50d0d5a345a99bd09659c61a3f4462fa364504dcf113546d134d34d45d0e3424a8dd1e6b2d65d52800083da21f2ea6cc37bfee543c01aa8ac69e327df5ecff71ffa4a86fb279e1b43f73ea8997c17f8a9a0ca172b8b4c372d61b4e3fc52f8db984c44052da5e365fff0a21a14581c16806ed9b19bb10322bdff491dea343640619dd5d0", 0xd1, 0x200}], 0x80010, &(0x7f00000002c0)={[{@cruft}, {@utf8}, {@nojoliet}], [{@fowner_gt={'fowner>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}]})
close_range(r1, r2, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:02:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x700, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:03 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1196.277003] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1196.278800] CPU: 0 UID: 0 PID: 10727 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1196.278830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1196.278843] Call Trace:
[ 1196.278850]  <TASK>
[ 1196.278859]  dump_stack_lvl+0xfa/0x120
[ 1196.278906]  dump_header+0x107/0x950
[ 1196.278948]  oom_kill_process+0x278/0xa00
[ 1196.278985]  out_of_memory+0x34b/0x1690
[ 1196.279025]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1196.279055]  ? __pfx_out_of_memory+0x10/0x10
[ 1196.279101]  mem_cgroup_out_of_memory+0x164/0x190
[ 1196.279124]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1196.279157]  ? mark_held_locks+0x49/0x80
[ 1196.279191]  try_charge_memcg+0x81f/0xf30
[ 1196.279233]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1196.279278]  charge_memcg+0x7b/0x290
[ 1196.279310]  __mem_cgroup_charge+0x28/0x90
[ 1196.279344]  do_wp_page+0x56e/0x31f0
[ 1196.279387]  ? __pfx_do_wp_page+0x10/0x10
[ 1196.279419]  ? do_raw_spin_lock+0x123/0x260
[ 1196.279449]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1196.279478]  ? ___pte_offset_map+0x176/0x370
[ 1196.279514]  __handle_mm_fault+0xde1/0x30f0
[ 1196.279547]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1196.279577]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1196.279608]  ? lock_release+0x121/0x290
[ 1196.279665]  handle_mm_fault+0x2c3/0x900
[ 1196.279697]  ? access_error+0x17d/0x380
[ 1196.279726]  do_user_addr_fault+0x4fa/0xeb0
[ 1196.279760]  exc_page_fault+0xb0/0x180
[ 1196.279793]  asm_exc_page_fault+0x26/0x30
[ 1196.279815] RIP: 0033:0x7fc67e13aecd
[ 1196.279832] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1196.279853] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1196.279871] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1196.279885] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1196.279899] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1196.279913] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1196.279926] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000123f64
[ 1196.279954]  ? do_syscall_64+0x12c/0x360
[ 1196.279994]  </TASK>
[ 1196.309980] memory: usage 307200kB, limit 307200kB, failcnt 673
[ 1196.310859] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:02:03 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0)=0xcd6f, 0x4)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xccf, &(0x7f0000000100)='veth1_virt_wifi\x00', 0xff, 0x6, 0x7})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1196.312240] Memory cgroup stats for /syz0:
[ 1196.374293] anon 1134592
[ 1196.374858] file 309952512
[ 1196.375126] kernel 3485696
[ 1196.375363] kernel_stack 360448
[ 1196.375614] pagetables 1372160
[ 1196.375859] sec_pagetables 0
[ 1196.376117] percpu 640
[ 1196.376311] sock 0
[ 1196.376480] vmalloc 0
[ 1196.376665] shmem 309952512
[ 1196.376904] file_mapped 0
[ 1196.377118] file_dirty 0
[ 1196.377320] file_writeback 0
[ 1196.377548] swapcached 0
[ 1196.377752] inactive_anon 310886400
[ 1196.378054] active_anon 200704
[ 1196.378297] inactive_file 0
[ 1196.378517] active_file 0
[ 1196.378726] unevictable 0
[ 1196.378954] slab_reclaimable 970184
[ 1196.379225] slab_unreclaimable 789936
[ 1196.379505] slab 1760120
[ 1196.379707] workingset_refault_anon 0
[ 1196.380012] workingset_refault_file 0
[ 1196.380295] workingset_activate_anon 0
[ 1196.380582] workingset_activate_file 0
[ 1196.380868] workingset_restore_anon 0
[ 1196.381174] workingset_restore_file 0
[ 1196.381456] workingset_nodereclaim 0
[ 1196.381732] pgdemote_kswapd 0
[ 1196.381996] pgdemote_direct 0
[ 1196.382235] pgdemote_khugepaged 0
[ 1196.382504] pgdemote_proactive 0
[ 1196.382763] pgscan 367
[ 1196.382976] pgsteal 76
[ 1196.383169] pswpin 0
[ 1196.383348] pswpout 0
[ 1196.383533] pgscan_kswapd 0
[ 1196.383753] pgscan_direct 367
[ 1196.384011] pgscan_khugepaged 0
[ 1196.384259] pgscan_proactive 0
[ 1196.384498] pgsteal_kswapd 0
[ 1196.384729] pgsteal_direct 76
[ 1196.384986] pgsteal_khugepaged 0
[ 1196.385242] pgsteal_proactive 0
[ 1196.385489] pgfault 87292
[ 1196.385700] pgmajfault 0
[ 1196.385938] pgrefill 275
[ 1196.386143] pgactivate 365
[ 1196.386356] pgdeactivate 278
[ 1196.386584] pglazyfree 0
[ 1196.386787] pglazyfreed 0
[ 1196.387017] swpin_zero 0
[ 1196.387223] swpout_zero 0
[ 1196.387431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10727,uid=0
[ 1196.388552] Memory cgroup out of memory: Killed process 10727 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1196.521985] syz-executor.7 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000
[ 1196.524007] CPU: 0 UID: 0 PID: 10746 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1196.524038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1196.524051] Call Trace:
[ 1196.524059]  <TASK>
[ 1196.524068]  dump_stack_lvl+0xfa/0x120
[ 1196.524109]  dump_header+0x107/0x950
[ 1196.524152]  oom_kill_process+0x278/0xa00
[ 1196.524191]  out_of_memory+0x34b/0x1690
[ 1196.524236]  ? __pfx_out_of_memory+0x10/0x10
[ 1196.524284]  mem_cgroup_out_of_memory+0x164/0x190
[ 1196.524308]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1196.524342]  ? mark_held_locks+0x49/0x80
[ 1196.524377]  try_charge_memcg+0x81f/0xf30
[ 1196.524421]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1196.524458]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1196.524493]  __memcg_kmem_charge_page+0x135/0x400
[ 1196.524533]  __alloc_frozen_pages_noprof+0x33b/0x1f10
[ 1196.524568]  ? kernel_text_address+0x5b/0xc0
[ 1196.524595]  ? unwind_get_return_address+0x59/0xa0
[ 1196.524628]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1196.524657]  ? arch_stack_walk+0x9c/0xf0
[ 1196.524690]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1196.524739]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1196.524769]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1196.524800]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1196.524831]  ? policy_nodemask+0xeb/0x4e0
[ 1196.524868]  alloc_pages_mpol+0xed/0x340
[ 1196.524907]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1196.524952]  alloc_pages_noprof+0xa1/0x380
[ 1196.524987]  pte_alloc_one+0x1e/0x360
[ 1196.525019]  __do_fault+0x30d/0x480
[ 1196.525051]  __handle_mm_fault+0x119c/0x30f0
[ 1196.525088]  ? __pfx_mt_find+0x10/0x10
[ 1196.525121]  ? lock_acquire+0x15e/0x2f0
[ 1196.525147]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1196.525202]  ? find_vma+0xbf/0x140
[ 1196.525229]  ? __pfx_find_vma+0x10/0x10
[ 1196.525264]  handle_mm_fault+0x2c3/0x900
[ 1196.525307]  __get_user_pages+0x58a/0x2f10
[ 1196.525369]  ? __pfx___get_user_pages+0x10/0x10
[ 1196.525411]  ? lock_is_held_type+0x9e/0x120
[ 1196.525448]  populate_vma_page_range+0x282/0x410
[ 1196.525474]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1196.525496]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1196.525531]  ? do_mmap+0x6a4/0x11d0
[ 1196.525565]  __mm_populate+0x100/0x3a0
[ 1196.525590]  ? __pfx___mm_populate+0x10/0x10
[ 1196.525617]  ? up_write+0x195/0x520
[ 1196.525642]  ? lock_is_held_type+0x9e/0x120
[ 1196.525679]  do_shmat+0xdd4/0x1310
[ 1196.525716]  ? __pfx_do_shmat+0x10/0x10
[ 1196.525742]  ? __might_fault+0x138/0x190
[ 1196.525768]  ? lock_release+0xc8/0x290
[ 1196.525800]  __x64_sys_shmat+0xcf/0x160
[ 1196.525836]  ? syscall_trace_enter+0x1cf/0x240
[ 1196.525862]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1196.525895]  ? syscall_trace_enter+0xf2/0x240
[ 1196.525921]  do_syscall_64+0xbf/0x360
[ 1196.525959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.525982] RIP: 0033:0x7f88aea1cb19
[ 1196.526000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1196.526022] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1196.526044] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1196.526060] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000000052
[ 1196.526074] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1196.526087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1196.526100] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1196.526138]  </TASK>
[ 1196.576165] memory: usage 307200kB, limit 307200kB, failcnt 300
[ 1196.579122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1196.580419] Memory cgroup stats for /syz7:
[ 1196.580589] anon 1507328
[ 1196.581624] file 308297728
[ 1196.582083] kernel 4767744
[ 1196.582504] kernel_stack 557056
[ 1196.583014] pagetables 2166784
[ 1196.583493] sec_pagetables 0
[ 1196.583970] percpu 1024
[ 1196.584355] sock 0
[ 1196.584684] vmalloc 0
[ 1196.585074] shmem 308293632
[ 1196.585508] file_mapped 0
[ 1196.585953] file_dirty 0
[ 1196.586355] file_writeback 0
[ 1196.586799] swapcached 0
[ 1196.587228] inactive_anon 309719040
[ 1196.587756] active_anon 81920
[ 1196.588244] inactive_file 0
[ 1196.588675] active_file 4096
[ 1196.589191] unevictable 0
[ 1196.589600] slab_reclaimable 965152
[ 1196.590164] slab_unreclaimable 1092264
[ 1196.590724] slab 2057416
[ 1196.591157] workingset_refault_anon 0
[ 1196.591712] workingset_refault_file 1
[ 1196.592284] workingset_activate_anon 0
[ 1196.592843] workingset_activate_file 0
[ 1196.593438] workingset_restore_anon 0
[ 1196.594035] workingset_restore_file 0
[ 1196.594589] workingset_nodereclaim 0
[ 1196.595157] pgdemote_kswapd 0
[ 1196.595631] pgdemote_direct 0
[ 1196.596119] pgdemote_khugepaged 0
[ 1196.596628] pgdemote_proactive 0
[ 1196.597152] pgscan 507
[ 1196.597535] pgsteal 77
[ 1196.597951] pswpin 0
[ 1196.598304] pswpout 0
[ 1196.598670] pgscan_kswapd 0
[ 1196.599129] pgscan_direct 507
[ 1196.599590] pgscan_khugepaged 0
[ 1196.600109] pgscan_proactive 0
[ 1196.600582] pgsteal_kswapd 0
[ 1196.601076] pgsteal_direct 77
[ 1196.601536] pgsteal_khugepaged 0
[ 1196.602076] pgsteal_proactive 0
[ 1196.602559] pgfault 87492
[ 1196.603003] pgmajfault 3
[ 1196.603408] pgrefill 491
[ 1196.603807] pgactivate 570
[ 1196.604267] pgdeactivate 491
[ 1196.604725] pglazyfree 0
[ 1196.605164] pglazyfreed 0
[ 1196.605577] swpin_zero 0
[ 1196.606014] swpout_zero 0
[ 1196.606432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10732,uid=0
[ 1196.608614] Memory cgroup out of memory: Killed process 10732 (syz-executor.7) total-vm:105680kB, anon-rss:276kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
13:02:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x900, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:15 executing program 3:
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:15 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9)
sendfile(r1, r2, &(0x7f00000028c0)=0x7fffffff, 0x7ff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file1\x00'})
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(&(0x7f0000002880)='./file1\x00', &(0x7f0000002800)='./file1\x00', &(0x7f0000002840), 0x118000, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x3, 0xa, &(0x7f0000002600)=[{&(0x7f0000000100)="e1d04360cdeba66ada192f9cc9dc92d1b3254bb55fbc8e66d3b1f1121385d8ff8eda0cdbe7356d6acc042df008b5c85aa208464fab1feb3c7d627944dc56fbfffe8a7cfc9cae3fdfe9a25208d233684baf66440e4ce11f3e9664cabd0c5abda23caaaa8b9ae31b8a86c23e4fda877da16514ecc43d2a273c5f78b03c901f0d099bbe5e52b506dcf41793dd749d0317af69296603e5", 0x95, 0x5}, {&(0x7f00000001c0)="06bad5bce070cc193701614a219959ec9b8bc4d13292368841bc582f2a567ca5d78e2c25496f5d85dd5e948773630bd1c9f97077b06adcb79b3784afdab8ec67da3922ff2a9d56c1cd8080c94b5f4aed84e4b04f912a6d42e0f94a0b90113c13d924094b59cdcfdd6896d7e4e9371c83b285999fe2a5fd32cc5c6426a10345c4c681aa57ddaaa78ddc774c08d5bcdb73b8a053322a82b113240d30f3a263670e3eb1b03b026a9cfd7a571fbdae33ed0bea771d1404a1313910c06c8910fa17e8ea8831f210c969acc7b8025e18f55a273d6ae22f7712b9cee6157776571943831af1cc4570b1d33d248834c0c7b7cf1255cc7431b433d601159a14e94e4cee7631a669b3100d1dac32892682bc86d6e83ad7efa80a2640af5b828e3230d46fb73e1c8c48ab538520f5043756146e17974e83f7104d29cd2d7dfd59df0d6f8aa9ed0df1af1f4ae7f3af44d74ec70543399f079ad6e226f04e9c65cdc5ce79052e5383d5536aa6828a58616823bd2bc24036972453694402051ec934acb50692294cfff7011811a39339af39fae2e1d7c6ab7e44d5c61f014ca6e6f656fc2dafd70a735ed37e679cd7a7fbed0ff68c2bb1677a0306e54059c11a52a334599ea8737ec30dffe54702ff24b62b47a24097e0c57c59e4175b7ec969561fd60f09076eac156a700983eda1035380437b85094c38e34b6f4eb6007f5d10c4b22341fbab6950cb72bb312f72af547afd8ca155c0aa99f2191a551b6a8e52c8bde78744e343f77a2b53b4b1db92760d14f56e24493fbcbdf25d9818c34b1c4097cec5aaa7b75c8c93ceab7b83345af17172eae327ad04bc5ad8864dccb5e1b38e147af84af474c47b47af3f2750fdb0ee5e2866a0ba175508e6a12fc446b190927a39d19ace62bc6ec2c7c9df63b351a810c0d85b22bc77a86cf4c83ecabe5f14b2ce48b1ffcd7e6f731de0cecd27b042b5461a34bcbbc3effdeca97dd1f1067d2032a005d671c65dd3b51ec157f2368d6c76225bf81863efa5e279ce5b89ddcc4be7045e6170d3368fbee95a40b65ef492eb7dc00eff4895f3bb9712af344722a6e39348fee81e4ddaeab47bd67ccd73e6104ce6238764cf13ed6b3f331cdd8bf8a3894048db8c03e38301e32290b0e0b242ae814d2626f13d0d8297f10aed642e38f23e3b0c022ea330d53c4b7fdd074f9ed8ff732b8d41c7a4ad901e484440bd606114ce17b8cd67f6338056db647015eb633221e31dcea2875e9baadf30e1c3cee0a5bc4660005c6bc224c87e07a50091d11f1dc673099790f547dcbc925e179b6ac568136b97f253e87883a10d2619f508e7b99aa46196636b7d349aec7fbcba756db8910e2d96807702de3a15c3a9e373d69cfac430a1d6ba3c8b8b9fec93fe9f6e5bf0197b014876b27e9583bfad22aeb0dca6469a55900b9041370c5b2142c388336cd3c7fc8f933e0d9d433daed294fac302ee048e33accfcd7ab027118e83caaa30874a1716ec8ff65e647fcb8f834fbca1c0a35f614d6a394167c0eabab05a97b89730742baf86eb714d68ea38842a21867b50e4a4af324d0f3200484a4942503f9d4972f7175ce59945d0e113200caec131d3228360c1d21e994bf75acea72a9b0e70825363f112b7f42550e7181f617a38bd99742e0d400915d66baa38887baa5941b5131429a1ce2d0449fac218ca256e441d40209d5a373021a1123ffc5c7d16eb10d68bbc7ae5884ba7225b2f850d99f4cfc545beb36ecc8ffd7a7d4139586887f86bb61defdc33afad6c5ac22ad2988670ca874171dda9358ef6d4ad7d5a15b9b7365ed8b7f179c2a23c767f43f65cd1b4a60c652f141b64704fd76a6c8a5fc2b9acf504c104071d9d33ea7be20e1f2c2c90e44818d42baf67d0ede5bf90d84f6248bc8d219836faac677abe5ae04d8aeb0b3d5eba3294f44b7d8183133fd4563b992086af1a82181095316dc9b50fb137dd374a79c2243e746b5369e83ac414562466835283ff4b8da5dc1cce518d4c7e05eb54fbff1c225d4225532b64a8dced6eb1798d1d11647444aaacb408eb20e662a43371e50eeb65ab0f913083f2d53a50c07679bfa7460c044561e0794bb8736f71359baac64c1988c81876e50df66092e90d3cbb14cc20ce9a9b07ac62ff18edb293da813b4b4a1832c3d6966a8bd958420be37e04c32a96de8d4821bcac1c23b39372a370357c17a92f115224f3522ba9ea9f44d7c447e325736531ba019973e8808f61f09b1c3da1456bfc892075a24362de9c93d9d21580ca8c062a2ee06dd9fec42df3573c6fefad2b2da74a1a7f494bfcfe6f43c6e07844850243628ae768ed00604194a7935fdb9d50ff26c7246d2da9dd42efcdf8ba100ba8de2376a38fa0c4b943e9063e0073d4658101772e8cd7c64968065be26d47daa7b48d819da1fe89c01e5aafbe86faec51525e17fdbf89ccb7b5f0ff86b7bd52615615599b129395120a9ea0daac6ffdefeacd0cd66084ec8fd0163332a72a93afa3a76a8f9f2a17529280775956154561ee18132c165461088684450d30fce844db87cbf9f59d42139fa5d66a933a0a5e0dcc82a7df2e78fbef1858d8472f3cab46f3b897e95c596bd3d43fc5245fcccdb8b26c4f91d85cc3119e0776ffcc180482faebfce3b44088d122d0a7c3fd25a2bfe2643f4690f03def9593b3ef32a488ff5bf026e4795f1762df929d4be4cee4c5fd0f80eb2af2087ddfc8910f42e9bd7d2bb7ac6c8602d58da9bfbbdd7aa0e3f8406c3331b038fbb3f05080fd5a5421f06d0cb58d46095b3db483dc668086aefef026a12450190cd82eefe02b50b0fb03893c4f48384cf0f52a5b53ef9ff81675ad39c01e6516955d98447cf67ac08a3b69d3f72b5c8308b22e585985d38e3b8b90151b082d4828b706c422060b1e3181d47ab75f883970f4eb30549e6080db1a15d88c706e5ce95aabaa1bcc73b45617803cf3dd7bd93e4709a120f1bd154aa1a786a2a525186e38f4a3da602c0c2fcdd19f1fe26c59970e5cb63939d563828f5c522d07c632444cfcb8ae340b1fe14edc0618d2b83460736cac3de20184c87b5186991083bd37dbaac3b811b01589e65e70f8007b8ce3a4991c6ad77b3e73def2cefb0e4b2295af5fbf3f866980cb11d8ad4531f5dd2b53f05f3f2e2888fb6b0aec56008945799e0395fb20eb83ca1188d88f8f25b05ba17fc24ebcc9a1af22cbadaa7df2168edfc3221563fa48d63aec50c960e31f5a7e63d644f0cbdf428bb3975fcff2a5ec0e0d10c5a05f7a42c90c2eb71a92ed668267c54a1df25d709099d23a402c40ef60f371e712f1c2d6f073b0eb1f06806788fa85568bc9629e2324569d77c90aa9557b3b494a846cb8f10c3625ccbc78aaeeb04dfaefa68dfa47e0fdb6734374df1c5469e636221a3e0a5b5648cb4adad1ea22664be83f6a2caed084e5474bb42379cb45f46d1faccbbc33e870f669ef910c1b6fe718dd7ece3b52ae02d05d3f9d81ab101c37f07fc16ec9efb2af4ed3f3b77f06823dab0c40ad7618f4d62133cdc1e7a44f72d2b187575c31d1cf60a0a75931a1e1e0efd048c72008c4ba812d2e3a6911d191a6861edbd9771a307fc8a3389e7fff9004de4016a61f827999ded34acee4d39f44ecd0b0986824a6d94de3a092ea7746270e7933f0ae5208339fc5957147f19acdee60facce81b738c1c3619bb4661870a0737832a34cf50359bde00cc777cd14c549e07f71c82f9fbd2bdd7aed4c11cd8c0f84907273f5214e42fb1b2d253050ed70fcfc2975d3fadb368cb4ca90847b6fd3454e3e7c6b72733347d953e33bf9d9582acebc46160208afc2c1aeb36b182694e7342d68e960fd72785aff5d014240d4b9fdb72906e2af44ef937e549f29a730f1dc0f6f778e2931ff0702d3b8e5c8d5a1cb38eebac0a82a6396d248750f79a2cd9def641548d977c511ceab291f578b6a73818093f4665d1c756d3e94ccf196411a9d5866653147703f8de056910cfef19c4ec517757c531c3a90e12fc274058db9dee69adeb52ece7358d0b62caf21f010b7f3d77b88e404557c004bb3b7d102ca877650d891bfcf93bd1aa5ccfe04124d4f395b26f8f1942d7106847b08fe0519f56eb749fe8e0cae8747520971b890577be42d1407b669677fdf046627e68a9a2fcd88a809c145b3d34bbf9098deea805ce06cd388fbb2f03ecc9fd213bb9a603883c2a6bcadf77686336bb1e3a5a5aa968a24a0eb9c6d7d3a9e576a21f542c9d92e6d4e20a11a3631e1c6c0cd97d6b7409c14153b47e4257bc167bf8893b2aa099d636612efc727f6291a6fdc35660c24eecab431ea497c004029010c3b409563ae9667fe4e67dd7730bd9cc91872d005b84d53947ccf6097a1bb075517c6532b8c273ab25861867f980e4aeaf97b40c6ebeca4d92ac1d88176dfa3213ba3f0acf3abfa5e7c8a9572851aa415a58eaa3c2a8e4d52d549b793b61ae3a10f7e843566d2e9042d9e826abb0ac34813f78bac3fcc4c1828872b55fba9c2e104e79b3cac676710610d8de6998be34c3793592bd6f65a6b6b6cfa29ebcc601411019dcd41e3c68168f88a67fbd1651bf43b0c2868238fc28a28d4c29800e7b16836182e9bbb72e3e6b78aa27aff34eb1ef16c3fbd293884ad55e4c6c65d36a412e60523ac0e975873113808a7bb3107a3626ef02faf7c05d5b175eb513130f4b36993650e4fc836ba4538d9019269d5c638f7be7a9135bcedd1e632165a64ddcaf4824f7d4676859373d234508783dd06d30f41d65ccf5515ff43def4a777fda8976aa4dc24b61c9e4c9073ba86373e9bbf258130f812476af1f7d417521c4a66b02bf2928fbf94d304c797ea5727d292abcd494cec5f4c20683f639a7d7ed8c5cdc672371e816ad69be00c0c2858e4e1259f9f1427f04b14b6798e224d43b45ef21acf7cbf981a2b0f2a14dfa8ba74365e50d71878ecb825966990ec76ea53111e206adfa2220ddf38b01c14a1829041bfb20c4bbfb3295d5e2769a6d1172b65a91129c8552309da6129308656f6058e9342e5907f87830b634ff4a879cefca203aaf2b2d66c19fd5c37b9470324e6aa6e001d99af3b5494277fd7307bb46f288002262bb8b1d6c71413c7f8e727fca472352e639271ce69b8ef93ac0010179fb0ecaca53c6faf2c4de56cf95473ad63b4bc497f9066a0661a5ce09cbb92627f2112d41798e650bf48692881b42b24bd36c5e44ff6242c6433ac7952f1bc3fa8f5c74960779ea7ada6e7d771d55878541684a26eebe7ac3cbf2d56dbaf598498d1c2834b0e766cd5ba390ea8d652e943093e354dca126d53d2a2e02fb349c9e2ba83c7aa017d0a56a801149bbfbefe4aacba60371bca4a850a8ebbc5e7928777ecfc5e73a2c01426db34b0e59a2d4ebebec4f82012b09e76c49b04fce67b07171c6094d96700f07b95db4bd60d95c337ae3c03263298e642d21edfba3ec48d1cc28c9bc90c93120c2ed9fad66556c36084cfbf4f544d6f2cbbdada252f8b3ae2b995e12cfaeaf4dfa1c1974eed17b37a0ea10c4c11424560922946ae2a593716f729ca9937c710f59ef36e730691589b76ef8d654d55c432957a8f82e681e6294f76332ac67bc7a04677fd00d6cec312b8379da63fdcb4a6f185dc7ef9c3010fbebb60d724f885f8cd22d7ed12ede533be53037b5d55e15edd8e4060b510b9a96efbd0c4fd6ee5622b7a8d474795dc65a003d0a4095dad62961b9b921a8884cc112ef17eb88690e675069ad41edc73bd178c007673fdd4daa06966fe294e7", 0x1000, 0x4}, {&(0x7f00000011c0)="cebad90d96abdb75aa15567e3890db62f2696e526b7b2b060b6e158190ba54830782ef2ee33713ccf164cceded84b7c35e060338880cbed80bc7c81be8804726e17c055ec51311b2509de25af3660b48df6582fa66a011dd9b9c714f163d2a83b4f91985b7059c300f3a51714b379c49c6b48657623da2775b9d8ad9d0b4627142ce", 0x82, 0xfffffffffffffffb}, {&(0x7f0000001280)="85e6de9d5ac84e5808fda140d10fe6e73ff54ecda15df08f28c6e7f20f2a726c5cc083b014dc56ea045adcf938f855d0646927aac61ae0529c8061ff48be9cdf06f534bc6f929d3291e94cd7f03874ed22cf9645832b10b544a6d8d70fa82ec9b50c39ddd6", 0x65, 0x8}, {&(0x7f0000001300)="a2da365557f9ac71efce0d38f03af023d511291756f0ecc1bda3580ce4081092df7713d6", 0x24, 0x8}, {&(0x7f0000001340)="5de97f9b26771a", 0x7, 0x8}, {&(0x7f0000001380)="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", 0x1000, 0x101}, {&(0x7f0000002380)="fcaae5d816fb00ac70a8ef962844e37691556f686f3da365c945270cb7ea3a0bfe1e4c1886076c44c5d179805aaae9dab2563c2afbeb69cdb4c890784584cfd9759b9e20c5e3e0cbb4cc7877e9405f5dac5415428e2677cf99c15743e4fc188f8718cc7df2ed5758c6f9dd85f66c0fdf66896286147ff641aa1e9121e68d0fa47a7eb99e10dd3a82d19996edd1ece8d7a05fd7ba1255ec1a4f", 0x99, 0x8}, {&(0x7f0000002440)="c30bf4b6237b3f4811214a0ec955738c4c6f7304550711966b1fa1f979e7e2abb15d7f5de9de43117d944e95e4902ef24e0a12ff1f2b259d3af74911054808550f1a062c2857c468b98b4bd1dd4974cf6cd74bac1e992b0112f05c553e54a485b03e9b72216add10abb8aa4e2932e1b37c87be80d66cd61be085bf8c8b3a138eedc328e1cffae066b79ff72ff7bc16bb034d6214571ec150b4038f693156ede1ebe56ca36fc45c35080aaa409cee31e339eadcad497cca1ab4da54f4b89c58", 0xbf, 0x401}, {&(0x7f0000002500)="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", 0xfe, 0x1adc0000}], 0x104100a, &(0x7f0000002700)={[{@mode={'mode', 0x3d, 0x2}}, {@utf8}, {@hide}, {@map_normal}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}], [{@uid_lt={'uid<', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]})
fcntl$setstatus(r4, 0x4, 0x40400)

13:02:15 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
shmdt(0x0)

13:02:15 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmget$private(0x0, 0x1000, 0x100, &(0x7f000069b000/0x1000)=nil)
shmdt(0x0)
shmdt(r1)

13:02:15 executing program 6:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_RMID(r2, 0x0)

13:02:15 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:15 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

[ 1208.369306] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1208.370782] CPU: 1 UID: 0 PID: 10773 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1208.370812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1208.370824] Call Trace:
[ 1208.370833]  <TASK>
[ 1208.370842]  dump_stack_lvl+0xfa/0x120
[ 1208.370881]  dump_header+0x107/0x950
[ 1208.370930]  oom_kill_process+0x278/0xa00
[ 1208.370968]  out_of_memory+0x34b/0x1690
[ 1208.371008]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1208.371038]  ? __pfx_out_of_memory+0x10/0x10
[ 1208.371085]  mem_cgroup_out_of_memory+0x164/0x190
[ 1208.371109]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1208.371141]  ? mark_held_locks+0x49/0x80
[ 1208.371175]  try_charge_memcg+0x81f/0xf30
[ 1208.371218]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1208.371263]  charge_memcg+0x7b/0x290
[ 1208.371294]  __mem_cgroup_charge+0x28/0x90
[ 1208.371328]  do_wp_page+0x56e/0x31f0
[ 1208.371371]  ? __pfx_do_wp_page+0x10/0x10
[ 1208.371403]  ? do_raw_spin_lock+0x123/0x260
[ 1208.371433]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1208.371462]  ? ___pte_offset_map+0x176/0x370
[ 1208.371497]  __handle_mm_fault+0xde1/0x30f0
[ 1208.371530]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1208.371561]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1208.371592]  ? lock_release+0x121/0x290
[ 1208.371649]  handle_mm_fault+0x2c3/0x900
[ 1208.371681]  ? access_error+0x17d/0x380
[ 1208.371710]  do_user_addr_fault+0x4fa/0xeb0
[ 1208.371744]  exc_page_fault+0xb0/0x180
[ 1208.371777]  asm_exc_page_fault+0x26/0x30
[ 1208.371798] RIP: 0033:0x7fc67e13aecd
[ 1208.371815] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1208.371836] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1208.371854] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1208.371868] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1208.371882] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1208.371896] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1208.371909] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000126ee9
[ 1208.371937]  ? do_syscall_64+0x12c/0x360
[ 1208.371977]  </TASK>
[ 1208.402015] memory: usage 307200kB, limit 307200kB, failcnt 692
[ 1208.402880] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1208.403794] Memory cgroup stats for /syz0:
[ 1208.433120] anon 1134592
[ 1208.434361] file 309952512
[ 1208.434792] kernel 3485696
[ 1208.435236] kernel_stack 360448
[ 1208.435771] pagetables 1372160
[ 1208.436353] sec_pagetables 0
[ 1208.436853] percpu 640
[ 1208.437263] sock 0
[ 1208.437590] vmalloc 0
[ 1208.438007] shmem 309952512
[ 1208.438574] file_mapped 0
[ 1208.439010] file_dirty 0
[ 1208.439403] file_writeback 0
[ 1208.439843] swapcached 0
[ 1208.440307] inactive_anon 310886400
[ 1208.440942] active_anon 200704
[ 1208.441411] inactive_file 0
[ 1208.441841] active_file 0
[ 1208.442283] unevictable 0
[ 1208.442693] slab_reclaimable 970184
[ 1208.443396] slab_unreclaimable 789936
[ 1208.444000] slab 1760120
[ 1208.444518] workingset_refault_anon 0
[ 1208.445235] workingset_refault_file 0
[ 1208.445786] workingset_activate_anon 0
[ 1208.446483] workingset_activate_file 0
[ 1208.447078] workingset_restore_anon 0
[ 1208.447618] workingset_restore_file 0
[ 1208.448193] workingset_nodereclaim 0
[ 1208.448858] pgdemote_kswapd 0
[ 1208.449355] pgdemote_direct 0
[ 1208.449816] pgdemote_khugepaged 0
[ 1208.450409] pgdemote_proactive 0
[ 1208.451018] pgscan 367
[ 1208.451432] pgsteal 76
[ 1208.451805] pswpin 0
[ 1208.452183] pswpout 0
[ 1208.452680] pgscan_kswapd 0
[ 1208.453143] pgscan_direct 367
[ 1208.453599] pgscan_khugepaged 0
[ 1208.454258] pgscan_proactive 0
[ 1208.454729] pgsteal_kswapd 0
[ 1208.455202] pgsteal_direct 76
[ 1208.455656] pgsteal_khugepaged 0
[ 1208.456170] pgsteal_proactive 0
[ 1208.456786] pgfault 87346
[ 1208.457223] pgmajfault 0
[ 1208.457730] pgrefill 275
[ 1208.458207] pgactivate 365
[ 1208.458668] pgdeactivate 278
[ 1208.459262] pglazyfree 0
[ 1208.459661] pglazyfreed 0
[ 1208.460097] swpin_zero 0
[ 1208.460554] swpout_zero 0
[ 1208.461034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10773,uid=0
[ 1208.463345] Memory cgroup out of memory: Killed process 10773 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1208.502569] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1208.504156] CPU: 1 UID: 0 PID: 10780 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1208.504186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1208.504199] Call Trace:
[ 1208.504207]  <TASK>
[ 1208.504216]  dump_stack_lvl+0xfa/0x120
[ 1208.504255]  dump_header+0x107/0x950
[ 1208.504298]  oom_kill_process+0x278/0xa00
[ 1208.504337]  out_of_memory+0x34b/0x1690
[ 1208.504382]  ? __pfx_out_of_memory+0x10/0x10
[ 1208.504430]  mem_cgroup_out_of_memory+0x164/0x190
[ 1208.504454]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1208.504488]  ? mark_held_locks+0x49/0x80
[ 1208.504522]  try_charge_memcg+0x81f/0xf30
[ 1208.504569]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1208.504607]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1208.504642]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1208.504684]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1208.504725]  ? __create_object+0x59/0x80
[ 1208.504758]  kmem_cache_alloc_noprof+0x322/0x3d0
[ 1208.504792]  ? d_instantiate+0x79/0xa0
[ 1208.504818]  ? lock_release+0xc0/0x290
[ 1208.504849]  alloc_empty_file+0x58/0x1e0
[ 1208.504881]  alloc_file_pseudo+0x12b/0x220
[ 1208.504921]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1208.504964]  __shmem_file_setup+0x1a7/0x370
[ 1208.505003]  newseg+0x3a1/0xdd0
[ 1208.505033]  ? __pfx_newseg+0x10/0x10
[ 1208.505071]  ipcget+0xf6/0xdc0
[ 1208.505097]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1208.505127]  ? perf_trace_lock+0xb5/0x5d0
[ 1208.505154]  ? lock_acquire+0x15e/0x2f0
[ 1208.505181]  ? __pfx_ipcget+0x10/0x10
[ 1208.505206]  ? __might_fault+0x138/0x190
[ 1208.505233]  ? lock_release+0xc8/0x290
[ 1208.505265]  __x64_sys_shmget+0x13b/0x1b0
[ 1208.505292]  ? __pfx___x64_sys_shmget+0x10/0x10
[ 1208.505317]  ? lock_release+0xc8/0x290
[ 1208.505354]  do_syscall_64+0xbf/0x360
[ 1208.505391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.505415] RIP: 0033:0x7f88aea1cb19
[ 1208.505432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1208.505454] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1208.505475] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1208.505491] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000000000000
[ 1208.505504] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1208.505518] R10: 0000000020400000 R11: 0000000000000246 R12: 0000000000000000
[ 1208.505531] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1208.505569]  </TASK>
[ 1208.544058] memory: usage 307200kB, limit 307200kB, failcnt 346
[ 1208.546338] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1208.547297] Memory cgroup stats for /syz7:
[ 1208.606043] anon 1507328
[ 1208.607309] file 308297728
[ 1208.607876] kernel 4767744
[ 1208.608360] kernel_stack 557056
[ 1208.609006] pagetables 2162688
[ 1208.609473] sec_pagetables 0
[ 1208.609963] percpu 1024
[ 1208.610459] sock 0
[ 1208.610796] vmalloc 0
[ 1208.611303] shmem 308293632
[ 1208.611753] file_mapped 0
[ 1208.612276] file_dirty 0
[ 1208.612821] file_writeback 0
[ 1208.613337] swapcached 0
[ 1208.613764] inactive_anon 309719040
[ 1208.614486] active_anon 81920
[ 1208.614978] inactive_file 0
[ 1208.615401] active_file 4096
[ 1208.615849] unevictable 0
[ 1208.616331] slab_reclaimable 965536
[ 1208.616973] slab_unreclaimable 1095392
[ 1208.617579] slab 2060928
[ 1208.618018] workingset_refault_anon 0
[ 1208.618566] workingset_refault_file 1
[ 1208.619264] workingset_activate_anon 0
[ 1208.619956] workingset_activate_file 0
[ 1208.620516] workingset_restore_anon 0
[ 1208.621090] workingset_restore_file 0
[ 1208.621633] workingset_nodereclaim 0
[ 1208.622347] pgdemote_kswapd 0
[ 1208.622878] pgdemote_direct 0
[ 1208.623385] pgdemote_khugepaged 0
[ 1208.623930] pgdemote_proactive 0
[ 1208.626679] pgscan 575
[ 1208.628320] pgsteal 77
[ 1208.628820] pswpin 0
[ 1208.629209] pswpout 0
[ 1208.629568] pgscan_kswapd 0
[ 1208.630031] pgscan_direct 575
[ 1208.630509] pgscan_khugepaged 0
[ 1208.631101] pgscan_proactive 0
[ 1208.631706] pgsteal_kswapd 0
[ 1208.632183] pgsteal_direct 77
[ 1208.632633] pgsteal_khugepaged 0
[ 1208.633151] pgsteal_proactive 0
[ 1208.633635] pgfault 87551
[ 1208.634077] pgmajfault 3
[ 1208.634601] pgrefill 604
[ 1208.635030] pgactivate 684
[ 1208.635568] pgdeactivate 604
[ 1208.636057] pglazyfree 0
[ 1208.636451] pglazyfreed 0
[ 1208.636858] swpin_zero 0
[ 1208.637319] swpout_zero 0
[ 1208.637772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10771,uid=0
[ 1208.640474] Memory cgroup out of memory: Killed process 10771 (syz-executor.7) total-vm:93420kB, anon-rss:276kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:02:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:28 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil)
r2 = shmget(0x0, 0x1000, 0x40, &(0x7f0000df7000/0x1000)=nil)
shmat(r2, &(0x7f0000897000/0x3000)=nil, 0x0)

13:02:28 executing program 7:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="390c00000000000008000000000000000101000000000000040000000000000007000000000000000800000000000000080000000500000009000000800000000100008000000000ff07000000000000040000000000000007000000000000003800"/160])
mlockall(0xf415edfe01548f27)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:02:28 executing program 3:
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:28 executing program 6:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000bc7000/0x3000)=nil, 0x4000)

13:02:28 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, r0, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:02:28 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:28 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

[ 1221.689164] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1221.690929] CPU: 1 UID: 0 PID: 10791 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1221.690959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1221.690972] Call Trace:
[ 1221.690980]  <TASK>
[ 1221.690989]  dump_stack_lvl+0xfa/0x120
[ 1221.691028]  dump_header+0x107/0x950
[ 1221.691070]  oom_kill_process+0x278/0xa00
[ 1221.691108]  out_of_memory+0x34b/0x1690
[ 1221.691149]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1221.691178]  ? __pfx_out_of_memory+0x10/0x10
[ 1221.691225]  mem_cgroup_out_of_memory+0x164/0x190
[ 1221.691248]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1221.691281]  ? mark_held_locks+0x49/0x80
[ 1221.691315]  try_charge_memcg+0x81f/0xf30
[ 1221.691357]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1221.691402]  charge_memcg+0x7b/0x290
[ 1221.691433]  __mem_cgroup_charge+0x28/0x90
[ 1221.691467]  do_wp_page+0x56e/0x31f0
[ 1221.691510]  ? __pfx_do_wp_page+0x10/0x10
[ 1221.691542]  ? do_raw_spin_lock+0x123/0x260
[ 1221.691571]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1221.691600]  ? ___pte_offset_map+0x176/0x370
[ 1221.691635]  __handle_mm_fault+0xde1/0x30f0
[ 1221.691668]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1221.691699]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1221.691730]  ? lock_release+0x121/0x290
[ 1221.691787]  handle_mm_fault+0x2c3/0x900
[ 1221.691819]  ? access_error+0x17d/0x380
[ 1221.691848]  do_user_addr_fault+0x4fa/0xeb0
[ 1221.691882]  exc_page_fault+0xb0/0x180
[ 1221.691922]  asm_exc_page_fault+0x26/0x30
[ 1221.691943] RIP: 0033:0x7f88ae9cad30
[ 1221.691961] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1221.691981] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1221.691999] RAX: 00000000de04c33d RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1221.692013] RDX: 0000001b2d620070 RSI: ffffffff812c80e3 RDI: 0000000000000000
[ 1221.692027] RBP: 0000000000000001 R08: 00000000de04c33d R09: 0000001b2d62001c
[ 1221.692041] R10: 000000000000033d R11: 00000000de04c341 R12: 0000000000000018
[ 1221.692054] R13: 00007f88aeb24000 R14: ffffffff812c80e3 R15: 00007f88aeb2fff0
[ 1221.692069]  ? fpregs_assert_state_consistent+0x13/0xd0
[ 1221.692107]  ? fpregs_assert_state_consistent+0x13/0xd0
[ 1221.692138]  </TASK>
[ 1221.727705] memory: usage 307200kB, limit 307200kB, failcnt 405
[ 1221.728660] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:02:28 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pwrite64(r0, &(0x7f0000000080)="9e3eb919e0495a631a1893cf49a93188859811c88eb526edd2a1ca9967afed047e149ec328b7a7a3bcc64d461c1cf0cbf1930f3227592690db40b15164c21264286953b19fca864a0c239499c51dbd8d409c48de46e6716aeee3b0d1b093397d5115791ec7b386782c66433bf8ff81e34a6a1d8d819d5ccd5c72724b1cae0b12aec0c5e8b204e8a3f6b84201950cdd90a2d1e6be7cea8317d64a678e8e0101b71f346341153f44ae58badba173e2311fc2b32e0382085681a6ac72", 0xbb, 0x6)
unlink(&(0x7f0000000000)='./file1\x00')

13:02:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x1400, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1221.729604] Memory cgroup stats for /syz7:
[ 1221.847138] anon 1503232
[ 1221.848493] file 308297728
[ 1221.849183] kernel 4771840
[ 1221.849630] kernel_stack 557056
[ 1221.850358] pagetables 2170880
[ 1221.850947] sec_pagetables 0
[ 1221.851415] percpu 1024
[ 1221.851815] sock 0
[ 1221.852178] vmalloc 0
[ 1221.852561] shmem 308293632
[ 1221.853029] file_mapped 0
[ 1221.853453] file_dirty 0
[ 1221.853927] file_writeback 0
[ 1221.854405] swapcached 0
[ 1221.854808] inactive_anon 309714944
[ 1221.855375] active_anon 81920
[ 1221.855848] inactive_file 0
[ 1221.856329] active_file 4096
[ 1221.856802] unevictable 0
[ 1221.857253] slab_reclaimable 965152
[ 1221.857792] slab_unreclaimable 1093112
[ 1221.858422] slab 2058264
[ 1221.858836] workingset_refault_anon 0
[ 1221.859439] workingset_refault_file 1
[ 1221.860042] workingset_activate_anon 0
[ 1221.860633] workingset_activate_file 0
[ 1221.861242] workingset_restore_anon 0
[ 1221.861818] workingset_restore_file 0
[ 1221.862423] workingset_nodereclaim 0
[ 1221.863008] pgdemote_kswapd 0
[ 1221.863487] pgdemote_direct 0
[ 1221.863995] pgdemote_khugepaged 0
[ 1221.864521] pgdemote_proactive 0
[ 1221.865059] pgscan 656
[ 1221.865449] pgsteal 77
[ 1221.865835] pswpin 0
[ 1221.866241] pswpout 0
[ 1221.866618] pgscan_kswapd 0
[ 1221.867084] pgscan_direct 656
[ 1221.867559] pgscan_khugepaged 0
[ 1221.868079] pgscan_proactive 0
[ 1221.868574] pgsteal_kswapd 0
[ 1221.869068] pgsteal_direct 77
[ 1221.869552] pgsteal_khugepaged 0
[ 1221.870159] pgsteal_proactive 0
[ 1221.870665] pgfault 87607
[ 1221.871118] pgmajfault 3
[ 1221.871533] pgrefill 668
[ 1221.872025] pgactivate 748
[ 1221.872474] pgdeactivate 668
[ 1221.872982] pglazyfree 0
[ 1221.873395] pglazyfreed 0
[ 1221.873819] swpin_zero 0
[ 1221.874271] swpout_zero 0
[ 1221.874698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10791,uid=0
[ 1221.877124] Memory cgroup out of memory: Killed process 10791 (syz-executor.7) total-vm:93420kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 1221.880610] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1221.882056] CPU: 0 UID: 0 PID: 10793 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1221.882084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1221.882097] Call Trace:
[ 1221.882116]  <TASK>
[ 1221.882124]  dump_stack_lvl+0xfa/0x120
[ 1221.882164]  dump_header+0x107/0x950
[ 1221.882205]  oom_kill_process+0x278/0xa00
[ 1221.882242]  out_of_memory+0x34b/0x1690
[ 1221.882286]  ? __pfx_out_of_memory+0x10/0x10
[ 1221.882332]  mem_cgroup_out_of_memory+0x164/0x190
[ 1221.882355]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1221.882388]  ? mark_held_locks+0x49/0x80
[ 1221.882422]  try_charge_memcg+0x81f/0xf30
[ 1221.882465]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1221.882509]  charge_memcg+0x7b/0x290
[ 1221.882540]  __mem_cgroup_charge+0x28/0x90
[ 1221.882574]  do_wp_page+0x56e/0x31f0
[ 1221.882618]  ? __pfx_do_wp_page+0x10/0x10
[ 1221.882649]  ? do_raw_spin_lock+0x123/0x260
[ 1221.882678]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1221.882706]  ? ___pte_offset_map+0x176/0x370
[ 1221.882741]  __handle_mm_fault+0xde1/0x30f0
[ 1221.882773]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1221.882804]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1221.882834]  ? lock_release+0x121/0x290
[ 1221.882897]  handle_mm_fault+0x2c3/0x900
[ 1221.882930]  ? access_error+0x17d/0x380
[ 1221.882958]  do_user_addr_fault+0x4fa/0xeb0
[ 1221.882992]  exc_page_fault+0xb0/0x180
[ 1221.883024]  asm_exc_page_fault+0x26/0x30
[ 1221.883045] RIP: 0033:0x7fc67e13aecd
[ 1221.883063] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1221.883082] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1221.883100] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1221.883114] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1221.883127] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1221.883141] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1221.883154] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000012a3be
[ 1221.883182]  ? do_syscall_64+0x12c/0x360
[ 1221.883222]  </TASK>
[ 1221.912967] memory: usage 307200kB, limit 307200kB, failcnt 716
[ 1221.913872] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:02:28 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

[ 1221.914852] Memory cgroup stats for /syz0:
[ 1221.973260] anon 1134592
[ 1221.974588] file 309952512
[ 1221.975348] kernel 3485696
[ 1221.975776] kernel_stack 360448
[ 1221.976310] pagetables 1372160
[ 1221.976785] sec_pagetables 0
[ 1221.977284] percpu 640
[ 1221.977667] sock 0
[ 1221.978031] vmalloc 0
[ 1221.978405] shmem 309952512
[ 1221.978847] file_mapped 0
[ 1221.979297] file_dirty 0
[ 1221.979705] file_writeback 0
[ 1221.980189] swapcached 0
[ 1221.980587] inactive_anon 310886400
[ 1221.981150] active_anon 200704
[ 1221.981634] inactive_file 0
[ 1221.982098] active_file 0
[ 1221.982522] unevictable 0
[ 1221.982963] slab_reclaimable 970952
[ 1221.983489] slab_unreclaimable 789936
[ 1221.984083] slab 1760888
[ 1221.984481] workingset_refault_anon 0
[ 1221.985073] workingset_refault_file 0
[ 1221.985638] workingset_activate_anon 0
[ 1221.986255] workingset_activate_file 0
[ 1221.986828] workingset_restore_anon 0
[ 1221.987419] workingset_restore_file 0
[ 1221.987997] workingset_nodereclaim 0
[ 1221.988535] pgdemote_kswapd 0
[ 1221.989029] pgdemote_direct 0
[ 1221.989495] pgdemote_khugepaged 0
[ 1221.990058] pgdemote_proactive 0
[ 1221.990565] pgscan 367
[ 1221.990976] pgsteal 76
[ 1221.991352] pswpin 0
[ 1221.991701] pswpout 0
[ 1221.992101] pgscan_kswapd 0
[ 1221.992542] pgscan_direct 367
[ 1221.993039] pgscan_khugepaged 0
[ 1221.993529] pgscan_proactive 0
[ 1221.994045] pgsteal_kswapd 0
[ 1221.994509] pgsteal_direct 76
[ 1221.995018] pgsteal_khugepaged 0
[ 1221.995530] pgsteal_proactive 0
[ 1221.996054] pgfault 87400
[ 1221.996463] pgmajfault 0
[ 1221.996870] pgrefill 275
[ 1221.997306] pgactivate 365
[ 1221.997728] pgdeactivate 278
[ 1221.998229] pglazyfree 0
[ 1221.998632] pglazyfreed 0
[ 1221.999078] swpin_zero 0
[ 1221.999483] swpout_zero 0
[ 1221.999932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10793,uid=0
[ 1222.002185] Memory cgroup out of memory: Killed process 10793 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:02:28 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:02:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x8202, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:41 executing program 3:
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:41 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:41 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0xc0406, 0x0)

13:02:41 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
mlockall(0x2)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000d44000/0x3000)=nil, 0x5000)

13:02:41 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:02:41 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:41 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/255)
shmdt(0x0)
shmdt(r1)

[ 1234.373770] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1234.373795] CPU: 0 UID: 0 PID: 10830 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1234.373810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1234.373818] Call Trace:
[ 1234.373822]  <TASK>
[ 1234.373827]  dump_stack_lvl+0xfa/0x120
[ 1234.373854]  dump_header+0x107/0x950
[ 1234.373878]  oom_kill_process+0x278/0xa00
[ 1234.373903]  out_of_memory+0x34b/0x1690
[ 1234.373927]  ? __pfx_out_of_memory+0x10/0x10
[ 1234.373952]  mem_cgroup_out_of_memory+0x164/0x190
[ 1234.373966]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1234.373983]  ? mark_held_locks+0x49/0x80
[ 1234.374003]  try_charge_memcg+0x81f/0xf30
[ 1234.374027]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1234.374051]  charge_memcg+0x7b/0x290
[ 1234.374067]  __mem_cgroup_charge+0x28/0x90
[ 1234.374086]  do_wp_page+0x56e/0x31f0
[ 1234.374111]  ? __pfx_do_wp_page+0x10/0x10
13:02:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xf000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1234.374128]  ? do_raw_spin_lock+0x123/0x260
[ 1234.374144]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1234.374160]  ? ___pte_offset_map+0x176/0x370
[ 1234.374179]  __handle_mm_fault+0xde1/0x30f0
[ 1234.374197]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1234.374215]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1234.374231]  ? lock_release+0x121/0x290
[ 1234.374269]  handle_mm_fault+0x2c3/0x900
13:02:41 executing program 0:
mlockall(0x2)
shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000aef000/0x3000)=nil)
shmat(r0, &(0x7f00004f1000/0x5000)=nil, 0x4000)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
r2 = shmat(r1, &(0x7f0000c9c000/0x4000)=nil, 0x6800)
shmdt(0x0)
shmdt(r2)

[ 1234.374286]  ? access_error+0x17d/0x380
13:02:41 executing program 5:
creat(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1234.374302]  do_user_addr_fault+0x4fa/0xeb0
[ 1234.374320]  exc_page_fault+0xb0/0x180
[ 1234.374339]  asm_exc_page_fault+0x26/0x30
[ 1234.374351] RIP: 0033:0x7fc67e13aecd
[ 1234.374361] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1234.374372] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1234.374383] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1234.374390] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1234.374402] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1234.374410] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1234.374417] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000012d4ee
13:02:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x30000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1234.374432]  ? do_syscall_64+0x12c/0x360
[ 1234.374454]  </TASK>
[ 1234.374553] memory: usage 307200kB, limit 307200kB, failcnt 754
[ 1234.374564] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1234.374572] Memory cgroup stats for /syz0:
[ 1234.379367] anon 1134592
[ 1234.379375] file 309952512
[ 1234.379380] kernel 3485696
[ 1234.379385] kernel_stack 360448
[ 1234.379390] pagetables 1372160
[ 1234.379395] sec_pagetables 0
[ 1234.379399] percpu 640
[ 1234.379404] sock 0
[ 1234.379408] vmalloc 0
[ 1234.379412] shmem 309952512
[ 1234.379417] file_mapped 0
[ 1234.379422] file_dirty 0
[ 1234.379426] file_writeback 0
[ 1234.379431] swapcached 0
[ 1234.379435] inactive_anon 310816768
[ 1234.379440] active_anon 200704
[ 1234.379445] inactive_file 0
[ 1234.379449] active_file 0
[ 1234.379454] unevictable 0
[ 1234.379459] slab_reclaimable 970952
[ 1234.379464] slab_unreclaimable 789936
[ 1234.379468] slab 1760888
[ 1234.379473] workingset_refault_anon 0
[ 1234.379478] workingset_refault_file 0
[ 1234.379483] workingset_activate_anon 0
[ 1234.379488] workingset_activate_file 0
[ 1234.379493] workingset_restore_anon 0
[ 1234.379498] workingset_restore_file 0
[ 1234.379503] workingset_nodereclaim 0
[ 1234.379508] pgdemote_kswapd 0
[ 1234.379513] pgdemote_direct 0
[ 1234.379517] pgdemote_khugepaged 0
[ 1234.379522] pgdemote_proactive 0
[ 1234.379527] pgscan 367
[ 1234.379532] pgsteal 76
[ 1234.379536] pswpin 0
[ 1234.379540] pswpout 0
[ 1234.379545] pgscan_kswapd 0
[ 1234.379549] pgscan_direct 367
[ 1234.379554] pgscan_khugepaged 0
[ 1234.379559] pgscan_proactive 0
[ 1234.379563] pgsteal_kswapd 0
[ 1234.379568] pgsteal_direct 76
[ 1234.379573] pgsteal_khugepaged 0
[ 1234.379578] pgsteal_proactive 0
[ 1234.379582] pgfault 87454
[ 1234.379587] pgmajfault 0
[ 1234.379591] pgrefill 275
[ 1234.379596] pgactivate 365
13:02:41 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000e2c000/0x3000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
shmat(r0, &(0x7f00005b6000/0x3000)=nil, 0x0)

[ 1234.379600] pgdeactivate 278
[ 1234.379605] pglazyfree 0
[ 1234.379609] pglazyfreed 0
[ 1234.379614] swpin_zero 0
[ 1234.379618] swpout_zero 0
[ 1234.379623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10830,uid=0
[ 1234.379692] Memory cgroup out of memory: Killed process 10830 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1234.607728] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1234.607831] CPU: 0 UID: 0 PID: 10839 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1234.607855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1234.607867] Call Trace:
[ 1234.607874]  <TASK>
[ 1234.607889]  dump_stack_lvl+0xfa/0x120
[ 1234.607925]  dump_header+0x107/0x950
[ 1234.607961]  oom_kill_process+0x278/0xa00
[ 1234.607994]  out_of_memory+0x34b/0x1690
[ 1234.608032]  ? __pfx_out_of_memory+0x10/0x10
13:02:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x80000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1234.608071]  mem_cgroup_out_of_memory+0x164/0x190
[ 1234.608092]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1234.608122]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1234.608153]  try_charge_memcg+0x81f/0xf30
[ 1234.608191]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1234.608221]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1234.608249]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1234.608277]  ? __create_object+0x59/0x80
[ 1234.608304]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1234.608338]  ? __create_object+0x59/0x80
[ 1234.608365]  kmem_cache_alloc_noprof+0x322/0x3d0
[ 1234.608395]  ? __create_object+0x59/0x80
[ 1234.608426]  alloc_empty_file+0x58/0x1e0
[ 1234.608452]  alloc_file_clone+0x5f/0x110
[ 1234.608479]  do_shmat+0x61f/0x1310
[ 1234.608511]  ? __pfx_do_shmat+0x10/0x10
[ 1234.608532]  ? __might_fault+0x138/0x190
13:02:41 executing program 7:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x4)
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmget(0x2, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r2)

[ 1234.608555]  ? lock_release+0xc8/0x290
[ 1234.608583]  __x64_sys_shmat+0xcf/0x160
[ 1234.608604]  ? syscall_trace_enter+0x1cf/0x240
[ 1234.608626]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1234.608653]  ? syscall_trace_enter+0xf2/0x240
[ 1234.608675]  do_syscall_64+0xbf/0x360
[ 1234.608706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1234.608726] RIP: 0033:0x7f88aea1cb19
[ 1234.608742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1234.608760] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1234.608778] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1234.608791] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000000053
[ 1234.608803] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1234.608814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1234.608825] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1234.608856]  </TASK>
[ 1234.608943] memory: usage 307200kB, limit 307200kB, failcnt 436
[ 1234.608958] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1234.608970] Memory cgroup stats for /syz7:
[ 1234.627672] anon 1507328
[ 1234.627694] file 308297728
[ 1234.627704] kernel 4767744
[ 1234.627714] kernel_stack 557056
[ 1234.627725] pagetables 2162688
[ 1234.627735] sec_pagetables 0
[ 1234.627745] percpu 1024
[ 1234.627754] sock 0
[ 1234.627763] vmalloc 0
[ 1234.627772] shmem 308293632
[ 1234.627782] file_mapped 0
[ 1234.627791] file_dirty 0
[ 1234.627800] file_writeback 0
[ 1234.627810] swapcached 0
[ 1234.627820] inactive_anon 309719040
[ 1234.627830] active_anon 81920
[ 1234.627840] inactive_file 4096
[ 1234.627851] active_file 0
[ 1234.627860] unevictable 0
[ 1234.627870] slab_reclaimable 965536
[ 1234.627881] slab_unreclaimable 1095848
[ 1234.627958] slab 2061384
[ 1234.627968] workingset_refault_anon 0
[ 1234.627979] workingset_refault_file 1
[ 1234.627990] workingset_activate_anon 0
[ 1234.628001] workingset_activate_file 0
[ 1234.628012] workingset_restore_anon 0
[ 1234.628023] workingset_restore_file 0
[ 1234.628033] workingset_nodereclaim 0
[ 1234.628044] pgdemote_kswapd 0
[ 1234.628054] pgdemote_direct 0
[ 1234.628063] pgdemote_khugepaged 0
[ 1234.628073] pgdemote_proactive 0
[ 1234.628084] pgscan 729
[ 1234.628093] pgsteal 77
[ 1234.628102] pswpin 0
[ 1234.628111] pswpout 0
[ 1234.628121] pgscan_kswapd 0
[ 1234.628131] pgscan_direct 729
[ 1234.628140] pgscan_khugepaged 0
[ 1234.628151] pgscan_proactive 0
[ 1234.628160] pgsteal_kswapd 0
[ 1234.628170] pgsteal_direct 77
[ 1234.628180] pgsteal_khugepaged 0
[ 1234.628190] pgsteal_proactive 0
[ 1234.628201] pgfault 87665
[ 1234.628210] pgmajfault 3
[ 1234.628220] pgrefill 713
[ 1234.628229] pgactivate 793
[ 1234.628238] pgdeactivate 713
[ 1234.628249] pglazyfree 0
[ 1234.628258] pglazyfreed 0
[ 1234.628268] swpin_zero 0
[ 1234.628278] swpout_zero 0
[ 1234.628289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10819,uid=0
[ 1234.628555] Memory cgroup out of memory: Killed process 10819 (syz-executor.7) total-vm:93420kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1234.686390] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1234.686426] CPU: 0 UID: 0 PID: 10841 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1234.686450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1234.686461] Call Trace:
[ 1234.686468]  <TASK>
[ 1234.686476]  dump_stack_lvl+0xfa/0x120
[ 1234.686511]  dump_header+0x107/0x950
[ 1234.686547]  oom_kill_process+0x278/0xa00
[ 1234.686580]  out_of_memory+0x34b/0x1690
[ 1234.686630]  ? __pfx_out_of_memory+0x10/0x10
[ 1234.686685]  mem_cgroup_out_of_memory+0x164/0x190
[ 1234.686707]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1234.686735]  ? mark_held_locks+0x49/0x80
[ 1234.686764]  try_charge_memcg+0x81f/0xf30
[ 1234.686801]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1234.686840]  charge_memcg+0x7b/0x290
[ 1234.686867]  __mem_cgroup_charge+0x28/0x90
[ 1234.686897]  do_wp_page+0x56e/0x31f0
[ 1234.686938]  ? __pfx_do_wp_page+0x10/0x10
[ 1234.686966]  ? do_raw_spin_lock+0x123/0x260
[ 1234.686992]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1234.687017]  ? ___pte_offset_map+0x176/0x370
[ 1234.687048]  __handle_mm_fault+0xde1/0x30f0
[ 1234.687077]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1234.687104]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1234.687131]  ? lock_release+0x121/0x290
[ 1234.687180]  handle_mm_fault+0x2c3/0x900
[ 1234.687209]  ? access_error+0x17d/0x380
[ 1234.687234]  do_user_addr_fault+0x4fa/0xeb0
[ 1234.687264]  exc_page_fault+0xb0/0x180
[ 1234.687293]  asm_exc_page_fault+0x26/0x30
[ 1234.687311] RIP: 0033:0x7fc67e13dd30
[ 1234.687328] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1234.687346] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1234.687362] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1234.687374] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1234.687387] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1234.687398] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1234.687410] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1234.687423]  ? __might_fault+0x1f/0x190
[ 1234.687454]  ? __might_fault+0x1f/0x190
[ 1234.687481]  </TASK>
[ 1234.687582] memory: usage 307200kB, limit 307200kB, failcnt 783
[ 1234.687600] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1234.687618] Memory cgroup stats for /syz0:
[ 1234.693400] anon 1118208
[ 1234.693418] file 309952512
[ 1234.693428] kernel 3502080
[ 1234.693439] kernel_stack 360448
[ 1234.693451] pagetables 1376256
[ 1234.693462] sec_pagetables 0
[ 1234.693473] percpu 704
[ 1234.693483] sock 0
[ 1234.693494] vmalloc 0
[ 1234.693505] shmem 309952512
[ 1234.693516] file_mapped 0
[ 1234.693527] file_dirty 0
[ 1234.693537] file_writeback 0
[ 1234.693548] swapcached 0
[ 1234.693559] inactive_anon 310870016
[ 1234.693571] active_anon 200704
[ 1234.693582] inactive_file 0
[ 1234.693593] active_file 0
[ 1234.693604] unevictable 0
[ 1234.693614] slab_reclaimable 970952
[ 1234.693626] slab_unreclaimable 801944
[ 1234.693638] slab 1772896
[ 1234.693648] workingset_refault_anon 0
[ 1234.693661] workingset_refault_file 0
[ 1234.693673] workingset_activate_anon 0
[ 1234.693686] workingset_activate_file 0
[ 1234.693698] workingset_restore_anon 0
[ 1234.693709] workingset_restore_file 0
[ 1234.693721] workingset_nodereclaim 0
[ 1234.693733] pgdemote_kswapd 0
[ 1234.693743] pgdemote_direct 0
[ 1234.693754] pgdemote_khugepaged 0
[ 1234.693765] pgdemote_proactive 0
[ 1234.693775] pgscan 367
[ 1234.693785] pgsteal 76
[ 1234.693794] pswpin 0
[ 1234.693804] pswpout 0
[ 1234.693815] pgscan_kswapd 0
[ 1234.693826] pgscan_direct 367
[ 1234.693836] pgscan_khugepaged 0
[ 1234.693848] pgscan_proactive 0
[ 1234.693859] pgsteal_kswapd 0
[ 1234.693869] pgsteal_direct 76
[ 1234.693936] pgsteal_khugepaged 0
[ 1234.693949] pgsteal_proactive 0
[ 1234.693961] pgfault 87501
[ 1234.693971] pgmajfault 0
[ 1234.693981] pgrefill 275
[ 1234.693992] pgactivate 365
[ 1234.694003] pgdeactivate 278
[ 1234.694014] pglazyfree 0
[ 1234.694024] pglazyfreed 0
[ 1234.694034] swpin_zero 0
[ 1234.694044] swpout_zero 0
[ 1234.694055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10841,uid=0
[ 1234.694241] Memory cgroup out of memory: Killed process 10841 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1234.995141] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1234.995181] CPU: 0 UID: 0 PID: 10855 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1234.995206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1234.995217] Call Trace:
[ 1234.995224]  <TASK>
[ 1234.995232]  dump_stack_lvl+0xfa/0x120
[ 1234.995268]  dump_header+0x107/0x950
[ 1234.995306]  oom_kill_process+0x278/0xa00
[ 1234.995340]  out_of_memory+0x34b/0x1690
[ 1234.995387]  ? __pfx_out_of_memory+0x10/0x10
[ 1234.995429]  mem_cgroup_out_of_memory+0x164/0x190
[ 1234.995450]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1234.995480]  ? mark_held_locks+0x49/0x80
[ 1234.995511]  try_charge_memcg+0x81f/0xf30
[ 1234.995549]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1234.995590]  charge_memcg+0x7b/0x290
[ 1234.995617]  __mem_cgroup_charge+0x28/0x90
[ 1234.995649]  do_wp_page+0x56e/0x31f0
[ 1234.995688]  ? __pfx_do_wp_page+0x10/0x10
[ 1234.995717]  ? do_raw_spin_lock+0x123/0x260
[ 1234.995743]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1234.995769]  ? ___pte_offset_map+0x176/0x370
[ 1234.995801]  __handle_mm_fault+0xde1/0x30f0
[ 1234.995830]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1234.995858]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1234.995886]  ? lock_release+0x121/0x290
[ 1234.995937]  handle_mm_fault+0x2c3/0x900
[ 1234.995967]  ? access_error+0x17d/0x380
[ 1234.995992]  do_user_addr_fault+0x4fa/0xeb0
[ 1234.996023]  exc_page_fault+0xb0/0x180
[ 1234.996053]  asm_exc_page_fault+0x26/0x30
[ 1234.996072] RIP: 0033:0x7fc67e13dd30
[ 1234.996088] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1234.996106] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1234.996122] RAX: 00000000413566b5 RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1234.996135] RDX: 0000001b2cc20018 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1234.996148] RBP: 0000000000000001 R08: 00000000413566b5 R09: 0000001b2cc2001c
[ 1234.996159] R10: 00000000000006b5 R11: 00000000413566b9 R12: 0000000000000000
[ 1234.996171] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1234.996185]  ? __might_fault+0x1f/0x190
[ 1234.996217]  ? __might_fault+0x1f/0x190
[ 1234.996245]  </TASK>
[ 1234.996389] memory: usage 307200kB, limit 307200kB, failcnt 821
[ 1234.996405] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1234.996419] Memory cgroup stats for /syz0:
[ 1234.997344] anon 1101824
[ 1234.997358] file 309952512
[ 1234.997365] kernel 3518464
[ 1234.997373] kernel_stack 360448
[ 1234.997382] pagetables 1380352
[ 1234.997389] sec_pagetables 0
[ 1234.997397] percpu 768
[ 1234.997405] sock 0
[ 1234.997412] vmalloc 0
[ 1234.997419] shmem 309952512
[ 1234.997427] file_mapped 0
[ 1234.997435] file_dirty 0
[ 1234.997442] file_writeback 0
[ 1234.997450] swapcached 0
[ 1234.997458] inactive_anon 310853632
[ 1234.997466] active_anon 200704
[ 1234.997474] inactive_file 0
[ 1234.997481] active_file 0
[ 1234.997489] unevictable 0
[ 1234.997497] slab_reclaimable 970952
[ 1234.997505] slab_unreclaimable 813952
[ 1234.997513] slab 1784904
[ 1234.997560] workingset_refault_anon 0
[ 1234.997569] workingset_refault_file 0
[ 1234.997577] workingset_activate_anon 0
[ 1234.997586] workingset_activate_file 0
[ 1234.997617] workingset_restore_anon 0
[ 1234.997625] workingset_restore_file 0
[ 1234.997634] workingset_nodereclaim 0
[ 1234.997642] pgdemote_kswapd 0
[ 1234.997650] pgdemote_direct 0
[ 1234.997658] pgdemote_khugepaged 0
[ 1234.997666] pgdemote_proactive 0
[ 1234.997674] pgscan 367
[ 1234.997681] pgsteal 76
[ 1234.997689] pswpin 0
[ 1234.997696] pswpout 0
[ 1234.997703] pgscan_kswapd 0
[ 1234.997711] pgscan_direct 367
[ 1234.997719] pgscan_khugepaged 0
[ 1234.997727] pgscan_proactive 0
[ 1234.997735] pgsteal_kswapd 0
[ 1234.997742] pgsteal_direct 76
[ 1234.997750] pgsteal_khugepaged 0
[ 1234.997758] pgsteal_proactive 0
[ 1234.997766] pgfault 87540
[ 1234.997773] pgmajfault 0
[ 1234.997781] pgrefill 275
[ 1234.997788] pgactivate 365
[ 1234.997796] pgdeactivate 278
[ 1234.997804] pglazyfree 0
[ 1234.997811] pglazyfreed 0
[ 1234.997819] swpin_zero 0
[ 1234.997826] swpout_zero 0
[ 1234.997834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10855,uid=0
[ 1234.998028] Memory cgroup out of memory: Killed process 10855 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1235.215591] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1235.215638] CPU: 0 UID: 0 PID: 10858 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1235.215672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1235.215685] Call Trace:
[ 1235.215695]  <TASK>
[ 1235.215704]  dump_stack_lvl+0xfa/0x120
[ 1235.215745]  dump_header+0x107/0x950
[ 1235.215780]  oom_kill_process+0x278/0xa00
[ 1235.215811]  out_of_memory+0x34b/0x1690
[ 1235.215848]  ? __pfx_out_of_memory+0x10/0x10
[ 1235.215894]  mem_cgroup_out_of_memory+0x164/0x190
[ 1235.215914]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1235.215942]  ? mark_held_locks+0x49/0x80
[ 1235.215969]  try_charge_memcg+0x81f/0xf30
[ 1235.216005]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1235.216042]  charge_memcg+0x7b/0x290
[ 1235.216068]  __mem_cgroup_charge+0x28/0x90
[ 1235.216096]  do_wp_page+0x56e/0x31f0
[ 1235.216135]  ? __pfx_do_wp_page+0x10/0x10
[ 1235.216161]  ? do_raw_spin_lock+0x123/0x260
[ 1235.216186]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1235.216210]  ? ___pte_offset_map+0x176/0x370
[ 1235.216239]  __handle_mm_fault+0xde1/0x30f0
[ 1235.216267]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1235.216293]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1235.216319]  ? lock_release+0x121/0x290
[ 1235.216366]  handle_mm_fault+0x2c3/0x900
[ 1235.216393]  ? access_error+0x17d/0x380
[ 1235.216417]  do_user_addr_fault+0x4fa/0xeb0
[ 1235.216445]  exc_page_fault+0xb0/0x180
[ 1235.216473]  asm_exc_page_fault+0x26/0x30
[ 1235.216491] RIP: 0033:0x7f88ae9cad30
[ 1235.216505] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1235.216523] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1235.216538] RAX: 00000000008aa99d RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1235.216550] RDX: 0000001b2d620028 RSI: ffffffff819c3079 RDI: 0000000000000000
[ 1235.216561] RBP: 0000000000000001 R08: 00000000008aa99d R09: 0000001b2d62001c
[ 1235.216572] R10: 000000000000099d R11: 00000000008aa9a1 R12: 0000000000000002
[ 1235.216583] R13: 00007f88aeb24000 R14: ffffffff819c3079 R15: 00007f88aeb2fff0
[ 1235.216596]  ? __might_fault+0xb9/0x190
[ 1235.216639]  ? __might_fault+0xb9/0x190
[ 1235.216683]  </TASK>
[ 1235.216832] memory: usage 307200kB, limit 307200kB, failcnt 501
[ 1235.216849] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1235.216861] Memory cgroup stats for /syz7:
[ 1235.218192] anon 1482752
[ 1235.218205] file 308297728
[ 1235.218213] kernel 4792320
[ 1235.218221] kernel_stack 557056
[ 1235.218228] pagetables 2174976
[ 1235.218236] sec_pagetables 0
[ 1235.218243] percpu 1088
[ 1235.218250] sock 0
[ 1235.218271] vmalloc 0
[ 1235.218278] shmem 308293632
[ 1235.218286] file_mapped 0
[ 1235.218293] file_dirty 0
[ 1235.218300] file_writeback 0
[ 1235.218307] swapcached 0
[ 1235.218315] inactive_anon 309694464
[ 1235.218323] active_anon 81920
[ 1235.218330] inactive_file 4096
[ 1235.218337] active_file 0
[ 1235.218345] unevictable 0
[ 1235.218352] slab_reclaimable 965536
[ 1235.218360] slab_unreclaimable 1108632
[ 1235.218368] slab 2074168
[ 1235.218375] workingset_refault_anon 0
[ 1235.218383] workingset_refault_file 1
[ 1235.218390] workingset_activate_anon 0
[ 1235.218398] workingset_activate_file 0
[ 1235.218406] workingset_restore_anon 0
[ 1235.218414] workingset_restore_file 0
[ 1235.218422] workingset_nodereclaim 0
[ 1235.218429] pgdemote_kswapd 0
[ 1235.218436] pgdemote_direct 0
[ 1235.218443] pgdemote_khugepaged 0
[ 1235.218451] pgdemote_proactive 0
[ 1235.218458] pgscan 799
[ 1235.218465] pgsteal 77
[ 1235.218471] pswpin 0
[ 1235.218478] pswpout 0
[ 1235.218485] pgscan_kswapd 0
[ 1235.218492] pgscan_direct 799
[ 1235.218499] pgscan_khugepaged 0
[ 1235.218507] pgscan_proactive 0
[ 1235.218514] pgsteal_kswapd 0
[ 1235.218521] pgsteal_direct 77
[ 1235.218529] pgsteal_khugepaged 0
[ 1235.218536] pgsteal_proactive 0
[ 1235.218543] pgfault 87710
[ 1235.218550] pgmajfault 3
[ 1235.218557] pgrefill 776
[ 1235.218564] pgactivate 856
[ 1235.218571] pgdeactivate 776
[ 1235.218578] pglazyfree 0
[ 1235.218585] pglazyfreed 0
[ 1235.218592] swpin_zero 0
[ 1235.218602] swpout_zero 0
[ 1235.218612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10858,uid=0
[ 1235.218746] Memory cgroup out of memory: Killed process 10858 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
13:02:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:53 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:53 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:02:53 executing program 7:
prctl$PR_SET_PDEATHSIG(0x1, 0x10)
mlockall(0x2)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0)
r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmdt(0x0)
shmdt(r0)

13:02:54 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="575116b60935350fe3fec6227b47f399a7c48fcbcc50d01cc6fab3fc1955f7f587a8ae55d7fd0bf02f6e30f7aa4af3b56e5205bcabe97603cb3522e6de55aba6a5f5cb5ee6e597d033dc13b6e9edc527c6819cd7bb20aa4f007aac69753dbabce93f3bdb855d7147dfb479607232d20c27f0d0326db4d05fa0c163569c48a986cf19996f"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10140}, 0xc, &(0x7f0000002b40)={&(0x7f0000000100)={0x2a08, r0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x97f, 0x48}}}}, [@NL80211_ATTR_TID_CONFIG={0x318, 0x11d, 0x0, 0x1, [{0x2bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x284, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x101, 0x6758, 0x5, 0xff7f, 0x7ff, 0xfe00, 0x400]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x8, 0x3, 0x4, 0x101, 0xbd0, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x3, 0x6c, 0x12, 0x2, 0x1b, 0x55, 0x1, 0x16, 0x9, 0x18, 0x36, 0x2, 0x2]}]}, @NL80211_BAND_2GHZ={0x108, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x3}, {0x4, 0x1}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x3}, {0x1, 0xa}, {0x2, 0x4}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x1}, {}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x3}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x3}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x2, 0x2}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x3}, {0x7, 0xa}, {0x3, 0x6}, {0x6, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x8}, {0x3, 0x8}, {0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x18}, {0x0, 0x3}, {0x1, 0x7}, {0x6}, {0x7}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0xb, 0x5, 0x9, 0x30, 0x3, 0x5, 0x3, 0x0, 0x3, 0x16, 0x24, 0x60, 0x18, 0x36, 0x12]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x6}, {0x3}, {0x2, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x9}, {0x7, 0x2}, {0x6, 0x9}, {0x2, 0x1}, {0x4, 0xa}, {0x6}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0xc, 0x3, 0x16, 0x12, 0x48, 0xb, 0x30, 0x6, 0x2]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x4, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x4}, {}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x3}, {0x5, 0x6}, {0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x8, 0x8, 0x0, 0x5, 0x3ff, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0x8001, 0x9, 0x0, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6, 0x30, 0x18, 0x48, 0x4]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x6}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x7}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x3}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x2, 0x9}, {0x1}, {0x2}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x9}, {0x2, 0x6}, {0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x9}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x6}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x4}, {0x3, 0x1}, {0x7, 0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x7, 0x6}, {0x7}, {0x0, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {}, {0x2, 0x2}, {0x2, 0x7}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x2}, {0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x56c, 0x3, 0x3, 0xcfb3, 0x4, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x64, 0x0, 0x0, 0x5, 0x4, 0x800, 0xaa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x73}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x6e4, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd51}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x7}, {0x4}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {}, {0x4, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x4}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x7, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x30, 0x1, 0x24, 0x18, 0x36, 0x72, 0x18, 0xc, 0x16, 0x6c, 0x5, 0x24, 0x12, 0x16, 0x6c, 0x2, 0x1b, 0x16, 0xc, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x2, 0x4}, {0x3, 0x2}, {0x1, 0x6}, {0x1}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x5}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x4, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x4, 0x3, 0x8, 0x1f, 0xff, 0x401, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xf37c, 0x1e5e, 0x8c99, 0x1, 0x0, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffc0, 0x80a, 0x9, 0x20, 0x7ff, 0x20, 0x4a]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x4, 0x48, 0xc, 0x60, 0x2, 0x68, 0x2, 0x5, 0x2, 0x36, 0x9, 0x9, 0x3]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x1, 0xb, 0xc]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x3}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x4, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x35, 0x60, 0x4, 0x36, 0x6a, 0x4, 0x9, 0x60, 0x3, 0x1, 0x6, 0x12, 0x30, 0x36, 0x12, 0x3c, 0xb, 0x1e, 0xc, 0x5, 0x1b, 0x60, 0x60, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x36, 0x6, 0xb, 0x24, 0x12, 0x45, 0xb, 0x3d, 0x24, 0x1f, 0x48, 0x18, 0x36, 0xc, 0x24, 0x1, 0x3, 0x16, 0x48, 0x9, 0x1, 0x6c, 0x30, 0x16, 0x0, 0x60, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x6a90, 0xfffb, 0x7, 0x3f, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x6, 0x30, 0x60, 0x60, 0x1d, 0x16, 0x20, 0x0, 0xb, 0x60]}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x1}, {0x6, 0x4}, {0x5, 0xa}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0x4}, {0x5}, {0x6, 0x2}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x5}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {}, {0x4, 0x2}, {0x6, 0x2}, {0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x6}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7fff, 0xdbba, 0x7, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0x20, 0xfff8, 0x2, 0xe051, 0x100, 0x40, 0x30]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7, 0x401, 0x8, 0x49, 0xffbc, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x7}, {0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x5}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x4}, {0x4, 0x6}, {0x7, 0x3}, {0x6, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x4, 0x5}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x71, 0x2, 0x4, 0xc, 0x3, 0xb, 0x6, 0x48, 0x0, 0x6, 0x36, 0x0, 0x3, 0xc, 0x60, 0x30, 0x24, 0xb, 0x48, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x60]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x48, 0x5, 0x12, 0x18, 0x48, 0x2, 0xc, 0x26, 0x30, 0x3, 0x0, 0x3, 0x2, 0x2, 0x59, 0x6c, 0x36, 0x5, 0x30, 0x36]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x31, 0x1b, 0x41, 0x1, 0x18, 0x30, 0x18, 0xc, 0xb, 0x16, 0x6c, 0x6c, 0x0, 0x36, 0x1, 0xc, 0x1d, 0x5, 0x6c, 0x3a, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x4}, {0x7, 0x15}, {0x5, 0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x1}, {0x3}, {0x1, 0x9}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x36]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x5, 0x36, 0x6c, 0x48, 0x30, 0x3, 0x30, 0xb, 0xb, 0x2, 0x21, 0x2, 0x1, 0x6]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0xa, 0x7, 0x5, 0x7, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x400, 0xffff, 0x1, 0x651c, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x31e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x6, 0x1c15, 0x9, 0x40, 0x68, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x101, 0x0, 0x1, 0xa348, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa31e, 0x4, 0x6, 0x7fff, 0x6, 0x4cc2, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2e19, 0x0, 0x23, 0x100, 0x7fff, 0xa87, 0x61e]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x1}, {}, {0x5, 0x4}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0xe000, 0x2, 0x2, 0x6, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x16, 0x6, 0xb, 0x0, 0x60, 0x19, 0x60, 0x90, 0xc, 0x48, 0x0, 0x36, 0x3, 0x1, 0x3, 0x20, 0x18, 0x16, 0x60, 0x12]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x2}, {0x3, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x4, 0x3}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x7ff, 0x5, 0x1, 0x7f, 0xb742, 0x54]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc1dc, 0x2, 0xffff, 0x40, 0x9, 0x3, 0x5, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x1, 0x60, 0x12, 0x6, 0x1b, 0x12, 0x12, 0x30, 0x3, 0x1b, 0x60, 0xb, 0x12, 0x9, 0x2, 0x24, 0x2, 0x3, 0x24, 0x18, 0x3, 0x6c, 0x24, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x2, 0x16, 0x36, 0x2, 0x3, 0x30, 0x24, 0x3, 0x6, 0x36, 0x16, 0xb, 0x24, 0x1, 0x16, 0x1b, 0x48]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x5}, {0x5, 0x1}, {}, {0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0xa}, {0x5, 0x3}, {0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x5}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x7}, {0x6}, {0x4, 0x2}, {0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x1}, {0x7, 0x6}, {0x4, 0x10}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1ff, 0xebf, 0x4, 0x76, 0xe5, 0x5]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x8}, {0x7, 0x2}, {0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x5, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4a0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x400, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x3, 0x16, 0x9, 0x30, 0x6, 0x1b, 0xc, 0x4]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x2}, {0x4, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x10}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x6}, {0x4, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x48, 0x5, 0x2, 0x6, 0x16, 0xb, 0xc, 0x6c, 0x48, 0x60, 0x24, 0x1, 0x7d6b230af7b565fd, 0xc, 0x3, 0x1, 0x16, 0x49, 0x60, 0x1b]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2}, {0x7, 0x4}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x3, 0xa}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {}, {0x1, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x20, 0x1, 0xffff, 0xce, 0x101, 0x400]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x8}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x3, 0x7}, {0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x2}, {0x7}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x5, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4, 0x8001, 0x5, 0x8, 0x5, 0xecf, 0x101]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x2, 0x1000, 0x1, 0xfffe, 0x7, 0x6, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x40, 0x6, 0x4, 0x3, 0xc400, 0x9e]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x0, 0x2, 0x9, 0x200, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0xb, 0x3, 0xb, 0x3, 0x36, 0x30, 0x9, 0x36, 0x1, 0x6, 0xb, 0x6c, 0xb, 0x4, 0x5, 0x24, 0x41, 0xb, 0x5]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xa5bd5d9ad6bdee8b, 0x6, 0x4, 0x36, 0x36, 0x9, 0x30, 0x18, 0x5, 0x60, 0xc, 0x9, 0x0, 0x6, 0x36, 0x24, 0x7a, 0x30, 0x6c, 0x1, 0x36]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x7}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x7}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x1}, {0x4, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x7}, {0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x3}, {0x6, 0x2}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x7, 0x7}, {0x1}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0xa}, {0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x4, 0x6}, {0x7, 0x8}, {0x7, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x9}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x2, 0x1ff, 0x101, 0x4, 0xd7, 0x14, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x9, 0x40, 0x1, 0x1f, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x1}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0x9}, {0x1}, {0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x6}, {0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0xb, 0x36, 0x24, 0x9, 0x3, 0x6, 0x36, 0x60, 0x12, 0x6c, 0x18, 0x18, 0x4, 0x6c, 0xb, 0x4, 0x3, 0x36, 0x6, 0x36, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0x4}, {0x4}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0xa}, {0x4}, {0x6, 0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x24, 0x4, 0x1, 0x60, 0x1e, 0x36, 0x16, 0x12, 0xb, 0x0, 0x36, 0xb, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9e62, 0x800, 0xd59, 0x9, 0x8, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x8}, {0x7}, {0x4, 0x6}, {}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x1}, {0x6, 0x8}, {0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x6}, {0x3, 0x7}, {0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x7}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0x4}, {0x4}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x1e}, {0x1, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0x8}, {0x5}, {0x3}, {0x4, 0x1}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x6, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x3}, {0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f, 0x6, 0x5c, 0x4, 0x0, 0x1ff, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb97, 0xff, 0xfff, 0x7e8, 0x1, 0x7f, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x86f, 0x53, 0x1, 0x101, 0x9ef4, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4fc}]}]}, @NL80211_ATTR_TID_CONFIG={0xf7c, 0x11d, 0x0, 0x1, [{0x540, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x464, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x16, 0xb, 0x5, 0x36, 0x1, 0x12, 0x9, 0xc, 0xb, 0x6, 0x36, 0x1, 0x0, 0x30, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x3, 0x1b, 0xb, 0xa977be1ec45c9229, 0x12, 0x60, 0x1b]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x4}, {0x6, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x2}, {0x5}, {0x4}, {0x6}, {0x3, 0x2}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x1}, {0x4, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x2}, {0x5, 0x9}, {0x3}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x12, 0x9, 0x12, 0x16, 0x2, 0x36, 0x6, 0xb, 0x24, 0x16, 0x3, 0x48, 0x3, 0xc, 0x1b, 0x0, 0x6, 0x51, 0x1, 0x12, 0x9, 0x6c, 0x20, 0x51bb7fab8f25b8e7, 0x5, 0x30, 0x1b]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x1}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x5}, {0x3, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x3}, {0x7}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x24, 0x4, 0x30, 0x60, 0x18, 0x30, 0x36, 0x5, 0x1b, 0x48, 0x6c, 0x4, 0x9, 0x60, 0x4, 0x24, 0x5, 0xb, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xff00, 0xc276, 0x3ff, 0x5, 0x1015, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0xfffc, 0x0, 0x9, 0x9, 0x6, 0x27be]}}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x6}, {0x0, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x1}, {0x2, 0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0xa}, {0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x2, 0xb, 0x12, 0xc, 0x4, 0x6, 0x48, 0x1b, 0x30, 0x30, 0x9, 0x24, 0x1, 0x6c, 0x6c, 0x24, 0x0, 0x6, 0x12, 0x4, 0x4, 0x5, 0x4, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x2, 0x5, 0x7fff, 0xffff, 0xfffe, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffc, 0x1, 0x4, 0xfff9, 0x9, 0x7e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x401, 0xa4, 0xff49, 0x200, 0x9, 0xad]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x16, 0xb, 0x3, 0x16, 0x5]}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x6, 0x6, 0x3, 0x6, 0x36, 0x36, 0xc, 0x1b, 0x1b, 0x18, 0x4, 0x19, 0x5, 0x4, 0xc, 0x60, 0x2, 0x2, 0x6, 0x76, 0x5, 0x4, 0x6c, 0x1b, 0x6, 0x18, 0x6, 0x48, 0x24, 0x2]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x1}, {0x4, 0x6}, {0x3, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0x8}, {0x3}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0x1}, {}, {0x4, 0x2}, {0x5, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x3}, {0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x1b, 0x2, 0x5, 0x2, 0x6c, 0x5, 0x24, 0x2, 0x3, 0x0, 0x12, 0x4, 0x9, 0x12, 0x1, 0x0, 0x9, 0x5, 0xf, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x3d, 0x60, 0x9, 0x0, 0xb, 0x3, 0xc, 0x48, 0xb, 0x12, 0x1, 0x1, 0x77, 0x55, 0x0, 0x1, 0x6c, 0x6, 0x5, 0x1f, 0xc, 0x12, 0x12, 0xf2410c42f2dc9db9, 0x6c, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x8}, {0x1, 0x8}, {0x1}, {0x1, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1f, 0x2, 0x16]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0xa}, {0x0, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x3}, {0x7, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x800, 0x3ff, 0x9, 0x7, 0x25b2, 0x94b3, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x1000, 0x9, 0x3f, 0x40, 0xe11f, 0x401]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x5, 0x24, 0x12, 0x4, 0xc, 0x24, 0x18, 0xc, 0x6c, 0x1, 0x60, 0x9, 0x5, 0x18, 0x1b, 0x12, 0x5, 0x9, 0x4, 0xb, 0xb, 0x12, 0x1b, 0x18, 0x12, 0x6, 0xb, 0x1b, 0x3, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0x101, 0xfff, 0x8, 0x400, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x36, 0x6, 0x43]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb4f6, 0xeb18, 0x200, 0x5, 0x1, 0x8, 0x1000, 0x92f8]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2e, 0x6c, 0x1b, 0x12, 0x18, 0x3, 0x60, 0x2, 0x6c, 0x6c, 0x30, 0x5, 0x5, 0x60, 0x3, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x4}, {0x7, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x6}, {0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x7}, {0x0, 0x1}, {0x4}, {0x7, 0x1}, {0x5}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x3}, {0x3, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x6}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x7}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x7}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x60, 0x7e, 0x4, 0x9, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x81, 0x7, 0x7, 0x0, 0x2, 0x20, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x50, 0xc, 0x6c, 0x36, 0x7e560b75e90bebd5, 0xb, 0x6c, 0x4, 0x18, 0x48, 0x6, 0x6, 0x9, 0x48]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x14}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0x9}, {0x6, 0x2}, {0x6, 0x7}, {0x1}, {0x7, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x1}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x6, 0x9}, {0x4}, {0x5, 0x1}, {0x4, 0x8}, {0x5, 0x3}, {0x4, 0x5}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x30]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x48, 0x2, 0x12, 0x4, 0x0, 0x6a, 0x23, 0x4, 0x16, 0xc, 0x71, 0x3, 0x12, 0x48, 0x12, 0x48, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0xeb, 0x8, 0x2ff1, 0x5, 0x4, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x8, 0x4, 0x800, 0x7, 0x1, 0xc889, 0x3]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x6, 0x6b24, 0xa683, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa373, 0x7fff, 0x80, 0x9, 0x5, 0x9, 0x4, 0x7]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x8}, {0x4}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc, 0xc073, 0x2, 0x3, 0x7ff, 0x7ff, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x5}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x1}, {0x6}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xb1, 0x6, 0x3f, 0x0, 0x4, 0x1000, 0xc5]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x48, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa0, 0x4, 0x5, 0x6, 0x1000, 0x7fff, 0xc9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x16, 0x30, 0x3, 0x16, 0x36, 0x5, 0x4, 0x9, 0x1, 0x0, 0x36, 0x16, 0x18, 0x6, 0x2, 0x60, 0x48, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x721, 0x401, 0x8, 0x55, 0x401, 0x9c7, 0x400, 0x642]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x6, 0xff, 0x3, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x1}, {0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0xc, 0x60, 0x1, 0x36, 0x5, 0x48, 0x60, 0x0, 0x6, 0x2, 0x16, 0x24, 0x6, 0x48, 0x6c, 0x1b, 0x30, 0x9, 0x18, 0x30, 0x60, 0x1, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x1f, 0x1, 0x5, 0xffff, 0x7ff, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8, 0x9, 0x3, 0x80, 0x6, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x20, 0x6, 0x8000, 0x0, 0x2, 0x8, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1000, 0x401, 0xff, 0x3, 0x5, 0x2, 0xede]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8001, 0x9, 0x8, 0x6, 0x9, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0xfc01, 0x8, 0xfffa, 0x6, 0x9, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x27c4, 0x9, 0x2, 0x6a, 0x20, 0x4, 0x29, 0x3]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe95, 0x3ff, 0x8001, 0xfe0, 0x8897, 0x0, 0x3f, 0x5]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x2}, {0x3, 0x1}, {0x3}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1d, 0x4, 0x8, 0x1, 0x585, 0xa99, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xeb5, 0x3f, 0xf931, 0x1, 0x0, 0x81, 0x4]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0x631f, 0x0, 0xc687, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb4fe, 0x8001, 0x9, 0xfff, 0x0, 0x23, 0x4]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0x8001, 0x1, 0x0, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa8c2, 0x6, 0x8422, 0x9, 0x2, 0x7, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8, 0x8, 0x0, 0xff, 0x1, 0x1000, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc40, 0x6, 0x2b, 0x800, 0xfff, 0x800, 0x8000, 0x83]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x60, 0x3, 0x4, 0x48, 0x9, 0x30, 0x16]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x6c, 0x9, 0x18, 0x0, 0xc, 0x0, 0x4, 0xb, 0x9, 0x5, 0x2, 0x5, 0x2, 0x3, 0xb, 0x16, 0x2, 0x1b, 0x9, 0xc, 0xc, 0x1b, 0x9, 0x16, 0x5c, 0x36, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x1b, 0x60, 0x60, 0x76, 0x30, 0x3, 0x60, 0x5, 0x18, 0x16, 0x60, 0xb, 0x9, 0x3, 0x1e, 0x1b, 0x48, 0x18, 0x6, 0x30]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x24, 0x16, 0x1b, 0x9, 0xb, 0x48, 0x16, 0x12, 0x30, 0x48, 0x36, 0x0, 0x30]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x30, 0xc, 0x16, 0x1b, 0x1, 0x3, 0x0, 0xc, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}]}, {0x62c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x424, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x5}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x7}, {0x4}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x2, 0x8}, {0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x2}, {0x5, 0x2}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x2}, {0x2, 0xa}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5}, {0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x9}, {0x1}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x4}, {0x2, 0x7}, {0x4}, {0x7, 0xa}, {0x0, 0x1}, {0x3}, {}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x6, 0xa}, {0x6, 0x2}, {0x4}, {0x1, 0x7}, {0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x6, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x5, 0x5}, {0x2, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x34, 0x4, 0x71, 0x37, 0x30, 0x24, 0x4, 0x0, 0x36, 0x6c, 0xb, 0x2, 0x1, 0x30, 0x12, 0x60, 0x48, 0x2, 0x12, 0x0, 0x16, 0x6, 0x4, 0x12, 0x12, 0x1b]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x7e7c14eb486e0a44, 0x6, 0x3, 0x0, 0xc, 0x16, 0x6c, 0x60, 0x36, 0xc, 0x10, 0x48, 0x18, 0x1a, 0x36, 0x6, 0x3, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x24, 0x4, 0x48]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x3, 0x48, 0x6, 0x16, 0x24, 0x30, 0x6, 0xc, 0x1, 0x5, 0x60, 0x1b, 0x3, 0x6c, 0xc, 0x24, 0x18, 0x4, 0x16, 0x3a, 0x2]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0xa}, {0x6, 0x5}, {0x7, 0xa}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x4}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x4, 0x1}, {0x4, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x5}, {0x4, 0x6}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0xa}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x5, 0xa}, {0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x4, 0x6}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x4}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x4, 0x4}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x5}, {0x4}, {0x7, 0x8}, {0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x2, 0x8}, {0x5, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x2}, {}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0x154, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0xb, 0x60, 0x4, 0xe, 0x0, 0x18, 0x6, 0x1, 0x37, 0xb, 0x24, 0x60, 0x60, 0x1, 0x18, 0x4, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x7, 0x8}, {0x6}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x3}, {0x7}, {}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x200, 0xc8, 0x2, 0x0, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x1, 0xb, 0xb, 0x60, 0x18, 0xc, 0x2, 0x6, 0x6, 0x1b, 0x6, 0x48, 0x16, 0x48, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x18, 0xa, 0x4, 0x4, 0x6c, 0x18, 0x24, 0x3, 0x36, 0x18, 0x9, 0xc, 0x1, 0xc, 0xc, 0x4, 0x5, 0x36, 0x36, 0x19, 0x2, 0x2, 0x2, 0x22]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x1b, 0x5, 0xc, 0x3, 0x5, 0x36, 0xc, 0xc, 0x2, 0xc, 0x36, 0xb, 0xb, 0x78d008ed9b01bbbe, 0x16, 0x30, 0xd, 0x12, 0xc, 0x18, 0x48, 0x1, 0x3f, 0x24, 0x4, 0x6c, 0x60, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x37, 0x5, 0x36, 0x24, 0x36, 0x1b, 0x6, 0x48, 0xc, 0x18, 0x16, 0x6, 0x60, 0x5, 0x24, 0x6c, 0x24, 0xc, 0x1b, 0xc, 0x1, 0x4, 0x30, 0xb, 0x36, 0x60, 0x36, 0x24]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x9}, {0x4, 0x2}, {0x7}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0x7}, {0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x1}, {0x2, 0xa}, {0x7, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x7, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {}, {0x1, 0x1}, {0x1, 0xa}, {0x4}, {0x1, 0x6}, {0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x3}, {0x5, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0xd, 0x6c, 0x24, 0x30, 0xb, 0x30, 0x3e, 0x12, 0x6, 0x24, 0x4, 0x1b, 0x6c, 0x1b, 0x42e579c856530cec, 0xc, 0x48, 0x6, 0x36, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x6, 0x36, 0x6, 0x6c, 0x30, 0xc, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x60, 0xc, 0x48, 0x60, 0x48, 0x1, 0x2, 0x1, 0x18, 0x60, 0xc, 0x60, 0x72, 0x60, 0xc, 0x1b, 0x48, 0xc, 0x4, 0x6c, 0x1, 0xc, 0xb, 0x16, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x8, 0x6d, 0x5, 0x2, 0xddf5, 0xa5dc]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x48, 0x12, 0x1, 0x12, 0x6, 0x1, 0x12, 0xc, 0x6, 0x60, 0xc, 0x4, 0x12, 0x60, 0xc, 0x5, 0x6, 0x36, 0x32, 0x9, 0x2, 0x18, 0x16, 0x48, 0x48, 0x6c, 0x6, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x4, 0x7}, {0x3, 0xa}, {0x5, 0x4}, {0x1}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x2}, {}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x3}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x4, 0x3}, {0x3, 0x6}, {0x7, 0x9}, {0x4}, {0x4, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5, 0x1, 0x6dda, 0x6, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8c1, 0x4, 0x8, 0x455d, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x8}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x4}, {0x7, 0x3}, {0x2}, {0x3, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x5, 0x8}, {0x3, 0x3}, {0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1f, 0xfd2, 0x0, 0x101, 0xff, 0x88c9, 0x81]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x3}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x1}, {0x6, 0x5}, {0x4, 0x2}, {0x4, 0x3}, {0x2, 0x6}, {0x5, 0x6}, {0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x5}, {0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x2, 0x3}, {}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0xb}, {0x6, 0x8}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4c, 0xb]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x8}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x1}, {}, {0x5, 0x3}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x4}, {0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x6}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x18, 0x2, 0xb, 0x36, 0x24, 0x2, 0x1, 0x12, 0x24, 0x16, 0x16, 0xe, 0x48, 0x18, 0x48, 0x30, 0x16, 0x16, 0x2, 0x1, 0x3]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x7}, {}, {0x5, 0x3}, {0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x2f, 0x6c, 0x48, 0xc, 0x12, 0x60, 0x24, 0xb672ba585943f73c, 0x60, 0x60, 0x48, 0x3, 0x48, 0x6c, 0x6, 0x1b, 0xb, 0x36, 0x4, 0x9, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0x3}, {0x6}, {0x0, 0xa}, {}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x4}, {0x7, 0x9}, {0x4, 0x8}, {0x3, 0x5}, {}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x7}, {0x5, 0x7}, {0x3, 0xa}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x7, 0x5}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x3}, {0x5, 0x4}, {0x2, 0x8}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x3, 0x5}, {0x7, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x2}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x5}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0x3}, {}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x5, 0x7}, {0x1}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x8}, {0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x2}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x7}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x3, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x2}, {}, {0x5, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x2}, {0x4, 0x8}, {0x1, 0x1}, {0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x6}, {0x3, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x9, 0x24cd, 0x7, 0xf2ae, 0xbb, 0x3d7]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x4}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x6}, {0x2, 0x7}, {}, {0x6, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x3, 0x7}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x9, 0x6, 0xc, 0x5, 0x60, 0x24, 0x6c, 0x2, 0x1b, 0x5, 0xc, 0x48, 0x24, 0x48, 0x5, 0x9, 0x18, 0x16, 0x30, 0x9, 0xb, 0x3, 0x60, 0x12, 0x5, 0x18, 0x36, 0x1d, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x99c, 0xff, 0x1f, 0x0, 0x1, 0x40, 0x3f, 0x7d]}}]}]}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x95d, 0x70, 0x800, 0x0, 0x1ff, 0x80, 0x8, 0xda3]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x1, 0x16, 0x60, 0x0, 0x6c, 0x3, 0x9, 0xc, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x62, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4ca, 0x80, 0x8001, 0x8, 0x81, 0x5, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1f, 0x1f, 0x676a, 0xab, 0x8, 0x9]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x30, 0x24, 0x60, 0x12, 0x2, 0x4, 0x12, 0x2, 0x9, 0x36, 0x48, 0xb, 0x1, 0x60, 0xc]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x6c, 0x1, 0x16, 0x1, 0x1, 0x48, 0x3, 0x24, 0x1, 0x30, 0x16, 0xc, 0xc, 0xb, 0x6, 0x6, 0x30, 0x12, 0x1b, 0x5, 0x5, 0x3, 0x6c, 0x2, 0xb]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x8}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x3, 0x4}, {0x6}, {0x4}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x7}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x4}, {0x5}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x8}, {0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xffc1, 0x8, 0x0, 0x5, 0x38, 0x3a9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x1, 0x48, 0x16, 0x36, 0x3, 0x30, 0xb, 0x1, 0x9, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x22, 0x7fff, 0x0, 0x101, 0x3f, 0x80, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x200, 0x1ff, 0x6f, 0x20, 0x1000, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b, 0x0, 0x2, 0x2, 0x3f, 0x9, 0x8, 0x4f32]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x18, 0x12]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x60, 0x36, 0x18, 0x9, 0x4, 0x6e, 0x9, 0x1b, 0x3]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x7}, {0x6, 0x3}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0xa}, {0x6}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x4}, {0x4, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x7}, {0x7, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x3}, {0x1}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x6}, {0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x7, 0x5}, {}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x9}, {0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0x8}, {0x5, 0xa}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x8}, {0x3, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x6, 0x6}, {0x6, 0xa}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3f, 0x4, 0x1, 0x1ff, 0x9, 0x7, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x60, 0x0, 0xb, 0x60, 0x4c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x4, 0x1, 0xea1, 0x6, 0x2, 0x80]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4}, {0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x7}, {0x0, 0x7}, {0x2, 0x19}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x6, 0x626, 0x5, 0x101, 0x3ff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x27c, 0x11d, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x26c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x40, 0x0, 0x4, 0x7, 0xbb3, 0x7ff, 0xa3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff68, 0x3, 0x0, 0x1, 0x0, 0x100, 0xb67a]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0xb, 0x36, 0x1b, 0x36, 0x55, 0x48, 0x16, 0x3c, 0x18, 0x12, 0x60, 0x3, 0x36, 0x5f, 0x48, 0x1b, 0x3, 0x12, 0x60, 0x18, 0x2, 0x18, 0x6c, 0xb, 0x3, 0x1, 0x18, 0x2, 0x18, 0x24, 0x16]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0xc, 0x18]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0x401, 0x2, 0x0, 0x7e, 0x0, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x1ff, 0xffff, 0x0, 0x26, 0x7ff, 0x8]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x9}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x6}, {0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0x9}, {0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x4}, {0x6}, {0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0x3}, {0x2, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x18, 0x1, 0x48, 0x1, 0x4, 0x2, 0x6c, 0x36, 0x18, 0x9, 0x9, 0x60, 0x5, 0x4, 0x12, 0x2, 0x36, 0x36, 0x60, 0x0, 0x16, 0x18, 0x6c, 0x99de2a8035342508, 0x9, 0x16, 0x60, 0x1b, 0x1b, 0x24, 0x48]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x3, 0x12, 0x3, 0x60, 0x1, 0x2, 0x48, 0x6, 0x1b, 0x16, 0x48, 0x4, 0x2, 0x28, 0x36, 0x48, 0x48, 0x3, 0x12, 0x6b, 0x18, 0x4, 0x30, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x8, 0x101, 0x8001, 0x5, 0xfff7]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x100, 0x0, 0x9, 0x3, 0x81, 0x1b1, 0x6]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c9, 0x9, 0xfffa, 0x1, 0x3ff, 0x9, 0x2, 0x48f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x74, 0x16, 0xc, 0x2, 0x30, 0xb, 0x24, 0x6c, 0x9, 0x0, 0x2, 0x60, 0x6c, 0x60, 0x30, 0x60, 0x3, 0xb, 0x18, 0x12, 0x18, 0x6]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x5}, {}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x2}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {}, {0x2, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x5}, {0x6, 0x1}, {0x6, 0x6}, {0x1}, {0x7, 0x7}, {0x0, 0x2}, {}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x6}, {0x2, 0xa}, {0x5}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x2}, {0x1, 0x7}, {0x1}, {0x4, 0x6}, {0x0, 0x3}, {0x6}, {0x2, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x6, 0x1, 0x8001, 0x0, 0x1, 0x3f, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x10, 0x9a75, 0x7fff, 0x0, 0xfff, 0x1, 0x8e1]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x9}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x1}, {0x6, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0xe}, {0x2, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x2, 0x1}, {0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x18]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4a4, 0x11d, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x3, 0x4, 0x36, 0x3, 0x16, 0x31, 0x1, 0x18]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x8}, {0x3, 0x11}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x7}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x9}, {}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x6}, {0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x3}, {0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x5}, {0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {}, {0x5}, {0x5, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x2}, {0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x5}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x4, 0x3}, {0x3}, {0x1, 0x2}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x30, 0x1b, 0x30, 0x0, 0x3, 0x2, 0xc, 0xb, 0x36, 0xb, 0x48, 0x6c, 0x18, 0xc, 0x4, 0x1b, 0x6c, 0x1, 0x1b, 0x18, 0x9]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7, 0x4f, 0x570, 0x0, 0x7, 0x8, 0x40, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x1}, {}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x5}, {0x5, 0x6}, {0x2}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0x3}, {0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x7}, {0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x1}, {0x5}, {0x2, 0xa}, {}, {0x3, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xcd41, 0x80, 0x6, 0x1, 0x0, 0x3ff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x4, 0x1b, 0x2, 0x2, 0x9, 0x30, 0x36, 0x13, 0x30, 0x3, 0xb, 0x36, 0x36, 0x12, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x400, 0x5, 0x400, 0x303, 0x103, 0x1, 0x8001]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xae}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x9, 0x2, 0x1b, 0x60, 0x2, 0x30, 0x6c, 0x24, 0x12, 0x6c, 0xc, 0x6c, 0x1, 0x1b, 0x12, 0x6, 0x3, 0x16, 0x1, 0x48, 0x6, 0x24, 0xd, 0x16, 0x0]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0xa}, {0x6, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x7}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {}, {0x3}, {0x3, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x4}, {0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x1, 0x1d6, 0x6, 0x8, 0x9, 0x1]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x1, 0x36, 0x4, 0x16, 0x3, 0x5, 0x48, 0x1b, 0x3, 0x4, 0x24, 0x5, 0x36, 0x12, 0x30, 0xc, 0x0, 0xc, 0x2, 0x1, 0x30, 0x60, 0x4, 0x30, 0x67, 0x5, 0x9, 0x24, 0x1b, 0x24, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc01, 0x5, 0x0, 0xe1b, 0x1, 0xfffd, 0x1f]}}]}, @NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x6, 0x3}, {0x2, 0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x4}, {0x4, 0xa}, {}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x3}, {0x2, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x4, 0x5}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x7, 0xa}, {0x5, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x2, 0x9}, {0x2, 0x9}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x4, 0x2}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x3}, {0x4, 0x8}, {}, {0x2, 0x2}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x9, 0x5, 0x400, 0x73, 0x5, 0xffe0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x5, 0x3, 0x30, 0x56, 0x6c, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa75, 0x6, 0x3ff, 0x5, 0x2, 0x4000, 0x0, 0xba47]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe0fc, 0xff7f, 0x1000, 0x5, 0x8, 0x1, 0x6, 0x9af]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x2a08}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:02:54 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(0x0, 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf5", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xf0ffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:54 executing program 0:
mlockall(0x2)
r0 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
r3 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmdt(r2)
shmdt(r2)
shmdt(r0)

13:02:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:54 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:02:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:02:54 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x24d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:02:54 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)='\x00', 0x1, 0x3)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)

[ 1247.334834] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1247.335674] CPU: 1 UID: 0 PID: 10878 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1247.335691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1247.335698] Call Trace:
[ 1247.335703]  <TASK>
[ 1247.335708]  dump_stack_lvl+0xfa/0x120
[ 1247.335732]  dump_header+0x107/0x950
[ 1247.335760]  oom_kill_process+0x278/0xa00
[ 1247.335781]  out_of_memory+0x34b/0x1690
[ 1247.335805]  ? __pfx_out_of_memory+0x10/0x10
[ 1247.335831]  mem_cgroup_out_of_memory+0x164/0x190
[ 1247.335845]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1247.335865]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1247.335886]  try_charge_memcg+0x81f/0xf30
[ 1247.335910]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1247.335930]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1247.335948]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1247.335971]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1247.335993]  ? __create_object+0x59/0x80
[ 1247.336011]  kmem_cache_alloc_noprof+0x322/0x3d0
[ 1247.336031]  ? __create_object+0x59/0x80
[ 1247.336050]  alloc_empty_file+0x58/0x1e0
[ 1247.336069]  alloc_file_clone+0x5f/0x110
[ 1247.336086]  do_shmat+0x61f/0x1310
[ 1247.336108]  ? __pfx_do_shmat+0x10/0x10
[ 1247.336122]  ? __might_fault+0x138/0x190
[ 1247.336137]  ? lock_release+0xc8/0x290
[ 1247.336156]  __x64_sys_shmat+0xcf/0x160
[ 1247.336170]  ? syscall_trace_enter+0x1cf/0x240
[ 1247.336185]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1247.336202]  ? syscall_trace_enter+0xf2/0x240
[ 1247.336216]  do_syscall_64+0xbf/0x360
[ 1247.336237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.336250] RIP: 0033:0x7f88aea1cb19
[ 1247.336260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1247.336272] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1247.336284] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1247.336292] RDX: 0000000000000000 RSI: 0000000020ff9000 RDI: 0000000000000000
[ 1247.336299] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1247.336307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1247.336314] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1247.336334]  </TASK>
[ 1247.353523] memory: usage 307200kB, limit 307200kB, failcnt 529
[ 1247.354047] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:02:54 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

[ 1247.354561] Memory cgroup stats for /syz7:
[ 1247.426470] anon 1507328
[ 1247.427088] file 308297728
[ 1247.427330] kernel 4767744
[ 1247.427588] kernel_stack 557056
[ 1247.427865] pagetables 2162688
[ 1247.428177] sec_pagetables 0
[ 1247.428439] percpu 1024
[ 1247.428662] sock 0
[ 1247.428849] vmalloc 0
[ 1247.429079] shmem 308293632
[ 1247.429335] file_mapped 0
[ 1247.429561] file_dirty 4096
[ 1247.429809] file_writeback 0
[ 1247.430096] swapcached 0
[ 1247.430328] inactive_anon 309719040
[ 1247.430669] active_anon 81920
[ 1247.430951] inactive_file 4096
[ 1247.431222] active_file 0
[ 1247.431454] unevictable 0
[ 1247.431689] slab_reclaimable 965536
[ 1247.432015] slab_unreclaimable 1096768
[ 1247.432341] slab 2062304
[ 1247.432568] workingset_refault_anon 0
[ 1247.432903] workingset_refault_file 1
[ 1247.433211] workingset_activate_anon 0
[ 1247.433537] workingset_activate_file 0
[ 1247.435240] workingset_restore_anon 0
[ 1247.435573] workingset_restore_file 0
[ 1247.435879] workingset_nodereclaim 0
[ 1247.436874] pgdemote_kswapd 0
[ 1247.437169] pgdemote_direct 0
[ 1247.437430] pgdemote_khugepaged 0
[ 1247.437718] pgdemote_proactive 0
[ 1247.438044] pgscan 847
[ 1247.438265] pgsteal 77
[ 1247.438488] pswpin 0
[ 1247.438683] pswpout 0
[ 1247.438909] pgscan_kswapd 0
[ 1247.439163] pgscan_direct 847
[ 1247.439428] pgscan_khugepaged 0
[ 1247.439709] pgscan_proactive 0
[ 1247.439993] pgsteal_kswapd 0
[ 1247.440257] pgsteal_direct 77
[ 1247.440513] pgsteal_khugepaged 0
[ 1247.440805] pgsteal_proactive 0
[ 1247.441097] pgfault 87767
[ 1247.441336] pgmajfault 3
[ 1247.441560] pgrefill 836
[ 1247.441790] pgactivate 916
[ 1247.442056] pgdeactivate 836
[ 1247.442317] pglazyfree 0
[ 1247.442546] pglazyfreed 0
[ 1247.442779] swpin_zero 0
[ 1247.443040] swpout_zero 0
[ 1247.443280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10867,uid=0
[ 1247.444527] Memory cgroup out of memory: Killed process 10867 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:02:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1247.498004] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1247.499613] CPU: 0 UID: 0 PID: 10877 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1247.499645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1247.499659] Call Trace:
[ 1247.499667]  <TASK>
[ 1247.499676]  dump_stack_lvl+0xfa/0x120
[ 1247.499721]  dump_header+0x107/0x950
[ 1247.499765]  oom_kill_process+0x278/0xa00
[ 1247.499806]  out_of_memory+0x34b/0x1690
[ 1247.499852]  ? __pfx_out_of_memory+0x10/0x10
[ 1247.499909]  mem_cgroup_out_of_memory+0x164/0x190
[ 1247.499934]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1247.499970]  ? mark_held_locks+0x49/0x80
[ 1247.500006]  try_charge_memcg+0x81f/0xf30
[ 1247.500052]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1247.500101]  charge_memcg+0x7b/0x290
[ 1247.500134]  __mem_cgroup_charge+0x28/0x90
[ 1247.500176]  do_wp_page+0x56e/0x31f0
[ 1247.500223]  ? __pfx_do_wp_page+0x10/0x10
[ 1247.500258]  ? do_raw_spin_lock+0x123/0x260
[ 1247.500290]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1247.500321]  ? ___pte_offset_map+0x176/0x370
[ 1247.500359]  __handle_mm_fault+0xde1/0x30f0
[ 1247.500395]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1247.500428]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1247.500461]  ? lock_release+0x121/0x290
[ 1247.500523]  handle_mm_fault+0x2c3/0x900
[ 1247.500558]  ? access_error+0x17d/0x380
[ 1247.500589]  do_user_addr_fault+0x4fa/0xeb0
[ 1247.500626]  exc_page_fault+0xb0/0x180
[ 1247.500661]  asm_exc_page_fault+0x26/0x30
[ 1247.500683] RIP: 0033:0x7fc67e13aecd
[ 1247.500702] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1247.500724] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1247.500743] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1247.500759] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1247.500774] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1247.500788] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1247.500803] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000130764
[ 1247.500834]  ? do_syscall_64+0x12c/0x360
[ 1247.500877]  </TASK>
[ 1247.530356] memory: usage 307200kB, limit 307200kB, failcnt 867
[ 1247.531309] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:02:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:02:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1247.532237] Memory cgroup stats for /syz0:
[ 1247.568086] anon 1134592
[ 1247.568671] file 309952512
[ 1247.568940] kernel 3485696
[ 1247.569175] kernel_stack 360448
[ 1247.569440] pagetables 1372160
[ 1247.569702] sec_pagetables 0
[ 1247.569969] percpu 640
[ 1247.570178] sock 0
[ 1247.570358] vmalloc 0
[ 1247.570568] shmem 309952512
[ 1247.570813] file_mapped 0
[ 1247.571054] file_dirty 0
[ 1247.571290] file_writeback 0
[ 1247.571537] swapcached 0
[ 1247.571757] inactive_anon 310886400
[ 1247.572066] active_anon 200704
[ 1247.572330] inactive_file 0
[ 1247.572567] active_file 0
[ 1247.572796] unevictable 0
[ 1247.573036] slab_reclaimable 970952
[ 1247.573334] slab_unreclaimable 789936
[ 1247.573637] slab 1760888
[ 1247.573860] workingset_refault_anon 0
[ 1247.574177] workingset_refault_file 0
[ 1247.574492] workingset_activate_anon 0
[ 1247.574803] workingset_activate_file 0
[ 1247.575134] workingset_restore_anon 0
[ 1247.575441] workingset_restore_file 0
[ 1247.575745] workingset_nodereclaim 0
[ 1247.576058] pgdemote_kswapd 0
[ 1247.576315] pgdemote_direct 0
[ 1247.576567] pgdemote_khugepaged 0
[ 1247.576843] pgdemote_proactive 0
[ 1247.577130] pgscan 367
[ 1247.577336] pgsteal 76
[ 1247.577549] pswpin 0
[ 1247.577742] pswpout 0
[ 1247.577961] pgscan_kswapd 0
[ 1247.578200] pgscan_direct 367
[ 1247.578460] pgscan_khugepaged 0
[ 1247.578727] pgscan_proactive 0
[ 1247.579003] pgsteal_kswapd 0
[ 1247.579257] pgsteal_direct 76
[ 1247.579511] pgsteal_khugepaged 0
[ 1247.579780] pgsteal_proactive 0
[ 1247.580062] pgfault 87594
[ 1247.580288] pgmajfault 0
[ 1247.580505] pgrefill 275
[ 1247.580721] pgactivate 365
[ 1247.580968] pgdeactivate 278
[ 1247.581222] pglazyfree 0
[ 1247.581440] pglazyfreed 0
[ 1247.581664] swpin_zero 0
[ 1247.581899] swpout_zero 0
[ 1247.582122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10877,uid=0
[ 1247.583324] Memory cgroup out of memory: Killed process 10877 (syz-executor.0) total-vm:93420kB, anon-rss:420kB, file-rss:35612kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:04 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
accept4$inet(r0, 0x0, &(0x7f0000000080), 0x80000)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
close_range(r1, r2, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:03:04 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:04 executing program 6:
mlockall(0x2)
mlockall(0x7)
shmat(0xffffffffffffffff, &(0x7f0000c34000/0x4000)=nil, 0x0)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
mlockall(0x5)
shmdt(r1)

13:03:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:04 executing program 0:
mlockall(0x2)
shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r0 = shmget(0x2, 0x4000, 0x1, &(0x7f0000925000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000585000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000e61000/0x1000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmdt(0x0)
mlockall(0x2)
shmdt(r1)

13:03:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:04 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil)
shmat(0xffffffffffffffff, &(0x7f0000ea2000/0x4000)=nil, 0x7000)
r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000bd8000/0x2000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
r3 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil)
shmat(r3, &(0x7f0000ea5000/0x3000)=nil, 0x6000)
shmdt(r2)
shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)
r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r4, 0xc)
shmdt(r2)
shmctl$IPC_RMID(r4, 0x0)
madvise(&(0x7f0000ea5000/0x1000)=nil, 0x1000, 0xe)

13:03:04 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

[ 1257.644547] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1257.645385] CPU: 1 UID: 0 PID: 10915 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1257.645402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1257.645410] Call Trace:
[ 1257.645414]  <TASK>
[ 1257.645419]  dump_stack_lvl+0xfa/0x120
[ 1257.645448]  dump_header+0x107/0x950
[ 1257.645473]  oom_kill_process+0x278/0xa00
[ 1257.645495]  out_of_memory+0x34b/0x1690
[ 1257.645520]  ? __pfx_out_of_memory+0x10/0x10
[ 1257.645549]  mem_cgroup_out_of_memory+0x164/0x190
[ 1257.645564]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1257.645583]  ? mark_held_locks+0x49/0x80
[ 1257.645603]  try_charge_memcg+0x81f/0xf30
[ 1257.645627]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1257.645647]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1257.645666]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1257.645689]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1257.645712]  ? __create_object+0x59/0x80
[ 1257.645733]  kmem_cache_alloc_lru_noprof+0x328/0x3c0
[ 1257.645755]  ? shmem_alloc_inode+0x27/0x50
[ 1257.645775]  shmem_alloc_inode+0x27/0x50
[ 1257.645789]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1257.645803]  alloc_inode+0x67/0x250
[ 1257.645821]  new_inode+0x1e/0x160
[ 1257.645837]  __shmem_get_inode+0x17c/0xe80
[ 1257.645855]  ? __vm_enough_memory+0x188/0x400
[ 1257.645872]  __shmem_file_setup+0x2a2/0x370
[ 1257.645893]  newseg+0x3a1/0xdd0
[ 1257.645911]  ? __pfx_newseg+0x10/0x10
[ 1257.645931]  ipcget+0xf6/0xdc0
[ 1257.645947]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1257.645964]  ? perf_trace_lock+0xb5/0x5d0
[ 1257.645978]  ? lock_acquire+0x15e/0x2f0
[ 1257.645993]  ? __pfx_ipcget+0x10/0x10
[ 1257.646006]  ? __might_fault+0x138/0x190
[ 1257.646022]  ? lock_release+0xc8/0x290
[ 1257.646039]  __x64_sys_shmget+0x13b/0x1b0
[ 1257.646053]  ? __pfx___x64_sys_shmget+0x10/0x10
[ 1257.646067]  ? lock_release+0xc8/0x290
[ 1257.646087]  do_syscall_64+0xbf/0x360
[ 1257.646107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1257.646121] RIP: 0033:0x7f88aea1cb19
[ 1257.646130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1257.646142] RSP: 002b:00007f88abf92188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1257.646154] RAX: ffffffffffffffda RBX: 00007f88aeb2ff60 RCX: 00007f88aea1cb19
[ 1257.646163] RDX: 0000000000000080 RSI: 0000000000001000 RDI: 0000000000000000
[ 1257.646170] RBP: 00007f88aea76f6d R08: 0000000000000000 R09: 0000000000000000
[ 1257.646178] R10: 0000000020ffc000 R11: 0000000000000246 R12: 0000000000000000
[ 1257.646186] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1257.646206]  </TASK>
[ 1257.666052] memory: usage 307200kB, limit 307200kB, failcnt 591
[ 1257.666551] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1257.667068] Memory cgroup stats for /syz7:
[ 1257.682799] anon 1507328
[ 1257.683417] file 308297728
[ 1257.683683] kernel 4767744
[ 1257.683948] kernel_stack 557056
[ 1257.684221] pagetables 2162688
[ 1257.684483] sec_pagetables 0
[ 1257.684735] percpu 1024
[ 1257.684979] sock 0
[ 1257.685168] vmalloc 0
[ 1257.685373] shmem 308293632
[ 1257.685612] file_mapped 0
[ 1257.685842] file_dirty 0
[ 1257.686086] file_writeback 0
[ 1257.686347] swapcached 0
[ 1257.686590] inactive_anon 309719040
[ 1257.686916] active_anon 81920
[ 1257.687175] inactive_file 0
[ 1257.687416] active_file 4096
[ 1257.687668] unevictable 0
[ 1257.687914] slab_reclaimable 965536
[ 1257.688213] slab_unreclaimable 1097800
[ 1257.688527] slab 2063336
[ 1257.688749] workingset_refault_anon 0
[ 1257.689082] workingset_refault_file 1
[ 1257.689391] workingset_activate_anon 0
[ 1257.689705] workingset_activate_file 0
[ 1257.690042] workingset_restore_anon 0
[ 1257.690355] workingset_restore_file 0
[ 1257.690671] workingset_nodereclaim 0
[ 1257.690996] pgdemote_kswapd 0
[ 1257.691258] pgdemote_direct 0
[ 1257.691519] pgdemote_khugepaged 0
[ 1257.691805] pgdemote_proactive 0
[ 1257.692107] pgscan 901
[ 1257.692324] pgsteal 77
[ 1257.692534] pswpin 0
[ 1257.692731] pswpout 0
[ 1257.692955] pgscan_kswapd 0
[ 1257.693202] pgscan_direct 901
[ 1257.693459] pgscan_khugepaged 0
[ 1257.693735] pgscan_proactive 0
[ 1257.694021] pgsteal_kswapd 0
[ 1257.694278] pgsteal_direct 77
[ 1257.694544] pgsteal_khugepaged 0
[ 1257.694820] pgsteal_proactive 0
[ 1257.695115] pgfault 87823
[ 1257.695345] pgmajfault 3
[ 1257.695564] pgrefill 891
[ 1257.695789] pgactivate 973
[ 1257.696047] pgdeactivate 891
[ 1257.696300] pglazyfree 0
[ 1257.696525] pglazyfreed 0
[ 1257.696755] swpin_zero 0
[ 1257.696998] swpout_zero 0
[ 1257.697232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10914,uid=0
[ 1257.699140] Memory cgroup out of memory: Killed process 10914 (syz-executor.7) total-vm:93420kB, anon-rss:428kB, file-rss:35624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:04 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:04 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000fef000/0x2000)=nil)
shmat(r2, &(0x7f0000cda000/0x2000)=nil, 0x2000)

13:03:04 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/156)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
sendfile(r1, r0, 0xffffffffffffffff, 0x3)

13:03:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1257.817690] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1257.818547] CPU: 1 UID: 0 PID: 10912 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1257.818563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1257.818570] Call Trace:
[ 1257.818575]  <TASK>
[ 1257.818580]  dump_stack_lvl+0xfa/0x120
[ 1257.818604]  dump_header+0x107/0x950
[ 1257.818627]  oom_kill_process+0x278/0xa00
[ 1257.818648]  out_of_memory+0x34b/0x1690
[ 1257.818671]  ? __pfx_out_of_memory+0x10/0x10
[ 1257.818697]  mem_cgroup_out_of_memory+0x164/0x190
[ 1257.818710]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1257.818728]  ? mark_held_locks+0x49/0x80
[ 1257.818747]  try_charge_memcg+0x81f/0xf30
[ 1257.818771]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1257.818795]  charge_memcg+0x7b/0x290
[ 1257.818812]  __mem_cgroup_charge+0x28/0x90
[ 1257.818831]  do_wp_page+0x56e/0x31f0
[ 1257.818854]  ? __pfx_do_wp_page+0x10/0x10
[ 1257.818872]  ? do_raw_spin_lock+0x123/0x260
[ 1257.818892]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1257.818908]  ? ___pte_offset_map+0x176/0x370
[ 1257.818927]  __handle_mm_fault+0xde1/0x30f0
[ 1257.818946]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1257.818963]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1257.818980]  ? lock_release+0x121/0x290
[ 1257.819011]  handle_mm_fault+0x2c3/0x900
[ 1257.819028]  ? access_error+0x17d/0x380
[ 1257.819044]  do_user_addr_fault+0x4fa/0xeb0
[ 1257.819062]  exc_page_fault+0xb0/0x180
[ 1257.819081]  asm_exc_page_fault+0x26/0x30
[ 1257.819093] RIP: 0033:0x7fc67e13aecd
[ 1257.819103] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1257.819114] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1257.819124] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1257.819131] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1257.819139] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1257.819147] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1257.819154] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000133038
[ 1257.819169]  ? do_syscall_64+0x12c/0x360
[ 1257.819191]  </TASK>
[ 1257.835429] memory: usage 307200kB, limit 307200kB, failcnt 902
[ 1257.835943] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:04 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1257.836433] Memory cgroup stats for /syz0:
[ 1257.867049] anon 1134592
[ 1257.867619] file 309952512
[ 1257.867856] kernel 3485696
[ 1257.868287] kernel_stack 360448
[ 1257.868567] pagetables 1372160
[ 1257.868841] sec_pagetables 0
[ 1257.869244] percpu 640
[ 1257.869454] sock 0
[ 1257.869640] vmalloc 0
[ 1257.869846] shmem 309952512
[ 1257.870240] file_mapped 0
[ 1257.870471] file_dirty 0
[ 1257.870701] file_writeback 0
[ 1257.871127] swapcached 0
[ 1257.871351] inactive_anon 310886400
[ 1257.871642] active_anon 200704
[ 1257.871991] inactive_file 0
[ 1257.872235] active_file 0
[ 1257.872463] unevictable 0
[ 1257.872690] slab_reclaimable 970952
[ 1257.873010] slab_unreclaimable 789936
[ 1257.873318] slab 1760888
[ 1257.873543] workingset_refault_anon 0
[ 1257.873850] workingset_refault_file 0
[ 1257.874185] workingset_activate_anon 0
[ 1257.874504] workingset_activate_file 0
[ 1257.874835] workingset_restore_anon 0
[ 1257.875160] workingset_restore_file 0
[ 1257.875474] workingset_nodereclaim 0
[ 1257.875782] pgdemote_kswapd 0
[ 1257.876063] pgdemote_direct 0
[ 1257.876324] pgdemote_khugepaged 0
[ 1257.876610] pgdemote_proactive 0
[ 1257.876905] pgscan 367
[ 1257.877118] pgsteal 76
[ 1257.877330] pswpin 0
[ 1257.877526] pswpout 0
[ 1257.877728] pgscan_kswapd 0
[ 1257.877992] pgscan_direct 367
[ 1257.878253] pgscan_khugepaged 0
[ 1257.879825] pgscan_proactive 0
[ 1257.880762] pgsteal_kswapd 0
[ 1257.881046] pgsteal_direct 76
[ 1257.881306] pgsteal_khugepaged 0
[ 1257.881583] pgsteal_proactive 0
[ 1257.881865] pgfault 87648
[ 1257.882117] pgmajfault 0
[ 1257.882342] pgrefill 275
[ 1257.882572] pgactivate 365
[ 1257.882805] pgdeactivate 278
[ 1257.883086] pglazyfree 0
[ 1257.883306] pglazyfreed 0
[ 1257.883535] swpin_zero 0
[ 1257.883759] swpout_zero 0
[ 1257.884003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10912,uid=0
[ 1257.885213] Memory cgroup out of memory: Killed process 10912 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1257.913327] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1257.914119] CPU: 1 UID: 0 PID: 10925 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1257.914134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1257.914141] Call Trace:
[ 1257.914146]  <TASK>
[ 1257.914152]  dump_stack_lvl+0xfa/0x120
[ 1257.914172]  dump_header+0x107/0x950
[ 1257.914194]  oom_kill_process+0x278/0xa00
[ 1257.914215]  out_of_memory+0x34b/0x1690
[ 1257.914238]  ? __pfx_out_of_memory+0x10/0x10
[ 1257.914263]  mem_cgroup_out_of_memory+0x164/0x190
[ 1257.914276]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1257.914297]  ? mark_held_locks+0x49/0x80
[ 1257.914315]  try_charge_memcg+0x81f/0xf30
[ 1257.914339]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1257.914363]  charge_memcg+0x7b/0x290
[ 1257.914380]  __mem_cgroup_charge+0x28/0x90
[ 1257.914399]  do_wp_page+0x56e/0x31f0
[ 1257.914422]  ? __pfx_do_wp_page+0x10/0x10
[ 1257.914440]  ? do_raw_spin_lock+0x123/0x260
[ 1257.914456]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1257.914471]  ? ___pte_offset_map+0x176/0x370
[ 1257.914490]  __handle_mm_fault+0xde1/0x30f0
[ 1257.914508]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1257.914531]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1257.914547]  ? lock_release+0x121/0x290
[ 1257.914578]  handle_mm_fault+0x2c3/0x900
[ 1257.914595]  ? access_error+0x17d/0x380
[ 1257.914611]  do_user_addr_fault+0x4fa/0xeb0
[ 1257.914629]  exc_page_fault+0xb0/0x180
[ 1257.914647]  asm_exc_page_fault+0x26/0x30
[ 1257.914659] RIP: 0033:0x7f88ae9cad30
[ 1257.914668] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1257.914679] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1257.914689] RAX: 0000000084f5f5de RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1257.914697] RDX: 0000001b2d620030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1257.914704] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2d62001c
[ 1257.914711] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1257.914719] R13: 00007f88aeb24000 R14: ffffffff819c2fdf R15: 00007f88aeb2fff0
[ 1257.914727]  ? __might_fault+0x1f/0x190
[ 1257.914747]  ? __might_fault+0x1f/0x190
[ 1257.914763]  </TASK>
[ 1257.914782] memory: usage 307200kB, limit 307200kB, failcnt 611
[ 1257.932222] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1257.932716] Memory cgroup stats for /syz7:
[ 1257.932801] anon 1474560
[ 1257.933387] file 308297728
[ 1257.933623] kernel 4788224
[ 1257.933861] kernel_stack 557056
[ 1257.934159] pagetables 2166784
[ 1257.934429] sec_pagetables 0
[ 1257.934690] percpu 1088
[ 1257.934933] sock 0
[ 1257.935118] vmalloc 0
[ 1257.935319] shmem 308293632
[ 1257.935565] file_mapped 0
[ 1257.935797] file_dirty 0
[ 1257.936049] file_writeback 0
[ 1257.936306] swapcached 0
[ 1257.936528] inactive_anon 309686272
[ 1257.936827] active_anon 81920
[ 1257.937107] inactive_file 4096
[ 1257.937373] active_file 0
[ 1257.937600] unevictable 0
[ 1257.937833] slab_reclaimable 965920
[ 1257.938155] slab_unreclaimable 1112288
[ 1257.938475] slab 2078208
[ 1257.938709] workingset_refault_anon 0
[ 1257.939050] workingset_refault_file 1
[ 1257.939365] workingset_activate_anon 0
[ 1257.939681] workingset_activate_file 0
[ 1257.940025] workingset_restore_anon 0
[ 1257.940336] workingset_restore_file 0
[ 1257.940646] workingset_nodereclaim 0
[ 1257.940970] pgdemote_kswapd 0
[ 1257.941236] pgdemote_direct 0
[ 1257.941497] pgdemote_khugepaged 0
[ 1257.941784] pgdemote_proactive 0
[ 1257.942085] pgscan 909
[ 1257.942302] pgsteal 77
[ 1257.942521] pswpin 0
[ 1257.942723] pswpout 0
[ 1257.942955] pgscan_kswapd 0
[ 1257.943220] pgscan_direct 909
[ 1257.943492] pgscan_khugepaged 0
[ 1257.943783] pgscan_proactive 0
[ 1257.944086] pgsteal_kswapd 0
[ 1257.944351] pgsteal_direct 77
[ 1257.944633] pgsteal_khugepaged 0
[ 1257.944962] pgsteal_proactive 0
[ 1257.945251] pgfault 87864
[ 1257.945503] pgmajfault 3
[ 1257.945743] pgrefill 900
[ 1257.946004] pgactivate 981
[ 1257.946250] pgdeactivate 900
[ 1257.946530] pglazyfree 0
[ 1257.946766] pglazyfreed 0
[ 1257.947035] swpin_zero 0
[ 1257.947266] swpout_zero 0
[ 1257.947517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10925,uid=0
[ 1257.948790] Memory cgroup out of memory: Killed process 10925 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:15 executing program 6:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
shmat(r0, &(0x7f0000aae000/0x2000)=nil, 0x5000)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x3000)

13:03:15 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:15 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000080)='./file1\x00')

13:03:15 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
r2 = shmget(0x1, 0x4000, 0x78000000, &(0x7f0000b35000/0x4000)=nil)
shmat(r2, &(0x7f000064a000/0x3000)=nil, 0x0)
shmdt(r1)

13:03:15 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x5000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:15 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r3)
shmdt(r3)
shmdt(r1)

13:03:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1268.560535] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1268.561723] CPU: 1 UID: 0 PID: 10944 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1268.561740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1268.561747] Call Trace:
[ 1268.561752]  <TASK>
[ 1268.561756]  dump_stack_lvl+0xfa/0x120
[ 1268.561783]  dump_header+0x107/0x950
[ 1268.561807]  oom_kill_process+0x278/0xa00
[ 1268.561828]  out_of_memory+0x34b/0x1690
[ 1268.561853]  ? __pfx_out_of_memory+0x10/0x10
[ 1268.561884]  mem_cgroup_out_of_memory+0x164/0x190
[ 1268.561897]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1268.561915]  ? mark_held_locks+0x49/0x80
[ 1268.561935]  try_charge_memcg+0x81f/0xf30
[ 1268.561959]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1268.561983]  charge_memcg+0x7b/0x290
[ 1268.562000]  __mem_cgroup_charge+0x28/0x90
[ 1268.562019]  do_wp_page+0x56e/0x31f0
[ 1268.562044]  ? __pfx_do_wp_page+0x10/0x10
[ 1268.562061]  ? do_raw_spin_lock+0x123/0x260
[ 1268.562078]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1268.562093]  ? ___pte_offset_map+0x176/0x370
[ 1268.562113]  __handle_mm_fault+0xde1/0x30f0
[ 1268.562131]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1268.562149]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1268.562166]  ? lock_release+0x121/0x290
[ 1268.562197]  handle_mm_fault+0x2c3/0x900
[ 1268.562215]  ? access_error+0x17d/0x380
[ 1268.562230]  do_user_addr_fault+0x4fa/0xeb0
[ 1268.562249]  exc_page_fault+0xb0/0x180
[ 1268.562268]  asm_exc_page_fault+0x26/0x30
[ 1268.562280] RIP: 0033:0x7fc67e13aecd
[ 1268.562290] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1268.562302] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1268.562312] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1268.562319] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1268.562327] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1268.562334] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1268.562342] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000135a29
[ 1268.562357]  ? do_syscall_64+0x12c/0x360
[ 1268.562379]  </TASK>
[ 1268.580160] memory: usage 307200kB, limit 307200kB, failcnt 937
[ 1268.580641] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:15 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:15 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x41)
close_range(r0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x1f, 0x2, 0x7, 0xffffffff, 0x2, 0x6, 0x9, 0x367, 0x40, 0x1d7, 0x7, 0x9, 0x38, 0x1, 0x9, 0x200, 0x1}, [{0x3, 0x5, 0x4, 0x47, 0x3, 0x7, 0x800, 0x6}, {0x6, 0x8, 0x1, 0x1, 0x2, 0x2}], "31bd69d61016c224ac64a3ac60ae76b42fc88ec850878468196f2a5c5fd7bc76af4f99a0327f8c68bc0bd1f5574f9864c171b3ba11237d224ab9c5c97491e3a1a5db989bde524f91636410908d", ['\x00', '\x00', '\x00']}, 0x3fd)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1268.581346] Memory cgroup stats for /syz0:
[ 1268.616175] anon 1134592
[ 1268.617300] file 309952512
[ 1268.617812] kernel 3485696
[ 1268.618392] kernel_stack 360448
[ 1268.619014] pagetables 1372160
[ 1268.619596] sec_pagetables 0
[ 1268.620116] percpu 640
[ 1268.620501] sock 0
[ 1268.620852] vmalloc 0
[ 1268.621259] shmem 309952512
[ 1268.621717] file_mapped 0
[ 1268.622168] file_dirty 0
[ 1268.622574] file_writeback 0
[ 1268.623126] swapcached 0
[ 1268.623540] inactive_anon 310886400
[ 1268.624143] active_anon 200704
[ 1268.624795] inactive_file 0
[ 1268.625272] active_file 0
[ 1268.625925] unevictable 0
[ 1268.626354] slab_reclaimable 970952
[ 1268.627131] slab_unreclaimable 789936
[ 1268.627711] slab 1760888
[ 1268.628154] workingset_refault_anon 0
[ 1268.628725] workingset_refault_file 0
[ 1268.629318] workingset_activate_anon 0
[ 1268.629956] workingset_activate_file 0
[ 1268.633164] workingset_restore_anon 0
[ 1268.635945] workingset_restore_file 0
[ 1268.636520] workingset_nodereclaim 0
[ 1268.637372] pgdemote_kswapd 0
[ 1268.638052] pgdemote_direct 0
[ 1268.638527] pgdemote_khugepaged 0
[ 1268.639120] pgdemote_proactive 0
[ 1268.639633] pgscan 367
[ 1268.640073] pgsteal 76
[ 1268.640454] pswpin 0
[ 1268.640821] pswpout 0
[ 1268.641227] pgscan_kswapd 0
[ 1268.641676] pgscan_direct 367
[ 1268.642179] pgscan_khugepaged 0
[ 1268.642696] pgscan_proactive 0
[ 1268.643219] pgsteal_kswapd 0
[ 1268.643694] pgsteal_direct 76
[ 1268.644208] pgsteal_khugepaged 0
[ 1268.644734] pgsteal_proactive 0
[ 1268.645317] pgfault 87702
[ 1268.645749] pgmajfault 0
[ 1268.646228] pgrefill 275
[ 1268.646657] pgactivate 365
[ 1268.647140] pgdeactivate 278
[ 1268.647598] pglazyfree 0
[ 1268.648065] pglazyfreed 0
[ 1268.648483] swpin_zero 0
[ 1268.648935] swpout_zero 0
[ 1268.649353] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10944,uid=0
[ 1268.651605] Memory cgroup out of memory: Killed process 10944 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:15 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080))
unlink(&(0x7f0000000000)='./file1\x00')

[ 1268.805803] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1268.806632] CPU: 1 UID: 0 PID: 10943 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1268.806663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1268.806670] Call Trace:
[ 1268.806675]  <TASK>
[ 1268.806680]  dump_stack_lvl+0xfa/0x120
[ 1268.806707]  dump_header+0x107/0x950
[ 1268.806732]  oom_kill_process+0x278/0xa00
[ 1268.806752]  out_of_memory+0x34b/0x1690
[ 1268.806774]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1268.806792]  ? __pfx_out_of_memory+0x10/0x10
[ 1268.806817]  mem_cgroup_out_of_memory+0x164/0x190
[ 1268.806830]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1268.806848]  ? mark_held_locks+0x49/0x80
[ 1268.806867]  try_charge_memcg+0x81f/0xf30
[ 1268.806891]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1268.806915]  charge_memcg+0x7b/0x290
[ 1268.806932]  __mem_cgroup_charge+0x28/0x90
[ 1268.806951]  do_wp_page+0x56e/0x31f0
[ 1268.806975]  ? __pfx_do_wp_page+0x10/0x10
[ 1268.806993]  ? do_raw_spin_lock+0x123/0x260
[ 1268.807009]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1268.807024]  ? ___pte_offset_map+0x176/0x370
[ 1268.807044]  __handle_mm_fault+0xde1/0x30f0
[ 1268.807062]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1268.807079]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1268.807096]  ? lock_release+0x121/0x290
[ 1268.807127]  handle_mm_fault+0x2c3/0x900
[ 1268.807145]  ? access_error+0x17d/0x380
[ 1268.807160]  do_user_addr_fault+0x4fa/0xeb0
[ 1268.807178]  exc_page_fault+0xb0/0x180
[ 1268.807197]  asm_exc_page_fault+0x26/0x30
[ 1268.807209] RIP: 0033:0x7f88ae9c7ecd
[ 1268.807220] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1268.807232] RSP: 002b:00007fffea055290 EFLAGS: 00010202
[ 1268.807242] RAX: 0000000000000001 RBX: 00007f88aeb2ff60 RCX: 0000000000000024
[ 1268.807250] RDX: 0000001b2d6200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1268.807257] RBP: 0000001b2d620014 R08: 0000001b2e620000 R09: 0000001b2d62001c
[ 1268.807265] R10: 0000000000000024 R11: 0000000064504028 R12: 00007f88aeb2ff60
[ 1268.807272] R13: 0000001b2d620000 R14: 00007f88aeb2ff60 R15: 0000000000135a59
[ 1268.807288]  ? do_syscall_64+0x12c/0x360
[ 1268.807310]  </TASK>
[ 1268.823654] memory: usage 307200kB, limit 307200kB, failcnt 635
[ 1268.824159] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:15 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x528}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x824}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87396d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
mlockall(0x2)
r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r3)

[ 1268.824649] Memory cgroup stats for /syz7:
[ 1268.874155] anon 1503232
[ 1268.874758] file 308297728
[ 1268.875169] kernel 4771840
[ 1268.875406] kernel_stack 557056
[ 1268.875673] pagetables 2162688
[ 1268.876076] sec_pagetables 0
[ 1268.876328] percpu 1024
[ 1268.876538] sock 0
[ 1268.876718] vmalloc 0
[ 1268.877002] shmem 308293632
[ 1268.877244] file_mapped 0
[ 1268.877466] file_dirty 0
[ 1268.877684] file_writeback 0
[ 1268.877955] swapcached 0
[ 1268.878181] inactive_anon 309714944
[ 1268.878472] active_anon 81920
[ 1268.878733] inactive_file 0
[ 1268.878992] active_file 4096
[ 1268.879242] unevictable 0
[ 1268.879472] slab_reclaimable 965920
[ 1268.879760] slab_unreclaimable 1100808
[ 1268.880097] slab 2066728
[ 1268.880314] workingset_refault_anon 0
[ 1268.880616] workingset_refault_file 1
[ 1268.880941] workingset_activate_anon 0
[ 1268.881257] workingset_activate_file 0
[ 1268.881582] workingset_restore_anon 0
[ 1268.881904] workingset_restore_file 0
[ 1268.882209] workingset_nodereclaim 0
[ 1268.882511] pgdemote_kswapd 0
[ 1268.882767] pgdemote_direct 0
[ 1268.883041] pgdemote_khugepaged 0
[ 1268.883322] pgdemote_proactive 0
[ 1268.883593] pgscan 971
[ 1268.883798] pgsteal 77
[ 1268.884024] pswpin 0
[ 1268.884222] pswpout 0
[ 1268.884419] pgscan_kswapd 0
[ 1268.884661] pgscan_direct 971
[ 1268.884934] pgscan_khugepaged 0
[ 1268.885199] pgscan_proactive 0
[ 1268.885464] pgsteal_kswapd 0
[ 1268.885708] pgsteal_direct 77
[ 1268.885982] pgsteal_khugepaged 0
[ 1268.886254] pgsteal_proactive 0
[ 1268.886521] pgfault 87927
[ 1268.886749] pgmajfault 3
[ 1268.886988] pgrefill 962
[ 1268.887209] pgactivate 1044
[ 1268.887442] pgdeactivate 962
[ 1268.887688] pglazyfree 0
[ 1268.887928] pglazyfreed 0
[ 1268.888153] swpin_zero 0
[ 1268.888377] swpout_zero 0
[ 1268.888599] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10943,uid=0
[ 1268.889795] Memory cgroup out of memory: Killed process 10943 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:15 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

[ 1269.011729] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1269.012577] CPU: 1 UID: 0 PID: 10970 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1269.012593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1269.012600] Call Trace:
[ 1269.012605]  <TASK>
[ 1269.012610]  dump_stack_lvl+0xfa/0x120
[ 1269.012636]  dump_header+0x107/0x950
[ 1269.012659]  oom_kill_process+0x278/0xa00
[ 1269.012680]  out_of_memory+0x34b/0x1690
[ 1269.012703]  ? __pfx_out_of_memory+0x10/0x10
[ 1269.012732]  mem_cgroup_out_of_memory+0x164/0x190
[ 1269.012745]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1269.012763]  ? mark_held_locks+0x49/0x80
[ 1269.012783]  try_charge_memcg+0x81f/0xf30
[ 1269.012806]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1269.012830]  charge_memcg+0x7b/0x290
[ 1269.012847]  __mem_cgroup_charge+0x28/0x90
[ 1269.012866]  do_wp_page+0x56e/0x31f0
[ 1269.012891]  ? __pfx_do_wp_page+0x10/0x10
[ 1269.012908]  ? do_raw_spin_lock+0x123/0x260
[ 1269.012924]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1269.012939]  ? ___pte_offset_map+0x176/0x370
[ 1269.012959]  __handle_mm_fault+0xde1/0x30f0
[ 1269.012977]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1269.012994]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1269.013010]  ? lock_release+0x121/0x290
[ 1269.013041]  handle_mm_fault+0x2c3/0x900
[ 1269.013058]  ? access_error+0x17d/0x380
[ 1269.013073]  do_user_addr_fault+0x4fa/0xeb0
[ 1269.013092]  exc_page_fault+0xb0/0x180
[ 1269.013110]  asm_exc_page_fault+0x26/0x30
[ 1269.013122] RIP: 0033:0x7fc67e13dd30
[ 1269.013132] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1269.013143] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1269.013153] RAX: 00000000413566b5 RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1269.013161] RDX: 0000001b2cc20018 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1269.013168] RBP: 0000000000000001 R08: 00000000413566b5 R09: 0000001b2cc2001c
[ 1269.013175] R10: 00000000000006b5 R11: 00000000413566b9 R12: 0000000000000000
[ 1269.013183] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1269.013192]  ? __might_fault+0x1f/0x190
[ 1269.013211]  ? __might_fault+0x1f/0x190
[ 1269.013227]  </TASK>
[ 1269.029408] memory: usage 307200kB, limit 307200kB, failcnt 957
[ 1269.029913] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1269.030401] Memory cgroup stats for /syz0:
[ 1269.031359] anon 1110016
[ 1269.031973] file 309952512
[ 1269.032206] kernel 3510272
[ 1269.032453] kernel_stack 360448
[ 1269.032718] pagetables 1384448
[ 1269.033003] sec_pagetables 0
[ 1269.033251] percpu 704
[ 1269.033457] sock 0
[ 1269.033641] vmalloc 0
[ 1269.033840] shmem 309952512
[ 1269.034106] file_mapped 0
[ 1269.034332] file_dirty 0
[ 1269.034550] file_writeback 0
[ 1269.034809] swapcached 0
[ 1269.035050] inactive_anon 310833152
[ 1269.035344] active_anon 200704
[ 1269.035601] inactive_file 0
[ 1269.035835] active_file 0
[ 1269.036087] unevictable 0
[ 1269.036311] slab_reclaimable 970952
[ 1269.036603] slab_unreclaimable 803088
[ 1269.036935] slab 1774040
[ 1269.037156] workingset_refault_anon 0
[ 1269.037458] workingset_refault_file 0
[ 1269.037765] workingset_activate_anon 0
[ 1269.038095] workingset_activate_file 0
[ 1269.038405] workingset_restore_anon 0
[ 1269.038720] workingset_restore_file 0
[ 1269.039050] workingset_nodereclaim 0
[ 1269.039345] pgdemote_kswapd 0
[ 1269.039595] pgdemote_direct 0
[ 1269.039844] pgdemote_khugepaged 0
[ 1269.041313] pgdemote_proactive 0
[ 1269.041590] pgscan 367
[ 1269.041798] pgsteal 76
[ 1269.042690] pswpin 0
[ 1269.042917] pswpout 0
[ 1269.043117] pgscan_kswapd 0
[ 1269.043351] pgscan_direct 367
[ 1269.043608] pgscan_khugepaged 0
[ 1269.043897] pgscan_proactive 0
[ 1269.044159] pgsteal_kswapd 0
[ 1269.044403] pgsteal_direct 76
[ 1269.044655] pgsteal_khugepaged 0
[ 1269.044946] pgsteal_proactive 0
[ 1269.045214] pgfault 87743
[ 1269.045437] pgmajfault 0
[ 1269.045652] pgrefill 275
[ 1269.045932] pgactivate 365
[ 1269.046272] pgdeactivate 278
[ 1269.046518] pglazyfree 0
[ 1269.046769] pglazyfreed 0
[ 1269.047106] swpin_zero 0
[ 1269.047405] swpout_zero 0
[ 1269.047633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10970,uid=0
[ 1269.048826] Memory cgroup out of memory: Killed process 10970 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
13:03:26 executing program 0:
mlockall(0x0)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
r3 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000cde000/0x3000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
shmat(r2, &(0x7f0000f4a000/0x3000)=nil, 0x3000)

13:03:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x7000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:26 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x140)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="7fbf4da291c01bc34998d581c1746e2fe4d3c7428c2de917254e96883f8f83df993dc8ae803f61b9be892a27e060c2d66ead3b09b80d83ad76e811a280ffbf3a168892fd816146dd21d717fc937bde1c6f9b4c44f5e877abdeb82cabdfb6fa1caf30f7848bec23e45baa89ffc0e162ef7728abc7faae5c84864fa45079a5a34a91f51738e7c91ad18fa6813a9cd8474acb5bcbf16c6f9327842a9cc5f2d18976d4abbafae5ceb6b10c04579894ef7bc5eca58bcd226625a3ae3bb6b0854bcfca6afdc2d2f619585a8738e01e5bfe57a7b15ff45c48a355e8", 0xd8}, {&(0x7f0000000180)="b6b59d75b3206a4a18cd1a9c5f8e24cd802a80e775ccfa4b3bfbfc8a36b474c7875a53c252d02cafe4b31bf0a5e22930d7548ecbd8a8572829174d136bd35a58395e0e8579364ceb85c0eaa58d0c6c6dad7a502edf5f224eab6dfec173050cb99cd0c3625c80c93555f68e517aa749f2a416b9e88566a68e1d8bfb48eeca0afc271f55a6a2c4bc96e85b039043fcc5b4992180d569ad27490350cec3b948c31e113c11e43c4db0b3dde775f06142fd0e92d0ebf517d3445730003b9255", 0xbd}], 0x2, 0x9, 0xfff)

13:03:26 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:26 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:26 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:26 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmat(0x0, &(0x7f0000ebb000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmat(r0, &(0x7f0000966000/0x3000)=nil, 0x1000)
r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmdt(0x0)
r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r3 = shmat(r2, &(0x7f0000ec0000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000b1d000/0x1000)=nil, 0x1000)
shmat(0x0, &(0x7f0000cec000/0x2000)=nil, 0x1000)
shmdt(r3)
r4 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000a59000/0x3000)=nil)
shmat(r4, &(0x7f0000e69000/0x3000)=nil, 0x2000)
r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r6 = shmat(r5, &(0x7f0000cda000/0x4000)=nil, 0x6000)
shmdt(r6)
shmat(r1, &(0x7f0000800000/0x800000)=nil, 0x3000)
mbind(&(0x7f000085f000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7, 0x8, 0x6)
shmdt(r6)

[ 1279.808994] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1279.810073] CPU: 1 UID: 0 PID: 10981 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1279.810095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1279.810104] Call Trace:
[ 1279.810110]  <TASK>
[ 1279.810117]  dump_stack_lvl+0xfa/0x120
[ 1279.810150]  dump_header+0x107/0x950
[ 1279.810182]  oom_kill_process+0x278/0xa00
[ 1279.810210]  out_of_memory+0x34b/0x1690
[ 1279.810243]  ? __pfx_out_of_memory+0x10/0x10
[ 1279.810277]  mem_cgroup_out_of_memory+0x164/0x190
[ 1279.810295]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1279.810320]  ? mark_held_locks+0x49/0x80
[ 1279.810345]  try_charge_memcg+0x81f/0xf30
[ 1279.810378]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1279.810410]  charge_memcg+0x7b/0x290
[ 1279.810433]  __mem_cgroup_charge+0x28/0x90
[ 1279.810459]  do_wp_page+0x56e/0x31f0
[ 1279.810491]  ? __pfx_do_wp_page+0x10/0x10
[ 1279.810514]  ? do_raw_spin_lock+0x123/0x260
[ 1279.810536]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1279.810557]  ? ___pte_offset_map+0x176/0x370
[ 1279.810583]  __handle_mm_fault+0xde1/0x30f0
[ 1279.810608]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1279.810631]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1279.810653]  ? lock_release+0x121/0x290
[ 1279.810695]  handle_mm_fault+0x2c3/0x900
[ 1279.810719]  ? access_error+0x17d/0x380
[ 1279.810740]  do_user_addr_fault+0x4fa/0xeb0
[ 1279.810773]  exc_page_fault+0xb0/0x180
[ 1279.810798]  asm_exc_page_fault+0x26/0x30
[ 1279.810815] RIP: 0033:0x7fc67e13aecd
[ 1279.810827] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1279.810843] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1279.810857] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000012
[ 1279.810867] RDX: 0000001b2cc20068 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1279.810878] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1279.810892] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1279.810902] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000138662
[ 1279.810923]  ? do_syscall_64+0x12c/0x360
[ 1279.810954]  </TASK>
[ 1279.832928] memory: usage 307200kB, limit 307200kB, failcnt 985
[ 1279.832944] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1279.832954] Memory cgroup stats for /syz0:
[ 1279.848037] anon 1134592
[ 1279.848782] file 309952512
[ 1279.849139] kernel 3485696
[ 1279.849446] kernel_stack 360448
[ 1279.849801] pagetables 1372160
[ 1279.849809] sec_pagetables 0
[ 1279.849815] percpu 640
[ 1279.849821] sock 0
[ 1279.849827] vmalloc 0
[ 1279.849833] shmem 309952512
[ 1279.849839] file_mapped 0
[ 1279.849845] file_dirty 0
[ 1279.849851] file_writeback 0
[ 1279.849857] swapcached 0
[ 1279.849863] inactive_anon 310886400
13:03:26 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
mlock(&(0x7f0000e33000/0x3000)=nil, 0x3000)
shmdt(r1)
shmat(r0, &(0x7f000061e000/0x2000)=nil, 0x0)
shmdt(r1)

[ 1279.849870] active_anon 200704
[ 1279.849876] inactive_file 0
13:03:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1279.849918] active_file 0
[ 1279.849925] unevictable 0
13:03:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1279.849931] slab_reclaimable 970952
[ 1279.849937] slab_unreclaimable 789936
[ 1279.849944] slab 1760888
13:03:26 executing program 5:
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1279.849950] workingset_refault_anon 0
[ 1279.849957] workingset_refault_file 0
[ 1279.849963] workingset_activate_anon 0
[ 1279.849970] workingset_activate_file 0
[ 1279.849977] workingset_restore_anon 0
[ 1279.849983] workingset_restore_file 0
[ 1279.849990] workingset_nodereclaim 0
[ 1279.849997] pgdemote_kswapd 0
[ 1279.850003] pgdemote_direct 0
[ 1279.850009] pgdemote_khugepaged 0
[ 1279.850015] pgdemote_proactive 0
[ 1279.850022] pgscan 367
[ 1279.850028] pgsteal 76
[ 1279.850034] pswpin 0
[ 1279.850039] pswpout 0
[ 1279.850045] pgscan_kswapd 0
[ 1279.850051] pgscan_direct 367
[ 1279.850057] pgscan_khugepaged 0
[ 1279.850063] pgscan_proactive 0
[ 1279.850070] pgsteal_kswapd 0
[ 1279.850076] pgsteal_direct 76
[ 1279.850083] pgsteal_khugepaged 0
[ 1279.850089] pgsteal_proactive 0
[ 1279.850095] pgfault 87797
[ 1279.850101] pgmajfault 0
[ 1279.850107] pgrefill 275
[ 1279.850113] pgactivate 365
[ 1279.850119] pgdeactivate 278
[ 1279.850125] pglazyfree 0
[ 1279.850131] pglazyfreed 0
[ 1279.850137] swpin_zero 0
[ 1279.850143] swpout_zero 0
[ 1279.850150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10981,uid=0
[ 1279.850253] Memory cgroup out of memory: Killed process 10981 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1280.093803] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1280.095654] CPU: 0 UID: 0 PID: 10984 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1280.095686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1280.095700] Call Trace:
[ 1280.095709]  <TASK>
[ 1280.095719]  dump_stack_lvl+0xfa/0x120
[ 1280.095763]  dump_header+0x107/0x950
[ 1280.095808]  oom_kill_process+0x278/0xa00
[ 1280.095849]  out_of_memory+0x34b/0x1690
[ 1280.095904]  ? __pfx_out_of_memory+0x10/0x10
[ 1280.095956]  mem_cgroup_out_of_memory+0x164/0x190
[ 1280.095986]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1280.096023]  ? mark_held_locks+0x49/0x80
[ 1280.096060]  try_charge_memcg+0x81f/0xf30
[ 1280.096107]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1280.096156]  charge_memcg+0x7b/0x290
[ 1280.096191]  __mem_cgroup_charge+0x28/0x90
[ 1280.096228]  do_wp_page+0x56e/0x31f0
[ 1280.096276]  ? __pfx_do_wp_page+0x10/0x10
[ 1280.096311]  ? do_raw_spin_lock+0x123/0x260
[ 1280.096344]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1280.096375]  ? ___pte_offset_map+0x176/0x370
[ 1280.096414]  __handle_mm_fault+0xde1/0x30f0
[ 1280.096451]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1280.096484]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1280.096519]  ? lock_release+0x121/0x290
[ 1280.096582]  handle_mm_fault+0x2c3/0x900
[ 1280.096618]  ? access_error+0x17d/0x380
[ 1280.096650]  do_user_addr_fault+0x4fa/0xeb0
[ 1280.096687]  exc_page_fault+0xb0/0x180
[ 1280.096724]  asm_exc_page_fault+0x26/0x30
[ 1280.096748] RIP: 0033:0x7f88ae9c7ecd
[ 1280.096769] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1280.096793] RSP: 002b:00007fffea055290 EFLAGS: 00010202
[ 1280.096813] RAX: 0000000000000001 RBX: 00007f88aeb2ff60 RCX: 0000000000000024
[ 1280.096828] RDX: 0000001b2d6200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1280.096843] RBP: 0000001b2d620014 R08: 0000001b2e620000 R09: 0000001b2d62001c
[ 1280.096859] R10: 0000000000000024 R11: 0000000064504028 R12: 00007f88aeb2ff60
[ 1280.096873] R13: 0000001b2d620000 R14: 00007f88aeb2ff60 R15: 0000000000138689
[ 1280.096905]  ? do_syscall_64+0x12c/0x360
[ 1280.096950]  </TASK>
[ 1280.132036] memory: usage 307200kB, limit 307200kB, failcnt 657
[ 1280.134823] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:27 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

[ 1280.135827] Memory cgroup stats for /syz7:
[ 1280.190106] anon 1503232
[ 1280.191499] file 308297728
[ 1280.191979] kernel 4771840
[ 1280.192419] kernel_stack 557056
[ 1280.192954] pagetables 2162688
[ 1280.193442] sec_pagetables 0
[ 1280.193973] percpu 1024
[ 1280.194519] sock 0
[ 1280.194940] vmalloc 0
[ 1280.195437] shmem 308293632
[ 1280.195878] file_mapped 0
[ 1280.196546] file_dirty 0
[ 1280.197189] file_writeback 0
[ 1280.197649] swapcached 0
[ 1280.198312] inactive_anon 309714944
[ 1280.198975] active_anon 81920
[ 1280.199559] inactive_file 0
[ 1280.200073] active_file 4096
[ 1280.200655] unevictable 0
[ 1280.201102] slab_reclaimable 965920
[ 1280.204835] slab_unreclaimable 1100808
[ 1280.207683] slab 2066728
[ 1280.208135] workingset_refault_anon 0
[ 1280.208949] workingset_refault_file 1
[ 1280.209551] workingset_activate_anon 0
[ 1280.210309] workingset_activate_file 0
[ 1280.211035] workingset_restore_anon 0
[ 1280.211716] workingset_restore_file 0
[ 1280.212324] workingset_nodereclaim 0
[ 1280.213143] pgdemote_kswapd 0
[ 1280.213626] pgdemote_direct 0
[ 1280.214146] pgdemote_khugepaged 0
[ 1280.214833] pgdemote_proactive 0
[ 1280.215470] pgscan 1014
[ 1280.215997] pgsteal 77
[ 1280.216389] pswpin 0
[ 1280.216750] pswpout 0
[ 1280.217157] pgscan_kswapd 0
[ 1280.217604] pgscan_direct 1014
[ 1280.218331] pgscan_khugepaged 0
[ 1280.218847] pgscan_proactive 0
[ 1280.219581] pgsteal_kswapd 0
[ 1280.220106] pgsteal_direct 77
[ 1280.220708] pgsteal_khugepaged 0
[ 1280.221252] pgsteal_proactive 0
[ 1280.221757] pgfault 87983
[ 1280.222405] pgmajfault 3
[ 1280.222832] pgrefill 1026
[ 1280.223285] pgactivate 1109
[ 1280.223823] pgdeactivate 1026
[ 1280.224408] pglazyfree 0
[ 1280.225057] pglazyfreed 0
[ 1280.225484] swpin_zero 0
[ 1280.226099] swpout_zero 0
[ 1280.226546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=10984,uid=0
[ 1280.228942] Memory cgroup out of memory: Killed process 10984 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1280.414656] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1280.415639] CPU: 1 UID: 0 PID: 11010 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1280.415656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1280.415664] Call Trace:
[ 1280.415669]  <TASK>
[ 1280.415673]  dump_stack_lvl+0xfa/0x120
[ 1280.415701]  dump_header+0x107/0x950
[ 1280.415725]  oom_kill_process+0x278/0xa00
[ 1280.415746]  out_of_memory+0x34b/0x1690
[ 1280.415774]  ? __pfx_out_of_memory+0x10/0x10
[ 1280.415799]  mem_cgroup_out_of_memory+0x164/0x190
[ 1280.415813]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1280.415831]  ? mark_held_locks+0x49/0x80
[ 1280.415850]  try_charge_memcg+0x81f/0xf30
[ 1280.415875]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1280.415903]  charge_memcg+0x7b/0x290
[ 1280.415920]  __mem_cgroup_charge+0x28/0x90
[ 1280.415940]  do_wp_page+0x56e/0x31f0
[ 1280.415964]  ? __pfx_do_wp_page+0x10/0x10
[ 1280.415982]  ? do_raw_spin_lock+0x123/0x260
[ 1280.415998]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1280.416014]  ? ___pte_offset_map+0x176/0x370
[ 1280.416034]  __handle_mm_fault+0xde1/0x30f0
[ 1280.416052]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1280.416070]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1280.416087]  ? lock_release+0x121/0x290
[ 1280.416117]  handle_mm_fault+0x2c3/0x900
[ 1280.416135]  ? access_error+0x17d/0x380
[ 1280.416151]  do_user_addr_fault+0x4fa/0xeb0
[ 1280.416169]  exc_page_fault+0xb0/0x180
[ 1280.416188]  asm_exc_page_fault+0x26/0x30
[ 1280.416200] RIP: 0033:0x7fc67e13dd30
[ 1280.416211] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1280.416222] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1280.416232] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1280.416240] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1280.416247] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1280.416255] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1280.416262] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1280.416270]  ? __might_fault+0x1f/0x190
[ 1280.416289]  ? __might_fault+0x1f/0x190
[ 1280.416306]  </TASK>
[ 1280.432908] memory: usage 307200kB, limit 307200kB, failcnt 1007
[ 1280.433530] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1280.434147] Memory cgroup stats for /syz0:
[ 1280.434242] anon 1118208
[ 1280.434805] file 309952512
[ 1280.435156] kernel 3502080
[ 1280.435391] kernel_stack 360448
[ 1280.435658] pagetables 1376256
[ 1280.435951] sec_pagetables 0
[ 1280.436200] percpu 704
[ 1280.436406] sock 0
[ 1280.436589] vmalloc 0
[ 1280.436786] shmem 309952512
[ 1280.437060] file_mapped 0
[ 1280.437285] file_dirty 0
[ 1280.437505] file_writeback 0
[ 1280.437753] swapcached 0
[ 1280.437999] inactive_anon 310870016
[ 1280.438298] active_anon 200704
[ 1280.438557] inactive_file 0
[ 1280.438808] active_file 0
[ 1280.439059] unevictable 0
[ 1280.439290] slab_reclaimable 970952
[ 1280.439578] slab_unreclaimable 801944
[ 1280.439906] slab 1772896
[ 1280.440127] workingset_refault_anon 0
[ 1280.440439] workingset_refault_file 0
[ 1280.440744] workingset_activate_anon 0
[ 1280.441089] workingset_activate_file 0
[ 1280.441406] workingset_restore_anon 0
[ 1280.441712] workingset_restore_file 0
[ 1280.442047] workingset_nodereclaim 0
[ 1280.442351] pgdemote_kswapd 0
[ 1280.442606] pgdemote_direct 0
[ 1280.442871] pgdemote_khugepaged 0
[ 1280.443180] pgdemote_proactive 0
[ 1280.443453] pgscan 367
[ 1280.443656] pgsteal 76
[ 1280.443861] pswpin 0
[ 1280.444087] pswpout 0
[ 1280.444295] pgscan_kswapd 0
[ 1280.444536] pgscan_direct 367
[ 1280.444791] pgscan_khugepaged 0
[ 1280.445086] pgscan_proactive 0
[ 1280.445345] pgsteal_kswapd 0
[ 1280.445604] pgsteal_direct 76
[ 1280.445864] pgsteal_khugepaged 0
[ 1280.446187] pgsteal_proactive 0
[ 1280.446454] pgfault 87844
[ 1280.446677] pgmajfault 0
[ 1280.446927] pgrefill 275
[ 1280.447145] pgactivate 365
[ 1280.447378] pgdeactivate 278
[ 1280.447623] pglazyfree 0
[ 1280.447839] pglazyfreed 0
[ 1280.448092] swpin_zero 0
[ 1280.448315] swpout_zero 0
[ 1280.448538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11010,uid=0
[ 1280.449714] Memory cgroup out of memory: Killed process 11010 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:38 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
lseek(r0, 0x1e89a650, 0x1)

13:03:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x14000000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:38 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x54000000, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r1)
shmdt(r1)

13:03:38 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f00005f0000/0x4000)=nil, 0x3000)
shmdt(0x0)
r2 = shmget(0x3, 0x2000, 0x80, &(0x7f0000b8b000/0x2000)=nil)
shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x6000)
shmdt(r1)
r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f00004e1000/0x1000)=nil)
shmat(r3, &(0x7f0000c8d000/0x2000)=nil, 0x0)

13:03:38 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:38 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:38 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x82020000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:38 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x430340)

[ 1291.344517] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1291.345587] CPU: 1 UID: 0 PID: 11033 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1291.345605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1291.345612] Call Trace:
[ 1291.345617]  <TASK>
[ 1291.345622]  dump_stack_lvl+0xfa/0x120
[ 1291.345649]  dump_header+0x107/0x950
[ 1291.345673]  oom_kill_process+0x278/0xa00
[ 1291.345694]  out_of_memory+0x34b/0x1690
[ 1291.345711]  ? perf_trace_lock+0xb5/0x5d0
[ 1291.345731]  ? __pfx_out_of_memory+0x10/0x10
[ 1291.345752]  ? do_raw_spin_lock+0x123/0x260
[ 1291.345772]  mem_cgroup_out_of_memory+0x164/0x190
[ 1291.345785]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1291.345803]  ? mark_held_locks+0x49/0x80
[ 1291.345821]  try_charge_memcg+0x81f/0xf30
[ 1291.345845]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1291.345869]  charge_memcg+0x7b/0x290
[ 1291.345891]  __mem_cgroup_charge+0x28/0x90
[ 1291.345910]  do_wp_page+0x56e/0x31f0
[ 1291.345934]  ? __pfx_do_wp_page+0x10/0x10
[ 1291.345952]  ? do_raw_spin_lock+0x123/0x260
[ 1291.345968]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1291.345983]  ? ___pte_offset_map+0x176/0x370
[ 1291.346003]  __handle_mm_fault+0xde1/0x30f0
[ 1291.346021]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1291.346039]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1291.346055]  ? lock_release+0x121/0x290
[ 1291.346086]  handle_mm_fault+0x2c3/0x900
[ 1291.346104]  ? access_error+0x17d/0x380
[ 1291.346120]  do_user_addr_fault+0x4fa/0xeb0
[ 1291.346138]  exc_page_fault+0xb0/0x180
[ 1291.346157]  asm_exc_page_fault+0x26/0x30
[ 1291.346169] RIP: 0033:0x7fc67e13aecd
[ 1291.346180] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1291.346190] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1291.346200] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1291.346208] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1291.346215] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1291.346223] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1291.346230] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000013b2ea
[ 1291.346246]  ? do_syscall_64+0x12c/0x360
[ 1291.346268]  </TASK>
[ 1291.365147] memory: usage 307200kB, limit 307200kB, failcnt 1037
[ 1291.365637] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1291.366929] Memory cgroup stats for /syz0:
[ 1291.394007] anon 1134592
[ 1291.394565] file 309952512
[ 1291.394796] kernel 3485696
[ 1291.395242] kernel_stack 360448
[ 1291.395514] pagetables 1372160
[ 1291.395776] sec_pagetables 0
[ 1291.396213] percpu 640
[ 1291.396421] sock 0
[ 1291.396600] vmalloc 0
[ 1291.396795] shmem 309952512
[ 1291.397142] file_mapped 0
[ 1291.397369] file_dirty 0
[ 1291.397584] file_writeback 0
[ 1291.397826] swapcached 0
[ 1291.398074] inactive_anon 310886400
[ 1291.398364] active_anon 200704
[ 1291.398620] inactive_file 0
[ 1291.398860] active_file 0
[ 1291.399116] unevictable 0
[ 1291.399344] slab_reclaimable 970952
[ 1291.399631] slab_unreclaimable 789936
[ 1291.399963] slab 1760888
[ 1291.400184] workingset_refault_anon 0
[ 1291.400480] workingset_refault_file 0
[ 1291.400783] workingset_activate_anon 0
[ 1291.401152] workingset_activate_file 0
[ 1291.401563] workingset_restore_anon 0
[ 1291.401865] workingset_restore_file 0
[ 1291.402200] workingset_nodereclaim 0
[ 1291.402499] pgdemote_kswapd 0
[ 1291.402753] pgdemote_direct 0
[ 1291.403034] pgdemote_khugepaged 0
[ 1291.403314] pgdemote_proactive 0
[ 1291.403583] pgscan 367
[ 1291.403785] pgsteal 76
[ 1291.404011] pswpin 0
[ 1291.404203] pswpout 0
[ 1291.404404] pgscan_kswapd 0
[ 1291.404640] pgscan_direct 367
[ 1291.404919] pgscan_khugepaged 0
[ 1291.405184] pgscan_proactive 0
[ 1291.405443] pgsteal_kswapd 0
[ 1291.405686] pgsteal_direct 76
[ 1291.405979] pgsteal_khugepaged 0
[ 1291.406250] pgsteal_proactive 0
[ 1291.406516] pgfault 87898
[ 1291.406738] pgmajfault 0
[ 1291.406985] pgrefill 275
[ 1291.407200] pgactivate 365
[ 1291.407427] pgdeactivate 278
[ 1291.407675] pglazyfree 0
[ 1291.407918] pglazyfreed 0
[ 1291.408143] swpin_zero 0
[ 1291.408361] swpout_zero 0
[ 1291.408583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11033,uid=0
[ 1291.409807] Memory cgroup out of memory: Killed process 11033 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1291.411381] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1291.413302] CPU: 0 UID: 0 PID: 11034 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1291.413335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1291.413348] Call Trace:
[ 1291.413357]  <TASK>
[ 1291.413367]  dump_stack_lvl+0xfa/0x120
[ 1291.413411]  dump_header+0x107/0x950
[ 1291.413455]  oom_kill_process+0x278/0xa00
[ 1291.413497]  out_of_memory+0x34b/0x1690
[ 1291.413545]  ? __pfx_out_of_memory+0x10/0x10
[ 1291.413601]  mem_cgroup_out_of_memory+0x164/0x190
[ 1291.413627]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1291.413664]  ? mark_held_locks+0x49/0x80
[ 1291.413700]  try_charge_memcg+0x81f/0xf30
[ 1291.413748]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1291.413797]  charge_memcg+0x7b/0x290
[ 1291.413832]  __mem_cgroup_charge+0x28/0x90
[ 1291.413870]  do_wp_page+0x56e/0x31f0
[ 1291.413926]  ? __pfx_do_wp_page+0x10/0x10
[ 1291.413961]  ? do_raw_spin_lock+0x123/0x260
[ 1291.413994]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1291.414026]  ? ___pte_offset_map+0x176/0x370
[ 1291.414066]  __handle_mm_fault+0xde1/0x30f0
[ 1291.414102]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1291.414137]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1291.414171]  ? lock_release+0x121/0x290
[ 1291.414234]  handle_mm_fault+0x2c3/0x900
[ 1291.414270]  ? access_error+0x17d/0x380
[ 1291.414302]  do_user_addr_fault+0x4fa/0xeb0
[ 1291.414339]  exc_page_fault+0xb0/0x180
[ 1291.414376]  asm_exc_page_fault+0x26/0x30
[ 1291.414400] RIP: 0033:0x7f88ae9c7ecd
[ 1291.414420] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1291.414443] RSP: 002b:00007fffea055290 EFLAGS: 00010202
[ 1291.414463] RAX: 0000000000000001 RBX: 00007f88aeb2ff60 RCX: 0000000000000024
[ 1291.414479] RDX: 0000001b2d6200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1291.414494] RBP: 0000001b2d620014 R08: 0000001b2e620000 R09: 0000001b2d62001c
[ 1291.414510] R10: 0000000000000024 R11: 0000000064504028 R12: 00007f88aeb2ff60
[ 1291.414524] R13: 0000001b2d620000 R14: 00007f88aeb2ff60 R15: 000000000013b325
[ 1291.414556]  ? do_syscall_64+0x12c/0x360
[ 1291.414599]  </TASK>
[ 1291.447962] memory: usage 307200kB, limit 307200kB, failcnt 680
[ 1291.449190] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1291.450229] Memory cgroup stats for /syz7:
[ 1291.487114] anon 1503232
[ 1291.488345] file 308297728
[ 1291.489035] kernel 4771840
[ 1291.489520] kernel_stack 557056
[ 1291.490444] pagetables 2162688
[ 1291.491059] sec_pagetables 0
[ 1291.491574] percpu 1024
[ 1291.492050] sock 0
[ 1291.492424] vmalloc 0
[ 1291.492836] shmem 308293632
[ 1291.493534] file_mapped 0
[ 1291.494224] file_dirty 4096
[ 1291.494724] file_writeback 0
[ 1291.495280] swapcached 0
[ 1291.495732] inactive_anon 309714944
[ 1291.496402] active_anon 81920
[ 1291.497066] inactive_file 0
[ 1291.497769] active_file 4096
[ 1291.498319] unevictable 0
[ 1291.498786] slab_reclaimable 965920
[ 1291.499429] slab_unreclaimable 1100808
[ 1291.500103] slab 2066728
[ 1291.500555] workingset_refault_anon 0
[ 1291.501216] workingset_refault_file 1
[ 1291.501848] workingset_activate_anon 0
[ 1291.502521] workingset_activate_file 0
[ 1291.503199] workingset_restore_anon 0
[ 1291.503832] workingset_restore_file 0
[ 1291.504493] workingset_nodereclaim 0
[ 1291.505137] pgdemote_kswapd 0
[ 1291.505662] pgdemote_direct 0
[ 1291.506221] pgdemote_khugepaged 0
[ 1291.506816] pgdemote_proactive 0
[ 1291.507424] pgscan 1046
[ 1291.508063] pgsteal 77
[ 1291.508495] pswpin 0
[ 1291.509091] pswpout 0
[ 1291.509507] pgscan_kswapd 0
[ 1291.510026] pgscan_direct 1046
13:03:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140), &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1291.511280] pgscan_khugepaged 0
[ 1291.511844] pgscan_proactive 0
[ 1291.512430] pgsteal_kswapd 0
[ 1291.513160] pgsteal_direct 77
[ 1291.513691] pgsteal_khugepaged 0
[ 1291.514280] pgsteal_proactive 0
[ 1291.514834] pgfault 88039
[ 1291.515345] pgmajfault 3
[ 1291.515801] pgrefill 1073
[ 1291.516293] pgactivate 1156
[ 1291.517039] pgdeactivate 1073
[ 1291.517573] pglazyfree 0
[ 1291.518230] pglazyfreed 0
[ 1291.518698] swpin_zero 0
[ 1291.519194] swpout_zero 0
[ 1291.519839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11034,uid=0
[ 1291.522520] Memory cgroup out of memory: Killed process 11034 (syz-executor.7) total-vm:93420kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:38 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil)
shmdt(0x0)
shmdt(r1)

13:03:38 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x40000)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1291.784794] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1291.785638] CPU: 1 UID: 0 PID: 11064 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1291.785655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1291.785663] Call Trace:
[ 1291.785668]  <TASK>
[ 1291.785673]  dump_stack_lvl+0xfa/0x120
[ 1291.785699]  dump_header+0x107/0x950
[ 1291.785723]  oom_kill_process+0x278/0xa00
[ 1291.785743]  out_of_memory+0x34b/0x1690
[ 1291.785767]  ? __pfx_out_of_memory+0x10/0x10
[ 1291.785796]  mem_cgroup_out_of_memory+0x164/0x190
[ 1291.785809]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1291.785827]  ? mark_held_locks+0x49/0x80
[ 1291.785846]  try_charge_memcg+0x81f/0xf30
[ 1291.785870]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1291.785895]  charge_memcg+0x7b/0x290
[ 1291.785911]  __mem_cgroup_charge+0x28/0x90
[ 1291.785931]  do_wp_page+0x56e/0x31f0
[ 1291.785955]  ? __pfx_do_wp_page+0x10/0x10
[ 1291.785972]  ? do_raw_spin_lock+0x123/0x260
[ 1291.785989]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1291.786004]  ? ___pte_offset_map+0x176/0x370
[ 1291.786024]  __handle_mm_fault+0xde1/0x30f0
[ 1291.786042]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1291.786060]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1291.786076]  ? lock_release+0x121/0x290
[ 1291.786107]  handle_mm_fault+0x2c3/0x900
[ 1291.786125]  ? access_error+0x17d/0x380
[ 1291.786140]  do_user_addr_fault+0x4fa/0xeb0
[ 1291.786159]  exc_page_fault+0xb0/0x180
[ 1291.786178]  asm_exc_page_fault+0x26/0x30
[ 1291.786190] RIP: 0033:0x7f88ae9cad30
[ 1291.786200] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1291.786213] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1291.786223] RAX: 0000000084f5f5de RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1291.786231] RDX: 0000001b2d620030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1291.786239] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2d62001c
[ 1291.786247] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1291.786254] R13: 00007f88aeb24000 R14: ffffffff819c2fdf R15: 00007f88aeb2fff0
[ 1291.786263]  ? __might_fault+0x1f/0x190
[ 1291.786283]  ? __might_fault+0x1f/0x190
[ 1291.786299]  </TASK>
[ 1291.802828] memory: usage 307200kB, limit 307200kB, failcnt 699
[ 1291.803584] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140), &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1291.804120] Memory cgroup stats for /syz7:
[ 1291.807354] anon 1486848
[ 1291.808126] file 308297728
[ 1291.808354] kernel 4788224
[ 1291.808582] kernel_stack 557056
[ 1291.808846] pagetables 2166784
[ 1291.809250] sec_pagetables 0
[ 1291.809499] percpu 1088
[ 1291.809709] sock 0
[ 1291.809945] vmalloc 0
[ 1291.810145] shmem 308293632
[ 1291.810378] file_mapped 0
[ 1291.810600] file_dirty 4096
[ 1291.810836] file_writeback 0
[ 1291.811109] swapcached 0
[ 1291.811329] inactive_anon 309698560
[ 1291.811623] active_anon 81920
[ 1291.811876] inactive_file 0
[ 1291.812200] active_file 4096
[ 1291.812531] unevictable 0
[ 1291.812804] slab_reclaimable 965920
[ 1291.813307] slab_unreclaimable 1112816
[ 1291.813619] slab 2078736
[ 1291.813835] workingset_refault_anon 0
[ 1291.814265] workingset_refault_file 1
[ 1291.814571] workingset_activate_anon 0
[ 1291.815029] workingset_activate_file 0
[ 1291.815340] workingset_restore_anon 0
[ 1291.815641] workingset_restore_file 0
[ 1291.816049] workingset_nodereclaim 0
[ 1291.816347] pgdemote_kswapd 0
[ 1291.816595] pgdemote_direct 0
[ 1291.816845] pgdemote_khugepaged 0
[ 1291.817151] pgdemote_proactive 0
[ 1291.817426] pgscan 1073
[ 1291.817635] pgsteal 77
[ 1291.817839] pswpin 0
[ 1291.818072] pswpout 0
[ 1291.818273] pgscan_kswapd 0
[ 1291.818509] pgscan_direct 1073
[ 1291.818815] pgscan_khugepaged 0
[ 1291.819208] pgscan_proactive 0
[ 1291.819469] pgsteal_kswapd 0
[ 1291.819754] pgsteal_direct 77
[ 1291.820141] pgsteal_khugepaged 0
[ 1291.820420] pgsteal_proactive 0
[ 1291.820689] pgfault 88090
[ 1291.820935] pgmajfault 3
[ 1291.821152] pgrefill 1108
[ 1291.821376] pgactivate 1191
[ 1291.821610] pgdeactivate 1108
[ 1291.821864] pglazyfree 0
[ 1291.822134] pglazyfreed 0
[ 1291.822363] swpin_zero 0
[ 1291.822584] swpout_zero 0
[ 1291.822808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11064,uid=0
[ 1291.824279] Memory cgroup out of memory: Killed process 11064 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xfffff000, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1292.047759] syz-executor.2 (11030) used greatest stack depth: 22384 bytes left
[ 1292.092588] syz-executor.4 (11036) used greatest stack depth: 21272 bytes left
13:03:49 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmat(r0, &(0x7f0000a6e000/0x2000)=nil, 0x1000)
shmdt(0x0)
shmdt(r1)

13:03:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1029}], 0x3, &(0x7f0000000140), &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:49 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setuid(r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {r3, 0xffffffffffffffff}}, './file1\x00'})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000180)={0x40000000})

13:03:49 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
pkey_mprotect(&(0x7f000085b000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmdt(0x0)
r2 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)
shmdt(r2)
shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fa6000/0x1000)=nil)
shmdt(r1)

13:03:49 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:49 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:49 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x127)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(0x0, 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:49 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x34)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000080)='./file1\x00')
openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
symlinkat(&(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000100)='./file1\x00')
pwrite64(r0, &(0x7f0000000200)="7d4714a40954db41f2a08170924978ba67c08feb86805722a9bc62a713dbbb08c83ffb8d00a725e277ffcda667002b9d36156c8adc1cbd8d6123bead799d279d0e3a4a4561925788d5c5f17289361aae54b063fe867a23b0672803d18ceea06667c8a8350441e9ef9fcac04d736da3043bd1ac6cec73c99bf68a560eb21051f5290e3a79e6e8ee5597aef8474ff050b4bb7d125d28e707ee46697da79be24d4581415f545f0034f3d55b4f036cefd6e138af659ea3d5f343c47ebc912f7b525e9e301bb581c4017b30ca96eff729b976ab5815ce0a59ae2ffe2c", 0xda, 0x40)

[ 1302.500141] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1302.501018] CPU: 1 UID: 0 PID: 11079 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1302.501034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1302.501042] Call Trace:
[ 1302.501047]  <TASK>
[ 1302.501051]  dump_stack_lvl+0xfa/0x120
[ 1302.501079]  dump_header+0x107/0x950
[ 1302.501102]  oom_kill_process+0x278/0xa00
[ 1302.501123]  out_of_memory+0x34b/0x1690
[ 1302.501147]  ? __pfx_out_of_memory+0x10/0x10
[ 1302.501172]  mem_cgroup_out_of_memory+0x164/0x190
[ 1302.501185]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1302.501203]  ? mark_held_locks+0x49/0x80
[ 1302.501223]  try_charge_memcg+0x81f/0xf30
[ 1302.501247]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1302.501272]  charge_memcg+0x7b/0x290
[ 1302.501288]  __mem_cgroup_charge+0x28/0x90
[ 1302.501308]  do_wp_page+0x56e/0x31f0
[ 1302.501332]  ? __pfx_do_wp_page+0x10/0x10
[ 1302.501349]  ? do_raw_spin_lock+0x123/0x260
[ 1302.501366]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1302.501381]  ? ___pte_offset_map+0x176/0x370
[ 1302.501401]  __handle_mm_fault+0xde1/0x30f0
[ 1302.501419]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1302.501437]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1302.501454]  ? lock_release+0x121/0x290
[ 1302.501485]  handle_mm_fault+0x2c3/0x900
[ 1302.501502]  ? access_error+0x17d/0x380
[ 1302.501518]  do_user_addr_fault+0x4fa/0xeb0
[ 1302.501536]  exc_page_fault+0xb0/0x180
[ 1302.501555]  asm_exc_page_fault+0x26/0x30
[ 1302.501568] RIP: 0033:0x7fc67e13aecd
[ 1302.501577] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1302.501588] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1302.501599] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1302.501606] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1302.501614] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1302.501622] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1302.501629] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000013dee7
[ 1302.501644]  ? do_syscall_64+0x12c/0x360
[ 1302.501667]  </TASK>
[ 1302.501671] memory: usage 307200kB, limit 307200kB, failcnt 1072
[ 1302.517349] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1302.517359] Memory cgroup stats for /syz0:
[ 1302.556724] anon 1134592
[ 1302.557625] file 309952512
[ 1302.557982] kernel 3485696
[ 1302.558201] kernel_stack 360448
[ 1302.558449] pagetables 1372160
[ 1302.558689] sec_pagetables 0
[ 1302.558939] percpu 640
[ 1302.559141] sock 0
[ 1302.559309] vmalloc 0
[ 1302.559493] shmem 309952512
[ 1302.559713] file_mapped 0
[ 1302.559944] file_dirty 0
[ 1302.560147] file_writeback 0
[ 1302.560379] swapcached 0
[ 1302.560583] inactive_anon 310886400
[ 1302.560853] active_anon 200704
[ 1302.561126] inactive_file 0
[ 1302.561379] active_file 0
[ 1302.561699] unevictable 0
[ 1302.561965] slab_reclaimable 970952
[ 1302.562238] slab_unreclaimable 789936
[ 1302.562520] slab 1760888
[ 1302.562755] workingset_refault_anon 0
[ 1302.563202] workingset_refault_file 0
[ 1302.563498] workingset_activate_anon 0
[ 1302.563950] workingset_activate_file 0
[ 1302.564240] workingset_restore_anon 0
[ 1302.564523] workingset_restore_file 0
[ 1302.564803] workingset_nodereclaim 0
[ 1302.565195] pgdemote_kswapd 0
[ 1302.565500] pgdemote_direct 0
[ 1302.565737] pgdemote_khugepaged 0
[ 1302.566019] pgdemote_proactive 0
[ 1302.566272] pgscan 367
[ 1302.566463] pgsteal 76
[ 1302.566653] pswpin 0
[ 1302.566836] pswpout 0
[ 1302.567055] pgscan_kswapd 0
[ 1302.567277] pgscan_direct 367
[ 1302.567511] pgscan_khugepaged 0
[ 1302.567789] pgscan_proactive 0
[ 1302.568157] pgsteal_kswapd 0
[ 1302.568390] pgsteal_direct 76
[ 1302.568624] pgsteal_khugepaged 0
[ 1302.568896] pgsteal_proactive 0
[ 1302.569146] pgfault 87954
[ 1302.569353] pgmajfault 0
[ 1302.569556] pgrefill 275
[ 1302.569757] pgactivate 365
[ 1302.569993] pgdeactivate 278
[ 1302.570223] pglazyfree 0
[ 1302.570437] pglazyfreed 0
[ 1302.570647] swpin_zero 0
[ 1302.570850] swpout_zero 0
[ 1302.571093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11079,uid=0
[ 1302.572242] Memory cgroup out of memory: Killed process 11079 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:49 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:03:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1302.651571] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1302.653255] CPU: 0 UID: 0 PID: 11088 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1302.653286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1302.653299] Call Trace:
[ 1302.653307]  <TASK>
[ 1302.653317]  dump_stack_lvl+0xfa/0x120
[ 1302.653357]  dump_header+0x107/0x950
[ 1302.653399]  oom_kill_process+0x278/0xa00
[ 1302.653437]  out_of_memory+0x34b/0x1690
[ 1302.653481]  ? __pfx_out_of_memory+0x10/0x10
[ 1302.653528]  mem_cgroup_out_of_memory+0x164/0x190
[ 1302.653552]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1302.653585]  ? mark_held_locks+0x49/0x80
[ 1302.653619]  try_charge_memcg+0x81f/0xf30
[ 1302.653662]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1302.653707]  charge_memcg+0x7b/0x290
[ 1302.653738]  __mem_cgroup_charge+0x28/0x90
[ 1302.653773]  do_wp_page+0x56e/0x31f0
[ 1302.653817]  ? __pfx_do_wp_page+0x10/0x10
[ 1302.653849]  ? do_raw_spin_lock+0x123/0x260
[ 1302.653878]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1302.653914]  ? ___pte_offset_map+0x176/0x370
[ 1302.653950]  __handle_mm_fault+0xde1/0x30f0
[ 1302.653983]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1302.654014]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1302.654045]  ? lock_release+0x121/0x290
[ 1302.654102]  handle_mm_fault+0x2c3/0x900
[ 1302.654135]  ? access_error+0x17d/0x380
[ 1302.654164]  do_user_addr_fault+0x4fa/0xeb0
[ 1302.654198]  exc_page_fault+0xb0/0x180
[ 1302.654231]  asm_exc_page_fault+0x26/0x30
[ 1302.654253] RIP: 0033:0x7f88ae9c7ecd
[ 1302.654271] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1302.654291] RSP: 002b:00007fffea055290 EFLAGS: 00010202
[ 1302.654309] RAX: 0000000000000001 RBX: 00007f88aeb2ff60 RCX: 0000000000000024
[ 1302.654323] RDX: 0000001b2d6200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1302.654336] RBP: 0000001b2d620014 R08: 0000001b2e620000 R09: 0000001b2d62001c
[ 1302.654350] R10: 0000000000000024 R11: 0000000064504028 R12: 00007f88aeb2ff60
[ 1302.654363] R13: 0000001b2d620000 R14: 00007f88aeb2ff60 R15: 000000000013df29
[ 1302.654391]  ? do_syscall_64+0x12c/0x360
[ 1302.654432]  </TASK>
[ 1302.683491] memory: usage 307200kB, limit 307200kB, failcnt 734
[ 1302.684608] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:49 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000080)='./file1\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x6)

[ 1302.685535] Memory cgroup stats for /syz7:
[ 1302.752026] anon 1503232
[ 1302.752666] file 308297728
[ 1302.753126] kernel 4771840
[ 1302.753352] kernel_stack 557056
[ 1302.753598] pagetables 2162688
[ 1302.753867] sec_pagetables 0
[ 1302.754312] percpu 1024
[ 1302.754515] sock 0
[ 1302.754686] vmalloc 0
[ 1302.754870] shmem 308293632
[ 1302.755189] file_mapped 0
[ 1302.755399] file_dirty 4096
[ 1302.755683] file_writeback 0
[ 1302.756008] swapcached 0
[ 1302.756231] inactive_anon 309714944
[ 1302.756502] active_anon 81920
[ 1302.756764] inactive_file 0
[ 1302.757111] active_file 4096
[ 1302.757351] unevictable 0
[ 1302.757563] slab_reclaimable 965920
[ 1302.757853] slab_unreclaimable 1100808
[ 1302.758280] slab 2066728
[ 1302.758486] workingset_refault_anon 0
[ 1302.758769] workingset_refault_file 1
[ 1302.759090] workingset_activate_anon 0
[ 1302.759386] workingset_activate_file 0
[ 1302.759673] workingset_restore_anon 0
[ 1302.760048] workingset_restore_file 0
[ 1302.760363] workingset_nodereclaim 0
[ 1302.760640] pgdemote_kswapd 0
[ 1302.760875] pgdemote_direct 0
[ 1302.761242] pgdemote_khugepaged 0
[ 1302.761519] pgdemote_proactive 0
[ 1302.761774] pgscan 1110
[ 1302.762141] pgsteal 77
[ 1302.762338] pswpin 0
[ 1302.762518] pswpout 0
[ 1302.762744] pgscan_kswapd 0
[ 1302.763204] pgscan_direct 1110
[ 1302.763457] pgscan_khugepaged 0
[ 1302.763703] pgscan_proactive 0
[ 1302.763973] pgsteal_kswapd 0
[ 1302.764220] pgsteal_direct 77
[ 1302.764455] pgsteal_khugepaged 0
[ 1302.764707] pgsteal_proactive 0
[ 1302.764978] pgfault 88146
[ 1302.765189] pgmajfault 3
[ 1302.765391] pgrefill 1162
[ 1302.765598] pgactivate 1246
[ 1302.765817] pgdeactivate 1162
[ 1302.766073] pglazyfree 0
[ 1302.766282] pglazyfreed 0
[ 1302.766490] swpin_zero 0
[ 1302.766692] swpout_zero 0
[ 1302.766921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11088,uid=0
[ 1302.768144] Memory cgroup out of memory: Killed process 11088 (syz-executor.7) total-vm:93420kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:49 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0)
shmdt(0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f00006cd000/0x4000)=nil)
shmdt(r1)

13:03:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1302.903683] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1302.905376] CPU: 0 UID: 0 PID: 11113 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1302.905407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1302.905419] Call Trace:
[ 1302.905426]  <TASK>
[ 1302.905434]  dump_stack_lvl+0xfa/0x120
[ 1302.905475]  dump_header+0x107/0x950
13:03:49 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000e8f000/0x3000)=nil)
shmat(r2, &(0x7f00008ea000/0xa000)=nil, 0x5000)
shmget$private(0x0, 0x1000, 0x8, &(0x7f0000e35000/0x1000)=nil)
shmdt(0x0)
shmdt(r1)

[ 1302.905521]  oom_kill_process+0x278/0xa00
[ 1302.905558]  out_of_memory+0x34b/0x1690
[ 1302.905602]  ? __pfx_out_of_memory+0x10/0x10
[ 1302.905649]  mem_cgroup_out_of_memory+0x164/0x190
[ 1302.905673]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1302.905706]  ? mark_held_locks+0x49/0x80
[ 1302.905739]  try_charge_memcg+0x81f/0xf30
[ 1302.905782]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1302.905828]  charge_memcg+0x7b/0x290
[ 1302.905859]  __mem_cgroup_charge+0x28/0x90
[ 1302.905902]  do_wp_page+0x56e/0x31f0
[ 1302.905946]  ? __pfx_do_wp_page+0x10/0x10
[ 1302.905978]  ? do_raw_spin_lock+0x123/0x260
[ 1302.906008]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1302.906036]  ? ___pte_offset_map+0x176/0x370
[ 1302.906072]  __handle_mm_fault+0xde1/0x30f0
[ 1302.906105]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1302.906136]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1302.906167]  ? lock_release+0x121/0x290
[ 1302.906225]  handle_mm_fault+0x2c3/0x900
[ 1302.906257]  ? access_error+0x17d/0x380
[ 1302.906286]  do_user_addr_fault+0x4fa/0xeb0
[ 1302.906320]  exc_page_fault+0xb0/0x180
[ 1302.906354]  asm_exc_page_fault+0x26/0x30
[ 1302.906375] RIP: 0033:0x7fc67e13dd30
[ 1302.906393] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1302.906414] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1302.906432] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1302.906446] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1302.906460] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1302.906473] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1302.906487] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1302.906502]  ? __might_fault+0x1f/0x190
[ 1302.906538]  ? __might_fault+0x1f/0x190
[ 1302.906569]  </TASK>
[ 1302.939299] memory: usage 307200kB, limit 307200kB, failcnt 1093
[ 1302.942544] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1302.943503] Memory cgroup stats for /syz0:
[ 1302.943668] anon 1118208
[ 1302.944924] file 309952512
[ 1302.945351] kernel 3502080
[ 1302.945774] kernel_stack 360448
[ 1302.946283] pagetables 1376256
[ 1302.946752] sec_pagetables 0
[ 1302.947276] percpu 704
[ 1302.947793] sock 0
[ 1302.948170] vmalloc 0
[ 1302.948697] shmem 309952512
[ 1302.949168] file_mapped 0
[ 1302.949789] file_dirty 0
[ 1302.950257] file_writeback 0
[ 1302.950713] swapcached 0
[ 1302.951170] inactive_anon 310870016
[ 1302.951849] active_anon 200704
[ 1302.952568] inactive_file 0
[ 1302.953132] active_file 0
[ 1302.953650] unevictable 0
[ 1302.954094] slab_reclaimable 970952
[ 1302.954629] slab_unreclaimable 801944
[ 1302.955230] slab 1772896
[ 1302.955823] workingset_refault_anon 0
[ 1302.956611] workingset_refault_file 0
[ 1302.957203] workingset_activate_anon 0
[ 1302.957773] workingset_activate_file 0
[ 1302.958369] workingset_restore_anon 0
[ 1302.959118] workingset_restore_file 0
[ 1302.959776] workingset_nodereclaim 0
[ 1302.960489] pgdemote_kswapd 0
[ 1302.961204] pgdemote_direct 0
[ 1302.961731] pgdemote_khugepaged 0
[ 1302.962410] pgdemote_proactive 0
[ 1302.963148] pgscan 367
[ 1302.963531] pgsteal 76
[ 1302.963930] pswpin 0
[ 1302.964287] pswpout 0
[ 1302.964649] pgscan_kswapd 0
[ 1302.965106] pgscan_direct 367
[ 1302.965787] pgscan_khugepaged 0
[ 1302.966509] pgscan_proactive 0
[ 1302.967024] pgsteal_kswapd 0
[ 1302.967504] pgsteal_direct 76
[ 1302.967995] pgsteal_khugepaged 0
[ 1302.968588] pgsteal_proactive 0
[ 1302.969234] pgfault 88001
[ 1302.969750] pgmajfault 0
[ 1302.970297] pgrefill 275
[ 1302.970699] pgactivate 365
[ 1302.971359] pgdeactivate 278
[ 1302.971817] pglazyfree 0
[ 1302.972327] pglazyfreed 0
[ 1302.972868] swpin_zero 0
[ 1302.973298] swpout_zero 0
[ 1302.973714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11113,uid=0
[ 1302.976083] Memory cgroup out of memory: Killed process 11113 (syz-executor.0) total-vm:93420kB, anon-rss:288kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1303.043859] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1303.044687] CPU: 1 UID: 0 PID: 11117 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1303.044706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1303.044714] Call Trace:
[ 1303.044719]  <TASK>
[ 1303.044724]  dump_stack_lvl+0xfa/0x120
[ 1303.044754]  dump_header+0x107/0x950
[ 1303.044779]  oom_kill_process+0x278/0xa00
[ 1303.044801]  out_of_memory+0x34b/0x1690
[ 1303.044825]  ? __pfx_out_of_memory+0x10/0x10
[ 1303.044851]  mem_cgroup_out_of_memory+0x164/0x190
[ 1303.044866]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1303.044890]  ? mark_held_locks+0x49/0x80
[ 1303.044911]  try_charge_memcg+0x81f/0xf30
[ 1303.044936]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1303.044960]  charge_memcg+0x7b/0x290
[ 1303.044981]  __mem_cgroup_charge+0x28/0x90
[ 1303.045000]  do_wp_page+0x56e/0x31f0
[ 1303.045026]  ? __pfx_do_wp_page+0x10/0x10
[ 1303.045043]  ? do_raw_spin_lock+0x123/0x260
[ 1303.045059]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1303.045075]  ? ___pte_offset_map+0x176/0x370
[ 1303.045096]  __handle_mm_fault+0xde1/0x30f0
[ 1303.045114]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1303.045132]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1303.045149]  ? lock_release+0x121/0x290
[ 1303.045180]  handle_mm_fault+0x2c3/0x900
[ 1303.045198]  ? access_error+0x17d/0x380
[ 1303.045213]  do_user_addr_fault+0x4fa/0xeb0
[ 1303.045232]  exc_page_fault+0xb0/0x180
[ 1303.045251]  asm_exc_page_fault+0x26/0x30
[ 1303.045264] RIP: 0033:0x7f88ae9cad30
[ 1303.045274] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1303.045286] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1303.045296] RAX: 0000000084f5f5de RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1303.045304] RDX: 0000001b2d620030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1303.045312] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2d62001c
[ 1303.045320] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1303.045327] R13: 00007f88aeb24000 R14: ffffffff819c2fdf R15: 00007f88aeb2fff0
[ 1303.045337]  ? __might_fault+0x1f/0x190
[ 1303.045357]  ? __might_fault+0x1f/0x190
[ 1303.045374]  </TASK>
[ 1303.061057] memory: usage 307200kB, limit 307200kB, failcnt 758
[ 1303.061710] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:03:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0xffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1303.062302] Memory cgroup stats for /syz7:
[ 1303.152203] anon 1486848
[ 1303.153104] file 308297728
[ 1303.153459] kernel 4788224
[ 1303.153691] kernel_stack 557056
[ 1303.154060] pagetables 2166784
[ 1303.154313] sec_pagetables 0
[ 1303.154549] percpu 1088
[ 1303.154755] sock 0
[ 1303.154963] vmalloc 0
[ 1303.155173] shmem 308293632
[ 1303.155415] file_mapped 0
[ 1303.155669] file_dirty 4096
[ 1303.156049] file_writeback 0
[ 1303.156290] swapcached 0
[ 1303.156502] inactive_anon 309698560
[ 1303.156777] active_anon 81920
[ 1303.157048] inactive_file 0
[ 1303.157280] active_file 4096
[ 1303.157515] unevictable 0
[ 1303.157731] slab_reclaimable 965920
[ 1303.158035] slab_unreclaimable 1112816
[ 1303.158335] slab 2078736
[ 1303.158546] workingset_refault_anon 0
[ 1303.158836] workingset_refault_file 1
[ 1303.159164] workingset_activate_anon 0
[ 1303.159463] workingset_activate_file 0
[ 1303.159758] workingset_restore_anon 0
[ 1303.160076] workingset_restore_file 0
[ 1303.160369] workingset_nodereclaim 0
[ 1303.160701] pgdemote_kswapd 0
[ 1303.161085] pgdemote_direct 0
[ 1303.161333] pgdemote_khugepaged 0
[ 1303.161601] pgdemote_proactive 0
[ 1303.161864] pgscan 1143
[ 1303.162095] pgsteal 77
[ 1303.162342] pswpin 0
[ 1303.162634] pswpout 0
[ 1303.162829] pgscan_kswapd 0
[ 1303.163097] pgscan_direct 1143
[ 1303.163348] pgscan_khugepaged 0
[ 1303.163604] pgscan_proactive 0
[ 1303.163854] pgsteal_kswapd 0
[ 1303.164116] pgsteal_direct 77
[ 1303.164373] pgsteal_khugepaged 0
[ 1303.164634] pgsteal_proactive 0
[ 1303.164917] pgfault 88195
[ 1303.165139] pgmajfault 3
[ 1303.165350] pgrefill 1198
[ 1303.165564] pgactivate 1282
[ 1303.165791] pgdeactivate 1198
[ 1303.166097] pglazyfree 0
[ 1303.166417] pglazyfreed 0
[ 1303.166631] swpin_zero 0
[ 1303.166841] swpout_zero 0
[ 1303.167109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11117,uid=0
[ 1303.168258] Memory cgroup out of memory: Killed process 11117 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:03:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0xf, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:03:59 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(0x0, 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:03:59 executing program 7:
mlockall(0x5)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f00008bf000/0x3000)=nil, 0x800)
shmdt(0x0)
shmdt(r1)

13:03:59 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:03:59 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900), 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:03:59 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
mlockall(0x1)

13:03:59 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x1c4)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:03:59 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
r1 = accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
poll(&(0x7f0000000180)=[{r1, 0x20}, {r2, 0x8000}, {r0, 0x4}, {r0, 0x22}], 0x4, 0x8)

13:03:59 executing program 6:
mlockall(0x0)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmget(0x2, 0x2000, 0x800, &(0x7f000050d000/0x2000)=nil)
shmget$private(0x0, 0x3000, 0x10, &(0x7f0000b6d000/0x3000)=nil)
mlock(&(0x7f0000c07000/0x3000)=nil, 0x3000)
shmat(0x0, &(0x7f00004be000/0x1000)=nil, 0x1800)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:03:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1313.010418] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1313.012004] CPU: 0 UID: 0 PID: 11138 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1313.012035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1313.012048] Call Trace:
[ 1313.012056]  <TASK>
[ 1313.012065]  dump_stack_lvl+0xfa/0x120
[ 1313.012105]  dump_header+0x107/0x950
[ 1313.012146]  oom_kill_process+0x278/0xa00
[ 1313.012184]  out_of_memory+0x34b/0x1690
[ 1313.012228]  ? __pfx_out_of_memory+0x10/0x10
[ 1313.012275]  mem_cgroup_out_of_memory+0x164/0x190
[ 1313.012299]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1313.012332]  ? mark_held_locks+0x49/0x80
[ 1313.012371]  try_charge_memcg+0x81f/0xf30
[ 1313.012414]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1313.012459]  charge_memcg+0x7b/0x290
[ 1313.012490]  __mem_cgroup_charge+0x28/0x90
[ 1313.012525]  do_wp_page+0x56e/0x31f0
[ 1313.012569]  ? __pfx_do_wp_page+0x10/0x10
[ 1313.012601]  ? do_raw_spin_lock+0x123/0x260
[ 1313.012631]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1313.012660]  ? ___pte_offset_map+0x176/0x370
[ 1313.012696]  __handle_mm_fault+0xde1/0x30f0
[ 1313.012729]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1313.012760]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1313.012791]  ? lock_release+0x121/0x290
[ 1313.012848]  handle_mm_fault+0x2c3/0x900
[ 1313.012887]  ? access_error+0x17d/0x380
[ 1313.012917]  do_user_addr_fault+0x4fa/0xeb0
[ 1313.012951]  exc_page_fault+0xb0/0x180
[ 1313.012984]  asm_exc_page_fault+0x26/0x30
[ 1313.013006] RIP: 0033:0x7f88ae9c7ecd
[ 1313.013024] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1313.013044] RSP: 002b:00007fffea055290 EFLAGS: 00010202
[ 1313.013062] RAX: 0000000000000001 RBX: 00007f88aeb2ff60 RCX: 0000000000000360
[ 1313.013076] RDX: 0000001b2d620da0 RSI: ffffffff81a1a841 RDI: 00000000b78d9b0f
[ 1313.013090] RBP: 0000001b2d620014 R08: 00000000b78d9b0f R09: 0000001b2d62001c
[ 1313.013104] R10: 0000000000001b0f R11: 00000000b78d9b13 R12: 00007f88aeb2ff60
[ 1313.013117] R13: 0000001b2d620000 R14: 00007f88aeb2ff60 R15: 00000000001407d5
[ 1313.013145]  ? __pte_offset_map_lock+0x81/0x330
[ 1313.013176]  </TASK>
[ 1313.042292] memory: usage 307200kB, limit 307200kB, failcnt 780
[ 1313.043227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1313.044370] Memory cgroup stats for /syz7:
[ 1313.045727] anon 1503232
[ 1313.046987] file 308297728
[ 1313.047433] kernel 4771840
[ 1313.047847] kernel_stack 557056
[ 1313.048371] pagetables 2162688
[ 1313.048990] sec_pagetables 0
[ 1313.049554] percpu 1024
[ 1313.050115] sock 0
[ 1313.050534] vmalloc 0
[ 1313.051041] shmem 308293632
[ 1313.051695] file_mapped 0
[ 1313.052196] file_dirty 0
[ 1313.052710] file_writeback 0
[ 1313.053261] swapcached 0
[ 1313.053745] inactive_anon 309592064
[ 1313.054456] active_anon 81920
[ 1313.055174] inactive_file 0
[ 1313.055668] active_file 4096
[ 1313.056278] unevictable 122880
[ 1313.056755] slab_reclaimable 965920
[ 1313.057330] slab_unreclaimable 1100808
[ 1313.058109] slab 2066728
[ 1313.058693] workingset_refault_anon 0
[ 1313.059604] workingset_refault_file 1
[ 1313.060410] workingset_activate_anon 0
[ 1313.061011] workingset_activate_file 0
[ 1313.061571] workingset_restore_anon 0
[ 1313.062150] workingset_restore_file 0
[ 1313.062700] workingset_nodereclaim 0
[ 1313.063287] pgdemote_kswapd 0
[ 1313.063759] pgdemote_direct 0
[ 1313.064245] pgdemote_khugepaged 0
[ 1313.064762] pgdemote_proactive 0
[ 1313.065293] pgscan 1186
[ 1313.065681] pgsteal 77
[ 1313.066094] pswpin 0
[ 1313.066463] pswpout 0
[ 1313.066826] pgscan_kswapd 0
[ 1313.067295] pgscan_direct 1186
[ 1313.067769] pgscan_khugepaged 0
[ 1313.068283] pgscan_proactive 0
[ 1313.068767] pgsteal_kswapd 0
[ 1313.069247] pgsteal_direct 77
[ 1313.069715] pgsteal_khugepaged 0
[ 1313.070251] pgsteal_proactive 0
[ 1313.070743] pgfault 88252
[ 1313.071189] pgmajfault 3
[ 1313.071590] pgrefill 1250
[ 1313.072034] pgactivate 1335
[ 1313.075302] pgdeactivate 1250
[ 1313.075787] pglazyfree 0
[ 1313.077875] pglazyfreed 0
[ 1313.078345] swpin_zero 0
[ 1313.078743] swpout_zero 0
[ 1313.079194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11138,uid=0
[ 1313.081352] Memory cgroup out of memory: Killed process 11138 (syz-executor.7) total-vm:93420kB, anon-rss:428kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1313.083935] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1313.084780] CPU: 1 UID: 0 PID: 11127 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1313.084797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1313.084806] Call Trace:
[ 1313.084812]  <TASK>
[ 1313.084818]  dump_stack_lvl+0xfa/0x120
[ 1313.084851]  dump_header+0x107/0x950
[ 1313.084878]  oom_kill_process+0x278/0xa00
[ 1313.084903]  out_of_memory+0x34b/0x1690
[ 1313.084928]  ? __pfx_out_of_memory+0x10/0x10
[ 1313.084954]  mem_cgroup_out_of_memory+0x164/0x190
[ 1313.084970]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1313.084988]  ? mark_held_locks+0x49/0x80
[ 1313.085010]  try_charge_memcg+0x81f/0xf30
[ 1313.085035]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1313.085060]  charge_memcg+0x7b/0x290
[ 1313.085077]  __mem_cgroup_charge+0x28/0x90
[ 1313.085097]  do_wp_page+0x56e/0x31f0
[ 1313.085123]  ? __pfx_do_wp_page+0x10/0x10
[ 1313.085141]  ? do_raw_spin_lock+0x123/0x260
[ 1313.085158]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1313.085174]  ? ___pte_offset_map+0x176/0x370
[ 1313.085195]  __handle_mm_fault+0xde1/0x30f0
[ 1313.085214]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1313.085233]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1313.085251]  ? lock_release+0x121/0x290
[ 1313.085282]  handle_mm_fault+0x2c3/0x900
[ 1313.085300]  ? access_error+0x17d/0x380
[ 1313.085316]  do_user_addr_fault+0x4fa/0xeb0
[ 1313.085335]  exc_page_fault+0xb0/0x180
[ 1313.085355]  asm_exc_page_fault+0x26/0x30
[ 1313.085369] RIP: 0033:0x7fc67e13aecd
[ 1313.085380] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1313.085392] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1313.085402] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1313.085410] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1313.085418] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1313.085426] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1313.085434] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 00000000001407a8
[ 1313.085450]  ? do_syscall_64+0x12c/0x360
[ 1313.085473]  </TASK>
[ 1313.101334] memory: usage 307200kB, limit 307200kB, failcnt 1116
[ 1313.101831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1313.102347] Memory cgroup stats for /syz0:
[ 1313.115593] anon 1134592
[ 1313.116473] file 309952512
[ 1313.116936] kernel 3485696
[ 1313.117251] kernel_stack 360448
[ 1313.117657] pagetables 1372160
[ 1313.118051] sec_pagetables 0
[ 1313.118306] percpu 640
[ 1313.118507] sock 0
[ 1313.118689] vmalloc 0
[ 1313.118928] shmem 309952512
[ 1313.119191] file_mapped 0
[ 1313.119459] file_dirty 0
[ 1313.119808] file_writeback 0
[ 1313.120099] swapcached 0
[ 1313.120316] inactive_anon 310886400
[ 1313.120621] active_anon 200704
[ 1313.121042] inactive_file 0
[ 1313.121275] active_file 0
[ 1313.121506] unevictable 0
[ 1313.121726] slab_reclaimable 970952
[ 1313.122051] slab_unreclaimable 789936
[ 1313.122350] slab 1760888
[ 1313.122574] workingset_refault_anon 0
[ 1313.122872] workingset_refault_file 0
[ 1313.123230] workingset_activate_anon 0
[ 1313.123549] workingset_activate_file 0
[ 1313.123940] workingset_restore_anon 0
[ 1313.124374] workingset_restore_file 0
[ 1313.124686] workingset_nodereclaim 0
[ 1313.125033] pgdemote_kswapd 0
[ 1313.125283] pgdemote_direct 0
[ 1313.125543] pgdemote_khugepaged 0
[ 1313.125816] pgdemote_proactive 0
[ 1313.126126] pgscan 367
[ 1313.126370] pgsteal 76
[ 1313.126673] pswpin 0
[ 1313.126975] pswpout 0
[ 1313.127198] pgscan_kswapd 0
[ 1313.127429] pgscan_direct 367
[ 1313.127755] pgscan_khugepaged 0
[ 1313.128171] pgscan_proactive 0
[ 1313.128526] pgsteal_kswapd 0
[ 1313.128785] pgsteal_direct 76
[ 1313.129071] pgsteal_khugepaged 0
[ 1313.129348] pgsteal_proactive 0
[ 1313.129604] pgfault 88055
[ 1313.129838] pgmajfault 0
[ 1313.130119] pgrefill 275
[ 1313.130469] pgactivate 365
[ 1313.130702] pgdeactivate 278
[ 1313.130965] pglazyfree 0
[ 1313.131204] pglazyfreed 0
[ 1313.131434] swpin_zero 0
[ 1313.131656] swpout_zero 0
[ 1313.131914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11127,uid=0
[ 1313.133138] Memory cgroup out of memory: Killed process 11127 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:00 executing program 0:
mlockall(0x2)
mlockall(0x3)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:04:00 executing program 7:
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x1468, &(0x7f0000703000/0x1000)=nil)
shmat(r1, &(0x7f0000bc0000/0x1000)=nil, 0x4000)
r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmat(r0, &(0x7f000054b000/0x2000)=nil, 0x4000)
shmdt(0x0)
shmdt(r2)

13:04:00 executing program 6:
fstat(0xffffffffffffffff, &(0x7f0000000000))
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r2 = accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000300))
recvfrom(r1, &(0x7f0000000080)=""/234, 0xea, 0x40000002, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x20, 0x7f, "8a57605f41a70e805f8b5f3682b76b74d3fdc732bbe0ce5ad660fe6d89c1f2e1b600ee704df504299958406dc83b0ec53a3904cc8b3e340d6063801965f744", 0x1a}, 0x80)
r3 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r3)
shmget(0x1, 0x3000, 0x20, &(0x7f0000413000/0x3000)=nil)

13:04:00 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b80)="6856904e007be413c316b1b31662c1cb1b7da21c0a18228341648fea44ec22f56c266eacd493d41ae47cfdb0df5a3c10cc2c002f7f675e490a9c995fc12b3fb2e84b63b1126d0868e2"}, {&(0x7f0000001c00)="a26ffc8b6862358efa293e677b9c03d564a00e68da7eaa1201b2b083364ff89be676a7f99a24aa25698e1c022787d699a1ec439950c196b4989a14379b3b98a2db779746d3f4f85d4ae5a2a66f33efa6b69a85"}, {&(0x7f0000001280)="ff315c139bed9e7ed5b93dfada4cfb8bf5a9fa000a5daa9294"}, {&(0x7f0000001c80)="5fcd6b55958a02c835365328ab816b3baa8d873e56022364386bdbde3135f705b465bb47b25c16b15ec34f5aa600dba7846a1bad8d927b1fd0375a9c9f76154c7790ef0eca5abb33c0a26e475f94fe70901464536673d56a6f0079d1a62d7167c0fb339ef8b9843337473813fc0c4129d7e18b433614cb0261ce138c51809bccf63f2c2ddff18e57205df7e3812ce8231fec3e9a0ec04fd3d0f08f5f446d8165905cf8ce5ff0fa6f1d4bb32556de92485b43221a07532930a2cde18d002b45679c0f7a0202899fbd81777a969fc676c7dfa1a5"}], 0x0, &(0x7f0000001dc0)=[@tclass={{0x0, 0x29, 0x43, 0xac0}}]}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000020c0)="6308ba63fb8b041849c7b8c6be684eed2db34b4b92e5499fc0ad3add7547b2750de2e5a2403635e3345f6e350df2c44f11631a7b3c3315d8d2ad91d93081dfaa99b8074ee675a50bc7e84e8b6943e1badf22a8f9f05856263431a28bb93b705d91c721a6157496b63d5a5028fd98b95cc073fbd9d376d076e28f5f"}, {&(0x7f0000002140)="4c61a2d5b1f3e30cb76d213336d7f3c16520abd2f2bced7d35164f0a7358562a528644334ea87655c1c694595c188ded1c33fc9c5c35d9fc4ad72d4adeeb6c8843cee80e3b33e6930741135bcf4330abda9bea69091cf25fb0420f9bcab53dc76991c6dce6fd4a864adf3ddf858177693b7b3182f0fe068b1413f561f1b579c8ec094a64ab4ead0e452a0630e9dc2e724560095e31f9cb762708eead68c72f98e7f9ff2f65fccfc935423aa623e2d6106b5c9b777001a468be0b7dd54cb1ce5db45a04aafd2fb2d86eae7aae2429200476d708e39daaf455a994b17e82d4f0d75ce0ec3c3644e68fd62cdf722b7cd7b5c76607"}, {&(0x7f0000001e40)="03bf062a198b2db0f669ee4ee7c33c310f279e7bf84ecb0a954d32a263c639ea5ebfebe9a31938ea3daf09"}], 0x0, &(0x7f0000002280)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x62, 0x0, 0x0, 0x4, 0x0, [@mcast1]}}}]}}, {{&(0x7f00000022c0)={0xa, 0x4e20, 0x6, @empty, 0x40}, 0x0, &(0x7f0000002380)=[{&(0x7f0000002300)="9d40632b72ac4f51c5a196c90ba0a692de47cc5e139c5fd9ab7bc1a4961b6dc0d9115bfe6f9540dd8411a2b763fbc99a377c3e3d6e8998889579392740a55003ce4f457e9c7ee680f5c30b51b3ee4c285f08cab156356d800ec0f151126ee63a34f1781ffe5dd1f39c2c5274f605"}]}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000023c0)="fc285a522e0c4b7fdadfc2469935f96ef25c6a44403d3ec48a943788c8292f2e97da1a4fa1c48a2bd548ec2e086239a33b8a88c03ba3bbb8ffb1023e786425ff71288927fb8b75f8cb5a6b14206003cab3d2f1a4a22e1f6ae93926bb74aad6620c0dbab56b3433cf69a73a666893768830bb8dd3a36d62d9bc5a8a91a393a8be2539cb3480624c327e7ff3"}, {&(0x7f0000002480)="ebce86e1a55db652a484f5a4482a8abe9941c1b6c2a91bcbe9504fd4f43b559d8d24a7f5bcf23969ded793b7c9f5b30da6d59de01ec9f199e6854c0a05cd1e10457e82e568cbc52413c32b0e5920c0aef5c1ab19b035338b75e27aca3226aa8f14909414f20286292dcc44f0d6383b7d8d32f3bfc3a916f43f7e416945989d39b6fc912c113780a052ab893811bc12105d015c9fc43173d92437c3b9fa3458915f71693efdfc26b130e6c74db8edd37021452010d63a8f98"}, {&(0x7f0000002540)}, {&(0x7f0000002580)="f050d3d37a1f4db34800024c00aff816097509987b3154c595798a0056266f6aa2048003417f38378d20fc99d6f46f666a"}, {&(0x7f00000025c0)="a1bbe93dca0c5bb0c07f96bba1ca3123b67405d6cacd94ee9645b9de101ba4d5719f1a909a665bbb01b7299aaac6957559ec67bb6c8da3c8690f27121b278fee62529b909bb664c5664c86e6cdfb515041c99b8cc9c37590c70a83b1017e75f3ed07a8f80a2a6ee61899ab9a84ec21a110fdde52ccfd9716880da97af208a2b0f06dc06ec42ac0483904c9e89439ec2273d143d54cce583b47dba1c1d7daa74094"}, {&(0x7f0000002680)="70a8e0f7fc8d07600191acdbe7dd95873cc48d1284ec1802fe09e894dfe94cbeee77c39ecd0181aa66f26f7f1713ad038d048f5daf0799d9a2c2dbcffbd5727bbf937fdc2bc2f6914b02e4fbf4e5769502d33e15948eae3794d23318dd5ccfd9fb174cd2e1c32378c9a3cbd52b297c24e085c55b61c2bd0f1fc6caa34c409b01613fc560490259d93e14"}, {&(0x7f0000002740)="6244bcbebad045f427739e448028a28313a1d2f09f5d0c70a4758fa692afbfa9ef263ffdfd8f211ff0dd297975ba778a0dfd1bee15f6f40fbbbce06aed4dfcd493655f4aaeae648b61c436581e2ee257d3a6f91eb64de6ea7c48ff177f2d4aa6ac5ff9d7a202530003fa7df53a0e8a02919b356f3254a4454da9bfd21c592a25fce487af846c0b0555aec70ff65358f59813c913b1a707ddb612c292129a7ca9d1ebd3e71c43088e"}, {&(0x7f0000002800)="28f325633edabdc3f8cd82d1c7f49f361259be6dfc0c0cf21b123f08153c7e08a1a903419bb917e96f260b01ce8fc206c9f3449c56da58f58a2bfe131f9ab0f6e8ebe8ece502640cbc389b820411f4ae60f29945c39af4e401648bc60f4218624f47ac6289fd28d93649ba266b649215a2c5836a22bb4a2ff3ec393401df0bdfb74034507b922df04b59ad4fa0b6ac7ef4ab9971eb8fe3c8e983048c39c899ccfb0ec3be9cee2300c5a669b01cb4fb6efcee9387cebe8f1287c17eb7"}], 0x0, &(0x7f0000002a00)=[@dontfrag={{0x0, 0x29, 0x3e, 0x4}}, @pktinfo={{0x0, 0x29, 0x32, {@local}}}]}}, {{&(0x7f0000002a40)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002a80)="9bfc093b961c9d7f994d85eb1f304154aefc398feee792c010b2872385a398476c4ec9cc15a14417e8586affff9206f1114c954b899deb96703bc2941a3515b4788040b68805d364653443a148ff922aad745e4fb41a9c26e8d5dd60c6f19446473fbe1bf72457d5828315607af8b60d7611b40f125dc6cc44bf4fe6b2"}, {&(0x7f0000002b00)="08afe44d8f93a2d8e0e2656b21e0aae1ba95eb5ed88f523fef2590169a70917fb2e4ceef5b6ba135f6d567177fc3813bf83f5d87597db0633d33bd155d50b90d79eed8d2d7"}, {&(0x7f0000002b80)="998b44e4da972d3f9d6082f5e669e84851e114ee37fbcd09961391b2ac5c864984f97f693749631852fffb658007d5810a059f1829d0b71f3be6f44d18562888936be4bf506b46460207070f9144e4ac75eda67a8433f954055604174600aa24d3aa2e30f571768063"}, {&(0x7f0000002c00)="70505d6d0a0ebba8dabd56febe941d5c4028d4fef02fa8bfa1272831c6b78956f3070e750e6975de5b5fe90251b9762cdf772065192c71343b1fe61f714653deb5a81b40c06b6ffa63df0473451293b820060b26bede04"}, {&(0x7f0000002c80)="6b91a99375f390a8f5f1208d44ef6849bae12a75bc57c26aa5f405728fb2d2e5a0846cec18d0ce674a59752a26e2a9acb4cd94a58ffd3e06fca40fd6a4a8a44119a2907d7b119b7038a4775c4ae1d2fd97f2e506109faae1d8e436e469e3adc70e55ca15ca87c33cc0adf0f2891cac75441354b9689bec6acf4ec89555f2b64834b003fe02a416170166d1a3b2168d455af7646d8cadc1817798dd0d51fb4e6f14bffecd8618"}, {&(0x7f0000002d40)="7559973518"}, {&(0x7f0000002d80)="7428c82d63affc1f548221a6f02a8ac6e84ec75fcac5f79ee5b889832f7d38a5c4"}, {&(0x7f0000002dc0)="20739087a8c39454950e9cb398fe8a49641371383018a14ff7d8d467536e3b12687ffabf03992a6b6f8d69d016c0db5e1d560c9d7c6181731e48955ae312ea4afdf9640d5b25632e8ceefb73675588c571715e908dcae2d356a3672be8c32a0710f4263ccddc8b8aa1da60ba2ade49b5a15b04d241645ebc57303586215275cb0aa53d491886ddc86bc27ddf5188d165e82efc21c809c6fb04533e46c03a990426f26572b783570908df2db13c52b240c2199ccd0c8186abb3437055ad9edcd0d90fbe819af215878cadba85f858e7637216a9c9c87af2fb88f71c78abd38f7f337525c18a6fd8016c62fd4d7473242dae6b"}, {&(0x7f0000002ec0)="59213ad0c0e2aa02cf43147720ed8032509d48d39bc37fa7cb35de8364573cfd95690fd9c808f0b9ee"}, {&(0x7f0000002f00)="65bd960cdb47d244694f55ca04c59282b8dd67ca1154d3452ce4678faadd379e452b0a8dab0a40144670c7209a9c413d0507d91bc49b428aebd8fdc520cbb5a4e891c4aaba3c170f768a869d2f1609bdb80f67fc394b85ed80dfd4003d7102d6a7672a901f68713dfd9bc630b5c7685bb39a2f69a6cacc31b57c5e0ac644282752d4f1263b9979cee9f4c2b2ac536a"}], 0x0, &(0x7f0000003080)=[@tclass={{0x0, 0x29, 0x43, 0x4c1aa2c4}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x33, 0x0, 0x2, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast2, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x6, 0x0, 0x0, 0x5, 0x0, [@remote, @remote, @dev={0xfe, 0x80, '\x00', 0x3c}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}]}}, {{&(0x7f0000003200)={0xa, 0x4e21, 0x80000001, @loopback, 0xffff}, 0x0, &(0x7f0000003380)=[{&(0x7f0000003240)="a8fc96e410c3162f3a"}, {&(0x7f0000003280)="34f4f08dbcb4cd8cb09daf193051269f70fc4f6a2fc91520c2dc4c0934efe4dddef5d8417f88b777130027a4ba135651f594db9b8f58e244e48c129286b9d2587fd91affc562bfc0f655cdd557bb2c29e4b4938cb59985e362bb090ef01d3515dd86ddb4635ffaca0a9a736c4b15136fbed88f97830c839a57a53b9f7d5f857a7e655bf72593aa9360e9d6c0a9b9d86a96363b6451b50976b798c6a8e729e696c6abddc5c409a8e3ed55098600d4da93e363546e9edab6e54654cd6a6257616da2318ad1aaf7e910bc47665d9061909eef13cb78cbf949cda36a0c066f5c7ac0889b7f06a89165c9f5a2c8"}], 0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="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"]}}], 0x1, 0x4000014)
r2 = fcntl$dupfd(r1, 0x406, r0)
pwrite64(r2, &(0x7f0000000080)="9e1470278ceb2f6c242737500cda1288a7a259aa1e88328e8c1407f4dd28edaf11490221ef621a9fdf4698092a96cae6f48aeee7c2c9e4b62c3a62d4dad78d9a6f4ce8856ba96c2631ef38a6efab0982f96621440fe2d44c0be30852fc1fa7556ee926ff5b2bf36229eb8dcf2f564ef71fad92f3705fb9f602e1f7d3bfdcfe944a54fc35462a39ef1cd9c0db065a1abf5ad266caa25b96d5a7de706c87208594ee46a99a74e8564a66199b8d59eed77413bfabfb00b9e64567f5744310f92110aa1f795bf8ddf6d923a8ed7d82316a81", 0xd0, 0xd350)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000012c0), 0xc, &(0x7f0000001e00)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="d4010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf2501000000d80002801c000180080001000600000008000100030000000800010004000000340001800800010002000000080001000b00000008000100070000000800010004000000080001000700000008000100050000002c00018008000100060000000800010000000000080001000500000008000100000000000800010004000000040001800c000180080001000600000014000180080001000100000008000100a2724d78340001800800010006000000080001000400000008000100060000000800010006000000080001000a00000008000100030000002c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000004000300200001801400025a62006200000000000008000100000000000000001200", @ANYRES32=0x0, @ANYBLOB="040003009400018008000100", @ANYRES32=r8, @ANYBLOB="0800030000000000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f77696669300000000000001400020068737230000000000000000000000000140002006e657464657673696d300000000000001400020076657468315f6d616376746170000000b4fd0200776c616e3100"/100], 0x1d4}, 0x1, 0x0, 0x0, 0x20040050}, 0xc880)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002540)={0x18, r4, 0x1, 0x70bd2d, 0x0, {0x8}, [@HEADER={0x4}]}, 0x18}}, 0x0)
sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d83be017f39fa487133e0b5dc0c8823bcdbae10a57c30067854d5225d710daba6ded1760e996eec22e6e3b6f5a4fe236d09e5b70a0a08057e503c6e1a5fb20e12b9b3cccd2d07d263b567276d3d4c1f8777ec48b9ddd608a7ae518753d96d27e81fc3c6f6fa652e212938206ee706cae9399b994bae65b297c2579df5b08ca9d103584041f8c1b7e828fa5ed9d2dd6daa5485760d83f5aee4cb9c02ad302de2d4ff5c75a257b2caec015db93dc9c79427d734efe86a75728a57fd7e90882eca47080d6e3aec217cc69214b8bad3a4eae31eb388b245352f5fed46beadee9618d1e0e", 0xe2}], 0x1, &(0x7f0000000300)=[@dstopts={{0x158, 0x29, 0x37, {0x6c, 0x27, '\x00', [@ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x9, [0x101, 0x8, 0x0, 0x3f]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x20}, @generic={0x40, 0x5d, "cc33bb97ad22b01722202b39f8bf3a0f8261647ff109c241f23a46e7b80d2e83931edc2d483a0ac92b889d95ae36da17911d89c695f5a8f9cd5ac9159235b22ac98ff69e0d4fc54970e406299e95198e2f85709ea789fbcb99595da4e2"}, @ra, @generic={0x20, 0x84, "05c073ece1550035afc907c17704637415953fe543e8c6147da9f9d0c2aee8af495ce99f355d00facbf9e3e5d8bb2197eb5c74fde2d24b8bcf6a64b938d93b9c8f2d69d61f22d1c26b02425f6c164d437c4034c06b7d8ce41bad2bc6e4447b4c78e111592ff62fe10a491bb952e57c803e74886a99412b08e95effadbd4b101511564213"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff8b}}], 0x170}}, {{&(0x7f0000000480)={0xa, 0x4e26, 0x6, @local, 0x7f}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000004c0)="87a10f841e1912d3f002103ca58d9110ab6686203858091b8e3e6f732890b2c017ab04c47dada2d67e9ea45c942356be2a359b15aa20eaf9b3914edc49c4e460a004ded21d89872c08515ef4ac0e02d8de0269f8b815825c35012e798f3d110e0967ca30c0d29243", 0x68}, {&(0x7f0000000540)="56a7259cdc82707be239a1321d45ce63ac2df3e78fa34030e4ebb8cc8ff11770937cd2e75451874fba5180175b590b4e7005aec66c84d5ea7021944cf5f29da4606759a06f3546bc959add18731a59ca45a546802ea411937114d3078c85ddb745bd9d25b7339462efce3dfa30c2c2e6abdfd367819962bc91ecf405042b36280a16a76de469e30ba206a3091b8339b71f", 0x91}, {&(0x7f0000000600)="e8486bb0b3753f141af224e36c7274e6645f72f23c63ef3e6ba8ae84", 0x1c}, {&(0x7f0000000640)="f2ee494c641db750c20d1e14f33aa9ffb59255d519c91353f97d2a2d033a6dfd7fb6f8736bbac61f9a48c5e64ce68a6b75fc83c13018caddc497af6ab5dee5b6d143ca184850b1c64406f053de5cc2ca48da3a910460def7aca9d5879057ec9dce96a9dd3991746e535ce6d5c402b97db8310087475a8281d25abf77880e3b06cdb2eeabe4f39d0c36c1a5cfd4aadc17974b0b1959f03094812e4af3d3542a6f1a187499bbd22bdac25c5ce16e48ef9e1743dd8cc1ddcdfd723cea86d8833ea183fe73542c", 0xc5}, {&(0x7f0000000740)="3bdc030e4db615448c9f5bd5ff4cbe55cb2426fcf8930d5906dafab62787e23b6474990f1dd2cd203a002cc4b82895869843102206edb58e2e3949dbf331b0ec5ad8ac", 0x43}, {&(0x7f00000007c0)="b59f72b03a5a617573fa632ccc08e00efb531aea6b0ca331addc853d3576b68c786ce35d489d3d1b424578b2c8c6ae720229d4fc9e92454f32ddb1b499bfa65b6c76c67daa513981a9bae1d24460c706ec748a5f863e55820e81ce2a4879e4257b425bf9cc44f2e4b15f6706ee", 0x6d}, {&(0x7f0000000840)="c79ede5935de5965e40aaddbab", 0xd}], 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="1400000000000000290000003e00fcff06000000000000001400000000000000290000000b000000ffff5b0042d7819f"], 0x30}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0x1, @remote}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000980)="4b9d88f07bf4735df7082ac08d9c3bd62dba840e70ad969a8c64545a1a545526f6d485c20f7dce639f94e8527e5264dbb01174454520e10b4bbdc2cb5c60edadc93c20b74cc165faaf7ece6355c2184d4ede12c035ccfc9c131e21c867c48bdb4562cdaccac16fab1c1c9a937e97401c200c12f7eb4e6a78ff8e62f413f7b6683784cd76aeaad4b6f80876ec95aa0094552cc9f850b25a565f6bd6ab3321e7e88e336f90cfa93e704859631d1646205e640fc90e6ff0d16bc800e7389b7005a106e0359f0769d6", 0xc7}], 0x1}}, {{&(0x7f0000000ac0)={0xa, 0x4e21, 0x6, @remote, 0xc4c}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000b00)="1a66f62443a8a25c4561fc50ebee81a9c4fda856644d2559bfa1300a2d2fc86032b83728126e6cac72c7333618485df57ac181f063c7badeddefc24619f4082d42cb68f32f69f44cdbdd69565b23d8e4806ab6ac8a3206000000000000fc27bc2a", 0x61}, {&(0x7f0000000b80)="b4623996b0952087d007c53dd6dc8a779c28570b603dab45612f912c6bd49e03ca6ed8fda5f94ba6650ed9b8b7fafa1705aa88202ae84994dbcdbb7ce11243aaa3359d268a5b882050bd42323bf5fe90e5382b921894bf63ca3a9581f08221e539f39a708ddd99e9af1621d80f62c27f969848f52c", 0x75}, {&(0x7f0000000c00)="e6920f9f692b83e2ea35979408c74796c4208c72ecd8d0b5465b44346f0ed82cbe065841f0aa5241fd7bfd70f49bad1e664e3938f360b52801f45d3b1cecbc69c6b16c2bfbfd7e511045206aba87a71d7fb88f4e9e873a45aae099b42656ecae797342293a6ca53350cbcda8138ffd8ae4f74d3d0c9c314cfedc44a06a4612869339cf8d3c2407bfccf370e818ac20e449909cdb9374e8f8398b4e7072fa109a4e1ca54e2d52d1fed5933082ccedd9e61c8eea153adc81349e56d22d58c04ea1cc5ce25e7ac677c97ba43f", 0xcb}, {&(0x7f0000000d00)="3bae708cde30c2263225b6eff25ff1e7bc75ce1afa63e987b6638b94b7faf66e57d8b11919a742264f1d824c12bb38f5a124c4f578ef84da24312bb3b5e288abb2cce8079e21965579ee5be9c4fa891bbefdfefba45ae99a82a56c3f64bb2105b8d9c013322139415dad985de6d41c27bd9406f482a8c9c20af4994a4dc0593333dcc82bc135396aee4fbdd94507a255f8adbf8698c4eea6f1114ca9d9f200daa80eaa73c7af603925", 0xa9}, {&(0x7f0000000dc0)="f8bae230cc77c67f5868a402c074f4a0398a026797fe7514e3948be47a6c0cf14d308949b74e1412f1cf93ca9dfa67a538c037a53029e3ab11200faf4334c58f720e728e34f3db24bc2ce1a3d0b09e93a3ae0ac116a9c4a54063c8317202cea0e9a32d6f05a5aa984909fef89ce788f085a2f4116e8c7d9457d03f74ff528be3a01737a1b3b8084245857be02a198b5b4ab8b5839b07329ead2fea7ff12adbb3d3e0cbd2408e99a3837f33da001d23f8104f56113b0fba412ddf4fe72b67dd97d17d50e1688313559522a35a2796a132cd74b1b5116caa28cc910b8b42a08de13f7adce5ff196fd7cb2b61bd4dd984556e4ecfe9ebbccd", 0xf7}, {&(0x7f0000000ec0)="9dbf5c386c91de4800d906671402b4b859b37b23247c67ed56904e32c5ffb74cc8592bc26852dc5676bfd05eb0e13fde9109368bb12d5c07b731663606a4619057ce0f47db015a5e172354aa9c25d44c8db5e293009338869e6f1819ea2862c9c812efce8de2330ef41d48a9e394327c88d0f03ef63f8902504e544f364773dc7ee6f0d573", 0x85}, {&(0x7f0000000f80)="9d05acbca922e285231073d4e6bc656c041188d047f2577f61fd15c8705e88a3780325676315fd28f562496ccf1b24458a0681b01a78d345a666ffb60d1558013612860a29b5a51767064bb6fc9492c7eca7b9199c2dfdd749f277aae3b4ee066953dad6612318516c30bc6e5343c4c8268fb1e7200df86180dbaba8c34950f7698ee7e9b772a5e1201f64c877d14dff4db9b2c77b4724eef9b76013800b5184141325552747a8810fd34ec40cb5123589aa9c988a711779488059f365f734ff5cb0de25bc9f684f3648df5cf0b4f35b39c032fe1d64d43585b25e628af94e1bb66ae6df98439006cb8986e46ec66c36758c1bbdbec628", 0xf7}], 0x7, &(0x7f0000001100)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x1d, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x30}}, {{&(0x7f0000001140)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001180)="adb35b130c92658fade90da479c5596864170db8be52b590ac2c496481d23d424d87a692b84c13a59f039e8185e48b6659d7", 0x32}, {&(0x7f00000011c0)="c9699f60c15be1b278b8730b03052e6ca38a045a0d740f5202d05d5a98212723909b661d4a8ba48d2c3c81f9cea1d398a608a59da22be452f4c94b87425f494f9de1b53dc61c106ac849214d02464e7f03392580cf7ef4d9b40c5273dba64c30ef1b88c40b70559c79379559de49d34604e9476cac71b525050f93804cedcefcf4353f274601d21c2de801d682dff2e6a5ab049cabdf50905960f74bef364a1ce3f546eacb9ffea4b9c797", 0xab}, {&(0x7f0000001b40)="8d4b2844b13ea20dc2b76ed4b662bc59d60aaebbf278cab52d079a30cb0a546338fc4f6e3eb43d03d0a7ff0346cc9ddf69461352ef8c56cce7", 0x39}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="2201afad39907d3f2101964aa75a5796ba0ea009dfe273bc4000b82e18c05e078a5551c06248268106a9f5fe3b4093ff09b0dbf270a7b4b3611476cd3c7c618dd1e5a7af6cbe227138486419ca29b3466dae961c1738c25fe933923c3706e4f9d4ceb88fafc757d0fbb9fa140284d6f1103b459aced9f31ae8b3bbc1cb31b63554e95614fbe2f3964545e4c8c1c71e", 0x8f}, {&(0x7f00000013c0)="7ecc6fe51968b71d54e23e1c2799cbaf92d031231e16974525735bf81d3bce4aaee707a38d25c016e44914568e3076fbb8d05ac4f388d1a02caebc58a54980a68e92df743db777ed3a218af4e65f8ca8d822d7fb4276", 0x56}, {&(0x7f0000001440)="b41253714c32436fedf0962e88728d83057a853f1ab896d32df3ea321c5d9871d2f76f0102c5988dcb6bf756a5fe8204d348d89ec8aa05163d73400a8ac3e71b9a87946cf59f27237f4fca0469733b103b379f995ed604e9df5664abd3ec84462380978f6e1f3774549879639b3791b1c931d8e27298223e4248609c44312776e0c3de999d46e87458924e48ddb5872053ec9b2082bb7adba55c2abba693a027c7c4d06022d8deedb12170f1459916a33e61e2ee42fb", 0xb6}, {&(0x7f0000001500)="16fb89a795f39f4eb1e0efbf3fd4552f735c08710b6091adb5bb416cd8b0ffebae24b3f8ed0937324b5ba50e33b02139a0d8b8cc3cddf39f8a63a4d5389b2e529d4fcada30af839300d4c82c6376f044cf48b0677c2181370000226d4067839734f2694bb65b8e5988597826bf649b70d9d33bc375bd90bcc12eb91ee6bbde77960bf5fb5fc51a93c17365eaf0eeb754df8003c2f8989d7e57e06a76", 0x9c}], 0x8}}, {{&(0x7f0000001640)={0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4ad}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001680)="16b9859ccddc5824896f9c80392c1d25bc1ddd44ea568fa122e523f298a9d7a1b8cf4f86aa855b93809a2a32976c4b4c10dd1dba096e6343265e32077f8d5a6f43e1298efe2f6d6814295cf091cbd4d5d95a73db2730d65496dac48ef86305f6ca2d042a057593318cad52a81d4acec5a13e9caba9cb03640190f9f78ac41c1b936efd1220a6b467a8ceb82bb7689e37b7b882f78591c1b0276d93dcf6462168ee5f47aca195dc2f1e3bf1b7ee4f8a3ac21729619ba4a3b01689ee217835f534cc5b0c63a16c4c1566773ac4744dbeecd4c26de899e7a587a8d3f192c8118f4f22f615b1", 0xe4}, {&(0x7f0000001780)="d1c82c9db913470a33798d7b98bd20ce90c11ef50f9b4b0b2602fe18112b098eb56018ec49fc9a50a53bbcb708a1a02530c25119a297769f5e2f47e0c46084dd230d17844b1617f8a1a521438b97e6bdfa2dde712e1c76c2aff7e3caa1002deefad2947e697cd326d3d3df18bb40c761464a86c27e2ed41435721e8b9a5208f3b5ee3320ad0351f6543fa7e28b4b59612e520f68cc83c3a7f98047d13dd2708fd4c42369d7e53be58d0dd90813b55f07", 0xb0}, {&(0x7f0000001840)="ca68e8537e99c15f4d7696d343a29fe7ad683225b97e705f6aa83d4e4b98718a14a1b7d9fdaeeeba053399ceeffe5525bd9f42b1d5cdec9997ea5641f6b0b93bb0d6f3c7eb0eb7aef21c6c2de7794fd43767820de0d70089723732e74cb1f3356d043dab7cfc9cc443d62716a82708e8de5aaa0c24de62c574d6a1e8cbbc6f7ffea82874315c9b361c7d2234629996ac41075aec562061f2407962dedbbd8d84bbdf65b362fdaab15b5edfa168c037a6a68f465846a46b709e0138478b052184044d4e2ab83c8d587ce69898ebeab5e707fcab4cf9d0534f6276f1e1a9159b1126b856daf2af248e2e8d11", 0xeb}], 0x3, &(0x7f0000001980)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}], 0x28}}], 0x6, 0x8000)
close_range(r1, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:04:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x180, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1313.558706] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1313.559643] CPU: 1 UID: 0 PID: 11156 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1313.559661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1313.559669] Call Trace:
[ 1313.559674]  <TASK>
[ 1313.559680]  dump_stack_lvl+0xfa/0x120
[ 1313.559707]  dump_header+0x107/0x950
[ 1313.559736]  oom_kill_process+0x278/0xa00
[ 1313.559757]  out_of_memory+0x34b/0x1690
[ 1313.559781]  ? __pfx_out_of_memory+0x10/0x10
[ 1313.559807]  mem_cgroup_out_of_memory+0x164/0x190
[ 1313.559821]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1313.559839]  ? mark_held_locks+0x49/0x80
[ 1313.559859]  try_charge_memcg+0x81f/0xf30
[ 1313.559883]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1313.559908]  charge_memcg+0x7b/0x290
[ 1313.559925]  __mem_cgroup_charge+0x28/0x90
[ 1313.559944]  do_wp_page+0x56e/0x31f0
[ 1313.559969]  ? __pfx_do_wp_page+0x10/0x10
[ 1313.559986]  ? do_raw_spin_lock+0x123/0x260
[ 1313.560003]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1313.560018]  ? ___pte_offset_map+0x176/0x370
[ 1313.560038]  __handle_mm_fault+0xde1/0x30f0
[ 1313.560057]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1313.560075]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1313.560091]  ? lock_release+0x121/0x290
[ 1313.560122]  handle_mm_fault+0x2c3/0x900
[ 1313.560140]  ? access_error+0x17d/0x380
[ 1313.560156]  do_user_addr_fault+0x4fa/0xeb0
[ 1313.560175]  exc_page_fault+0xb0/0x180
[ 1313.560194]  asm_exc_page_fault+0x26/0x30
[ 1313.560207] RIP: 0033:0x7fc67e13dd30
[ 1313.560218] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1313.560230] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1313.560240] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1313.560249] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1313.560257] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1313.560265] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1313.560273] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1313.560282]  ? __might_fault+0x1f/0x190
[ 1313.560302]  ? __might_fault+0x1f/0x190
[ 1313.560319]  </TASK>
[ 1313.576201] memory: usage 307200kB, limit 307200kB, failcnt 1139
[ 1313.576676] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1313.577165] Memory cgroup stats for /syz0:
[ 1313.621757] anon 1118208
[ 1313.622956] file 309952512
[ 1313.623407] kernel 3502080
[ 1313.624102] kernel_stack 360448
[ 1313.624701] pagetables 1376256
[ 1313.625291] sec_pagetables 0
[ 1313.625871] percpu 704
[ 1313.626244] sock 0
[ 1313.626581] vmalloc 0
[ 1313.627076] shmem 309952512
[ 1313.627541] file_mapped 0
[ 1313.628036] file_dirty 0
[ 1313.628441] file_writeback 0
[ 1313.628960] swapcached 0
[ 1313.629374] inactive_anon 310870016
[ 1313.629954] active_anon 200704
[ 1313.630526] inactive_file 0
[ 1313.631083] active_file 0
[ 1313.631450] unevictable 0
[ 1313.631802] slab_reclaimable 970952
[ 1313.632296] slab_unreclaimable 801944
[ 1313.632795] slab 1772896
[ 1313.633179] workingset_refault_anon 0
[ 1313.633662] workingset_refault_file 0
[ 1313.634178] workingset_activate_anon 0
[ 1313.634855] workingset_activate_file 0
[ 1313.635532] workingset_restore_anon 0
[ 1313.636210] workingset_restore_file 0
[ 1313.636851] workingset_nodereclaim 0
[ 1313.637514] pgdemote_kswapd 0
[ 1313.638107] pgdemote_direct 0
[ 1313.638552] pgdemote_khugepaged 0
[ 1313.639094] pgdemote_proactive 0
[ 1313.639699] pgscan 367
[ 1313.640085] pgsteal 76
[ 1313.640523] pswpin 0
[ 1313.640861] pswpout 0
[ 1313.641304] pgscan_kswapd 0
[ 1313.641836] pgscan_direct 367
[ 1313.642271] pgscan_khugepaged 0
[ 1313.642798] pgscan_proactive 0
[ 1313.643370] pgsteal_kswapd 0
[ 1313.643790] pgsteal_direct 76
[ 1313.644305] pgsteal_khugepaged 0
[ 1313.644906] pgsteal_proactive 0
[ 1313.645370] pgfault 88102
[ 1313.645812] pgmajfault 0
[ 1313.646262] pgrefill 275
[ 1313.646699] pgactivate 365
[ 1313.647199] pgdeactivate 278
[ 1313.647680] pglazyfree 0
[ 1313.648122] pglazyfreed 0
[ 1313.648483] swpin_zero 0
[ 1313.648978] swpout_zero 0
[ 1313.649425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11156,uid=0
[ 1313.651507] Memory cgroup out of memory: Killed process 11156 (syz-executor.0) total-vm:93420kB, anon-rss:276kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1313.742091] syz-executor.7 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000
[ 1313.743022] CPU: 1 UID: 0 PID: 11162 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1313.743039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1313.743050] Call Trace:
[ 1313.743056]  <TASK>
[ 1313.743062]  dump_stack_lvl+0xfa/0x120
[ 1313.743087]  dump_header+0x107/0x950
[ 1313.743112]  oom_kill_process+0x278/0xa00
[ 1313.743133]  out_of_memory+0x34b/0x1690
[ 1313.743167]  ? __pfx_out_of_memory+0x10/0x10
[ 1313.743194]  mem_cgroup_out_of_memory+0x164/0x190
[ 1313.743208]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1313.743227]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1313.743248]  try_charge_memcg+0x81f/0xf30
[ 1313.743273]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1313.743292]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1313.743311]  __memcg_kmem_charge_page+0x135/0x400
[ 1313.743331]  __alloc_frozen_pages_noprof+0x33b/0x1f10
[ 1313.743353]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1313.743374]  ? __memcg_slab_post_alloc_hook+0x443/0x9d0
[ 1313.743393]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1313.743413]  ? lock_release+0xc8/0x290
[ 1313.743431]  ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0
[ 1313.743452]  ? __create_object+0x59/0x80
[ 1313.743471]  ? __asan_memset+0x24/0x50
[ 1313.743487]  __alloc_pages_noprof+0xc/0x1b0
[ 1313.743505]  copy_process+0x4ea/0x73e0
[ 1313.743518]  ? perf_trace_lock+0xb5/0x5d0
[ 1313.743535]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1313.743553]  ? __pfx_copy_process+0x10/0x10
[ 1313.743563]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1313.743577]  ? find_held_lock+0x2b/0x80
[ 1313.743596]  ? lock_release+0xc8/0x290
[ 1313.743610]  ? find_held_lock+0x2b/0x80
[ 1313.743631]  kernel_clone+0xea/0x7f0
[ 1313.743645]  ? __pfx_kernel_clone+0x10/0x10
[ 1313.743656]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1313.743675]  ? perf_trace_lock+0xb5/0x5d0
[ 1313.743689]  ? perf_trace_lock_acquire+0x1/0x700
[ 1313.743707]  __do_sys_clone+0xce/0x120
[ 1313.743719]  ? __pfx___do_sys_clone+0x10/0x10
[ 1313.743729]  ? lock_acquire+0x15e/0x2f0
[ 1313.743753]  ? syscall_trace_enter+0x1cf/0x240
[ 1313.743767]  ? lock_release+0xc8/0x290
[ 1313.743786]  do_syscall_64+0xbf/0x360
[ 1313.743806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1313.743820] RIP: 0033:0x7f88aea1df41
[ 1313.743831] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 1313.743843] RSP: 002b:00007fffea0551e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1313.743854] RAX: ffffffffffffffda RBX: 00007f88abf71700 RCX: 00007f88aea1df41
[ 1313.743863] RDX: 00007f88abf719d0 RSI: 00007f88abf712f0 RDI: 00000000003d0f00
[ 1313.743871] RBP: 00007fffea055420 R08: 00007f88abf71700 R09: 00007f88abf71700
[ 1313.743883] R10: 00007f88abf719d0 R11: 0000000000000206 R12: 00007fffea05529e
[ 1313.743891] R13: 00007fffea05529f R14: 00007f88abf71300 R15: 0000000000022000
[ 1313.743914]  </TASK>
[ 1313.764245] memory: usage 307200kB, limit 307200kB, failcnt 801
[ 1313.764709] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:04:00 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
socketpair(0x26, 0x6, 0xffffffe1, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pwritev2(r1, &(0x7f0000001200)=[{&(0x7f00000000c0)="aa1a10d0b994b0e8bfd111f5b85f8e69a731100b571a368bd3216085e204263d6eaf1246bfee26da262b10024486b18a4d1c6e29928363", 0x37}, {&(0x7f0000000100)="0db11dea7c4b98d9ea506f583a3d099466afd27a25c532f1261298242fc9dc0b5f1e8719eb07e931fe1087ebb6a601225dace6fa2f262762a6941c51013f3b4b594d2527ad685dc9117100479dfdc9f85b40d131daafc5710de787a036df742d1790843c744552cd078f96a06f93f9350b95562797e00ffda0f3fcb58d84f99b922cf24ddfbe9bb23d90de15ef112c9b76780e9da4b4c617d97f20a785ce4af4", 0xa0}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="236f7cfa1ca6817c3766befee0c0dc6bbaee474a6c47a23a3e941653701c3e1027facd856cbc6bb94e428e69d553f3d0fdb55b123b3104d6", 0x38}], 0x4, 0xdbe, 0x1, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:04:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(0x0, 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1313.765220] Memory cgroup stats for /syz7:
[ 1313.805508] anon 1474560
[ 1313.806192] file 308297728
[ 1313.806569] kernel 4800512
[ 1313.806797] kernel_stack 557056
[ 1313.807248] pagetables 2166784
[ 1313.807514] sec_pagetables 0
[ 1313.807758] percpu 1088
[ 1313.808170] sock 0
[ 1313.808349] vmalloc 0
[ 1313.808543] shmem 308293632
[ 1313.808773] file_mapped 0
[ 1313.809133] file_dirty 0
[ 1313.809355] file_writeback 0
[ 1313.809597] swapcached 0
[ 1313.809813] inactive_anon 309686272
[ 1313.810188] active_anon 81920
[ 1313.810442] inactive_file 0
[ 1313.810679] active_file 4096
[ 1313.810946] unevictable 0
[ 1313.811180] slab_reclaimable 966304
[ 1313.811468] slab_unreclaimable 1124024
[ 1313.811776] slab 2090328
[ 1313.812023] workingset_refault_anon 0
[ 1313.812323] workingset_refault_file 1
[ 1313.812614] workingset_activate_anon 0
[ 1313.812947] workingset_activate_file 0
[ 1313.813252] workingset_restore_anon 0
[ 1313.813554] workingset_restore_file 0
[ 1313.813845] workingset_nodereclaim 0
[ 1313.814156] pgdemote_kswapd 0
[ 1313.814408] pgdemote_direct 0
[ 1313.814658] pgdemote_khugepaged 0
[ 1313.814960] pgdemote_proactive 0
[ 1313.815245] pgscan 1224
[ 1313.815452] pgsteal 77
[ 1313.815655] pswpin 0
[ 1313.815841] pswpout 0
[ 1313.816066] pgscan_kswapd 0
[ 1313.816299] pgscan_direct 1224
[ 1313.816549] pgscan_khugepaged 0
[ 1313.816807] pgscan_proactive 0
[ 1313.817091] pgsteal_kswapd 0
[ 1313.817331] pgsteal_direct 77
[ 1313.817572] pgsteal_khugepaged 0
[ 1313.817831] pgsteal_proactive 0
[ 1313.818116] pgfault 88293
[ 1313.818337] pgmajfault 3
[ 1313.818550] pgrefill 1299
[ 1313.818764] pgactivate 1384
[ 1313.819026] pgdeactivate 1299
[ 1313.819282] pglazyfree 0
[ 1313.819494] pglazyfreed 0
[ 1313.819709] swpin_zero 0
[ 1313.819950] swpout_zero 0
[ 1313.820171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11162,uid=0
[ 1313.821324] Memory cgroup out of memory: Killed process 11162 (syz-executor.7) total-vm:93552kB, anon-rss:300kB, file-rss:35624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:12 executing program 0:
mlockall(0x2)
shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmdt(0x0)
shmdt(0x0)

13:04:12 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:04:12 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {0xffffffffffffffff, 0x400}], 0x2, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:04:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:12 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000b63000/0x1000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:04:12 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
listen(r0, 0x1)
unlink(&(0x7f0000000000)='./file1\x00')

13:04:12 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:04:12 executing program 5:
r0 = creat(&(0x7f0000000140)='./file1/file0\x00', 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
lsetxattr(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000180)=@random={'security.', '/\x12-&)\x00'}, &(0x7f00000001c0)='pipefs\x00', 0x7, 0xc7b65c1234110bfa)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000200))
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000380)=ANY=[@ANYBLOB="0100a74c790dc69be5ad0000d3d052a6ca8670a8ec7100135f8eec4d91dfc72d2f34096075826af7000000000000000000000000000000ad17baca7f24122a03a7bafabbd58a805ce058ed10c134c55506a2525f6cf21d84763aaa7135daea16c3d588a5e14565df27e9f771e811655f15f366956bbd52c1e9f32d9e713d036f21879ff66708c311c0793ad4f0b78c627c6be9a84c6d29a88691ed9ce8c65a37f206124f5f642c83", @ANYRES32=r2, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
mount$bind(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000100), 0x102102c, 0x0)

[ 1325.816953] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1325.817712] CPU: 1 UID: 0 PID: 11186 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1325.817730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1325.817738] Call Trace:
[ 1325.817744]  <TASK>
[ 1325.817749]  dump_stack_lvl+0xfa/0x120
[ 1325.817776]  dump_header+0x107/0x950
[ 1325.817800]  oom_kill_process+0x278/0xa00
[ 1325.817823]  out_of_memory+0x34b/0x1690
[ 1325.817846]  ? __pfx_out_of_memory+0x10/0x10
[ 1325.817872]  mem_cgroup_out_of_memory+0x164/0x190
[ 1325.817891]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1325.817909]  ? mark_held_locks+0x49/0x80
[ 1325.817929]  try_charge_memcg+0x81f/0xf30
[ 1325.817953]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1325.817978]  charge_memcg+0x7b/0x290
[ 1325.817995]  __mem_cgroup_charge+0x28/0x90
[ 1325.818015]  do_wp_page+0x56e/0x31f0
[ 1325.818040]  ? __pfx_do_wp_page+0x10/0x10
[ 1325.818057]  ? do_raw_spin_lock+0x123/0x260
[ 1325.818074]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1325.818090]  ? ___pte_offset_map+0x176/0x370
[ 1325.818110]  __handle_mm_fault+0xde1/0x30f0
[ 1325.818129]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1325.818147]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1325.818165]  ? lock_release+0x121/0x290
[ 1325.818196]  handle_mm_fault+0x2c3/0x900
[ 1325.818214]  ? access_error+0x17d/0x380
[ 1325.818230]  do_user_addr_fault+0x4fa/0xeb0
[ 1325.818249]  exc_page_fault+0xb0/0x180
[ 1325.818268]  asm_exc_page_fault+0x26/0x30
[ 1325.818281] RIP: 0033:0x7fc67e13aecd
[ 1325.818291] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1325.818304] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1325.818314] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1325.818322] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1325.818330] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1325.818338] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1325.818346] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 00000000001439be
[ 1325.818362]  ? do_syscall_64+0x12c/0x360
[ 1325.818385]  </TASK>
[ 1325.835906] memory: usage 307200kB, limit 307200kB, failcnt 1162
[ 1325.836410] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:04:12 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

[ 1325.836870] Memory cgroup stats for /syz0:
[ 1325.879552] anon 1134592
[ 1325.880637] file 309952512
[ 1325.881123] kernel 3485696
[ 1325.881553] kernel_stack 360448
[ 1325.882074] pagetables 1372160
[ 1325.882551] sec_pagetables 0
[ 1325.883037] percpu 640
[ 1325.883423] sock 0
[ 1325.883749] vmalloc 0
[ 1325.884147] shmem 309952512
[ 1325.884589] file_mapped 0
[ 1325.885030] file_dirty 0
[ 1325.885425] file_writeback 0
[ 1325.885867] swapcached 0
[ 1325.886548] inactive_anon 310886400
[ 1325.887315] active_anon 200704
[ 1325.887802] inactive_file 0
[ 1325.888263] active_file 0
[ 1325.888672] unevictable 0
[ 1325.889113] slab_reclaimable 970952
[ 1325.889651] slab_unreclaimable 789936
[ 1325.890229] slab 1760888
[ 1325.890625] workingset_refault_anon 0
[ 1325.891205] workingset_refault_file 0
[ 1325.891782] workingset_activate_anon 0
[ 1325.892389] workingset_activate_file 0
[ 1325.892985] workingset_restore_anon 0
[ 1325.893629] workingset_restore_file 0
[ 1325.894383] workingset_nodereclaim 0
[ 1325.894952] pgdemote_kswapd 0
13:04:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x2, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1325.896339] pgdemote_direct 0
[ 1325.896810] pgdemote_khugepaged 0
[ 1325.897349] pgdemote_proactive 0
[ 1325.897841] pgscan 367
[ 1325.898243] pgsteal 76
[ 1325.898833] pswpin 0
[ 1325.899221] pswpout 0
[ 1325.899601] pgscan_kswapd 0
[ 1325.900071] pgscan_direct 367
[ 1325.900539] pgscan_khugepaged 0
[ 1325.901091] pgscan_proactive 0
[ 1325.901704] pgsteal_kswapd 0
[ 1325.902199] pgsteal_direct 76
[ 1325.902674] pgsteal_khugepaged 0
[ 1325.903278] pgsteal_proactive 0
[ 1325.903945] pgfault 88156
[ 1325.904361] pgmajfault 0
[ 1325.904762] pgrefill 275
[ 1325.905201] pgactivate 365
[ 1325.905623] pgdeactivate 278
[ 1325.906103] pglazyfree 0
[ 1325.906528] pglazyfreed 0
[ 1325.907109] swpin_zero 0
[ 1325.907516] swpout_zero 0
[ 1325.907958] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11186,uid=0
[ 1325.910401] Memory cgroup out of memory: Killed process 11186 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1325.913181] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1325.914563] CPU: 1 UID: 0 PID: 11185 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1325.914581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1325.914589] Call Trace:
[ 1325.914594]  <TASK>
[ 1325.914600]  dump_stack_lvl+0xfa/0x120
[ 1325.914627]  dump_header+0x107/0x950
[ 1325.914651]  oom_kill_process+0x278/0xa00
[ 1325.914672]  out_of_memory+0x34b/0x1690
[ 1325.914696]  ? __pfx_out_of_memory+0x10/0x10
[ 1325.914722]  mem_cgroup_out_of_memory+0x164/0x190
[ 1325.914736]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1325.914755]  ? mark_held_locks+0x49/0x80
[ 1325.914775]  try_charge_memcg+0x81f/0xf30
[ 1325.914800]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1325.914825]  charge_memcg+0x7b/0x290
[ 1325.914842]  __mem_cgroup_charge+0x28/0x90
[ 1325.914862]  do_wp_page+0x56e/0x31f0
[ 1325.914891]  ? __pfx_do_wp_page+0x10/0x10
[ 1325.914909]  ? do_raw_spin_lock+0x123/0x260
[ 1325.914926]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1325.914942]  ? ___pte_offset_map+0x176/0x370
[ 1325.914962]  __handle_mm_fault+0xde1/0x30f0
[ 1325.914981]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1325.914999]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1325.915017]  ? lock_release+0x121/0x290
[ 1325.915048]  handle_mm_fault+0x2c3/0x900
[ 1325.915066]  ? access_error+0x17d/0x380
[ 1325.915082]  do_user_addr_fault+0x4fa/0xeb0
[ 1325.915101]  exc_page_fault+0xb0/0x180
[ 1325.915121]  asm_exc_page_fault+0x26/0x30
[ 1325.915133] RIP: 0033:0x7f88ae9cad30
[ 1325.915144] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1325.915157] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1325.915167] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1325.915176] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1325.915184] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1325.915192] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1325.915200] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1325.915209]  ? __do_sys_mlockall+0x258/0x5c0
[ 1325.915228]  ? __do_sys_mlockall+0x258/0x5c0
[ 1325.915244]  </TASK>
[ 1325.930703] memory: usage 307200kB, limit 307200kB, failcnt 838
[ 1325.931347] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1325.931812] Memory cgroup stats for /syz7:
[ 1325.940055] anon 1499136
[ 1325.941176] file 308297728
[ 1325.941734] kernel 4775936
[ 1325.942367] kernel_stack 557056
[ 1325.942870] pagetables 2162688
[ 1325.943393] sec_pagetables 0
[ 1325.943852] percpu 1024
[ 1325.944423] sock 0
[ 1325.944751] vmalloc 0
[ 1325.945147] shmem 308293632
[ 1325.945582] file_mapped 0
[ 1325.946019] file_dirty 4096
[ 1325.946535] file_writeback 0
[ 1325.947130] swapcached 0
[ 1325.947549] inactive_anon 309710848
[ 1325.948161] active_anon 81920
[ 1325.948748] inactive_file 0
[ 1325.949221] active_file 4096
[ 1325.949686] unevictable 0
[ 1325.950134] slab_reclaimable 966304
[ 1325.950708] slab_unreclaimable 1104848
[ 1325.951430] slab 2071152
[ 1325.951846] workingset_refault_anon 0
[ 1325.952645] workingset_refault_file 1
[ 1325.953445] workingset_activate_anon 0
[ 1325.954041] workingset_activate_file 0
[ 1325.954641] workingset_restore_anon 0
[ 1325.955473] workingset_restore_file 0
[ 1325.956265] workingset_nodereclaim 0
[ 1325.956816] pgdemote_kswapd 0
[ 1325.957316] pgdemote_direct 0
[ 1325.957947] pgdemote_khugepaged 0
[ 1325.958514] pgdemote_proactive 0
[ 1325.959188] pgscan 1271
[ 1325.959599] pgsteal 77
[ 1325.960221] pswpin 0
[ 1325.960577] pswpout 0
[ 1325.961140] pgscan_kswapd 0
[ 1325.961577] pgscan_direct 1271
[ 1325.962286] pgscan_khugepaged 0
[ 1325.962822] pgscan_proactive 0
[ 1325.963451] pgsteal_kswapd 0
[ 1325.963981] pgsteal_direct 77
[ 1325.964561] pgsteal_khugepaged 0
[ 1325.965148] pgsteal_proactive 0
[ 1325.965754] pgfault 88347
[ 1325.966199] pgmajfault 3
[ 1325.966804] pgrefill 1349
[ 1325.967246] pgactivate 1434
[ 1325.967687] pgdeactivate 1349
[ 1325.968191] pglazyfree 0
[ 1325.968759] pglazyfreed 0
[ 1325.969211] swpin_zero 0
[ 1325.969768] swpout_zero 0
[ 1325.970215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11185,uid=0
[ 1325.972509] Memory cgroup out of memory: Killed process 11185 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x3, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x400}], 0x1, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:04:22 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ef0000/0x2000)=nil, 0xa000)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)

13:04:22 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
shmat(r0, &(0x7f0000b00000/0x3000)=nil, 0x6000)

13:04:22 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:04:22 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:04:22 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:04:22 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
splice(r0, &(0x7f0000000080)=0x9, r0, &(0x7f00000000c0)=0x10001, 0x94b, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')

13:04:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:23 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x81)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file1\x00'})
ppoll(&(0x7f0000000080)=[{r1, 0x100}, {r2, 0x4000}, {r0, 0x4}, {r0, 0x40}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x3f]}, 0x8)

13:04:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1336.211856] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1336.212999] CPU: 1 UID: 0 PID: 11219 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1336.213019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1336.213027] Call Trace:
[ 1336.213032]  <TASK>
[ 1336.213038]  dump_stack_lvl+0xfa/0x120
[ 1336.213068]  dump_header+0x107/0x950
[ 1336.213092]  oom_kill_process+0x278/0xa00
[ 1336.213113]  out_of_memory+0x34b/0x1690
[ 1336.213137]  ? __pfx_out_of_memory+0x10/0x10
[ 1336.213163]  mem_cgroup_out_of_memory+0x164/0x190
[ 1336.213177]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1336.213195]  ? mark_held_locks+0x49/0x80
[ 1336.213215]  try_charge_memcg+0x81f/0xf30
[ 1336.213240]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1336.213265]  charge_memcg+0x7b/0x290
[ 1336.213282]  __mem_cgroup_charge+0x28/0x90
[ 1336.213302]  do_wp_page+0x56e/0x31f0
[ 1336.213327]  ? __pfx_do_wp_page+0x10/0x10
[ 1336.213345]  ? do_raw_spin_lock+0x123/0x260
[ 1336.213361]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1336.213378]  ? ___pte_offset_map+0x176/0x370
[ 1336.213398]  __handle_mm_fault+0xde1/0x30f0
[ 1336.213418]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1336.213436]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1336.213453]  ? lock_release+0x121/0x290
[ 1336.213484]  handle_mm_fault+0x2c3/0x900
[ 1336.213502]  ? access_error+0x17d/0x380
[ 1336.213518]  do_user_addr_fault+0x4fa/0xeb0
[ 1336.213537]  exc_page_fault+0xb0/0x180
[ 1336.213556]  asm_exc_page_fault+0x26/0x30
[ 1336.213569] RIP: 0033:0x7fc67e13aecd
[ 1336.213579] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1336.213591] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1336.213601] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1336.213609] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1336.213616] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1336.213624] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1336.213631] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000014626a
[ 1336.213647]  ? do_syscall_64+0x12c/0x360
[ 1336.213671]  </TASK>
[ 1336.213675] memory: usage 307200kB, limit 307200kB, failcnt 1199
[ 1336.234702] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1336.235277] Memory cgroup stats for /syz0:
[ 1336.261984] anon 1134592
[ 1336.262660] file 309952512
[ 1336.262962] kernel 3485696
[ 1336.263247] kernel_stack 360448
[ 1336.263560] pagetables 1372160
[ 1336.263854] sec_pagetables 0
[ 1336.264345] percpu 640
[ 1336.264581] sock 0
[ 1336.264789] vmalloc 0
[ 1336.265224] shmem 309952512
[ 1336.265495] file_mapped 0
[ 1336.265748] file_dirty 0
[ 1336.266184] file_writeback 0
[ 1336.266547] swapcached 0
[ 1336.266797] inactive_anon 310886400
[ 1336.267330] active_anon 200704
[ 1336.267787] inactive_file 0
[ 1336.268246] active_file 0
[ 1336.268504] unevictable 0
[ 1336.268804] slab_reclaimable 970952
[ 1336.269479] slab_unreclaimable 789936
[ 1336.269963] slab 1760888
[ 1336.270213] workingset_refault_anon 0
[ 1336.270553] workingset_refault_file 0
[ 1336.270921] workingset_activate_anon 0
[ 1336.271284] workingset_activate_file 0
[ 1336.271647] workingset_restore_anon 0
[ 1336.272015] workingset_restore_file 0
[ 1336.272441] workingset_nodereclaim 0
[ 1336.272972] pgdemote_kswapd 0
[ 1336.273260] pgdemote_direct 0
[ 1336.273543] pgdemote_khugepaged 0
[ 1336.273855] pgdemote_proactive 0
[ 1336.274187] pgscan 367
[ 1336.274421] pgsteal 76
[ 1336.274656] pswpin 0
[ 1336.274921] pswpout 0
[ 1336.275149] pgscan_kswapd 0
[ 1336.275431] pgscan_direct 367
[ 1336.275718] pgscan_khugepaged 0
[ 1336.276225] pgscan_proactive 0
[ 1336.276520] pgsteal_kswapd 0
[ 1336.276800] pgsteal_direct 76
[ 1336.277286] pgsteal_khugepaged 0
[ 1336.277595] pgsteal_proactive 0
[ 1336.278094] pgfault 88210
[ 1336.278349] pgmajfault 0
[ 1336.278599] pgrefill 275
[ 1336.278850] pgactivate 365
[ 1336.279312] pgdeactivate 278
[ 1336.279604] pglazyfree 0
[ 1336.279852] pglazyfreed 0
[ 1336.280237] swpin_zero 0
[ 1336.280486] swpout_zero 0
[ 1336.280739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11219,uid=0
[ 1336.282090] Memory cgroup out of memory: Killed process 11219 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1336.325086] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1336.327041] CPU: 0 UID: 0 PID: 11217 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1336.327072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1336.327086] Call Trace:
[ 1336.327094]  <TASK>
[ 1336.327104]  dump_stack_lvl+0xfa/0x120
[ 1336.327145]  dump_header+0x107/0x950
[ 1336.327187]  oom_kill_process+0x278/0xa00
[ 1336.327225]  out_of_memory+0x34b/0x1690
[ 1336.327257]  ? perf_trace_lock+0xb5/0x5d0
[ 1336.327293]  ? __pfx_out_of_memory+0x10/0x10
[ 1336.327330]  ? do_raw_spin_lock+0x123/0x260
[ 1336.327366]  mem_cgroup_out_of_memory+0x164/0x190
[ 1336.327390]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1336.327438]  ? mark_held_locks+0x49/0x80
[ 1336.327471]  try_charge_memcg+0x81f/0xf30
[ 1336.327515]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1336.327560]  charge_memcg+0x7b/0x290
[ 1336.327592]  __mem_cgroup_charge+0x28/0x90
[ 1336.327627]  do_wp_page+0x56e/0x31f0
[ 1336.327672]  ? __pfx_do_wp_page+0x10/0x10
[ 1336.327704]  ? do_raw_spin_lock+0x123/0x260
[ 1336.327734]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1336.327763]  ? ___pte_offset_map+0x176/0x370
[ 1336.327800]  __handle_mm_fault+0xde1/0x30f0
[ 1336.327833]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1336.327864]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1336.327902]  ? lock_release+0x121/0x290
[ 1336.327960]  handle_mm_fault+0x2c3/0x900
[ 1336.327993]  ? access_error+0x17d/0x380
[ 1336.328023]  do_user_addr_fault+0x4fa/0xeb0
[ 1336.328057]  exc_page_fault+0xb0/0x180
[ 1336.328091]  asm_exc_page_fault+0x26/0x30
[ 1336.328113] RIP: 0033:0x7f88ae9cad30
[ 1336.328132] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1336.328153] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1336.328172] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1336.328187] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1336.328201] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1336.328215] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1336.328229] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1336.328245]  ? __do_sys_mlockall+0x258/0x5c0
[ 1336.328280]  ? __do_sys_mlockall+0x258/0x5c0
[ 1336.328309]  </TASK>
[ 1336.360335] memory: usage 307200kB, limit 307200kB, failcnt 861
[ 1336.361435] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1336.362547] Memory cgroup stats for /syz7:
[ 1336.377027] anon 1499136
[ 1336.378115] file 308297728
[ 1336.378558] kernel 4775936
[ 1336.379027] kernel_stack 557056
[ 1336.379536] pagetables 2162688
[ 1336.380055] sec_pagetables 0
[ 1336.380519] percpu 1024
[ 1336.380946] sock 0
[ 1336.381285] vmalloc 0
[ 1336.381657] shmem 308293632
[ 1336.382128] file_mapped 0
[ 1336.382546] file_dirty 0
[ 1336.382984] file_writeback 0
[ 1336.383459] swapcached 0
[ 1336.383858] inactive_anon 309710848
[ 1336.384415] active_anon 81920
[ 1336.384915] inactive_file 0
[ 1336.385363] active_file 4096
[ 1336.385820] unevictable 0
[ 1336.386267] slab_reclaimable 966304
[ 1336.386816] slab_unreclaimable 1104848
[ 1336.387436] slab 2071152
[ 1336.387848] workingset_refault_anon 0
[ 1336.388440] workingset_refault_file 1
[ 1336.389038] workingset_activate_anon 0
[ 1336.389618] workingset_activate_file 0
[ 1336.390224] workingset_restore_anon 0
[ 1336.390789] workingset_restore_file 0
[ 1336.391386] workingset_nodereclaim 0
[ 1336.391991] pgdemote_kswapd 0
[ 1336.392472] pgdemote_direct 0
[ 1336.392975] pgdemote_khugepaged 0
[ 1336.393500] pgdemote_proactive 0
[ 1336.394034] pgscan 1310
[ 1336.394433] pgsteal 77
[ 1336.394818] pswpin 0
[ 1336.395207] pswpout 0
[ 1336.395598] pgscan_kswapd 0
[ 1336.396071] pgscan_direct 1310
[ 1336.396558] pgscan_khugepaged 0
[ 1336.397081] pgscan_proactive 0
[ 1336.397570] pgsteal_kswapd 0
[ 1336.398101] pgsteal_direct 77
[ 1336.398580] pgsteal_khugepaged 0
[ 1336.399123] pgsteal_proactive 0
[ 1336.399634] pgfault 88402
[ 1336.400086] pgmajfault 3
[ 1336.400496] pgrefill 1389
[ 1336.400942] pgactivate 1475
[ 1336.401389] pgdeactivate 1389
[ 1336.401993] pglazyfree 0
[ 1336.402525] pglazyfreed 0
[ 1336.403034] swpin_zero 0
[ 1336.403583] swpout_zero 0
[ 1336.404040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11217,uid=0
[ 1336.406491] Memory cgroup out of memory: Killed process 11217 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:23 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmget(0x1, 0x4000, 0x2, &(0x7f0000e7b000/0x4000)=nil)
shmat(r1, &(0x7f0000c00000/0x400000)=nil, 0x3000)
r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r2)

13:04:23 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f0b0000690000003cc0aece559fea4a65f5b85c3e8e239756241d8538146f58fd1622631e308cf024bc0d1650d08842c94f2ecaff23557868aa72e6627228b3c1e24c42f5eb625f7d317a741c91dddfafd88aa4dd0f98aed619763322949ca23ba2ead257e8bbd40f512dea5e13faf54f"])
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @private2, 0x7}, 0x1c)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)

13:04:23 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
mlock(&(0x7f0000696000/0x2000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r3 = syz_io_uring_setup(0x2262, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000003ac0))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0), 0x1)
shmctl$IPC_RMID(r2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e3e000/0x1000)=nil, 0x1000, 0x200000e, 0x80010, r3, 0x0)
shmdt(r1)

13:04:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x6, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1336.713712] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1336.715751] CPU: 0 UID: 0 PID: 11250 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1336.715783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1336.715797] Call Trace:
[ 1336.715805]  <TASK>
[ 1336.715814]  dump_stack_lvl+0xfa/0x120
[ 1336.715854]  dump_header+0x107/0x950
[ 1336.715903]  oom_kill_process+0x278/0xa00
[ 1336.715941]  out_of_memory+0x34b/0x1690
[ 1336.715985]  ? __pfx_out_of_memory+0x10/0x10
[ 1336.716031]  mem_cgroup_out_of_memory+0x164/0x190
[ 1336.716055]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1336.716088]  ? mark_held_locks+0x49/0x80
[ 1336.716122]  try_charge_memcg+0x81f/0xf30
[ 1336.716165]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1336.716210]  charge_memcg+0x7b/0x290
[ 1336.716241]  __mem_cgroup_charge+0x28/0x90
[ 1336.716276]  do_wp_page+0x56e/0x31f0
[ 1336.716320]  ? __pfx_do_wp_page+0x10/0x10
[ 1336.716352]  ? do_raw_spin_lock+0x123/0x260
[ 1336.716382]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1336.716417]  ? ___pte_offset_map+0x176/0x370
[ 1336.716452]  __handle_mm_fault+0xde1/0x30f0
[ 1336.716486]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1336.716517]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1336.716549]  ? lock_release+0x121/0x290
[ 1336.716606]  handle_mm_fault+0x2c3/0x900
[ 1336.716639]  ? access_error+0x17d/0x380
[ 1336.716668]  do_user_addr_fault+0x4fa/0xeb0
[ 1336.716703]  exc_page_fault+0xb0/0x180
[ 1336.716736]  asm_exc_page_fault+0x26/0x30
[ 1336.716759] RIP: 0033:0x7fc67e13dd30
[ 1336.716777] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1336.716798] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1336.716817] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1336.716832] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1336.716847] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1336.716860] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1336.716874] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1336.716890]  ? __might_fault+0x1f/0x190
[ 1336.716926]  ? __might_fault+0x1f/0x190
[ 1336.716958]  </TASK>
[ 1336.748612] memory: usage 307200kB, limit 307200kB, failcnt 1234
[ 1336.751618] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1336.752641] Memory cgroup stats for /syz0:
[ 1336.758369] anon 1118208
[ 1336.759860] file 309952512
[ 1336.760308] kernel 3502080
[ 1336.760755] kernel_stack 360448
[ 1336.761262] pagetables 1376256
[ 1336.761737] sec_pagetables 0
[ 1336.762212] percpu 704
[ 1336.762574] sock 0
[ 1336.762967] vmalloc 0
[ 1336.763562] shmem 309952512
[ 1336.764033] file_mapped 0
[ 1336.764439] file_dirty 0
[ 1336.764842] file_writeback 0
[ 1336.765310] swapcached 0
[ 1336.765934] inactive_anon 310870016
[ 1336.766675] active_anon 200704
[ 1336.767183] inactive_file 0
[ 1336.767776] active_file 0
[ 1336.768227] unevictable 0
[ 1336.768842] slab_reclaimable 970952
[ 1336.769390] slab_unreclaimable 801944
[ 1336.770199] slab 1772896
[ 1336.770591] workingset_refault_anon 0
[ 1336.771386] workingset_refault_file 0
[ 1336.772075] workingset_activate_anon 0
[ 1336.772751] workingset_activate_file 0
[ 1336.773547] workingset_restore_anon 0
[ 1336.774363] workingset_restore_file 0
[ 1336.775155] workingset_nodereclaim 0
[ 1336.775713] pgdemote_kswapd 0
[ 1336.776203] pgdemote_direct 0
[ 1336.776665] pgdemote_khugepaged 0
[ 1336.777293] pgdemote_proactive 0
[ 1336.777956] pgscan 367
[ 1336.778381] pgsteal 76
[ 1336.778873] pswpin 0
[ 1336.779267] pswpout 0
[ 1336.779865] pgscan_kswapd 0
[ 1336.780344] pgscan_direct 367
[ 1336.780809] pgscan_khugepaged 0
[ 1336.781532] pgscan_proactive 0
[ 1336.782056] pgsteal_kswapd 0
[ 1336.782500] pgsteal_direct 76
[ 1336.783227] pgsteal_khugepaged 0
[ 1336.783783] pgsteal_proactive 0
[ 1336.784429] pgfault 88257
[ 1336.785021] pgmajfault 0
[ 1336.785419] pgrefill 275
[ 1336.786030] pgactivate 365
[ 1336.786493] pgdeactivate 278
[ 1336.787116] pglazyfree 0
[ 1336.787718] pglazyfreed 0
[ 1336.788166] swpin_zero 0
[ 1336.788729] swpout_zero 0
[ 1336.789186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11250,uid=0
[ 1336.791543] Memory cgroup out of memory: Killed process 11250 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1336.794397] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1336.795386] CPU: 1 UID: 0 PID: 11256 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1336.795404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1336.795413] Call Trace:
[ 1336.795418]  <TASK>
[ 1336.795437]  dump_stack_lvl+0xfa/0x120
[ 1336.795466]  dump_header+0x107/0x950
[ 1336.795491]  oom_kill_process+0x278/0xa00
[ 1336.795512]  out_of_memory+0x34b/0x1690
[ 1336.795536]  ? __pfx_out_of_memory+0x10/0x10
[ 1336.795561]  mem_cgroup_out_of_memory+0x164/0x190
[ 1336.795576]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1336.795594]  ? mark_held_locks+0x49/0x80
[ 1336.795615]  try_charge_memcg+0x81f/0xf30
[ 1336.795641]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1336.795666]  charge_memcg+0x7b/0x290
[ 1336.795683]  __mem_cgroup_charge+0x28/0x90
[ 1336.795703]  do_wp_page+0x56e/0x31f0
[ 1336.795728]  ? __pfx_do_wp_page+0x10/0x10
[ 1336.795746]  ? do_raw_spin_lock+0x123/0x260
[ 1336.795763]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1336.795779]  ? ___pte_offset_map+0x176/0x370
[ 1336.795800]  __handle_mm_fault+0xde1/0x30f0
[ 1336.795820]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1336.795839]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1336.795856]  ? lock_release+0x121/0x290
[ 1336.795891]  handle_mm_fault+0x2c3/0x900
[ 1336.795909]  ? access_error+0x17d/0x380
[ 1336.795925]  do_user_addr_fault+0x4fa/0xeb0
[ 1336.795943]  exc_page_fault+0xb0/0x180
[ 1336.795963]  asm_exc_page_fault+0x26/0x30
[ 1336.795976] RIP: 0033:0x7f88ae9cad30
[ 1336.795986] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1336.795997] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1336.796008] RAX: 00000000413566b5 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1336.796016] RDX: 0000001b2d620018 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1336.796024] RBP: 0000000000000001 R08: 00000000413566b5 R09: 0000001b2d62001c
[ 1336.796032] R10: 00000000000006b5 R11: 00000000413566b9 R12: 0000000000000000
[ 1336.796040] R13: 00007f88aeb24000 R14: ffffffff819c2fdf R15: 00007f88aeb2fff0
[ 1336.796049]  ? __might_fault+0x1f/0x190
[ 1336.796069]  ? __might_fault+0x1f/0x190
[ 1336.796086]  </TASK>
[ 1336.813294] memory: usage 307200kB, limit 307200kB, failcnt 882
[ 1336.813748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1336.814217] Memory cgroup stats for /syz7:
[ 1336.833289] anon 1470464
[ 1336.833968] file 308297728
[ 1336.834187] kernel 4792320
[ 1336.834401] kernel_stack 557056
[ 1336.834649] pagetables 2166784
[ 1336.834920] sec_pagetables 0
[ 1336.835153] percpu 1088
[ 1336.835350] sock 0
[ 1336.835537] vmalloc 0
[ 1336.835728] shmem 308293632
[ 1336.835971] file_mapped 0
[ 1336.836183] file_dirty 0
[ 1336.836385] file_writeback 0
[ 1336.836614] swapcached 0
[ 1336.836817] inactive_anon 309682176
[ 1336.837111] active_anon 81920
[ 1336.837375] inactive_file 0
[ 1336.837602] active_file 4096
[ 1336.837851] unevictable 0
[ 1336.838087] slab_reclaimable 966304
[ 1336.838382] slab_unreclaimable 1116856
[ 1336.838678] slab 2083160
[ 1336.838922] workingset_refault_anon 0
[ 1336.839228] workingset_refault_file 1
[ 1336.839679] workingset_activate_anon 0
[ 1336.840036] workingset_activate_file 0
[ 1336.840344] workingset_restore_anon 0
[ 1336.840635] workingset_restore_file 0
[ 1336.840974] workingset_nodereclaim 0
[ 1336.841302] pgdemote_kswapd 0
[ 1336.841653] pgdemote_direct 0
[ 1336.841993] pgdemote_khugepaged 0
[ 1336.842274] pgdemote_proactive 0
[ 1336.842531] pgscan 1336
[ 1336.842745] pgsteal 77
[ 1336.842974] pswpin 0
[ 1336.843176] pswpout 0
[ 1336.843378] pgscan_kswapd 0
[ 1336.843653] pgscan_direct 1336
[ 1336.844034] pgscan_khugepaged 0
[ 1336.844309] pgscan_proactive 0
[ 1336.844569] pgsteal_kswapd 0
[ 1336.844815] pgsteal_direct 77
[ 1336.845099] pgsteal_khugepaged 0
[ 1336.845375] pgsteal_proactive 0
[ 1336.845641] pgfault 88443
[ 1336.845867] pgmajfault 3
[ 1336.846094] pgrefill 1425
[ 1336.846320] pgactivate 1511
[ 1336.846622] pgdeactivate 1425
[ 1336.846916] pglazyfree 0
[ 1336.847149] pglazyfreed 0
[ 1336.847359] swpin_zero 0
[ 1336.847588] swpout_zero 0
[ 1336.847814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11256,uid=0
[ 1336.849037] Memory cgroup out of memory: Killed process 11256 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:23 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmat(r0, &(0x7f0000eb4000/0x3000)=nil, 0x2000)
r1 = shmat(r0, &(0x7f0000f34000/0x1000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:04:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x7, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1337.145847] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1337.147096] CPU: 1 UID: 0 PID: 11266 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1337.147114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1337.147122] Call Trace:
[ 1337.147127]  <TASK>
[ 1337.147132]  dump_stack_lvl+0xfa/0x120
[ 1337.147162]  dump_header+0x107/0x950
[ 1337.147187]  oom_kill_process+0x278/0xa00
[ 1337.147209]  out_of_memory+0x34b/0x1690
[ 1337.147232]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1337.147250]  ? __pfx_out_of_memory+0x10/0x10
[ 1337.147277]  mem_cgroup_out_of_memory+0x164/0x190
[ 1337.147291]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1337.147310]  ? mark_held_locks+0x49/0x80
[ 1337.147330]  try_charge_memcg+0x81f/0xf30
[ 1337.147356]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1337.147382]  charge_memcg+0x7b/0x290
[ 1337.147400]  __mem_cgroup_charge+0x28/0x90
[ 1337.147421]  do_wp_page+0x56e/0x31f0
[ 1337.147454]  ? __pfx_do_wp_page+0x10/0x10
[ 1337.147473]  ? do_raw_spin_lock+0x123/0x260
[ 1337.147490]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1337.147507]  ? ___pte_offset_map+0x176/0x370
[ 1337.147528]  __handle_mm_fault+0xde1/0x30f0
[ 1337.147547]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1337.147566]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1337.147584]  ? lock_release+0x121/0x290
[ 1337.147616]  handle_mm_fault+0x2c3/0x900
[ 1337.147635]  ? access_error+0x17d/0x380
[ 1337.147652]  do_user_addr_fault+0x4fa/0xeb0
[ 1337.147671]  exc_page_fault+0xb0/0x180
[ 1337.147691]  asm_exc_page_fault+0x26/0x30
[ 1337.147704] RIP: 0033:0x7f88ae9c3352
[ 1337.147716] Code: e8 b3 64 ff ff 41 39 5c 24 2c 7f d4 31 c0 48 8d 3d 9d 2b 0b 00 e8 9e 64 ff ff 48 8b 04 24 c7 44 24 10 ff ff ff ff 44 8b 60 78 <c6> 80 b8 00 00 00 00 45 85 e4 7e 7c 80 3d 9b 0c 57 00 00 0f 85 85
[ 1337.147729] RSP: 002b:00007f88abf921a0 EFLAGS: 00010202
[ 1337.147740] RAX: 00007f88aeb2ff60 RBX: 0000000000000001 RCX: 00007f88aea7ffef
[ 1337.147749] RDX: 00000000001310ee RSI: 0000000000000002 RDI: 00007f88aea75eda
[ 1337.147757] RBP: 00007f88aea76f6d R08: 00340ed65af05a22 R09: 00007f88aeb0c000
[ 1337.147766] R10: 00007f88aeb0c010 R11: 000000000025e664 R12: 0000000000000000
[ 1337.147774] R13: 00007fffea05529f R14: 00007f88abf92300 R15: 0000000000022000
[ 1337.147795]  </TASK>
[ 1337.147800] memory: usage 307200kB, limit 307200kB, failcnt 908
[ 1337.165122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1337.165584] Memory cgroup stats for /syz7:
[ 1337.187671] anon 1466368
[ 1337.188442] file 308297728
[ 1337.188663] kernel 4808704
[ 1337.189010] kernel_stack 557056
[ 1337.189416] pagetables 2170880
[ 1337.189662] sec_pagetables 0
[ 1337.190092] percpu 1152
[ 1337.190294] sock 0
[ 1337.190464] vmalloc 0
[ 1337.190650] shmem 308293632
[ 1337.190988] file_mapped 0
[ 1337.191203] file_dirty 0
[ 1337.191407] file_writeback 0
[ 1337.191662] swapcached 0
[ 1337.191869] inactive_anon 309678080
[ 1337.192184] active_anon 81920
[ 1337.192421] inactive_file 0
[ 1337.192642] active_file 4096
[ 1337.192872] unevictable 0
[ 1337.193175] slab_reclaimable 966304
[ 1337.193450] slab_unreclaimable 1128864
[ 1337.193737] slab 2095168
[ 1337.193970] workingset_refault_anon 0
[ 1337.194262] workingset_refault_file 1
[ 1337.194547] workingset_activate_anon 0
[ 1337.194837] workingset_activate_file 0
[ 1337.195155] workingset_restore_anon 0
[ 1337.195449] workingset_restore_file 0
[ 1337.195736] workingset_nodereclaim 0
[ 1337.196039] pgdemote_kswapd 0
[ 1337.196284] pgdemote_direct 0
[ 1337.196541] pgdemote_khugepaged 0
[ 1337.196807] pgdemote_proactive 0
[ 1337.197092] pgscan 1380
[ 1337.197298] pgsteal 77
[ 1337.197489] pswpin 0
[ 1337.197671] pswpout 0
[ 1337.197861] pgscan_kswapd 0
[ 1337.198113] pgscan_direct 1380
[ 1337.198357] pgscan_khugepaged 0
[ 1337.198605] pgscan_proactive 0
[ 1337.198867] pgsteal_kswapd 0
[ 1337.199133] pgsteal_direct 77
[ 1337.199391] pgsteal_khugepaged 0
[ 1337.199659] pgsteal_proactive 0
[ 1337.199939] pgfault 88482
[ 1337.200153] pgmajfault 3
[ 1337.200369] pgrefill 1455
[ 1337.200580] pgactivate 1541
[ 1337.200801] pgdeactivate 1455
[ 1337.201070] pglazyfree 0
[ 1337.201279] pglazyfreed 0
[ 1337.201489] swpin_zero 0
[ 1337.201705] swpout_zero 0
[ 1337.201940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11264,uid=0
[ 1337.203064] Memory cgroup out of memory: Killed process 11264 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:34 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c5367", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:04:34 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0xc9, 0x4, 0x2, "e2803e7bf36245d69bb5b4183cbd7dac", "07fba28032d847d449500ba4d2933c940096ee922beacd10a95b03ed8783bf7a4df6ca591f71447374b1446706276ae5167b602f1a29b0b88121da00fb85c9042a3df2e8a0ff9b891dce36b91e05ca1088089f3d6791afcea620db67618059825bad28ab1399f02078ee2589cf7ad72bacb6737502ea9b7d13cbefd5ac3e7dcca57b51d399a4f208960362744bae0ef1cc0bd29560024c1484eb44d352eb19206c9e080ecbf187bd3d309a7ee9dc929739202c8a"}, 0xc9, 0x0)

13:04:34 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmat(r0, &(0x7f000051b000/0x1000)=nil, 0x5000)
shmdt(0x0)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x3000)

13:04:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1a, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:34 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:04:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:04:34 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ba)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:04:34 executing program 7:
sched_getscheduler(0xffffffffffffffff)
mlockall(0x2)
shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff7000/0x4000)=nil)
r0 = shmget(0x2, 0x2000, 0x54000000, &(0x7f00008f4000/0x2000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
shmdt(0x0)
shmdt(r1)

[ 1347.770695] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1347.771620] CPU: 1 UID: 0 PID: 11270 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1347.771637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1347.771645] Call Trace:
[ 1347.771650]  <TASK>
[ 1347.771655]  dump_stack_lvl+0xfa/0x120
[ 1347.771684]  dump_header+0x107/0x950
[ 1347.771708]  oom_kill_process+0x278/0xa00
[ 1347.771729]  out_of_memory+0x34b/0x1690
[ 1347.771753]  ? __pfx_out_of_memory+0x10/0x10
[ 1347.771779]  mem_cgroup_out_of_memory+0x164/0x190
[ 1347.771792]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1347.771811]  ? mark_held_locks+0x49/0x80
[ 1347.771830]  try_charge_memcg+0x81f/0xf30
[ 1347.771855]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1347.771884]  charge_memcg+0x7b/0x290
[ 1347.771901]  __mem_cgroup_charge+0x28/0x90
[ 1347.771920]  do_wp_page+0x56e/0x31f0
[ 1347.771945]  ? __pfx_do_wp_page+0x10/0x10
[ 1347.771962]  ? do_raw_spin_lock+0x123/0x260
[ 1347.771979]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1347.771994]  ? ___pte_offset_map+0x176/0x370
[ 1347.772014]  __handle_mm_fault+0xde1/0x30f0
[ 1347.772033]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1347.772051]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1347.772068]  ? lock_release+0x121/0x290
[ 1347.772099]  handle_mm_fault+0x2c3/0x900
[ 1347.772117]  ? access_error+0x17d/0x380
[ 1347.772133]  do_user_addr_fault+0x4fa/0xeb0
[ 1347.772152]  exc_page_fault+0xb0/0x180
[ 1347.772171]  asm_exc_page_fault+0x26/0x30
[ 1347.772183] RIP: 0033:0x7fc67e13aecd
[ 1347.772193] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1347.772205] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1347.772216] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1347.772224] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1347.772233] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1347.772241] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1347.772249] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000148fc0
[ 1347.772265]  ? do_syscall_64+0x12c/0x360
[ 1347.772288]  </TASK>
[ 1347.788299] memory: usage 307200kB, limit 307200kB, failcnt 1253
[ 1347.788758] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1347.790054] Memory cgroup stats for /syz0:
[ 1347.830402] anon 1134592
[ 1347.831172] file 309952512
[ 1347.831421] kernel 3485696
[ 1347.831648] kernel_stack 360448
[ 1347.832049] pagetables 1372160
[ 1347.832344] sec_pagetables 0
[ 1347.832983] percpu 640
[ 1347.833182] sock 0
[ 1347.833350] vmalloc 0
[ 1347.833538] shmem 309952512
[ 1347.833758] file_mapped 0
[ 1347.834081] file_dirty 0
[ 1347.834294] file_writeback 0
[ 1347.834524] swapcached 0
[ 1347.834727] inactive_anon 310886400
[ 1347.835028] active_anon 200704
[ 1347.835272] inactive_file 0
[ 1347.835492] active_file 0
[ 1347.835709] unevictable 0
[ 1347.835940] slab_reclaimable 970952
[ 1347.836215] slab_unreclaimable 789936
[ 1347.836498] slab 1760888
[ 1347.836701] workingset_refault_anon 0
[ 1347.837003] workingset_refault_file 0
[ 1347.837292] workingset_activate_anon 0
[ 1347.837579] workingset_activate_file 0
[ 1347.837866] workingset_restore_anon 0
[ 1347.838172] workingset_restore_file 0
[ 1347.838454] workingset_nodereclaim 0
[ 1347.838728] pgdemote_kswapd 0
[ 1347.838986] pgdemote_direct 0
[ 1347.839229] pgdemote_khugepaged 0
[ 1347.839488] pgdemote_proactive 0
[ 1347.839748] pgscan 367
[ 1347.839968] pgsteal 76
[ 1347.840164] pswpin 0
[ 1347.840349] pswpout 0
[ 1347.840534] pgscan_kswapd 0
[ 1347.840754] pgscan_direct 367
[ 1347.841010] pgscan_khugepaged 0
[ 1347.841260] pgscan_proactive 0
[ 1347.841500] pgsteal_kswapd 0
[ 1347.841729] pgsteal_direct 76
[ 1347.841988] pgsteal_khugepaged 0
[ 1347.842243] pgsteal_proactive 0
[ 1347.842490] pgfault 88311
[ 1347.842698] pgmajfault 0
[ 1347.842927] pgrefill 275
[ 1347.843130] pgactivate 365
[ 1347.843344] pgdeactivate 278
[ 1347.843586] pglazyfree 0
[ 1347.843791] pglazyfreed 0
[ 1347.844032] swpin_zero 0
[ 1347.844241] swpout_zero 0
[ 1347.844451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11270,uid=0
[ 1347.845562] Memory cgroup out of memory: Killed process 11270 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:34 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1347.927464] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1347.928310] CPU: 1 UID: 0 PID: 11282 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1347.928327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1347.928335] Call Trace:
[ 1347.928339]  <TASK>
[ 1347.928345]  dump_stack_lvl+0xfa/0x120
[ 1347.928368]  dump_header+0x107/0x950
[ 1347.928391]  oom_kill_process+0x278/0xa00
[ 1347.928412]  out_of_memory+0x34b/0x1690
[ 1347.928436]  ? __pfx_out_of_memory+0x10/0x10
[ 1347.928462]  mem_cgroup_out_of_memory+0x164/0x190
[ 1347.928475]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1347.928493]  ? mark_held_locks+0x49/0x80
[ 1347.928511]  try_charge_memcg+0x81f/0xf30
[ 1347.928535]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1347.928559]  charge_memcg+0x7b/0x290
[ 1347.928577]  __mem_cgroup_charge+0x28/0x90
[ 1347.928596]  do_wp_page+0x56e/0x31f0
[ 1347.928620]  ? __pfx_do_wp_page+0x10/0x10
[ 1347.928638]  ? do_raw_spin_lock+0x123/0x260
[ 1347.928654]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1347.928670]  ? ___pte_offset_map+0x176/0x370
[ 1347.928690]  __handle_mm_fault+0xde1/0x30f0
[ 1347.928708]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1347.928726]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1347.928743]  ? lock_release+0x121/0x290
[ 1347.928774]  handle_mm_fault+0x2c3/0x900
[ 1347.928792]  ? access_error+0x17d/0x380
[ 1347.928807]  do_user_addr_fault+0x4fa/0xeb0
[ 1347.928826]  exc_page_fault+0xb0/0x180
[ 1347.928845]  asm_exc_page_fault+0x26/0x30
[ 1347.928857] RIP: 0033:0x7f88ae9cad30
[ 1347.928867] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1347.928883] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1347.928893] RAX: 000000004d1b3e44 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1347.928901] RDX: 0000001b2d620050 RSI: ffffffff812c812e RDI: 0000000000000000
[ 1347.928909] RBP: 0000000000000001 R08: 000000004d1b3e44 R09: 0000001b2d62001c
[ 1347.928921] R10: 0000000000001e44 R11: 000000004d1b3e48 R12: 0000000000000010
[ 1347.928928] R13: 00007f88aeb24000 R14: ffffffff812c812e R15: 00007f88aeb2fff0
[ 1347.928938]  ? fpregs_assert_state_consistent+0x5e/0xd0
[ 1347.928959]  ? fpregs_assert_state_consistent+0x5e/0xd0
[ 1347.928977]  </TASK>
[ 1347.946617] memory: usage 307200kB, limit 307200kB, failcnt 971
[ 1347.947183] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1347.947735] Memory cgroup stats for /syz7:
[ 1347.953582] anon 1499136
[ 1347.954238] file 308297728
[ 1347.954526] kernel 4775936
[ 1347.955111] kernel_stack 557056
[ 1347.955422] pagetables 2162688
[ 1347.955730] sec_pagetables 0
[ 1347.956212] percpu 1024
[ 1347.956451] sock 0
[ 1347.956656] vmalloc 0
[ 1347.957084] shmem 308293632
[ 1347.957356] file_mapped 0
[ 1347.957613] file_dirty 4096
[ 1347.958019] file_writeback 0
[ 1347.958309] swapcached 0
[ 1347.958558] inactive_anon 309710848
[ 1347.958918] active_anon 81920
[ 1347.959203] inactive_file 0
[ 1347.959560] active_file 4096
[ 1347.960015] unevictable 0
[ 1347.960274] slab_reclaimable 966304
[ 1347.960602] slab_unreclaimable 1104848
[ 1347.960990] slab 2071152
[ 1347.961240] workingset_refault_anon 0
[ 1347.961587] workingset_refault_file 1
[ 1347.961967] workingset_activate_anon 0
[ 1347.962317] workingset_activate_file 0
[ 1347.962669] workingset_restore_anon 0
[ 1347.963055] workingset_restore_file 0
[ 1347.963416] workingset_nodereclaim 0
[ 1347.963871] pgdemote_kswapd 0
[ 1347.964271] pgdemote_direct 0
[ 1347.964558] pgdemote_khugepaged 0
[ 1347.964873] pgdemote_proactive 0
[ 1347.965376] pgscan 1457
[ 1347.965618] pgsteal 77
[ 1347.965852] pswpin 0
[ 1347.966288] pswpout 0
[ 1347.966514] pgscan_kswapd 0
[ 1347.966782] pgscan_direct 1457
[ 1347.967210] pgscan_khugepaged 0
[ 1347.967513] pgscan_proactive 0
[ 1347.967818] pgsteal_kswapd 0
[ 1347.968181] pgsteal_direct 77
[ 1347.968468] pgsteal_khugepaged 0
[ 1347.968774] pgsteal_proactive 0
[ 1347.969107] pgfault 88538
[ 1347.969363] pgmajfault 3
[ 1347.969609] pgrefill 1535
[ 1347.969863] pgactivate 1621
[ 1347.970157] pgdeactivate 1535
[ 1347.970446] pglazyfree 0
[ 1347.970696] pglazyfreed 0
[ 1347.971001] swpin_zero 0
[ 1347.971249] swpout_zero 0
[ 1347.971505] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11282,uid=0
[ 1347.972842] Memory cgroup out of memory: Killed process 11282 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x74, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:34 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:04:35 executing program 0:
mlockall(0x1)
shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = shmget(0x0, 0x3000, 0x1, &(0x7f0000cdb000/0x3000)=nil)
r2 = shmat(r1, &(0x7f0000e3c000/0x3000)=nil, 0x3000)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000729000/0x4000)=nil)
shmdt(0x0)
shmdt(r2)

13:04:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1348.228274] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1348.229311] CPU: 1 UID: 0 PID: 11301 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1348.229330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1348.229339] Call Trace:
[ 1348.229345]  <TASK>
[ 1348.229351]  dump_stack_lvl+0xfa/0x120
[ 1348.229379]  dump_header+0x107/0x950
[ 1348.229405]  oom_kill_process+0x278/0xa00
[ 1348.229428]  out_of_memory+0x34b/0x1690
[ 1348.229453]  ? __pfx_out_of_memory+0x10/0x10
[ 1348.229480]  mem_cgroup_out_of_memory+0x164/0x190
[ 1348.229494]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1348.229513]  ? mark_held_locks+0x49/0x80
[ 1348.229534]  try_charge_memcg+0x81f/0xf30
[ 1348.229559]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1348.229585]  charge_memcg+0x7b/0x290
[ 1348.229603]  __mem_cgroup_charge+0x28/0x90
[ 1348.229623]  __handle_mm_fault+0x1455/0x30f0
[ 1348.229646]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1348.229662]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1348.229681]  ? __pte_offset_map_lock+0x190/0x330
[ 1348.229706]  ? no_page_table+0xc7/0x220
[ 1348.229725]  ? follow_page_pte.constprop.0+0x4f9/0x1170
[ 1348.229750]  handle_mm_fault+0x2c3/0x900
[ 1348.229773]  __get_user_pages+0x58a/0x2f10
[ 1348.229807]  ? __pfx___get_user_pages+0x10/0x10
[ 1348.229830]  ? lock_is_held_type+0x9e/0x120
[ 1348.229852]  populate_vma_page_range+0x282/0x410
[ 1348.229866]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1348.229884]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1348.229902]  ? __pfx_apply_mlockall_flags+0x10/0x10
[ 1348.229921]  __mm_populate+0x100/0x3a0
[ 1348.229935]  ? __pfx___mm_populate+0x10/0x10
[ 1348.229950]  ? up_write+0x195/0x520
[ 1348.229965]  ? lock_is_held_type+0x9e/0x120
[ 1348.229985]  __do_sys_mlockall+0x50f/0x5c0
[ 1348.230001]  do_syscall_64+0xbf/0x360
[ 1348.230022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1348.230036] RIP: 0033:0x7fc67e18fb19
[ 1348.230047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1348.230060] RSP: 002b:00007fc67b705188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[ 1348.230072] RAX: ffffffffffffffda RBX: 00007fc67e2a2f60 RCX: 00007fc67e18fb19
[ 1348.230081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1348.230089] RBP: 00007fc67e1e9f6d R08: 0000000000000000 R09: 0000000000000000
[ 1348.230097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1348.230105] R13: 00007ffc5e9f3b6f R14: 00007fc67b705300 R15: 0000000000022000
[ 1348.230126]  </TASK>
[ 1348.250313] memory: usage 307200kB, limit 307200kB, failcnt 1276
[ 1348.250859] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1348.251574] Memory cgroup stats for /syz0:
[ 1348.266449] anon 1110016
[ 1348.267860] file 309952512
[ 1348.268346] kernel 3510272
[ 1348.268780] kernel_stack 360448
[ 1348.269312] pagetables 1384448
[ 1348.269798] sec_pagetables 0
[ 1348.270300] percpu 704
[ 1348.270687] sock 0
[ 1348.271053] vmalloc 0
[ 1348.271431] shmem 309952512
[ 1348.271915] file_mapped 0
[ 1348.272339] file_dirty 0
[ 1348.272746] file_writeback 0
[ 1348.273243] swapcached 0
[ 1348.273652] inactive_anon 310767616
[ 1348.274219] active_anon 200704
[ 1348.274705] inactive_file 0
[ 1348.275177] active_file 0
[ 1348.275612] unevictable 94208
[ 1348.276117] slab_reclaimable 970952
[ 1348.276658] slab_unreclaimable 802328
[ 1348.277253] slab 1773280
[ 1348.277662] workingset_refault_anon 0
[ 1348.278262] workingset_refault_file 0
[ 1348.278831] workingset_activate_anon 0
[ 1348.279434] workingset_activate_file 0
[ 1348.280056] workingset_restore_anon 0
[ 1348.280627] workingset_restore_file 0
[ 1348.281228] workingset_nodereclaim 0
[ 1348.282009] pgdemote_kswapd 0
[ 1348.282487] pgdemote_direct 0
[ 1348.283199] pgdemote_khugepaged 0
[ 1348.283754] pgdemote_proactive 0
[ 1348.284306] pgscan 367
[ 1348.284692] pgsteal 76
[ 1348.285106] pswpin 0
[ 1348.285469] pswpout 0
[ 1348.285842] pgscan_kswapd 0
[ 1348.286391] pgscan_direct 367
[ 1348.286994] pgscan_khugepaged 0
[ 1348.287496] pgscan_proactive 0
[ 1348.288040] pgsteal_kswapd 0
[ 1348.288604] pgsteal_direct 76
[ 1348.289234] pgsteal_khugepaged 0
[ 1348.289747] pgsteal_proactive 0
[ 1348.290333] pgfault 88351
[ 1348.290851] pgmajfault 0
[ 1348.291304] pgrefill 275
[ 1348.291736] pgactivate 365
[ 1348.292212] pgdeactivate 278
[ 1348.292688] pglazyfree 0
[ 1348.293136] pglazyfreed 0
[ 1348.293569] swpin_zero 0
[ 1348.294105] swpout_zero 0
[ 1348.294676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11300,uid=0
[ 1348.296989] Memory cgroup out of memory: Killed process 11300 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 1348.331774] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1348.333489] CPU: 1 UID: 0 PID: 11303 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1348.333521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1348.333536] Call Trace:
[ 1348.333544]  <TASK>
[ 1348.333555]  dump_stack_lvl+0xfa/0x120
[ 1348.333594]  dump_header+0x107/0x950
[ 1348.333637]  oom_kill_process+0x278/0xa00
[ 1348.333679]  out_of_memory+0x34b/0x1690
[ 1348.333723]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1348.333755]  ? __pfx_out_of_memory+0x10/0x10
[ 1348.333806]  mem_cgroup_out_of_memory+0x164/0x190
[ 1348.333831]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1348.333867]  ? mark_held_locks+0x49/0x80
[ 1348.333910]  try_charge_memcg+0x81f/0xf30
[ 1348.333955]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1348.334004]  charge_memcg+0x7b/0x290
[ 1348.334039]  __mem_cgroup_charge+0x28/0x90
[ 1348.334076]  do_wp_page+0x56e/0x31f0
[ 1348.334123]  ? __pfx_do_wp_page+0x10/0x10
[ 1348.334158]  ? do_raw_spin_lock+0x123/0x260
[ 1348.334191]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1348.334222]  ? ___pte_offset_map+0x176/0x370
[ 1348.334260]  __handle_mm_fault+0xde1/0x30f0
[ 1348.334297]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1348.334331]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1348.334365]  ? lock_release+0x121/0x290
[ 1348.334427]  handle_mm_fault+0x2c3/0x900
[ 1348.334463]  ? access_error+0x17d/0x380
[ 1348.334495]  do_user_addr_fault+0x4fa/0xeb0
[ 1348.334533]  exc_page_fault+0xb0/0x180
[ 1348.334569]  asm_exc_page_fault+0x26/0x30
[ 1348.334591] RIP: 0033:0x7f88ae9cad30
[ 1348.334612] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1348.334635] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1348.334655] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1348.334672] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1348.334687] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1348.334702] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1348.334717] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1348.334734]  ? syscall_trace_enter+0xeb/0x240
[ 1348.334772]  ? syscall_trace_enter+0xeb/0x240
[ 1348.334803]  </TASK>
[ 1348.367749] memory: usage 307200kB, limit 307200kB, failcnt 992
[ 1348.368740] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1348.369726] Memory cgroup stats for /syz7:
[ 1348.418381] anon 1482752
[ 1348.419698] file 308297728
[ 1348.420172] kernel 4792320
[ 1348.420600] kernel_stack 557056
[ 1348.421135] pagetables 2166784
[ 1348.421647] sec_pagetables 0
[ 1348.422293] percpu 1088
[ 1348.422687] sock 0
[ 1348.423053] vmalloc 0
[ 1348.423428] shmem 308293632
[ 1348.423974] file_mapped 0
[ 1348.424530] file_dirty 4096
[ 1348.425036] file_writeback 0
[ 1348.425586] swapcached 0
[ 1348.426019] inactive_anon 309694464
[ 1348.426563] active_anon 81920
[ 1348.427067] inactive_file 0
[ 1348.427502] active_file 4096
[ 1348.428006] unevictable 0
[ 1348.428476] slab_reclaimable 966304
[ 1348.429199] slab_unreclaimable 1116856
[ 1348.429775] slab 2083160
[ 1348.430237] workingset_refault_anon 0
[ 1348.430792] workingset_refault_file 1
[ 1348.431389] workingset_activate_anon 0
[ 1348.431992] workingset_activate_file 0
[ 1348.432570] workingset_restore_anon 0
[ 1348.433291] workingset_restore_file 0
[ 1348.433981] workingset_nodereclaim 0
[ 1348.434532] pgdemote_kswapd 0
[ 1348.435064] pgdemote_direct 0
[ 1348.435675] pgdemote_khugepaged 0
[ 1348.436227] pgdemote_proactive 0
[ 1348.436725] pgscan 1481
[ 1348.437154] pgsteal 77
[ 1348.437535] pswpin 0
[ 1348.437920] pswpout 0
[ 1348.438292] pgscan_kswapd 0
[ 1348.438717] pgscan_direct 1481
[ 1348.439453] pgscan_khugepaged 0
[ 1348.439989] pgscan_proactive 0
[ 1348.440478] pgsteal_kswapd 0
[ 1348.441046] pgsteal_direct 77
[ 1348.441641] pgsteal_khugepaged 0
[ 1348.442173] pgsteal_proactive 0
[ 1348.442659] pgfault 88585
[ 1348.443096] pgmajfault 3
[ 1348.443493] pgrefill 1565
[ 1348.443950] pgactivate 1651
[ 1348.444402] pgdeactivate 1565
[ 1348.444861] pglazyfree 0
[ 1348.445287] pglazyfreed 0
[ 1348.445702] swpin_zero 0
[ 1348.446136] swpout_zero 0
[ 1348.446566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11303,uid=0
[ 1348.448931] Memory cgroup out of memory: Killed process 11303 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:47 executing program 0:
mlockall(0x2)
shmat(0x0, &(0x7f0000827000/0x2000)=nil, 0x1000)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
mlockall(0x2)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000e54000/0x1000)=nil, 0x3000)
shmdt(0x0)
r3 = shmget(0x2, 0x2000, 0x10, &(0x7f000098b000/0x2000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmdt(r1)
r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r4, 0xc)
shmat(r4, &(0x7f0000672000/0x2000)=nil, 0xc4759c1db6b1595b)

13:04:47 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wg0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1d00000001000000020500c300000000"]})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000240))

13:04:47 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:04:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x2, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:47 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
mlockall(0xa)
mlockall(0x1)

13:04:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:04:47 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

[ 1360.729340] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1360.730269] CPU: 1 UID: 0 PID: 11310 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1360.730286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1360.730296] Call Trace:
[ 1360.730301]  <TASK>
[ 1360.730306]  dump_stack_lvl+0xfa/0x120
[ 1360.730334]  dump_header+0x107/0x950
[ 1360.730362]  oom_kill_process+0x278/0xa00
[ 1360.730383]  out_of_memory+0x34b/0x1690
[ 1360.730407]  ? __pfx_out_of_memory+0x10/0x10
[ 1360.730433]  mem_cgroup_out_of_memory+0x164/0x190
[ 1360.730447]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1360.730465]  ? mark_held_locks+0x49/0x80
[ 1360.730485]  try_charge_memcg+0x81f/0xf30
[ 1360.730511]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1360.730535]  charge_memcg+0x7b/0x290
[ 1360.730552]  __mem_cgroup_charge+0x28/0x90
[ 1360.730571]  do_wp_page+0x56e/0x31f0
[ 1360.730596]  ? __pfx_do_wp_page+0x10/0x10
[ 1360.730614]  ? do_raw_spin_lock+0x123/0x260
[ 1360.730630]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1360.730646]  ? ___pte_offset_map+0x176/0x370
[ 1360.730667]  __handle_mm_fault+0xde1/0x30f0
[ 1360.730685]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1360.730703]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1360.730721]  ? lock_release+0x121/0x290
[ 1360.730752]  handle_mm_fault+0x2c3/0x900
[ 1360.730770]  ? access_error+0x17d/0x380
[ 1360.730786]  do_user_addr_fault+0x4fa/0xeb0
[ 1360.730805]  exc_page_fault+0xb0/0x180
[ 1360.730825]  asm_exc_page_fault+0x26/0x30
[ 1360.730837] RIP: 0033:0x7fc67e13aecd
[ 1360.730847] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1360.730860] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1360.730871] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1360.730879] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1360.730887] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1360.730896] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1360.730904] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000014c264
[ 1360.730920]  ? do_syscall_64+0x12c/0x360
[ 1360.730943]  </TASK>
[ 1360.747497] memory: usage 307200kB, limit 307200kB, failcnt 1295
[ 1360.748124] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1360.748618] Memory cgroup stats for /syz0:
[ 1360.763038] anon 1134592
[ 1360.764063] file 309952512
[ 1360.764453] kernel 3485696
[ 1360.764685] kernel_stack 360448
[ 1360.765310] pagetables 1372160
[ 1360.765574] sec_pagetables 0
[ 1360.765819] percpu 640
[ 1360.766063] sock 0
[ 1360.766248] vmalloc 0
[ 1360.766457] shmem 309952512
[ 1360.766779] file_mapped 0
[ 1360.767132] file_dirty 0
[ 1360.767354] file_writeback 0
[ 1360.767604] swapcached 0
[ 1360.767831] inactive_anon 310886400
[ 1360.768247] active_anon 200704
[ 1360.768617] inactive_file 0
[ 1360.768854] active_file 0
[ 1360.769120] unevictable 0
[ 1360.769414] slab_reclaimable 970952
[ 1360.769805] slab_unreclaimable 789936
[ 1360.770229] slab 1760888
[ 1360.770449] workingset_refault_anon 0
[ 1360.770750] workingset_refault_file 0
[ 1360.771177] workingset_activate_anon 0
[ 1360.771578] workingset_activate_file 0
[ 1360.771971] workingset_restore_anon 0
[ 1360.772355] workingset_restore_file 0
[ 1360.772733] workingset_nodereclaim 0
[ 1360.773108] pgdemote_kswapd 0
[ 1360.773501] pgdemote_direct 0
[ 1360.773755] pgdemote_khugepaged 0
[ 1360.774069] pgdemote_proactive 0
[ 1360.774340] pgscan 367
[ 1360.774544] pgsteal 76
[ 1360.774787] pswpin 0
[ 1360.775066] pswpout 0
[ 1360.775333] pgscan_kswapd 0
[ 1360.775571] pgscan_direct 367
[ 1360.775936] pgscan_khugepaged 0
[ 1360.776293] pgscan_proactive 0
[ 1360.776553] pgsteal_kswapd 0
[ 1360.776909] pgsteal_direct 76
[ 1360.777277] pgsteal_khugepaged 0
[ 1360.777552] pgsteal_proactive 0
[ 1360.777817] pgfault 88405
[ 1360.778184] pgmajfault 0
[ 1360.778498] pgrefill 275
[ 1360.778718] pgactivate 365
[ 1360.779060] pgdeactivate 278
[ 1360.779449] pglazyfree 0
[ 1360.779688] pglazyfreed 0
[ 1360.780031] swpin_zero 0
[ 1360.780340] swpout_zero 0
[ 1360.780571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11310,uid=0
[ 1360.782019] Memory cgroup out of memory: Killed process 11310 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x3, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1360.889314] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1360.890321] CPU: 0 UID: 0 PID: 11316 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1360.890338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1360.890350] Call Trace:
[ 1360.890355]  <TASK>
[ 1360.890360]  dump_stack_lvl+0xfa/0x120
[ 1360.890385]  dump_header+0x107/0x950
[ 1360.890409]  oom_kill_process+0x278/0xa00
[ 1360.890430]  out_of_memory+0x34b/0x1690
[ 1360.890452]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1360.890469]  ? __pfx_out_of_memory+0x10/0x10
[ 1360.890495]  mem_cgroup_out_of_memory+0x164/0x190
[ 1360.890509]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1360.890527]  ? mark_held_locks+0x49/0x80
[ 1360.890547]  try_charge_memcg+0x81f/0xf30
[ 1360.890571]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1360.890595]  charge_memcg+0x7b/0x290
[ 1360.890612]  __mem_cgroup_charge+0x28/0x90
[ 1360.890631]  do_wp_page+0x56e/0x31f0
[ 1360.890656]  ? __pfx_do_wp_page+0x10/0x10
[ 1360.890673]  ? do_raw_spin_lock+0x123/0x260
[ 1360.890690]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1360.890705]  ? ___pte_offset_map+0x176/0x370
[ 1360.890725]  __handle_mm_fault+0xde1/0x30f0
[ 1360.890743]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1360.890760]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1360.890777]  ? lock_release+0x121/0x290
[ 1360.890808]  handle_mm_fault+0x2c3/0x900
[ 1360.890826]  ? access_error+0x17d/0x380
[ 1360.890841]  do_user_addr_fault+0x4fa/0xeb0
[ 1360.890860]  exc_page_fault+0xb0/0x180
[ 1360.890887]  asm_exc_page_fault+0x26/0x30
[ 1360.890905] RIP: 0033:0x7f88ae9cad30
[ 1360.890915] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1360.890927] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1360.890938] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1360.890946] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1360.890954] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1360.890961] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1360.890968] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1360.890977]  ? __do_sys_mlockall+0x258/0x5c0
[ 1360.890996]  ? __do_sys_mlockall+0x258/0x5c0
[ 1360.891012]  </TASK>
[ 1360.909128] memory: usage 307200kB, limit 307200kB, failcnt 1017
[ 1360.909762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:04:47 executing program 0:
mlockall(0x2)
r0 = shmget(0x1, 0x4000, 0x200, &(0x7f00009a8000/0x4000)=nil)
shmat(r0, &(0x7f0000ecc000/0x2000)=nil, 0x7000)
shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil)
r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000000)=""/209)
shmdt(0x0)
shmat(r1, &(0x7f0000af8000/0x2000)=nil, 0x0)
shmdt(r2)
r4 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r4, &(0x7f0000703000/0x4000)=nil, 0x0)
r5 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000100)=""/130)

13:04:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x4, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1360.911312] Memory cgroup stats for /syz7:
[ 1361.002449] anon 1499136
[ 1361.003317] file 308297728
[ 1361.003601] kernel 4775936
[ 1361.003950] kernel_stack 557056
[ 1361.004299] pagetables 2162688
[ 1361.004583] sec_pagetables 0
[ 1361.004926] percpu 1024
[ 1361.005223] sock 0
[ 1361.005403] vmalloc 0
[ 1361.005600] shmem 308293632
[ 1361.005831] file_mapped 0
[ 1361.006082] file_dirty 4096
[ 1361.006321] file_writeback 0
[ 1361.006563] swapcached 0
[ 1361.006776] inactive_anon 309710848
[ 1361.007088] active_anon 81920
[ 1361.007365] inactive_file 0
[ 1361.007658] active_file 4096
[ 1361.007993] unevictable 0
[ 1361.008271] slab_reclaimable 966304
[ 1361.008586] slab_unreclaimable 1104848
[ 1361.009024] slab 2071152
[ 1361.009325] workingset_refault_anon 0
[ 1361.009625] workingset_refault_file 1
[ 1361.009945] workingset_activate_anon 0
[ 1361.010282] workingset_activate_file 0
[ 1361.010676] workingset_restore_anon 0
[ 1361.011110] workingset_restore_file 0
[ 1361.011413] workingset_nodereclaim 0
[ 1361.011789] pgdemote_kswapd 0
[ 1361.012140] pgdemote_direct 0
[ 1361.012477] pgdemote_khugepaged 0
[ 1361.012751] pgdemote_proactive 0
[ 1361.013038] pgscan 1505
[ 1361.013249] pgsteal 77
[ 1361.013453] pswpin 0
[ 1361.013643] pswpout 0
[ 1361.013839] pgscan_kswapd 0
[ 1361.014146] pgscan_direct 1505
[ 1361.014470] pgscan_khugepaged 0
[ 1361.014816] pgscan_proactive 0
[ 1361.015095] pgsteal_kswapd 0
[ 1361.015338] pgsteal_direct 77
[ 1361.015588] pgsteal_khugepaged 0
[ 1361.015866] pgsteal_proactive 0
[ 1361.016225] pgfault 88640
[ 1361.016539] pgmajfault 3
[ 1361.016758] pgrefill 1604
[ 1361.017050] pgactivate 1691
[ 1361.017378] pgdeactivate 1604
[ 1361.017630] pglazyfree 0
[ 1361.017844] pglazyfreed 0
[ 1361.018086] swpin_zero 0
[ 1361.018301] swpout_zero 0
[ 1361.018522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11316,uid=0
[ 1361.019922] Memory cgroup out of memory: Killed process 11316 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:47 executing program 6:
mlockall(0x2)
r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmdt(0x0)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)
mlockall(0x2)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)
shmdt(r1)
shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000)

[ 1361.042751] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1361.043673] CPU: 0 UID: 0 PID: 11336 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1361.043690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1361.043706] Call Trace:
[ 1361.043711]  <TASK>
[ 1361.043717]  dump_stack_lvl+0xfa/0x120
[ 1361.043741]  dump_header+0x107/0x950
[ 1361.043765]  oom_kill_process+0x278/0xa00
[ 1361.043785]  out_of_memory+0x34b/0x1690
[ 1361.043809]  ? __pfx_out_of_memory+0x10/0x10
[ 1361.043835]  mem_cgroup_out_of_memory+0x164/0x190
[ 1361.043848]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1361.043866]  ? mark_held_locks+0x49/0x80
[ 1361.043898]  try_charge_memcg+0x81f/0xf30
[ 1361.043934]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1361.043962]  charge_memcg+0x7b/0x290
[ 1361.043979]  __mem_cgroup_charge+0x28/0x90
[ 1361.043998]  do_wp_page+0x56e/0x31f0
[ 1361.044023]  ? __pfx_do_wp_page+0x10/0x10
[ 1361.044044]  ? do_raw_spin_lock+0x123/0x260
[ 1361.044061]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1361.044076]  ? ___pte_offset_map+0x176/0x370
[ 1361.044097]  __handle_mm_fault+0xde1/0x30f0
[ 1361.044115]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1361.044132]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1361.044149]  ? lock_release+0x121/0x290
[ 1361.044180]  handle_mm_fault+0x2c3/0x900
[ 1361.044198]  ? access_error+0x17d/0x380
[ 1361.044214]  do_user_addr_fault+0x4fa/0xeb0
[ 1361.044232]  exc_page_fault+0xb0/0x180
[ 1361.044251]  asm_exc_page_fault+0x26/0x30
[ 1361.044264] RIP: 0033:0x7fc67e13dd30
[ 1361.044274] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1361.044286] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1361.044296] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1361.044304] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1361.044312] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1361.044319] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1361.044327] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1361.044336]  ? __might_fault+0x1f/0x190
[ 1361.044355]  ? __might_fault+0x1f/0x190
[ 1361.044372]  </TASK>
[ 1361.060505] memory: usage 307200kB, limit 307200kB, failcnt 1316
[ 1361.061041] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:04:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x5, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1361.061531] Memory cgroup stats for /syz0:
[ 1361.106371] anon 1118208
[ 1361.107062] file 309952512
[ 1361.107314] kernel 3502080
[ 1361.107542] kernel_stack 360448
[ 1361.107816] pagetables 1376256
[ 1361.108101] sec_pagetables 0
[ 1361.108348] percpu 704
[ 1361.108551] sock 0
[ 1361.108734] vmalloc 0
[ 1361.108952] shmem 309952512
[ 1361.109188] file_mapped 0
[ 1361.109408] file_dirty 0
[ 1361.109622] file_writeback 0
[ 1361.109866] swapcached 0
[ 1361.110101] inactive_anon 310870016
[ 1361.110388] active_anon 200704
[ 1361.110645] inactive_file 0
[ 1361.110898] active_file 0
[ 1361.111122] unevictable 0
[ 1361.111344] slab_reclaimable 973912
[ 1361.111631] slab_unreclaimable 801944
[ 1361.111963] slab 1775856
[ 1361.112180] workingset_refault_anon 0
[ 1361.112484] workingset_refault_file 0
[ 1361.112784] workingset_activate_anon 0
[ 1361.113116] workingset_activate_file 0
[ 1361.113433] workingset_restore_anon 0
[ 1361.113733] workingset_restore_file 0
[ 1361.114054] workingset_nodereclaim 0
[ 1361.114358] pgdemote_kswapd 0
[ 1361.114609] pgdemote_direct 0
[ 1361.114862] pgdemote_khugepaged 0
[ 1361.115158] pgdemote_proactive 0
[ 1361.115431] pgscan 367
[ 1361.115634] pgsteal 76
[ 1361.115850] pswpin 0
[ 1361.116058] pswpout 0
[ 1361.116260] pgscan_kswapd 0
[ 1361.116496] pgscan_direct 367
[ 1361.116747] pgscan_khugepaged 0
[ 1361.117026] pgscan_proactive 0
[ 1361.117285] pgsteal_kswapd 0
[ 1361.117533] pgsteal_direct 76
[ 1361.117786] pgsteal_khugepaged 0
[ 1361.118083] pgsteal_proactive 0
[ 1361.118349] pgfault 88452
[ 1361.118572] pgmajfault 0
[ 1361.118788] pgrefill 275
[ 1361.119025] pgactivate 365
[ 1361.119256] pgdeactivate 278
[ 1361.119497] pglazyfree 0
[ 1361.119730] pglazyfreed 0
[ 1361.119974] swpin_zero 0
[ 1361.120193] swpout_zero 0
[ 1361.120415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11336,uid=0
[ 1361.121609] Memory cgroup out of memory: Killed process 11336 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x6, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:48 executing program 7:
mlockall(0x2)
shmdt(0x0)
mlockall(0xa)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000639000/0x2000)=nil)
shmat(r3, &(0x7f0000875000/0x2000)=nil, 0x4000)
shmget$private(0x0, 0x1000, 0x8, &(0x7f0000718000/0x1000)=nil)

13:04:48 executing program 6:
mlockall(0x2)
r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmdt(0x0)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)
mlockall(0x2)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)
shmdt(r1)
shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000)

13:04:48 executing program 0:
mlockall(0x2)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000000c0)=""/221, 0xdd}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/119, 0x77}], 0x6, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r1=>0x0}}}], 0xc8}, 0x41)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setuid(r3)
getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=<r4=>0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000780)={{0x3, 0xee00, r1, r3, r4, 0x1, 0x7}, 0x9, 0x7, 0x3, 0x3, 0xffffffffffffffff})
r5 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r5)

13:04:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x7, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1361.359496] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1361.360854] CPU: 0 UID: 0 PID: 11347 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1361.360878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1361.360888] Call Trace:
[ 1361.360895]  <TASK>
[ 1361.360902]  dump_stack_lvl+0xfa/0x120
[ 1361.360928]  dump_header+0x107/0x950
[ 1361.360952]  oom_kill_process+0x278/0xa00
[ 1361.360972]  out_of_memory+0x34b/0x1690
[ 1361.360995]  ? __pfx_out_of_memory+0x10/0x10
[ 1361.361020]  mem_cgroup_out_of_memory+0x164/0x190
[ 1361.361034]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1361.361051]  ? mark_held_locks+0x49/0x80
[ 1361.361070]  try_charge_memcg+0x81f/0xf30
[ 1361.361094]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1361.361118]  charge_memcg+0x7b/0x290
[ 1361.361135]  __mem_cgroup_charge+0x28/0x90
[ 1361.361153]  do_wp_page+0x56e/0x31f0
[ 1361.361177]  ? __pfx_do_wp_page+0x10/0x10
[ 1361.361195]  ? do_raw_spin_lock+0x123/0x260
[ 1361.361211]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1361.361226]  ? ___pte_offset_map+0x176/0x370
[ 1361.361246]  __handle_mm_fault+0xde1/0x30f0
[ 1361.361264]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1361.361281]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1361.361298]  ? lock_release+0x121/0x290
[ 1361.361329]  handle_mm_fault+0x2c3/0x900
[ 1361.361347]  ? access_error+0x17d/0x380
[ 1361.361362]  do_user_addr_fault+0x4fa/0xeb0
[ 1361.361381]  exc_page_fault+0xb0/0x180
[ 1361.361400]  asm_exc_page_fault+0x26/0x30
[ 1361.361412] RIP: 0033:0x7f88ae9cad30
[ 1361.361423] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1361.361435] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1361.361445] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1361.361453] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1361.361461] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1361.361469] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1361.361476] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1361.361485]  ? syscall_trace_enter+0xeb/0x240
[ 1361.361505]  ? syscall_trace_enter+0xeb/0x240
[ 1361.361520]  </TASK>
[ 1361.378004] memory: usage 307200kB, limit 307200kB, failcnt 1044
[ 1361.378633] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1361.379281] Memory cgroup stats for /syz7:
[ 1361.387631] anon 1482752
[ 1361.388437] file 308297728
[ 1361.388671] kernel 4792320
[ 1361.388941] kernel_stack 557056
[ 1361.389236] pagetables 2166784
[ 1361.389495] sec_pagetables 0
[ 1361.389745] percpu 1088
[ 1361.389978] sock 0
[ 1361.390161] vmalloc 0
[ 1361.390370] shmem 308293632
[ 1361.390607] file_mapped 0
[ 1361.390898] file_dirty 4096
[ 1361.391231] file_writeback 0
[ 1361.391527] swapcached 0
[ 1361.391751] inactive_anon 309694464
[ 1361.392062] active_anon 81920
[ 1361.392317] inactive_file 0
[ 1361.392553] active_file 4096
[ 1361.392795] unevictable 0
[ 1361.393037] slab_reclaimable 966304
[ 1361.393325] slab_unreclaimable 1116856
[ 1361.393631] slab 2083160
[ 1361.393846] workingset_refault_anon 0
[ 1361.394166] workingset_refault_file 1
[ 1361.394467] workingset_activate_anon 0
[ 1361.394775] workingset_activate_file 0
[ 1361.395099] workingset_restore_anon 0
[ 1361.395400] workingset_restore_file 0
[ 1361.395714] workingset_nodereclaim 0
[ 1361.396029] pgdemote_kswapd 0
[ 1361.396335] pgdemote_direct 0
[ 1361.396678] pgdemote_khugepaged 0
[ 1361.397084] pgdemote_proactive 0
[ 1361.397362] pgscan 1539
[ 1361.397571] pgsteal 77
[ 1361.397819] pswpin 0
[ 1361.398078] pswpout 0
[ 1361.398350] pgscan_kswapd 0
[ 1361.398593] pgscan_direct 1539
[ 1361.398849] pgscan_khugepaged 0
[ 1361.399135] pgscan_proactive 0
[ 1361.399396] pgsteal_kswapd 0
[ 1361.399640] pgsteal_direct 77
[ 1361.399924] pgsteal_khugepaged 0
[ 1361.400196] pgsteal_proactive 0
[ 1361.400461] pgfault 88687
[ 1361.400684] pgmajfault 3
[ 1361.400917] pgrefill 1667
[ 1361.401139] pgactivate 1754
[ 1361.401374] pgdeactivate 1667
[ 1361.401625] pglazyfree 0
[ 1361.401944] pglazyfreed 0
[ 1361.402242] swpin_zero 0
[ 1361.402459] swpout_zero 0
[ 1361.402682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11347,uid=0
[ 1361.403889] Memory cgroup out of memory: Killed process 11347 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1361.483555] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1361.484413] CPU: 0 UID: 0 PID: 11353 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1361.484430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1361.484438] Call Trace:
[ 1361.484443]  <TASK>
[ 1361.484449]  dump_stack_lvl+0xfa/0x120
[ 1361.484474]  dump_header+0x107/0x950
[ 1361.484498]  oom_kill_process+0x278/0xa00
[ 1361.484519]  out_of_memory+0x34b/0x1690
[ 1361.484541]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1361.484559]  ? __pfx_out_of_memory+0x10/0x10
[ 1361.484585]  mem_cgroup_out_of_memory+0x164/0x190
[ 1361.484598]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1361.484617]  ? mark_held_locks+0x49/0x80
[ 1361.484636]  try_charge_memcg+0x81f/0xf30
[ 1361.484660]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1361.484684]  charge_memcg+0x7b/0x290
[ 1361.484702]  __mem_cgroup_charge+0x28/0x90
[ 1361.484721]  do_wp_page+0x56e/0x31f0
[ 1361.484745]  ? __pfx_do_wp_page+0x10/0x10
[ 1361.484763]  ? do_raw_spin_lock+0x123/0x260
[ 1361.484779]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1361.484795]  ? ___pte_offset_map+0x176/0x370
[ 1361.484815]  __handle_mm_fault+0xde1/0x30f0
[ 1361.484834]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1361.484851]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1361.484869]  ? lock_release+0x121/0x290
[ 1361.484915]  handle_mm_fault+0x2c3/0x900
[ 1361.484934]  ? access_error+0x17d/0x380
[ 1361.484949]  do_user_addr_fault+0x4fa/0xeb0
[ 1361.484968]  exc_page_fault+0xb0/0x180
[ 1361.484986]  asm_exc_page_fault+0x26/0x30
[ 1361.484998] RIP: 0033:0x7fc67e13dd30
[ 1361.485008] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1361.485020] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1361.485030] RAX: 00000000413566b5 RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1361.485038] RDX: 0000001b2cc20018 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1361.485045] RBP: 0000000000000001 R08: 00000000413566b5 R09: 0000001b2cc2001c
[ 1361.485053] R10: 00000000000006b5 R11: 00000000413566b9 R12: 0000000000000000
[ 1361.485060] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1361.485069]  ? __might_fault+0x1f/0x190
[ 1361.485088]  ? __might_fault+0x1f/0x190
[ 1361.485105]  </TASK>
[ 1361.501656] memory: usage 307200kB, limit 307200kB, failcnt 1356
[ 1361.502183] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1361.502664] Memory cgroup stats for /syz0:
[ 1361.513698] anon 1101824
[ 1361.514298] file 309952512
[ 1361.514527] kernel 3518464
[ 1361.514754] kernel_stack 360448
[ 1361.515149] pagetables 1380352
[ 1361.515411] sec_pagetables 0
[ 1361.515654] percpu 768
[ 1361.515867] sock 0
[ 1361.516183] vmalloc 0
[ 1361.516379] shmem 309952512
[ 1361.516613] file_mapped 0
[ 1361.516838] file_dirty 0
[ 1361.517171] file_writeback 0
[ 1361.517418] swapcached 0
[ 1361.517632] inactive_anon 310853632
[ 1361.518041] active_anon 200704
[ 1361.518301] inactive_file 0
[ 1361.518540] active_file 0
[ 1361.518761] unevictable 0
[ 1361.519100] slab_reclaimable 973912
[ 1361.519390] slab_unreclaimable 813952
[ 1361.519688] slab 1787864
[ 1361.520029] workingset_refault_anon 0
[ 1361.520335] workingset_refault_file 0
[ 1361.520636] workingset_activate_anon 0
[ 1361.521054] workingset_activate_file 0
[ 1361.521364] workingset_restore_anon 0
[ 1361.521665] workingset_restore_file 0
[ 1361.522077] workingset_nodereclaim 0
[ 1361.522375] pgdemote_kswapd 0
[ 1361.522625] pgdemote_direct 0
[ 1361.522925] pgdemote_khugepaged 0
[ 1361.523212] pgdemote_proactive 0
[ 1361.523481] pgscan 367
[ 1361.523684] pgsteal 76
[ 1361.523916] pswpin 0
[ 1361.524109] pswpout 0
[ 1361.524306] pgscan_kswapd 0
[ 1361.524545] pgscan_direct 367
[ 1361.524796] pgscan_khugepaged 0
[ 1361.525080] pgscan_proactive 0
[ 1361.525339] pgsteal_kswapd 0
[ 1361.525580] pgsteal_direct 76
[ 1361.525833] pgsteal_khugepaged 0
[ 1361.526128] pgsteal_proactive 0
[ 1361.526393] pgfault 88491
[ 1361.526615] pgmajfault 0
[ 1361.526831] pgrefill 275
[ 1361.527066] pgactivate 365
[ 1361.527296] pgdeactivate 278
[ 1361.527538] pglazyfree 0
[ 1361.527761] pglazyfreed 0
[ 1361.528010] swpin_zero 0
[ 1361.528226] swpout_zero 0
[ 1361.528449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11353,uid=0
[ 1361.529641] Memory cgroup out of memory: Killed process 11353 (syz-executor.0) total-vm:93420kB, anon-rss:392kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:58 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000)
r1 = shmat(r0, &(0x7f0000eda000/0x1000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:04:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x8, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:04:58 executing program 6:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmat(0x0, &(0x7f00006e4000/0x1000)=nil, 0x4000)
shmdt(r1)

13:04:58 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1bb)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:04:58 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c5367", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:04:58 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ad0000/0x1000)=nil)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/143)
r1 = shmget$private(0x0, 0xc00000, 0x20, &(0x7f0000400000/0xc00000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
shmdt(0x0)
shmdt(r2)

13:04:58 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000064300)={{<r1=>0x0, 0x15, 0x6, 0x0, 0x101, 0x8, 0x47f1, 0xc7, 0x0, 0x8, 0x6, 0x4089, 0x0, 0x9, 0x80}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000065300)={{<r2=>0x0, 0x100000001, 0x83a, 0x81, 0x4, 0x2, 0x0, 0x5, 0x80000001, 0x0, 0x2, 0x81, 0x8000, 0xff, 0x8}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000065380)={<r3=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000066380)={{<r4=>0x0, 0x1e2bd706, 0x7ff, 0xe85, 0x3, 0xffffffffffffff7c, 0x1, 0x200, 0x2, 0xffffffff, 0x7, 0xffffffffffffff95, 0x6806, 0x1fffc00000, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067380)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000067580)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x1, "2960cc4985a2f7"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000068580)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000068780)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}], 0x1f, "d0f940694e3013"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)=ANY=[@ANYRES64=<r9=>0x0, @ANYBLOB="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"])
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000069840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0x3, "ea38d412be4706"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006a840)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x0, "0004cf5fddf3bf"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006b840)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0x8, "ee8bdb7bb5e8cc"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000006c840)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000006ca40)={<r14=>0x0, 0x0, "b41a4ce59001c40480dc64e7e893bce0bf5f750c57ad2ab98854b41743b4211c9204efd664ec3af85a411552be227a4e86bb32b8ca374cfae7a9853b6c04c5d84de4cbea8cde921b90bf1aea5ab5006db6dba0de6dbb6c413f4aa06afd804b80f780f9d5d4eeb55fd8226f12859429fca85c3ea089df31bad9b521d6764b1210a6e4dbb9d466afdf0da7644b3997c983c1592d0e05016a871e23c3ed683adbca45e0c54bbe5caa1424d98f1c8e652cf157b1720b80afe31b74c84a8501deb093cb88562b578c0c44aa7eef1eb285e1f85d0d96989407769ff76c862a5480d76ce8b1f856013481511a19aa66f4f126df7645de33cc1eadb5045e3b4c2976fed4", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006da40)={{<r15=>0x0, 0xfffffffffffffffd, 0x1, 0x7fffffff, 0xa01, 0x9, 0x5, 0x6, 0x2f, 0x0, 0x8, 0xffffffffffffffff, 0x80, 0x4, 0x7}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000006ea40)={{<r16=>0x0, 0x40, 0x101, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x944, 0x5, 0x9c2, 0xf2d4, 0xeb85, 0x94b, 0x2, 0x400, 0x8001}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006fa40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {r2}, {}, {}, {0x0, r3}, {}, {r4, r5}, {0x0, r6}, {r7}, {r8}, {}, {}, {}, {}, {r9, r10}, {}, {r11}, {r12, r13}, {}, {}, {0x0, r14}, {}, {r15}, {}, {}, {}, {r16}], 0x8, "62f0cc6c8e1769"})
unlink(&(0x7f0000000000)='./file1\x00')

13:04:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x9, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1371.494178] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1371.495244] CPU: 0 UID: 0 PID: 11366 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1371.495261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1371.495269] Call Trace:
[ 1371.495274]  <TASK>
[ 1371.495279]  dump_stack_lvl+0xfa/0x120
[ 1371.495308]  dump_header+0x107/0x950
[ 1371.495332]  oom_kill_process+0x278/0xa00
[ 1371.495353]  out_of_memory+0x34b/0x1690
[ 1371.495371]  ? perf_trace_lock+0xb5/0x5d0
[ 1371.495391]  ? __pfx_out_of_memory+0x10/0x10
[ 1371.495412]  ? do_raw_spin_lock+0x123/0x260
[ 1371.495432]  mem_cgroup_out_of_memory+0x164/0x190
[ 1371.495446]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1371.495464]  ? mark_held_locks+0x49/0x80
[ 1371.495482]  try_charge_memcg+0x81f/0xf30
[ 1371.495507]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1371.495532]  charge_memcg+0x7b/0x290
[ 1371.495548]  __mem_cgroup_charge+0x28/0x90
[ 1371.495568]  do_wp_page+0x56e/0x31f0
[ 1371.495593]  ? __pfx_do_wp_page+0x10/0x10
[ 1371.495610]  ? do_raw_spin_lock+0x123/0x260
[ 1371.495626]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1371.495642]  ? ___pte_offset_map+0x176/0x370
[ 1371.495663]  __handle_mm_fault+0xde1/0x30f0
[ 1371.495681]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1371.495704]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1371.495721]  ? lock_release+0x121/0x290
[ 1371.495755]  handle_mm_fault+0x2c3/0x900
[ 1371.495773]  ? access_error+0x17d/0x380
[ 1371.495789]  do_user_addr_fault+0x4fa/0xeb0
[ 1371.495807]  exc_page_fault+0xb0/0x180
[ 1371.495841]  asm_exc_page_fault+0x26/0x30
[ 1371.495856] RIP: 0033:0x7fc67e13aecd
[ 1371.495869] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1371.495884] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1371.495898] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1371.495907] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1371.495915] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1371.495927] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1371.495935] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000014ec29
[ 1371.495952]  ? do_syscall_64+0x12c/0x360
[ 1371.495974]  </TASK>
[ 1371.512322] memory: usage 307200kB, limit 307200kB, failcnt 1392
[ 1371.512805] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:04:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:58 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000080)=0x4, 0x4599391d)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xffffffffffffffff}}, './file1\x00'})
sendmmsg$inet6(r2, &(0x7f0000001400)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x8, @loopback, 0x2ef6947e}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="8a77b36546e7b874f49081f1d5ddc06befcd16a1f2d0582095a84b1d5392736dc3cc779271c7891e18c5a6ac85b06f3211df4a3768ba4af8ffd6616eff389b240c0261c5d24ee9b457b42cabb9105bd3ffa1766baf3a1f6edbab2de39e759c51ad5e58140c4d18d98efe006fb287cddfc707ad5bb089a98590838ed987b3e3c11b4f8a5ea31f7953dfd03da9bd7cb5e2f6053ce217c3393f546d62760d7e90a7ce7f99e4ecc3cafc3275fa64623c9d393ec25a33c75ca58fb5341cd56c9dd954dd5d0aaca9ffcb68ea2fcddb4b1452b4533452adf812f80632530aecd12c80637f6ed51629", 0xe5}, {&(0x7f0000000240)="3df0f0099d22cebdda9781", 0xb}], 0x2, &(0x7f00000002c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr={{0x98, 0x29, 0x39, {0x2, 0x10, 0x2, 0x4, 0x0, [@remote, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x113, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x50, 0x10, '\x00', [@generic={0x39}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1f, 0x6, [0x8, 0x5, 0x1000, 0x20, 0x5d]}}, @ra={0x5, 0x2, 0x400}, @pad1, @jumbo={0xc2, 0x4, 0x5000000}, @calipso={0x7, 0x20, {0x3, 0x6, 0xff, 0x0, [0x0, 0x9, 0x7fffffff]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}]}}}], 0x178}}, {{&(0x7f0000000440)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa35}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)="09850189c513bea57dbab7c35288c0b40e", 0x11}, {&(0x7f00000004c0)="b05272", 0x3}], 0x2, &(0x7f0000000540)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1]}}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x11, 0x1f, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xc2, 0x4c48, [0x3]}}, @jumbo={0xc2, 0x4, 0xc61}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc1, 0x4, [0x0, 0x5]}}, @hao={0xc9, 0x10, @remote}, @generic={0x8, 0xa8, "ecf3ef6095433f20728726f9ba52acb5a8847c68daa75fa82bc971624fac8113c92fa1b360ba1a76cccabb4b577ad2155725b47153cfb00ba622523d0b68af780868a07fb3da6b09b1013065651f1bbacaf95991b2706c3602f444a2123e6f1cbe7bb527c36cb4cbf4eb56318a0a4a7999a62bb241ba006e279c162a7b6c25dcdfec267ab0fd364df06b82c2a3c81eb92f4c9601be35e52ddff19e6219f11caf2a63b68fbb73ef82"}, @pad1]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x8ec42e5527a0b37e, 0x10, 0x2, 0xcd, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast2, @mcast1, @remote, @loopback]}}}], 0x1c8}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000780)="9c94aefff2aaf3e2a881656d39b7cffb527c8cb96570ca31032a21c394bdc16f47a55a996cf2e79492ef311b17322a836a9770cee4174ed64ec6cedcc3175e3ff4e4be6a47503b", 0x47}, {&(0x7f0000000800)="63191d3cc231a1e0dfcbf82ca06d7f3c897132d090377de8da011af92d366fca1fe421c442cc6f8726188d0d8dc476e46e", 0x31}, {&(0x7f0000000840)="f5c1f3ec8c1fb71f7d844bc856d17b9b61812f46c673e7b93e85f788f1dad5b0386789167a76e966", 0x28}, {&(0x7f0000000880)="9e42c183aa51f345d9d3437349bf1d5c65bbe899a15d36c22d8e3bfd3038fb39c865e9c87547470b6acb285012ff54c29b6c99441b809b28d2bb609611f0ad3854a4e22d079bfaf7ddad3cd9ad375d7ee2fc16af0bb4ae2e5d4d268d14d1909c51c0f55b568ff213b348e55b7e1858cec27f10eba607f401d5530fb68d5a4a4c3889995c5a74dc7d21114901177cdb33002e7f4f43c80ecda81e25efa551d36804813fed07efe39ea5ca77b6c598c33db73012a4cae4af259141750f384c", 0xbe}, {&(0x7f0000000940)="3544c3de8638bcf950b5a97aa159ffe02c6e90a2d80bfb113a86d2a883598e3130c54c353d4ce7a75ddfef682a24a79d05623a2a146ae9cfc6794d53c2f08727ee56f9f06b0260e3a82ce6559c6146024055fff3c6106efb0196af2715b308b39746f2e41af7ddeedfcff5fd9e5f9850f2e055ed52273432e47c258760efc0455e0f6263d4b0e8bed379957b3fd09fd6b7bdd349b7c65eae6d68b0c92f2071523760bb566669", 0xa6}, {&(0x7f0000000a00)="72adfab6ff21e773f341a3fe4a0a72430859a6fa905adcaa3b9501947e81e0bb53f6dec526291ba7ecb79c9b8e36303a0a7296d65c27f73c312c69afb43ea01c9bb4bf2201c691860529f04f8b784ca4bd22aaa74145a32469c973c6372cb14aa6e6da69503d1669ca01844ecedd1793bca7910f344931fc43a1bb2642a36ce01f9e207fd2205d0df3ddab743231a511a42f2a35c3550bb7239efc5bb54ac99bbfa6edc0422d119821278a28e8ea3be5c325148b0b2b65e7621a42bf369795138fa43dec8c9877", 0xc7}, {&(0x7f0000000b00)="e8a50de3690d97ee7381e928ee216d7cb76f816efaa5cc35640d5778b11f33bf9aca5ec66235bcdff4cdfe6ee1983a68253dfda031f1e0b16fe68c862d3ad102198c2997c93ec4a2e5f6efc787d03b6888eb0ab5d59b941a59fabd2bc676ef56169cbc503c415264e68bfd7bcefe", 0x6e}], 0x7, &(0x7f0000000c00)=[@hopopts={{0x50, 0x29, 0x36, {0x11, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x7ff}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x88, 0xc, 0x1, 0x9, 0x0, [@loopback, @remote, @local, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2a}]}}}, @rthdr={{0x38, 0x29, 0x39, {0xc, 0x4, 0x2, 0xff, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x11, 0x10, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x8, {0x0, 0x0, 0x80, 0x1}}, @hao={0xc9, 0x10, @private2}, @generic={0x8a, 0x50, "5b98902258503474f31ff855947f670719242b9d2a416f8e1b127c561400af37972d2f35acf8a1c8a108c722ee401d742db51c106a17779934c240458e3fba672629bab01f3d9a52c11b7b49ba028ad5"}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x1, 0x1b, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x2c0}}, {{&(0x7f0000000ec0)={0xa, 0x4e22, 0xfffffff8, @private0, 0x800}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000f00)="eb4a58065f7cb93e72120933179ef0e6cfb4bad8329032258461433dcc522d57e14e7ca0fb75f798204dfcb6bce89b75332b35f02728f1ba06b6fab6d9cbbb1a7da4df6631c6e5782735dcec343e50ef58f4466d22ecf41ae0df3a82a617882fa34d1388662632b4309d888279e81151d9ec65cd410c306cdef553ba66c517e3155a2af4d4250e88a7442a6d7c6128e4dd983b1e1ae266882628d3c26c21bd95731c898de6b0e196cb9ba1250c6c6cf3f75ca8b92532bafd8dc3734f93e14786e3cecce21d1f", 0xc6}], 0x1, &(0x7f0000001040)=[@dstopts_2292={{0x338, 0x29, 0x4, {0x2b, 0x63, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xee, 0xf7, "23c89d5660ac62a027e91b379d6af6e21dd005a8bbf952717b693eb07b1fffbfb7495de5bdcd1431945bb00dcbdfa54541ff40027fcead97c7917bf47974870df9cbae00b8387cc758f3916666a917cb057d1852cd42196b905c0accbc8c90312e6d3423dffe1f1fb2b9f7b6abfb9ed15876c6b7e70bb7b7624e8e504115a85772519a3e7205758cf96196eb0de19523e5fb7488dc6631f5c356b5707c9d2874da4d60164327a8ada05df2689475701183a397478f4ae6df351d220da23e6db19bcdbdc074fff18c528ed585807bbd5229733be2c01147cbfc75ccf31222afa2d5430499222d08a15beed4c3c4b0b2b36d070ffca3f439"}, @ra={0x5, 0x2, 0xf2}, @generic={0x0, 0x91, "a2521531325f2f5cf681f9a1ef812731ddc5ddc0e8db5495ca14a8a32453d4ed934ac7871b974585a6353c139f880820f60b92d0547450514c0cbbc7c65d82bb821a8f1e222b44d1dabbf915bea5082325902baa705fcef8eafcb9e57b12d2da1696892e36773d21caa3d749e95afe07b4260ffe869d9db6172ffe3cb201401216331c8d00624b49c0f563386af32ddea8"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0x20, [0xb8, 0x2]}}, @generic={0x81, 0xbe, "14ec6fb118a51b954a427e2aa1f0ebbc16b4bb6d147846a9b664bbfe636ab1a3de2fd499adf12f29fc919aa4288ae794de8688fa49ad8c5ab3b8186b187984ea2456cde80d08673efba50a0ea5f72f457ac4d91fac85b89d575a33f1c8173e8f150c0bb4188ea6738c847c7aa237819c9a81fc8e13c605c515df0b9518887cc2f66e54eb3d15aa322ceeca9c4ac20f9e1839c33a7ff3307304c31f3bf5a3584f756b07a94a0fab6248db56b115bb0261a07465435680d43aaa5576fcd914"}, @generic={0x9, 0x9c, "10d61dca6643e2f7166f01bc81afd8d9a8af100775ea58428ba463f0a370f4369cae92eec4641c24df8e652198f0c497897588ab624da983529199a2926298ca88ce48c4f4bd5f84c0a4f6a520a3261466346bd75febd59df38b2a2f1b2a4766750f32b797fadee35fde3a7f4461c95d04a79fa69aba0f7e76ebfed8052e369aa79ff4ee292929eebc10cc7a6f3dad1e2a2a75e03913bba973b4f0ba"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @dstopts={{0x58, 0x29, 0x37, {0x3a, 0x8, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x89}}], 0x3c0}}], 0x4, 0x4000)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001500), 0x3211c2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001540)=0x1, 0x4)
unlink(&(0x7f0000000000)='./file1\x00')

[ 1371.513493] Memory cgroup stats for /syz0:
[ 1371.632117] anon 1134592
[ 1371.633432] file 309952512
[ 1371.634044] kernel 3485696
[ 1371.634475] kernel_stack 360448
[ 1371.635001] pagetables 1372160
[ 1371.635484] sec_pagetables 0
[ 1371.635990] percpu 640
[ 1371.636458] sock 0
[ 1371.636825] vmalloc 0
[ 1371.637227] shmem 309952512
[ 1371.637762] file_mapped 0
[ 1371.638203] file_dirty 0
[ 1371.638605] file_writeback 0
[ 1371.639103] swapcached 0
[ 1371.639634] inactive_anon 310886400
[ 1371.640285] active_anon 200704
[ 1371.640823] inactive_file 0
[ 1371.641364] active_file 0
[ 1371.641784] unevictable 0
[ 1371.642225] slab_reclaimable 973912
[ 1371.642759] slab_unreclaimable 789936
[ 1371.643345] slab 1763848
[ 1371.643742] workingset_refault_anon 0
[ 1371.644334] workingset_refault_file 0
[ 1371.646971] workingset_activate_anon 0
[ 1371.647546] workingset_activate_file 0
[ 1371.649442] workingset_restore_anon 0
[ 1371.650071] workingset_restore_file 0
[ 1371.650638] workingset_nodereclaim 0
[ 1371.651212] pgdemote_kswapd 0
[ 1371.651686] pgdemote_direct 0
[ 1371.652215] pgdemote_khugepaged 0
[ 1371.652859] pgdemote_proactive 0
[ 1371.653393] pgscan 367
[ 1371.653773] pgsteal 76
[ 1371.654176] pswpin 0
[ 1371.654535] pswpout 0
[ 1371.654932] pgscan_kswapd 0
[ 1371.655381] pgscan_direct 367
[ 1371.655853] pgscan_khugepaged 0
[ 1371.656368] pgscan_proactive 0
[ 1371.656852] pgsteal_kswapd 0
[ 1371.657351] pgsteal_direct 76
[ 1371.657920] pgsteal_khugepaged 0
[ 1371.658424] pgsteal_proactive 0
[ 1371.658963] pgfault 88545
[ 1371.659376] pgmajfault 0
[ 1371.659775] pgrefill 275
[ 1371.660279] pgactivate 365
[ 1371.660716] pgdeactivate 278
[ 1371.661210] pglazyfree 0
[ 1371.661606] pglazyfreed 0
[ 1371.662061] swpin_zero 0
[ 1371.662459] swpout_zero 0
[ 1371.662868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11366,uid=0
[ 1371.665239] Memory cgroup out of memory: Killed process 11366 (syz-executor.0) total-vm:93420kB, anon-rss:404kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1371.673161] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1371.674860] CPU: 1 UID: 0 PID: 11359 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1371.674901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1371.674917] Call Trace:
[ 1371.674926]  <TASK>
[ 1371.674936]  dump_stack_lvl+0xfa/0x120
[ 1371.674982]  dump_header+0x107/0x950
[ 1371.675029]  oom_kill_process+0x278/0xa00
[ 1371.675072]  out_of_memory+0x34b/0x1690
[ 1371.675123]  ? __pfx_out_of_memory+0x10/0x10
[ 1371.675176]  mem_cgroup_out_of_memory+0x164/0x190
[ 1371.675203]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1371.675241]  ? mark_held_locks+0x49/0x80
[ 1371.675279]  try_charge_memcg+0x81f/0xf30
[ 1371.675327]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1371.675378]  charge_memcg+0x7b/0x290
[ 1371.675414]  __mem_cgroup_charge+0x28/0x90
[ 1371.675453]  do_wp_page+0x56e/0x31f0
[ 1371.675503]  ? __pfx_do_wp_page+0x10/0x10
[ 1371.675540]  ? do_raw_spin_lock+0x123/0x260
[ 1371.675574]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1371.675607]  ? ___pte_offset_map+0x176/0x370
[ 1371.675648]  __handle_mm_fault+0xde1/0x30f0
[ 1371.675686]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1371.675721]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1371.675757]  ? lock_release+0x121/0x290
[ 1371.675833]  handle_mm_fault+0x2c3/0x900
[ 1371.675871]  ? access_error+0x17d/0x380
[ 1371.675904]  do_user_addr_fault+0x4fa/0xeb0
[ 1371.675943]  exc_page_fault+0xb0/0x180
[ 1371.675980]  asm_exc_page_fault+0x26/0x30
[ 1371.676005] RIP: 0033:0x7f88ae9cad30
[ 1371.676026] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1371.676049] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1371.676069] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1371.676085] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1371.676101] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1371.676117] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1371.676132] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1371.676150]  ? __do_sys_mlockall+0x258/0x5c0
[ 1371.676189]  ? __do_sys_mlockall+0x258/0x5c0
[ 1371.676221]  </TASK>
[ 1371.709226] memory: usage 307200kB, limit 307200kB, failcnt 1065
[ 1371.710239] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1371.711256] Memory cgroup stats for /syz7:
[ 1371.731590] anon 1499136
[ 1371.732777] file 308297728
[ 1371.733273] kernel 4775936
[ 1371.733723] kernel_stack 557056
[ 1371.734312] pagetables 2162688
[ 1371.734831] sec_pagetables 0
[ 1371.735346] percpu 1024
[ 1371.735772] sock 0
[ 1371.736167] vmalloc 0
[ 1371.736558] shmem 308293632
[ 1371.737050] file_mapped 0
[ 1371.737498] file_dirty 4096
[ 1371.737990] file_writeback 0
[ 1371.738475] swapcached 0
[ 1371.738928] inactive_anon 309710848
[ 1371.739488] active_anon 81920
[ 1371.740027] inactive_file 0
[ 1371.740487] active_file 4096
[ 1371.741000] unevictable 0
[ 1371.741439] slab_reclaimable 966304
[ 1371.742044] slab_unreclaimable 1104848
[ 1371.742643] slab 2071152
[ 1371.743093] workingset_refault_anon 0
[ 1371.743683] workingset_refault_file 1
[ 1371.744313] workingset_activate_anon 0
[ 1371.744952] workingset_activate_file 0
[ 1371.745559] workingset_restore_anon 0
[ 1371.746179] workingset_restore_file 0
[ 1371.746773] workingset_nodereclaim 0
[ 1371.749683] pgdemote_kswapd 0
[ 1371.751533] pgdemote_direct 0
[ 1371.752108] pgdemote_khugepaged 0
[ 1371.752653] pgdemote_proactive 0
[ 1371.753210] pgscan 1568
[ 1371.753629] pgsteal 77
[ 1371.754054] pswpin 0
[ 1371.754434] pswpout 0
[ 1371.754824] pgscan_kswapd 0
[ 1371.755309] pgscan_direct 1568
[ 1371.755818] pgscan_khugepaged 0
[ 1371.756380] pgscan_proactive 0
[ 1371.756916] pgsteal_kswapd 0
[ 1371.757412] pgsteal_direct 77
[ 1371.757934] pgsteal_khugepaged 0
[ 1371.758457] pgsteal_proactive 0
[ 1371.759010] pgfault 88742
[ 1371.759449] pgmajfault 3
[ 1371.759934] pgrefill 1712
[ 1371.760375] pgactivate 1799
[ 1371.760836] pgdeactivate 1712
[ 1371.761365] pglazyfree 0
[ 1371.761791] pglazyfreed 0
[ 1371.762256] swpin_zero 0
[ 1371.762681] swpout_zero 0
[ 1371.763148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11359,uid=0
[ 1371.765443] Memory cgroup out of memory: Killed process 11359 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:58 executing program 5:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x400)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
signalfd4(r1, &(0x7f0000000180)={[0x1f]}, 0x8, 0xa55e20f3d689194a)
unlink(&(0x7f0000000000)='./file1\x00')

13:04:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x14, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:58 executing program 0:
mlockall(0x2)
shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x5000)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmat(r0, &(0x7f000045e000/0x2000)=nil, 0x0)
shmdt(0x0)
shmdt(r1)

13:04:58 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0)

13:04:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x282, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:04:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f4a19a16beda8755e561aad48e00", @ANYRES16=0x0, @ANYBLOB="000000000000000000001700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000040)=""/170, &(0x7f0000000100)=0xaa)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@sco, 0xfffffffffffffdc9)

[ 1372.110360] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1372.111173] CPU: 0 UID: 0 PID: 11401 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1372.111190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1372.111199] Call Trace:
[ 1372.111204]  <TASK>
[ 1372.111209]  dump_stack_lvl+0xfa/0x120
[ 1372.111237]  dump_header+0x107/0x950
[ 1372.111262]  oom_kill_process+0x278/0xa00
[ 1372.111284]  out_of_memory+0x34b/0x1690
[ 1372.111308]  ? __pfx_out_of_memory+0x10/0x10
[ 1372.111334]  mem_cgroup_out_of_memory+0x164/0x190
[ 1372.111348]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1372.111366]  ? mark_held_locks+0x49/0x80
[ 1372.111386]  try_charge_memcg+0x81f/0xf30
[ 1372.111411]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1372.111436]  charge_memcg+0x7b/0x290
[ 1372.111453]  __mem_cgroup_charge+0x28/0x90
[ 1372.111473]  do_wp_page+0x56e/0x31f0
[ 1372.111498]  ? __pfx_do_wp_page+0x10/0x10
[ 1372.111515]  ? do_raw_spin_lock+0x123/0x260
[ 1372.111532]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1372.111548]  ? ___pte_offset_map+0x176/0x370
[ 1372.111568]  __handle_mm_fault+0xde1/0x30f0
[ 1372.111587]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1372.111605]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1372.111622]  ? lock_release+0x121/0x290
[ 1372.111653]  handle_mm_fault+0x2c3/0x900
[ 1372.111671]  ? access_error+0x17d/0x380
[ 1372.111687]  do_user_addr_fault+0x4fa/0xeb0
[ 1372.111706]  exc_page_fault+0xb0/0x180
[ 1372.111725]  asm_exc_page_fault+0x26/0x30
[ 1372.111738] RIP: 0033:0x7f88ae9cad30
[ 1372.111748] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1372.111761] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1372.111771] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1372.111780] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1372.111788] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1372.111796] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1372.111804] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1372.111812]  ? syscall_trace_enter+0xeb/0x240
[ 1372.111845]  ? syscall_trace_enter+0xeb/0x240
[ 1372.111866]  </TASK>
[ 1372.111876] memory: usage 307200kB, limit 307200kB, failcnt 1098
[ 1372.128476] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1372.128974] Memory cgroup stats for /syz7:
[ 1372.187673] anon 1482752
[ 1372.189716] file 308297728
[ 1372.190100] kernel 4792320
[ 1372.190329] kernel_stack 557056
[ 1372.190587] pagetables 2166784
[ 1372.190838] sec_pagetables 0
[ 1372.191209] percpu 1088
[ 1372.191420] sock 0
[ 1372.191597] vmalloc 0
[ 1372.191792] shmem 308293632
[ 1372.192080] file_mapped 0
[ 1372.192306] file_dirty 0
[ 1372.192519] file_writeback 0
[ 1372.192759] swapcached 0
[ 1372.192993] inactive_anon 309694464
[ 1372.193284] active_anon 81920
[ 1372.193530] inactive_file 0
[ 1372.193760] active_file 4096
[ 1372.194025] unevictable 0
[ 1372.194248] slab_reclaimable 966304
[ 1372.194533] slab_unreclaimable 1116856
[ 1372.194836] slab 2083160
[ 1372.195071] workingset_refault_anon 0
[ 1372.195375] workingset_refault_file 1
[ 1372.195674] workingset_activate_anon 0
[ 1372.196020] workingset_activate_file 0
[ 1372.196324] workingset_restore_anon 0
[ 1372.196625] workingset_restore_file 0
[ 1372.196945] workingset_nodereclaim 0
[ 1372.197237] pgdemote_kswapd 0
[ 1372.197485] pgdemote_direct 0
[ 1372.197737] pgdemote_khugepaged 0
[ 1372.198033] pgdemote_proactive 0
[ 1372.198300] pgscan 1601
[ 1372.198507] pgsteal 77
[ 1372.198707] pswpin 0
[ 1372.198919] pswpout 0
[ 1372.199119] pgscan_kswapd 1
[ 1372.199350] pgscan_direct 1600
[ 1372.199604] pgscan_khugepaged 0
[ 1372.199902] pgscan_proactive 0
[ 1372.200167] pgsteal_kswapd 0
[ 1372.200409] pgsteal_direct 77
[ 1372.200657] pgsteal_khugepaged 0
[ 1372.200942] pgsteal_proactive 0
[ 1372.201207] pgfault 88789
[ 1372.201427] pgmajfault 3
[ 1372.201640] pgrefill 1757
[ 1372.201861] pgactivate 1845
[ 1372.202112] pgdeactivate 1757
[ 1372.202368] pglazyfree 0
[ 1372.202579] pglazyfreed 0
[ 1372.202800] swpin_zero 0
[ 1372.203036] swpout_zero 0
[ 1372.203258] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11401,uid=0
[ 1372.204445] Memory cgroup out of memory: Killed process 11401 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:04:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1372.252340] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1372.254203] CPU: 1 UID: 0 PID: 11406 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1372.254236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1372.254251] Call Trace:
[ 1372.254259]  <TASK>
[ 1372.254270]  dump_stack_lvl+0xfa/0x120
[ 1372.254314]  dump_header+0x107/0x950
[ 1372.254359]  oom_kill_process+0x278/0xa00
[ 1372.254401]  out_of_memory+0x34b/0x1690
[ 1372.254445]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1372.254478]  ? __pfx_out_of_memory+0x10/0x10
[ 1372.254529]  mem_cgroup_out_of_memory+0x164/0x190
[ 1372.254555]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1372.254591]  ? mark_held_locks+0x49/0x80
[ 1372.254628]  try_charge_memcg+0x81f/0xf30
[ 1372.254674]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1372.254723]  charge_memcg+0x7b/0x290
[ 1372.254758]  __mem_cgroup_charge+0x28/0x90
[ 1372.254795]  do_wp_page+0x56e/0x31f0
[ 1372.254844]  ? __pfx_do_wp_page+0x10/0x10
[ 1372.254887]  ? do_raw_spin_lock+0x123/0x260
[ 1372.254920]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1372.254951]  ? ___pte_offset_map+0x176/0x370
[ 1372.254990]  __handle_mm_fault+0xde1/0x30f0
[ 1372.255026]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1372.255060]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1372.255094]  ? lock_release+0x121/0x290
[ 1372.255155]  handle_mm_fault+0x2c3/0x900
[ 1372.255191]  ? access_error+0x17d/0x380
[ 1372.255223]  do_user_addr_fault+0x4fa/0xeb0
[ 1372.255261]  exc_page_fault+0xb0/0x180
[ 1372.255296]  asm_exc_page_fault+0x26/0x30
[ 1372.255321] RIP: 0033:0x7fc67e13dd30
[ 1372.255341] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1372.255364] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1372.255383] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1372.255400] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1372.255415] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1372.255430] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1372.255445] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1372.255462]  ? __might_fault+0x1f/0x190
[ 1372.255501]  ? __might_fault+0x1f/0x190
[ 1372.255535]  </TASK>
[ 1372.255593] memory: usage 307200kB, limit 307200kB, failcnt 1430
[ 1372.292557] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1372.293550] Memory cgroup stats for /syz0:
[ 1372.305734] anon 1118208
[ 1372.307293] file 309952512
[ 1372.307743] kernel 3502080
[ 1372.308258] kernel_stack 360448
[ 1372.308779] pagetables 1376256
[ 1372.309318] sec_pagetables 0
[ 1372.309803] percpu 704
[ 1372.310267] sock 0
[ 1372.310623] vmalloc 0
[ 1372.311043] shmem 309952512
[ 1372.311518] file_mapped 0
[ 1372.312004] file_dirty 0
[ 1372.312439] file_writeback 0
[ 1372.312961] swapcached 0
[ 1372.313389] inactive_anon 310870016
[ 1372.313976] active_anon 200704
[ 1372.314494] inactive_file 0
[ 1372.314993] active_file 0
[ 1372.315433] unevictable 0
[ 1372.315916] slab_reclaimable 973912
[ 1372.316490] slab_unreclaimable 801944
[ 1372.317107] slab 1775856
[ 1372.317533] workingset_refault_anon 0
[ 1372.318166] workingset_refault_file 0
[ 1372.318754] workingset_activate_anon 0
[ 1372.319388] workingset_activate_file 0
[ 1372.320031] workingset_restore_anon 0
[ 1372.320626] workingset_restore_file 0
[ 1372.321240] workingset_nodereclaim 0
[ 1372.321819] pgdemote_kswapd 0
[ 1372.322340] pgdemote_direct 0
[ 1372.322831] pgdemote_khugepaged 0
[ 1372.323408] pgdemote_proactive 0
[ 1372.323979] pgscan 367
[ 1372.324382] pgsteal 76
[ 1372.324783] pswpin 0
[ 1372.325191] pswpout 0
[ 1372.325588] pgscan_kswapd 0
[ 1372.326091] pgscan_direct 367
[ 1372.326583] pgscan_khugepaged 0
[ 1372.327151] pgscan_proactive 0
[ 1372.327665] pgsteal_kswapd 0
[ 1372.328192] pgsteal_direct 76
[ 1372.328692] pgsteal_khugepaged 0
[ 1372.329253] pgsteal_proactive 0
[ 1372.329773] pgfault 88592
[ 1372.330246] pgmajfault 0
[ 1372.330678] pgrefill 275
[ 1372.331150] pgactivate 365
[ 1372.331600] pgdeactivate 278
[ 1372.332127] pglazyfree 0
[ 1372.332551] pglazyfreed 0
[ 1372.333011] swpin_zero 0
[ 1372.333438] swpout_zero 0
[ 1372.333873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11406,uid=0
[ 1372.336239] Memory cgroup out of memory: Killed process 11406 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:15 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1bb)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:05:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:05:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x300, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:15 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1bb)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:05:15 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x20, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:05:15 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x229)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:15 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x204)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x500, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x600, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1388.800389] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1388.802247] CPU: 1 UID: 0 PID: 11417 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1388.802279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1388.802292] Call Trace:
[ 1388.802301]  <TASK>
[ 1388.802311]  dump_stack_lvl+0xfa/0x120
[ 1388.802352]  dump_header+0x107/0x950
[ 1388.802394]  oom_kill_process+0x278/0xa00
[ 1388.802432]  out_of_memory+0x34b/0x1690
[ 1388.802476]  ? __pfx_out_of_memory+0x10/0x10
[ 1388.802530]  mem_cgroup_out_of_memory+0x164/0x190
[ 1388.802561]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1388.802595]  ? mark_held_locks+0x49/0x80
[ 1388.802629]  try_charge_memcg+0x81f/0xf30
[ 1388.802673]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1388.802718]  charge_memcg+0x7b/0x290
[ 1388.802750]  __mem_cgroup_charge+0x28/0x90
[ 1388.802785]  do_wp_page+0x56e/0x31f0
[ 1388.802829]  ? __pfx_do_wp_page+0x10/0x10
[ 1388.802862]  ? do_raw_spin_lock+0x123/0x260
[ 1388.802901]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1388.802930]  ? ___pte_offset_map+0x176/0x370
[ 1388.802966]  __handle_mm_fault+0xde1/0x30f0
[ 1388.803000]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1388.803032]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1388.803063]  ? lock_release+0x121/0x290
[ 1388.803121]  handle_mm_fault+0x2c3/0x900
[ 1388.803154]  ? access_error+0x17d/0x380
[ 1388.803183]  do_user_addr_fault+0x4fa/0xeb0
[ 1388.803218]  exc_page_fault+0xb0/0x180
[ 1388.803252]  asm_exc_page_fault+0x26/0x30
[ 1388.803274] RIP: 0033:0x7f88ae9cad30
[ 1388.803292] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1388.803315] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1388.803333] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1388.803348] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1388.803362] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1388.803376] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1388.803391] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1388.803409]  ? __do_sys_mlockall+0x258/0x5c0
[ 1388.803444]  ? __do_sys_mlockall+0x258/0x5c0
[ 1388.803472]  </TASK>
[ 1388.835552] memory: usage 307200kB, limit 307200kB, failcnt 1133
[ 1388.836658] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1388.837634] Memory cgroup stats for /syz7:
[ 1388.869661] anon 1499136
[ 1388.871080] file 308297728
[ 1388.871527] kernel 4775936
[ 1388.872001] kernel_stack 557056
[ 1388.872528] pagetables 2162688
[ 1388.873178] sec_pagetables 0
[ 1388.873776] percpu 1024
[ 1388.874195] sock 0
[ 1388.874526] vmalloc 0
[ 1388.874921] shmem 308293632
[ 1388.875441] file_mapped 0
[ 1388.875992] file_dirty 0
[ 1388.876408] file_writeback 0
[ 1388.876919] swapcached 0
[ 1388.877426] inactive_anon 309710848
[ 1388.878132] active_anon 81920
[ 1388.878655] inactive_file 0
[ 1388.879232] active_file 4096
[ 1388.879689] unevictable 0
[ 1388.880148] slab_reclaimable 966304
[ 1388.880698] slab_unreclaimable 1104848
[ 1388.881310] slab 2071152
[ 1388.881796] workingset_refault_anon 0
[ 1388.882566] workingset_refault_file 1
[ 1388.883327] workingset_activate_anon 0
[ 1388.884120] workingset_activate_file 0
[ 1388.884682] workingset_restore_anon 0
[ 1388.885272] workingset_restore_file 0
[ 1388.885828] workingset_nodereclaim 0
[ 1388.886559] pgdemote_kswapd 0
[ 1388.887054] pgdemote_direct 0
[ 1388.887513] pgdemote_khugepaged 0
[ 1388.888058] pgdemote_proactive 0
[ 1388.888553] pgscan 1649
[ 1388.888973] pgsteal 77
[ 1388.889436] pswpin 0
[ 1388.889821] pswpout 0
[ 1388.890257] pgscan_kswapd 1
[ 1388.890788] pgscan_direct 1648
[ 1388.891393] pgscan_khugepaged 0
[ 1388.892046] pgscan_proactive 0
[ 1388.892546] pgsteal_kswapd 0
[ 1388.893149] pgsteal_direct 77
[ 1388.893645] pgsteal_khugepaged 0
[ 1388.894308] pgsteal_proactive 0
[ 1388.894795] pgfault 88844
[ 1388.895242] pgmajfault 3
[ 1388.895729] pgrefill 1813
[ 1388.896223] pgactivate 1901
[ 1388.896657] pgdeactivate 1813
[ 1388.897152] pglazyfree 0
[ 1388.897551] pglazyfreed 0
[ 1388.898051] swpin_zero 0
[ 1388.898452] swpout_zero 0
[ 1388.898859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11417,uid=0
[ 1388.901069] Memory cgroup out of memory: Killed process 11417 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x700, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:15 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r1)
shmdt(0x0)
shmdt(r1)

13:05:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x900, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1389.220622] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1389.221601] CPU: 0 UID: 0 PID: 11448 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1389.221618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1389.221627] Call Trace:
[ 1389.221632]  <TASK>
[ 1389.221636]  dump_stack_lvl+0xfa/0x120
[ 1389.221665]  dump_header+0x107/0x950
[ 1389.221689]  oom_kill_process+0x278/0xa00
[ 1389.221709]  out_of_memory+0x34b/0x1690
[ 1389.221733]  ? __pfx_out_of_memory+0x10/0x10
[ 1389.221759]  mem_cgroup_out_of_memory+0x164/0x190
[ 1389.221773]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1389.221791]  ? mark_held_locks+0x49/0x80
[ 1389.221810]  try_charge_memcg+0x81f/0xf30
[ 1389.221835]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1389.221860]  charge_memcg+0x7b/0x290
[ 1389.221881]  __mem_cgroup_charge+0x28/0x90
[ 1389.221900]  do_wp_page+0x56e/0x31f0
[ 1389.221925]  ? __pfx_do_wp_page+0x10/0x10
[ 1389.221943]  ? do_raw_spin_lock+0x123/0x260
[ 1389.221960]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1389.221976]  ? ___pte_offset_map+0x176/0x370
[ 1389.221996]  __handle_mm_fault+0xde1/0x30f0
[ 1389.222014]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1389.222032]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1389.222049]  ? lock_release+0x121/0x290
[ 1389.222081]  handle_mm_fault+0x2c3/0x900
[ 1389.222098]  ? access_error+0x17d/0x380
[ 1389.222114]  do_user_addr_fault+0x4fa/0xeb0
[ 1389.222133]  exc_page_fault+0xb0/0x180
[ 1389.222153]  asm_exc_page_fault+0x26/0x30
[ 1389.222166] RIP: 0033:0x7f88ae9cad30
[ 1389.222176] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1389.222188] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1389.222198] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1389.222206] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1389.222215] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1389.222223] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1389.222231] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1389.222240]  ? syscall_trace_enter+0xeb/0x240
[ 1389.222260]  ? syscall_trace_enter+0xeb/0x240
[ 1389.222275]  </TASK>
[ 1389.239010] memory: usage 307200kB, limit 307200kB, failcnt 1153
[ 1389.239501] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1389.240167] Memory cgroup stats for /syz7:
[ 1389.254125] anon 1482752
[ 1389.255490] file 308297728
[ 1389.256176] kernel 4792320
[ 1389.256602] kernel_stack 557056
[ 1389.257219] pagetables 2166784
[ 1389.257680] sec_pagetables 0
[ 1389.260215] percpu 1088
[ 1389.260604] sock 0
[ 1389.262143] vmalloc 0
[ 1389.262511] shmem 308293632
[ 1389.263001] file_mapped 0
[ 1389.263401] file_dirty 0
[ 1389.263784] file_writeback 0
[ 1389.264267] swapcached 0
[ 1389.264659] inactive_anon 309694464
[ 1389.265203] active_anon 81920
[ 1389.265663] inactive_file 0
[ 1389.266112] active_file 4096
[ 1389.266555] unevictable 0
[ 1389.266990] slab_reclaimable 966304
[ 1389.267506] slab_unreclaimable 1116856
[ 1389.268088] slab 2083160
[ 1389.268476] workingset_refault_anon 0
[ 1389.269041] workingset_refault_file 1
[ 1389.269578] workingset_activate_anon 0
[ 1389.270152] workingset_activate_file 0
[ 1389.270699] workingset_restore_anon 0
[ 1389.271263] workingset_restore_file 0
[ 1389.271798] workingset_nodereclaim 0
[ 1389.272365] pgdemote_kswapd 0
[ 1389.272820] pgdemote_direct 0
[ 1389.273301] pgdemote_khugepaged 0
[ 1389.273803] pgdemote_proactive 0
[ 1389.274326] pgscan 1672
[ 1389.274704] pgsteal 77
[ 1389.275104] pswpin 0
[ 1389.275447] pswpout 0
[ 1389.275801] pgscan_kswapd 1
[ 1389.276271] pgscan_direct 1671
[ 1389.276733] pgscan_khugepaged 0
[ 1389.277239] pgscan_proactive 0
[ 1389.277701] pgsteal_kswapd 0
[ 1389.278207] pgsteal_direct 77
[ 1389.278660] pgsteal_khugepaged 0
[ 1389.279164] pgsteal_proactive 0
[ 1389.279633] pgfault 88891
[ 1389.280064] pgmajfault 3
[ 1389.280451] pgrefill 1849
[ 1389.280850] pgactivate 1937
[ 1389.281291] pgdeactivate 1849
[ 1389.281741] pglazyfree 0
[ 1389.282157] pglazyfreed 0
[ 1389.282557] swpin_zero 0
[ 1389.282971] swpout_zero 0
[ 1389.283368] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11448,uid=0
[ 1389.285460] Memory cgroup out of memory: Killed process 11448 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:16 executing program 0:
mlockall(0x6)
r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f0000/0x1000)=nil)
shmat(r1, &(0x7f0000df9000/0x3000)=nil, 0x4000)
shmdt(0x0)
r2 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil)
r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000924000/0x3000)=nil)
shmdt(r3)
r4 = shmget$private(0x0, 0x4000, 0x80, &(0x7f000062a000/0x4000)=nil)
r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil)
shmat(r5, &(0x7f00006f6000/0x4000)=nil, 0x2000)
shmctl$SHM_LOCK(r4, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000910000/0x1000)=nil, 0xa000)
shmdt(0x0)
shmdt(r3)
mlockall(0x2)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x1000)

13:05:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf00, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1389.657932] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1389.659117] CPU: 1 UID: 0 PID: 11453 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1389.659141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1389.659152] Call Trace:
[ 1389.659159]  <TASK>
[ 1389.659166]  dump_stack_lvl+0xfa/0x120
[ 1389.659201]  dump_header+0x107/0x950
[ 1389.659235]  oom_kill_process+0x278/0xa00
[ 1389.659266]  out_of_memory+0x34b/0x1690
[ 1389.659301]  ? __pfx_out_of_memory+0x10/0x10
[ 1389.659338]  mem_cgroup_out_of_memory+0x164/0x190
[ 1389.659358]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1389.659384]  ? mark_held_locks+0x49/0x80
[ 1389.659412]  try_charge_memcg+0x81f/0xf30
[ 1389.659446]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1389.659482]  charge_memcg+0x7b/0x290
[ 1389.659507]  __mem_cgroup_charge+0x28/0x90
[ 1389.659535]  do_wp_page+0x56e/0x31f0
[ 1389.659571]  ? __pfx_do_wp_page+0x10/0x10
[ 1389.659597]  ? do_raw_spin_lock+0x123/0x260
[ 1389.659620]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1389.659643]  ? ___pte_offset_map+0x176/0x370
[ 1389.659672]  __handle_mm_fault+0xde1/0x30f0
[ 1389.659699]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1389.659724]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1389.659749]  ? lock_release+0x121/0x290
[ 1389.659794]  handle_mm_fault+0x2c3/0x900
[ 1389.659820]  ? access_error+0x17d/0x380
[ 1389.659843]  do_user_addr_fault+0x4fa/0xeb0
[ 1389.659871]  exc_page_fault+0xb0/0x180
[ 1389.659903]  asm_exc_page_fault+0x26/0x30
[ 1389.659921] RIP: 0033:0x7fc67e13aecd
[ 1389.659935] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1389.659952] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1389.659967] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000025
[ 1389.659979] RDX: 0000001b2cc200b4 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1389.659990] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1389.660002] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1389.660013] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000153338
[ 1389.660046]  ? do_syscall_64+0x12c/0x360
[ 1389.660079]  </TASK>
[ 1389.685788] memory: usage 307200kB, limit 307200kB, failcnt 1451
[ 1389.687511] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1389.688401] Memory cgroup stats for /syz0:
[ 1389.716123] anon 1134592
[ 1389.717784] file 309952512
[ 1389.718322] kernel 3485696
[ 1389.718748] kernel_stack 360448
[ 1389.719267] pagetables 1372160
[ 1389.719745] sec_pagetables 0
[ 1389.720259] percpu 640
[ 1389.720639] sock 0
[ 1389.721005] vmalloc 0
[ 1389.721372] shmem 309952512
[ 1389.721803] file_mapped 0
[ 1389.722254] file_dirty 0
[ 1389.722664] file_writeback 0
[ 1389.723181] swapcached 0
[ 1389.723583] inactive_anon 310886400
[ 1389.724192] active_anon 200704
[ 1389.724690] inactive_file 0
[ 1389.725294] active_file 0
[ 1389.725820] unevictable 0
[ 1389.726391] slab_reclaimable 973912
[ 1389.727131] slab_unreclaimable 789936
[ 1389.727848] slab 1763848
[ 1389.728423] workingset_refault_anon 0
[ 1389.729191] workingset_refault_file 0
[ 1389.729958] workingset_activate_anon 0
[ 1389.730670] workingset_activate_file 0
[ 1389.731386] workingset_restore_anon 0
[ 1389.732129] workingset_restore_file 0
[ 1389.732813] workingset_nodereclaim 0
[ 1389.733534] pgdemote_kswapd 0
[ 1389.734188] pgdemote_direct 0
[ 1389.734784] pgdemote_khugepaged 0
[ 1389.735460] pgdemote_proactive 0
[ 1389.736146] pgscan 367
[ 1389.736634] pgsteal 76
[ 1389.737185] pswpin 0
[ 1389.737617] pswpout 0
[ 1389.738101] pgscan_kswapd 0
[ 1389.738619] pgscan_direct 367
[ 1389.739242] pgscan_khugepaged 0
[ 1389.739842] pgscan_proactive 0
[ 1389.740503] pgsteal_kswapd 0
[ 1389.741142] pgsteal_direct 76
[ 1389.741735] pgsteal_khugepaged 0
[ 1389.742507] pgsteal_proactive 0
[ 1389.743176] pgfault 88646
[ 1389.743711] pgmajfault 0
[ 1389.744305] pgrefill 275
[ 1389.744801] pgactivate 365
[ 1389.745374] pgdeactivate 278
[ 1389.746016] pglazyfree 0
[ 1389.746536] pglazyfreed 0
[ 1389.747127] swpin_zero 0
[ 1389.747614] swpout_zero 0
[ 1389.748179] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11453,uid=0
[ 1389.750954] Memory cgroup out of memory: Killed process 11453 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:05:26 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e9", 0x1bb)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:05:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x1400, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:26 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d", 0x229)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:26 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x8, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:05:26 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x229)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:26 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x229)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x8202, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1400.063717] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1400.065457] CPU: 0 UID: 0 PID: 11462 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1400.065488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1400.065502] Call Trace:
[ 1400.065511]  <TASK>
[ 1400.065521]  dump_stack_lvl+0xfa/0x120
[ 1400.065565]  dump_header+0x107/0x950
[ 1400.065608]  oom_kill_process+0x278/0xa00
[ 1400.065647]  out_of_memory+0x34b/0x1690
[ 1400.065697]  ? __pfx_out_of_memory+0x10/0x10
[ 1400.065744]  mem_cgroup_out_of_memory+0x164/0x190
[ 1400.065769]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1400.065803]  ? mark_held_locks+0x49/0x80
[ 1400.065838]  try_charge_memcg+0x81f/0xf30
[ 1400.065888]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1400.065934]  charge_memcg+0x7b/0x290
[ 1400.065966]  __mem_cgroup_charge+0x28/0x90
[ 1400.066002]  do_wp_page+0x56e/0x31f0
[ 1400.066046]  ? __pfx_do_wp_page+0x10/0x10
[ 1400.066078]  ? do_raw_spin_lock+0x123/0x260
[ 1400.066108]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1400.066137]  ? ___pte_offset_map+0x176/0x370
[ 1400.066173]  __handle_mm_fault+0xde1/0x30f0
[ 1400.066207]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1400.066239]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1400.066270]  ? lock_release+0x121/0x290
[ 1400.066328]  handle_mm_fault+0x2c3/0x900
[ 1400.066361]  ? access_error+0x17d/0x380
[ 1400.066390]  do_user_addr_fault+0x4fa/0xeb0
[ 1400.066425]  exc_page_fault+0xb0/0x180
[ 1400.066459]  asm_exc_page_fault+0x26/0x30
[ 1400.066481] RIP: 0033:0x7fc67e13aecd
[ 1400.066500] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1400.066522] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1400.066540] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1400.066555] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1400.066570] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1400.066585] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1400.066599] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000155ba1
[ 1400.066629]  ? do_syscall_64+0x12c/0x360
[ 1400.066670]  </TASK>
[ 1400.098791] memory: usage 307200kB, limit 307200kB, failcnt 1474
[ 1400.100383] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:05:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={[0x8000]}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1400.101728] Memory cgroup stats for /syz0:
[ 1400.184080] anon 1134592
[ 1400.186340] file 309952512
[ 1400.186924] kernel 3485696
[ 1400.187569] kernel_stack 360448
[ 1400.188194] pagetables 1372160
[ 1400.188992] sec_pagetables 0
[ 1400.189754] percpu 640
[ 1400.190262] sock 0
[ 1400.190766] vmalloc 0
[ 1400.191427] shmem 309952512
[ 1400.191973] file_mapped 0
[ 1400.192466] file_dirty 0
[ 1400.192963] file_writeback 0
[ 1400.193714] swapcached 0
[ 1400.194221] inactive_anon 310886400
[ 1400.195060] active_anon 200704
[ 1400.195794] inactive_file 0
[ 1400.196357] active_file 0
[ 1400.197042] unevictable 0
[ 1400.197535] slab_reclaimable 973912
[ 1400.198365] slab_unreclaimable 789936
[ 1400.199275] slab 1763848
[ 1400.199746] workingset_refault_anon 0
[ 1400.200591] workingset_refault_file 0
[ 1400.201465] workingset_activate_anon 0
[ 1400.202165] workingset_activate_file 0
[ 1400.203054] workingset_restore_anon 0
[ 1400.203926] workingset_restore_file 0
[ 1400.204781] workingset_nodereclaim 0
[ 1400.205457] pgdemote_kswapd 0
[ 1400.206040] pgdemote_direct 0
[ 1400.206712] pgdemote_khugepaged 0
[ 1400.207547] pgdemote_proactive 0
[ 1400.208376] pgscan 367
[ 1400.209053] pgsteal 76
[ 1400.209532] pswpin 0
[ 1400.210090] pswpout 0
[ 1400.210699] pgscan_kswapd 0
[ 1400.211286] pgscan_direct 367
[ 1400.211978] pgscan_khugepaged 0
[ 1400.212589] pgscan_proactive 0
[ 1400.213350] pgsteal_kswapd 0
[ 1400.214129] pgsteal_direct 76
[ 1400.218160] pgsteal_khugepaged 0
[ 1400.218758] pgsteal_proactive 0
[ 1400.221392] pgfault 88700
[ 1400.222113] pgmajfault 0
[ 1400.222655] pgrefill 275
[ 1400.223265] pgactivate 365
[ 1400.223972] pgdeactivate 278
[ 1400.224590] pglazyfree 0
[ 1400.225225] pglazyfreed 0
[ 1400.225716] swpin_zero 0
[ 1400.226255] swpout_zero 0
[ 1400.226938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11462,uid=0
[ 1400.229693] Memory cgroup out of memory: Killed process 11462 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x30000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:05:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x80000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:05:27 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d", 0x229)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:27 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98edd", 0x1e0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:05:39 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x229)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:39 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x7000)
shmat(r0, &(0x7f000083a000/0x3000)=nil, 0x1000)
r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r3)
shmdt(r3)
shmdt(r1)

13:05:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf0ffff, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:39 executing program 5:
r0 = gettid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2d}, 0x0, 0x1ff}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = gettid()
tgkill(r1, r2, 0x1)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
pwritev2(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0)
sched_setparam(r1, &(0x7f0000000000)=0x5)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r4}], 0x1, 0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xfb)

13:05:39 executing program 7:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mlockall(0x2)
r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r2)

13:05:39 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1bc)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:05:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:05:39 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:39 executing program 5:
r0 = shmget$private(0x0, 0x2000, 0x3b322a20bf33f6f4, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/74)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x80000}], 0x1, 0x0, 0x0, 0x0)
shmctl$SHM_UNLOCK(r0, 0xc)

13:05:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x1000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1412.403286] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1412.404131] CPU: 1 UID: 0 PID: 11515 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1412.404148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1412.404156] Call Trace:
[ 1412.404161]  <TASK>
[ 1412.404166]  dump_stack_lvl+0xfa/0x120
[ 1412.404196]  dump_header+0x107/0x950
[ 1412.404220]  oom_kill_process+0x278/0xa00
[ 1412.404241]  out_of_memory+0x34b/0x1690
[ 1412.404265]  ? __pfx_out_of_memory+0x10/0x10
[ 1412.404299]  mem_cgroup_out_of_memory+0x164/0x190
[ 1412.404313]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1412.404331]  ? mark_held_locks+0x49/0x80
[ 1412.404351]  try_charge_memcg+0x81f/0xf30
[ 1412.404376]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1412.404400]  charge_memcg+0x7b/0x290
[ 1412.404418]  __mem_cgroup_charge+0x28/0x90
[ 1412.404436]  do_wp_page+0x56e/0x31f0
[ 1412.404461]  ? __pfx_do_wp_page+0x10/0x10
[ 1412.404478]  ? do_raw_spin_lock+0x123/0x260
[ 1412.404494]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1412.404510]  ? ___pte_offset_map+0x176/0x370
[ 1412.404529]  __handle_mm_fault+0xde1/0x30f0
[ 1412.404547]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1412.404565]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1412.404582]  ? lock_release+0x121/0x290
[ 1412.404613]  handle_mm_fault+0x2c3/0x900
[ 1412.404630]  ? access_error+0x17d/0x380
[ 1412.404646]  do_user_addr_fault+0x4fa/0xeb0
[ 1412.404665]  exc_page_fault+0xb0/0x180
[ 1412.404684]  asm_exc_page_fault+0x26/0x30
[ 1412.404696] RIP: 0033:0x7fc67e13aecd
[ 1412.404707] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1412.404718] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1412.404729] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1412.404737] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1412.404745] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1412.404752] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1412.404760] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 0000000000158bcc
[ 1412.404776]  ? do_syscall_64+0x12c/0x360
[ 1412.404798]  </TASK>
[ 1412.404820] memory: usage 307200kB, limit 307200kB, failcnt 1493
[ 1412.422229] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1412.422722] Memory cgroup stats for /syz0:
[ 1412.437450] anon 1134592
[ 1412.438767] file 309952512
[ 1412.439276] kernel 3485696
[ 1412.439743] kernel_stack 360448
[ 1412.440323] pagetables 1372160
[ 1412.441034] sec_pagetables 0
[ 1412.441691] percpu 640
[ 1412.442149] sock 0
[ 1412.442514] vmalloc 0
[ 1412.442952] shmem 309952512
[ 1412.443458] file_mapped 0
[ 1412.444087] file_dirty 0
[ 1412.444557] file_writeback 0
[ 1412.445224] swapcached 0
[ 1412.445666] inactive_anon 310886400
[ 1412.446281] active_anon 200704
[ 1412.446804] inactive_file 0
[ 1412.447310] active_file 0
[ 1412.447958] unevictable 0
[ 1412.448568] slab_reclaimable 973912
[ 1412.449196] slab_unreclaimable 789936
[ 1412.449804] slab 1763848
[ 1412.450424] workingset_refault_anon 0
[ 1412.451216] workingset_refault_file 0
[ 1412.452018] workingset_activate_anon 0
[ 1412.452695] workingset_activate_file 0
[ 1412.453512] workingset_restore_anon 0
[ 1412.454161] workingset_restore_file 0
[ 1412.454771] workingset_nodereclaim 0
[ 1412.455572] pgdemote_kswapd 0
[ 1412.456122] pgdemote_direct 0
[ 1412.456645] pgdemote_khugepaged 0
[ 1412.457371] pgdemote_proactive 0
[ 1412.458102] pgscan 367
[ 1412.458569] pgsteal 76
[ 1412.459112] pswpin 0
[ 1412.459644] pswpout 0
[ 1412.460092] pgscan_kswapd 0
[ 1412.460786] pgscan_direct 367
[ 1412.461338] pgscan_khugepaged 0
[ 1412.461872] pgscan_proactive 0
[ 1412.462680] pgsteal_kswapd 0
[ 1412.463469] pgsteal_direct 76
[ 1412.464202] pgsteal_khugepaged 0
[ 1412.464783] pgsteal_proactive 0
[ 1412.465514] pgfault 88755
[ 1412.466313] pgmajfault 0
[ 1412.467010] pgrefill 275
[ 1412.467456] pgactivate 365
[ 1412.467964] pgdeactivate 278
[ 1412.468625] pglazyfree 0
[ 1412.469106] pglazyfreed 0
[ 1412.469559] swpin_zero 0
[ 1412.470213] swpout_zero 0
[ 1412.470844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11515,uid=0
[ 1412.473456] Memory cgroup out of memory: Killed process 11515 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1412.480008] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1412.480788] CPU: 1 UID: 0 PID: 11520 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1412.480804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1412.480812] Call Trace:
[ 1412.480817]  <TASK>
[ 1412.480822]  dump_stack_lvl+0xfa/0x120
[ 1412.480847]  dump_header+0x107/0x950
[ 1412.480877]  oom_kill_process+0x278/0xa00
[ 1412.480908]  out_of_memory+0x34b/0x1690
[ 1412.480932]  ? __pfx_out_of_memory+0x10/0x10
[ 1412.480957]  mem_cgroup_out_of_memory+0x164/0x190
[ 1412.480971]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1412.480989]  ? mark_held_locks+0x49/0x80
[ 1412.481010]  try_charge_memcg+0x81f/0xf30
[ 1412.481040]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1412.481064]  charge_memcg+0x7b/0x290
[ 1412.481081]  __mem_cgroup_charge+0x28/0x90
[ 1412.481100]  do_wp_page+0x56e/0x31f0
[ 1412.481125]  ? __pfx_do_wp_page+0x10/0x10
[ 1412.481142]  ? do_raw_spin_lock+0x123/0x260
[ 1412.481159]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1412.481177]  ? ___pte_offset_map+0x176/0x370
[ 1412.481196]  __handle_mm_fault+0xde1/0x30f0
[ 1412.481215]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1412.481233]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1412.481250]  ? lock_release+0x121/0x290
[ 1412.481281]  handle_mm_fault+0x2c3/0x900
[ 1412.481299]  ? access_error+0x17d/0x380
[ 1412.481315]  do_user_addr_fault+0x4fa/0xeb0
[ 1412.481333]  exc_page_fault+0xb0/0x180
[ 1412.481352]  asm_exc_page_fault+0x26/0x30
[ 1412.481364] RIP: 0033:0x7f88ae9cad30
[ 1412.481374] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1412.481386] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1412.481396] RAX: 00000000de04c33d RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1412.481404] RDX: 0000001b2d620078 RSI: ffffffff812c80e3 RDI: 0000000000000000
[ 1412.481412] RBP: 0000000000000001 R08: 00000000de04c33d R09: 0000001b2d62001c
[ 1412.481419] R10: 000000000000033d R11: 00000000de04c341 R12: 000000000000001a
[ 1412.481427] R13: 00007f88aeb24000 R14: ffffffff812c80e3 R15: 00007f88aeb2fff0
[ 1412.481435]  ? fpregs_assert_state_consistent+0x13/0xd0
[ 1412.481456]  ? fpregs_assert_state_consistent+0x13/0xd0
[ 1412.481474]  </TASK>
[ 1412.498191] memory: usage 307200kB, limit 307200kB, failcnt 1178
[ 1412.498686] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1412.499357] Memory cgroup stats for /syz7:
[ 1412.502502] anon 1499136
[ 1412.504945] file 308297728
[ 1412.505228] kernel 4775936
[ 1412.505512] kernel_stack 557056
[ 1412.505937] pagetables 2162688
[ 1412.506349] sec_pagetables 0
[ 1412.506596] percpu 1024
[ 1412.506806] sock 0
[ 1412.507018] vmalloc 0
[ 1412.507227] shmem 308293632
[ 1412.507465] file_mapped 0
[ 1412.507689] file_dirty 0
[ 1412.507934] file_writeback 0
[ 1412.508186] swapcached 0
[ 1412.508415] inactive_anon 309710848
[ 1412.508700] active_anon 81920
[ 1412.508986] inactive_file 0
[ 1412.509227] active_file 4096
[ 1412.509472] unevictable 0
[ 1412.509694] slab_reclaimable 966304
[ 1412.510012] slab_unreclaimable 1104848
[ 1412.510321] slab 2071152
[ 1412.510538] workingset_refault_anon 0
[ 1412.510840] workingset_refault_file 1
[ 1412.511166] workingset_activate_anon 0
[ 1412.511472] workingset_activate_file 0
[ 1412.511779] workingset_restore_anon 0
[ 1412.512105] workingset_restore_file 0
[ 1412.512420] workingset_nodereclaim 0
[ 1412.512714] pgdemote_kswapd 0
[ 1412.513004] pgdemote_direct 0
[ 1412.513264] pgdemote_khugepaged 0
[ 1412.513538] pgdemote_proactive 0
[ 1412.513806] pgscan 1713
[ 1412.514047] pgsteal 77
[ 1412.514253] pswpin 0
[ 1412.514446] pswpout 0
[ 1412.514647] pgscan_kswapd 1
[ 1412.514906] pgscan_direct 1712
[ 1412.515167] pgscan_khugepaged 0
[ 1412.515430] pgscan_proactive 0
[ 1412.515685] pgsteal_kswapd 0
[ 1412.515977] pgsteal_direct 77
[ 1412.516351] pgsteal_khugepaged 0
[ 1412.516632] pgsteal_proactive 0
[ 1412.516925] pgfault 88946
[ 1412.517157] pgmajfault 3
[ 1412.517372] pgrefill 1912
[ 1412.517596] pgactivate 2001
[ 1412.517830] pgdeactivate 1912
[ 1412.518112] pglazyfree 0
[ 1412.518333] pglazyfreed 0
[ 1412.518555] swpin_zero 0
[ 1412.518785] swpout_zero 0
[ 1412.519082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11520,uid=0
[ 1412.520280] Memory cgroup out of memory: Killed process 11520 (syz-executor.7) total-vm:93420kB, anon-rss:292kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:39 executing program 5:
r0 = shmget$private(0x0, 0x2000, 0x3b322a20bf33f6f4, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/74)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x80000}], 0x1, 0x0, 0x0, 0x0)
shmctl$SHM_UNLOCK(r0, 0xc)

13:05:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x2000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:39 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r2)
fallocate(r3, 0x0, 0x0, 0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
dup2(r3, r4)
shmdt(r1)

13:05:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x3000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1412.958195] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1412.959087] CPU: 1 UID: 0 PID: 11547 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1412.959104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1412.959112] Call Trace:
[ 1412.959117]  <TASK>
[ 1412.959124]  dump_stack_lvl+0xfa/0x120
[ 1412.959153]  dump_header+0x107/0x950
[ 1412.959176]  oom_kill_process+0x278/0xa00
[ 1412.959198]  out_of_memory+0x34b/0x1690
[ 1412.959220]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1412.959237]  ? __pfx_out_of_memory+0x10/0x10
[ 1412.959263]  mem_cgroup_out_of_memory+0x164/0x190
[ 1412.959276]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1412.959294]  ? mark_held_locks+0x49/0x80
[ 1412.959314]  try_charge_memcg+0x81f/0xf30
[ 1412.959337]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1412.959362]  charge_memcg+0x7b/0x290
[ 1412.959378]  __mem_cgroup_charge+0x28/0x90
[ 1412.959397]  do_wp_page+0x56e/0x31f0
[ 1412.959421]  ? __pfx_do_wp_page+0x10/0x10
[ 1412.959439]  ? do_raw_spin_lock+0x123/0x260
[ 1412.959455]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1412.959471]  ? ___pte_offset_map+0x176/0x370
[ 1412.959491]  __handle_mm_fault+0xde1/0x30f0
[ 1412.959509]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1412.959527]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1412.959544]  ? lock_release+0x121/0x290
[ 1412.959575]  handle_mm_fault+0x2c3/0x900
[ 1412.959593]  ? access_error+0x17d/0x380
[ 1412.959608]  do_user_addr_fault+0x4fa/0xeb0
[ 1412.959627]  exc_page_fault+0xb0/0x180
[ 1412.959646]  asm_exc_page_fault+0x26/0x30
[ 1412.959658] RIP: 0033:0x7fc67e13dd30
[ 1412.959669] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1412.959681] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1412.959692] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1412.959700] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1412.959707] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1412.959715] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1412.959722] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1412.959731]  ? __might_fault+0x1f/0x190
[ 1412.959751]  ? __might_fault+0x1f/0x190
[ 1412.959768]  </TASK>
[ 1412.959863] memory: usage 307200kB, limit 307200kB, failcnt 1520
[ 1412.977790] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1412.978355] Memory cgroup stats for /syz0:
[ 1412.988632] anon 1118208
[ 1412.989348] file 309952512
[ 1412.989734] kernel 3502080
[ 1412.990045] kernel_stack 360448
[ 1412.990386] pagetables 1376256
[ 1412.990839] sec_pagetables 0
[ 1412.991129] percpu 704
[ 1412.991335] sock 0
[ 1412.991514] vmalloc 0
[ 1412.991713] shmem 309952512
[ 1412.991980] file_mapped 0
[ 1412.992212] file_dirty 0
[ 1412.992440] file_writeback 0
[ 1412.992690] swapcached 0
[ 1412.992937] inactive_anon 310870016
[ 1412.993237] active_anon 200704
[ 1412.993497] inactive_file 0
[ 1412.993736] active_file 0
[ 1412.994002] unevictable 0
[ 1412.994234] slab_reclaimable 973912
[ 1412.994527] slab_unreclaimable 801944
[ 1412.994829] slab 1775856
[ 1412.995075] workingset_refault_anon 0
[ 1412.995381] workingset_refault_file 0
[ 1412.995689] workingset_activate_anon 0
[ 1412.996026] workingset_activate_file 0
[ 1412.996345] workingset_restore_anon 0
[ 1412.996647] workingset_restore_file 0
[ 1412.996976] workingset_nodereclaim 0
[ 1412.997276] pgdemote_kswapd 0
[ 1412.997529] pgdemote_direct 0
[ 1412.997782] pgdemote_khugepaged 0
[ 1412.998091] pgdemote_proactive 0
[ 1412.998367] pgscan 367
[ 1412.998573] pgsteal 76
[ 1412.998779] pswpin 0
[ 1412.999000] pswpout 0
[ 1412.999204] pgscan_kswapd 0
[ 1412.999441] pgscan_direct 367
[ 1412.999692] pgscan_khugepaged 0
[ 1412.999986] pgscan_proactive 0
[ 1413.000254] pgsteal_kswapd 0
[ 1413.000567] pgsteal_direct 76
[ 1413.000948] pgsteal_khugepaged 0
[ 1413.001261] pgsteal_proactive 0
[ 1413.001564] pgfault 88802
[ 1413.001828] pgmajfault 0
[ 1413.002192] pgrefill 275
[ 1413.002414] pgactivate 365
[ 1413.002642] pgdeactivate 278
[ 1413.002921] pglazyfree 0
[ 1413.003142] pglazyfreed 0
[ 1413.003365] swpin_zero 0
[ 1413.003580] swpout_zero 0
[ 1413.003852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11547,uid=0
[ 1413.005195] Memory cgroup out of memory: Killed process 11547 (syz-executor.0) total-vm:93420kB, anon-rss:264kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:50 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x200, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r1)

13:05:50 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:50 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1bc)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:05:50 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/127, 0x7f}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/195, 0xc3}, {&(0x7f00000012c0)=""/68, 0x44}], 0x5)
syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00')
socket$inet_icmp_raw(0x2, 0x3, 0x1)
io_setup(0x6a02, &(0x7f0000000000)=<r1=>0x0)
r2 = fork()
pidfd_open(r2, 0x0)
wait4(r2, &(0x7f0000000280), 0x20000008, &(0x7f00000002c0))
ptrace$setsig(0x4203, r2, 0x6673, &(0x7f0000000200)={0x2c, 0x16, 0x3})
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x26, 0x0, 0xff, 0xcd, 0x0, 0xb4, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0xfff, 0x800000, 0x9, 0x7fff, 0x7ff, 0x100, 0x0, 0xafb, 0x0, 0x2}, r2, 0x2, 0xffffffffffffffff, 0xb)
r3 = memfd_secret(0x80000)
perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0x3, 0x4, 0x7, 0x6, 0x0, 0x1, 0x800, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001180), 0x2}, 0x1000, 0x9, 0xffffffe1, 0x3, 0xdaf, 0x5, 0x5ed6, 0x0, 0x9, 0x0, 0x1}, r2, 0x6, r3, 0x41e3664413258852)
io_submit(r1, 0x3a, &(0x7f0000000000))
io_destroy(r1)

13:05:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)

13:05:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x4000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:50 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:50 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000000c0)={0x12, 0x6, {0x1, @struct={0xfffffeff, 0x1}, 0x0, 0x7f, 0x0, 0x7f, 0x10001, 0x1, 0x24, @struct={0x8001, 0x1000}, 0x6, 0x7f, [0x7, 0x6, 0x7457cd09, 0x4, 0x4, 0x5c]}, {0x3ff, @usage=0xec, <r1=>0x0, 0x7fffffff, 0x0, 0x1f, 0x20, 0xb192, 0x404, @struct={0x9d3, 0x5}, 0x7, 0x9, [0xfffffffffffffff8, 0x9621, 0x7, 0x5, 0x7, 0x1200000]}, {0x1, @usage=0x4, 0x0, 0x2, 0x7e, 0x5, 0x49cf, 0x100000000, 0x0, @struct={0x1, 0x4}, 0x8, 0x1, [0x80, 0x3, 0x9, 0x4, 0x5, 0x7fff]}, {0x4, 0x2, 0x6}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000008c0)={0x3, 0x7, {0x8, @usage=0x8001, 0x0, 0x6, 0x7f, 0x6, 0x5, 0x6, 0x80, @usage=0xa78, 0x5, 0x50fd70fa, [0x7f, 0x7e25, 0x2, 0x6, 0x3f, 0x3022]}, {0xef000000, @struct={0x401}, r1, 0x3, 0x1, 0x1, 0x6076, 0x1f, 0x462, @struct={0x4, 0x400}, 0xa2, 0xf7, [0x1, 0x10001, 0x9, 0x100, 0x2, 0xffffffff00000000]}, {0x555, @usage=0x8000, r2, 0x401, 0x8, 0x1, 0x8, 0x10001, 0x400, @struct={0x8001, 0x1}, 0x9, 0x2, [0x7f, 0xde, 0x5, 0x7, 0x81, 0x9]}, {0x3, 0x80, 0x4}})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
mlockall(0x2)
r3 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r4 = shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r4)

[ 1423.523699] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1423.524654] CPU: 0 UID: 0 PID: 11559 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1423.524672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1423.524680] Call Trace:
[ 1423.524685]  <TASK>
[ 1423.524691]  dump_stack_lvl+0xfa/0x120
[ 1423.524718]  dump_header+0x107/0x950
[ 1423.524741]  oom_kill_process+0x278/0xa00
[ 1423.524762]  out_of_memory+0x34b/0x1690
[ 1423.524786]  ? __pfx_out_of_memory+0x10/0x10
[ 1423.524811]  mem_cgroup_out_of_memory+0x164/0x190
[ 1423.524825]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1423.524842]  ? mark_held_locks+0x49/0x80
[ 1423.524862]  try_charge_memcg+0x81f/0xf30
[ 1423.524891]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1423.524915]  charge_memcg+0x7b/0x290
[ 1423.524932]  __mem_cgroup_charge+0x28/0x90
[ 1423.524951]  do_wp_page+0x56e/0x31f0
[ 1423.524976]  ? __pfx_do_wp_page+0x10/0x10
[ 1423.524993]  ? do_raw_spin_lock+0x123/0x260
[ 1423.525010]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1423.525026]  ? ___pte_offset_map+0x176/0x370
[ 1423.525047]  __handle_mm_fault+0xde1/0x30f0
[ 1423.525065]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1423.525083]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1423.525100]  ? lock_release+0x121/0x290
[ 1423.525131]  handle_mm_fault+0x2c3/0x900
[ 1423.525149]  ? access_error+0x17d/0x380
[ 1423.525165]  do_user_addr_fault+0x4fa/0xeb0
[ 1423.525183]  exc_page_fault+0xb0/0x180
[ 1423.525202]  asm_exc_page_fault+0x26/0x30
[ 1423.525215] RIP: 0033:0x7fc67e13aecd
[ 1423.525225] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1423.525237] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1423.525247] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1423.525255] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1423.525263] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1423.525272] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1423.525279] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000015b7ca
[ 1423.525295]  ? do_syscall_64+0x12c/0x360
[ 1423.525318]  </TASK>
[ 1423.541564] memory: usage 307200kB, limit 307200kB, failcnt 1544
[ 1423.542085] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1423.542577] Memory cgroup stats for /syz0:
[ 1423.542747] anon 1134592
[ 1423.543392] file 309952512
[ 1423.543626] kernel 3485696
[ 1423.543894] kernel_stack 360448
[ 1423.544170] pagetables 1372160
[ 1423.544440] sec_pagetables 0
[ 1423.544691] percpu 640
[ 1423.544923] sock 0
[ 1423.545108] vmalloc 0
[ 1423.545313] shmem 309952512
[ 1423.545555] file_mapped 0
[ 1423.545782] file_dirty 0
[ 1423.546020] file_writeback 0
[ 1423.546274] swapcached 0
[ 1423.546496] inactive_anon 310886400
[ 1423.546819] active_anon 200704
[ 1423.547254] inactive_file 0
[ 1423.547501] active_file 0
[ 1423.547729] unevictable 0
[ 1423.547989] slab_reclaimable 973912
[ 1423.548286] slab_unreclaimable 789936
[ 1423.548606] slab 1763848
[ 1423.548853] workingset_refault_anon 0
[ 1423.549274] workingset_refault_file 0
[ 1423.549687] workingset_activate_anon 0
[ 1423.550024] workingset_activate_file 0
[ 1423.550340] workingset_restore_anon 0
[ 1423.550647] workingset_restore_file 0
[ 1423.550975] workingset_nodereclaim 0
[ 1423.551279] pgdemote_kswapd 0
[ 1423.551536] pgdemote_direct 0
[ 1423.551791] pgdemote_khugepaged 0
[ 1423.552092] pgdemote_proactive 0
[ 1423.552364] pgscan 367
[ 1423.552582] pgsteal 76
[ 1423.552789] pswpin 0
[ 1423.553005] pswpout 0
[ 1423.553209] pgscan_kswapd 0
[ 1423.553522] pgscan_direct 367
[ 1423.553905] pgscan_khugepaged 0
[ 1423.554178] pgscan_proactive 0
[ 1423.554438] pgsteal_kswapd 0
[ 1423.554688] pgsteal_direct 76
[ 1423.554967] pgsteal_khugepaged 0
[ 1423.555245] pgsteal_proactive 0
[ 1423.555512] pgfault 88856
[ 1423.555739] pgmajfault 0
[ 1423.555982] pgrefill 275
[ 1423.556213] pgactivate 365
[ 1423.556457] pgdeactivate 278
[ 1423.556707] pglazyfree 0
[ 1423.556950] pglazyfreed 0
[ 1423.557178] swpin_zero 0
[ 1423.557397] swpout_zero 0
[ 1423.557641] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11559,uid=0
[ 1423.558863] Memory cgroup out of memory: Killed process 11559 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x5000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1423.809101] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1423.809943] CPU: 0 UID: 0 PID: 11563 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1423.809960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1423.809968] Call Trace:
[ 1423.809974]  <TASK>
[ 1423.809979]  dump_stack_lvl+0xfa/0x120
[ 1423.810008]  dump_header+0x107/0x950
[ 1423.810032]  oom_kill_process+0x278/0xa00
[ 1423.810055]  out_of_memory+0x34b/0x1690
[ 1423.810077]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1423.810099]  ? __pfx_out_of_memory+0x10/0x10
[ 1423.810125]  mem_cgroup_out_of_memory+0x164/0x190
[ 1423.810142]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1423.810161]  ? mark_held_locks+0x49/0x80
[ 1423.810181]  try_charge_memcg+0x81f/0xf30
[ 1423.810205]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1423.810229]  charge_memcg+0x7b/0x290
[ 1423.810246]  __mem_cgroup_charge+0x28/0x90
[ 1423.810265]  do_wp_page+0x56e/0x31f0
[ 1423.810290]  ? __pfx_do_wp_page+0x10/0x10
[ 1423.810307]  ? do_raw_spin_lock+0x123/0x260
[ 1423.810323]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1423.810340]  ? ___pte_offset_map+0x176/0x370
[ 1423.810360]  __handle_mm_fault+0xde1/0x30f0
[ 1423.810378]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1423.810396]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1423.810413]  ? lock_release+0x121/0x290
[ 1423.810444]  handle_mm_fault+0x2c3/0x900
[ 1423.810462]  ? access_error+0x17d/0x380
[ 1423.810478]  do_user_addr_fault+0x4fa/0xeb0
[ 1423.810497]  exc_page_fault+0xb0/0x180
[ 1423.810516]  asm_exc_page_fault+0x26/0x30
[ 1423.810529] RIP: 0033:0x7f88ae9cad30
[ 1423.810539] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1423.810551] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1423.810562] RAX: 0000000029f1dec3 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1423.810570] RDX: 0000001b2d62003c RSI: ffffffff83bbe9c6 RDI: 0000000000000000
[ 1423.810578] RBP: 0000000000000001 R08: 0000000029f1dec3 R09: 0000001b2d62001c
[ 1423.810586] R10: 0000000000001ec3 R11: 0000000029f1dec7 R12: 0000000000000009
[ 1423.810594] R13: 00007f88aeb24000 R14: ffffffff83bbe9c6 R15: 00007f88aeb2fff0
[ 1423.810603]  ? __sys_socket+0x76/0x260
[ 1423.810628]  ? __sys_socket+0x76/0x260
[ 1423.810647]  </TASK>
[ 1423.810706] memory: usage 307200kB, limit 307200kB, failcnt 1199
[ 1423.830710] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1423.831368] Memory cgroup stats for /syz7:
[ 1423.831463] anon 1495040
[ 1423.832199] file 308297728
[ 1423.832446] kernel 4780032
[ 1423.832688] kernel_stack 557056
[ 1423.833039] pagetables 2162688
[ 1423.833413] sec_pagetables 0
[ 1423.833672] percpu 1024
[ 1423.833969] sock 0
[ 1423.834257] vmalloc 0
[ 1423.834463] shmem 308293632
[ 1423.834702] file_mapped 0
[ 1423.835009] file_dirty 0
[ 1423.835322] file_writeback 0
[ 1423.835579] swapcached 0
[ 1423.835827] inactive_anon 309706752
[ 1423.836265] active_anon 81920
[ 1423.836532] inactive_file 4096
[ 1423.836795] active_file 0
[ 1423.837046] unevictable 0
[ 1423.837280] slab_reclaimable 968168
[ 1423.837575] slab_unreclaimable 1107424
[ 1423.838061] slab 2075592
[ 1423.838287] workingset_refault_anon 0
[ 1423.838669] workingset_refault_file 1
[ 1423.839096] workingset_activate_anon 0
[ 1423.839418] workingset_activate_file 0
[ 1423.839921] workingset_restore_anon 0
[ 1423.840235] workingset_restore_file 0
[ 1423.840553] workingset_nodereclaim 0
[ 1423.840856] pgdemote_kswapd 0
[ 1423.841139] pgdemote_direct 0
[ 1423.841433] pgdemote_khugepaged 0
[ 1423.841831] pgdemote_proactive 0
[ 1423.842131] pgscan 1742
[ 1423.842375] pgsteal 77
[ 1423.842711] pswpin 0
[ 1423.842934] pswpout 0
[ 1423.843134] pgscan_kswapd 1
[ 1423.843374] pgscan_direct 1741
[ 1423.843637] pgscan_khugepaged 0
[ 1423.843928] pgscan_proactive 0
[ 1423.844195] pgsteal_kswapd 0
[ 1423.844454] pgsteal_direct 77
[ 1423.844798] pgsteal_khugepaged 0
[ 1423.845186] pgsteal_proactive 0
[ 1423.845456] pgfault 88998
[ 1423.845718] pgmajfault 3
[ 1423.846064] pgrefill 1949
[ 1423.846297] pgactivate 2038
[ 1423.846538] pgdeactivate 1949
[ 1423.846795] pglazyfree 0
[ 1423.847035] pglazyfreed 0
[ 1423.847265] swpin_zero 0
[ 1423.847485] swpout_zero 0
[ 1423.847713] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11563,uid=0
[ 1423.849099] Memory cgroup out of memory: Killed process 11563 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:50 executing program 0:
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4)
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:05:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x6000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:50 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
mlockall(0x2)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
msync(&(0x7f0000e2c000/0x4000)=nil, 0x4000, 0x3)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmdt(r1)
shmat(r0, &(0x7f0000979000/0x3000)=nil, 0x0)

13:05:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x7000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1424.143109] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1424.144727] CPU: 1 UID: 0 PID: 11588 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1424.144760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1424.144775] Call Trace:
[ 1424.144783]  <TASK>
[ 1424.144793]  dump_stack_lvl+0xfa/0x120
[ 1424.144837]  dump_header+0x107/0x950
[ 1424.144888]  oom_kill_process+0x278/0xa00
[ 1424.144935]  out_of_memory+0x34b/0x1690
[ 1424.144979]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1424.145012]  ? __pfx_out_of_memory+0x10/0x10
[ 1424.145063]  mem_cgroup_out_of_memory+0x164/0x190
[ 1424.145089]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1424.145125]  ? mark_held_locks+0x49/0x80
[ 1424.145162]  try_charge_memcg+0x81f/0xf30
[ 1424.145208]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1424.145257]  charge_memcg+0x7b/0x290
[ 1424.145291]  __mem_cgroup_charge+0x28/0x90
[ 1424.145328]  do_wp_page+0x56e/0x31f0
[ 1424.145380]  ? __pfx_do_wp_page+0x10/0x10
[ 1424.145430]  ? do_raw_spin_lock+0x123/0x260
[ 1424.145468]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1424.145499]  ? ___pte_offset_map+0x176/0x370
[ 1424.145537]  __handle_mm_fault+0xde1/0x30f0
[ 1424.145573]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1424.145607]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1424.145640]  ? lock_release+0x121/0x290
[ 1424.145702]  handle_mm_fault+0x2c3/0x900
[ 1424.145737]  ? access_error+0x17d/0x380
[ 1424.145768]  do_user_addr_fault+0x4fa/0xeb0
[ 1424.145808]  exc_page_fault+0xb0/0x180
[ 1424.145858]  asm_exc_page_fault+0x26/0x30
[ 1424.145882] RIP: 0033:0x7f88ae9cad30
[ 1424.145902] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1424.145925] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1424.145945] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1424.145961] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1424.145977] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1424.145992] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1424.146007] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1424.146024]  ? syscall_trace_enter+0xeb/0x240
[ 1424.146061]  ? syscall_trace_enter+0xeb/0x240
[ 1424.146091]  </TASK>
[ 1424.182365] memory: usage 307200kB, limit 307200kB, failcnt 1219
[ 1424.184854] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1424.186020] Memory cgroup stats for /syz7:
[ 1424.222456] anon 1482752
[ 1424.224296] file 308297728
[ 1424.224961] kernel 4792320
[ 1424.225436] kernel_stack 557056
[ 1424.226142] pagetables 2166784
[ 1424.226771] sec_pagetables 0
[ 1424.227519] percpu 1088
[ 1424.228053] sock 0
[ 1424.228470] vmalloc 0
[ 1424.229000] shmem 308293632
[ 1424.229544] file_mapped 0
[ 1424.230094] file_dirty 0
[ 1424.230521] file_writeback 0
[ 1424.231039] swapcached 0
[ 1424.231599] inactive_anon 309694464
[ 1424.232210] active_anon 81920
[ 1424.232830] inactive_file 0
[ 1424.233346] active_file 4096
[ 1424.234014] unevictable 0
[ 1424.234464] slab_reclaimable 966304
[ 1424.235070] slab_unreclaimable 1116856
[ 1424.235680] slab 2083160
[ 1424.236135] workingset_refault_anon 0
[ 1424.236857] workingset_refault_file 1
[ 1424.237660] workingset_activate_anon 0
[ 1424.238328] workingset_activate_file 0
[ 1424.239035] workingset_restore_anon 0
[ 1424.239636] workingset_restore_file 0
[ 1424.240265] workingset_nodereclaim 0
[ 1424.241042] pgdemote_kswapd 0
[ 1424.241550] pgdemote_direct 0
[ 1424.242190] pgdemote_khugepaged 0
[ 1424.242814] pgdemote_proactive 0
[ 1424.243512] pgscan 1779
[ 1424.244049] pgsteal 77
[ 1424.244492] pswpin 0
[ 1424.245006] pswpout 0
[ 1424.245400] pgscan_kswapd 1
[ 1424.245996] pgscan_direct 1778
[ 1424.246520] pgscan_khugepaged 0
[ 1424.247069] pgscan_proactive 0
[ 1424.247720] pgsteal_kswapd 0
[ 1424.248248] pgsteal_direct 77
[ 1424.248912] pgsteal_khugepaged 0
[ 1424.249449] pgsteal_proactive 0
[ 1424.250003] pgfault 89045
[ 1424.250564] pgmajfault 3
[ 1424.251060] pgrefill 1988
[ 1424.251582] pgactivate 2078
[ 1424.252104] pgdeactivate 1988
[ 1424.252637] pglazyfree 0
[ 1424.253092] pglazyfreed 0
[ 1424.253532] swpin_zero 0
[ 1424.253993] swpout_zero 0
[ 1424.254508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11588,uid=0
[ 1424.257145] Memory cgroup out of memory: Killed process 11588 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1424.260157] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1424.261016] CPU: 0 UID: 0 PID: 11586 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1424.261034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1424.261043] Call Trace:
[ 1424.261048]  <TASK>
[ 1424.261054]  dump_stack_lvl+0xfa/0x120
[ 1424.261086]  dump_header+0x107/0x950
[ 1424.261110]  oom_kill_process+0x278/0xa00
[ 1424.261132]  out_of_memory+0x34b/0x1690
[ 1424.261156]  ? __pfx_out_of_memory+0x10/0x10
[ 1424.261182]  mem_cgroup_out_of_memory+0x164/0x190
[ 1424.261197]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1424.261216]  ? mark_held_locks+0x49/0x80
[ 1424.261239]  try_charge_memcg+0x81f/0xf30
[ 1424.261264]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1424.261289]  charge_memcg+0x7b/0x290
[ 1424.261306]  __mem_cgroup_charge+0x28/0x90
[ 1424.261325]  do_wp_page+0x56e/0x31f0
[ 1424.261351]  ? __pfx_do_wp_page+0x10/0x10
[ 1424.261368]  ? do_raw_spin_lock+0x123/0x260
[ 1424.261385]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1424.261401]  ? ___pte_offset_map+0x176/0x370
[ 1424.261421]  __handle_mm_fault+0xde1/0x30f0
[ 1424.261439]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1424.261457]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1424.261474]  ? lock_release+0x121/0x290
[ 1424.261505]  handle_mm_fault+0x2c3/0x900
[ 1424.261523]  ? access_error+0x17d/0x380
[ 1424.261540]  do_user_addr_fault+0x4fa/0xeb0
[ 1424.261558]  exc_page_fault+0xb0/0x180
[ 1424.261578]  asm_exc_page_fault+0x26/0x30
[ 1424.261591] RIP: 0033:0x7fc67e13dd30
[ 1424.261602] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1424.261614] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1424.261625] RAX: 00000000a3185195 RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1424.261633] RDX: 0000001b2cc20024 RSI: ffffffff819c3035 RDI: 0000000000000000
[ 1424.261641] RBP: 0000000000000001 R08: 00000000a3185195 R09: 0000001b2cc2001c
[ 1424.261649] R10: 0000000000001195 R11: 00000000a3185199 R12: 0000000000000001
[ 1424.261657] R13: 00007fc67e297000 R14: ffffffff819c3035 R15: 00007fc67e2a2ff0
[ 1424.261666]  ? __might_fault+0x75/0x190
[ 1424.261686]  ? __might_fault+0x75/0x190
[ 1424.261703]  </TASK>
[ 1424.261725] memory: usage 307200kB, limit 307200kB, failcnt 1581
[ 1424.282687] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1424.283321] Memory cgroup stats for /syz0:
[ 1424.292190] anon 1110016
[ 1424.293644] file 309952512
[ 1424.294541] kernel 3510272
[ 1424.295261] kernel_stack 360448
[ 1424.295780] pagetables 1384448
[ 1424.296488] sec_pagetables 0
[ 1424.297075] percpu 704
[ 1424.297546] sock 0
[ 1424.297945] vmalloc 0
[ 1424.298471] shmem 309952512
[ 1424.298984] file_mapped 0
[ 1424.299460] file_dirty 0
[ 1424.300186] file_writeback 0
[ 1424.300762] swapcached 0
[ 1424.301256] inactive_anon 310861824
[ 1424.302000] active_anon 200704
[ 1424.302575] inactive_file 0
[ 1424.303145] active_file 0
[ 1424.303608] unevictable 0
[ 1424.304185] slab_reclaimable 973912
[ 1424.304965] slab_unreclaimable 802328
[ 1424.305578] slab 1776240
[ 1424.306175] workingset_refault_anon 0
[ 1424.306773] workingset_refault_file 0
[ 1424.307404] workingset_activate_anon 0
[ 1424.308035] workingset_activate_file 0
[ 1424.308650] workingset_restore_anon 0
[ 1424.309280] workingset_restore_file 0
[ 1424.309866] workingset_nodereclaim 0
[ 1424.310509] pgdemote_kswapd 0
[ 1424.311391] pgdemote_direct 0
[ 1424.312084] pgdemote_khugepaged 0
[ 1424.312655] pgdemote_proactive 0
[ 1424.313220] pgscan 367
[ 1424.313622] pgsteal 76
[ 1424.314103] pswpin 0
[ 1424.314561] pswpout 0
[ 1424.314989] pgscan_kswapd 0
[ 1424.315453] pgscan_direct 367
[ 1424.315980] pgscan_khugepaged 0
[ 1424.316513] pgscan_proactive 0
[ 1424.317042] pgsteal_kswapd 0
[ 1424.317663] pgsteal_direct 76
[ 1424.318202] pgsteal_khugepaged 0
[ 1424.318866] pgsteal_proactive 0
[ 1424.319468] pgfault 88898
[ 1424.320193] pgmajfault 0
[ 1424.320640] pgrefill 275
[ 1424.321095] pgactivate 365
[ 1424.321551] pgdeactivate 278
[ 1424.322110] pglazyfree 0
[ 1424.322573] pglazyfreed 0
[ 1424.323159] swpin_zero 0
[ 1424.323590] swpout_zero 0
[ 1424.324214] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11586,uid=0
[ 1424.326819] Memory cgroup out of memory: Killed process 11586 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
13:05:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x9000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:51 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11)

13:05:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:51 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1bc)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

[ 1424.657399] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
13:05:51 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x10000, 0x4)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="a3a152252b8b0e47", 0x8}], 0x1}, 0x0)

13:05:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

13:05:51 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/163)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

[ 1424.659012] CPU: 1 UID: 0 PID: 11600 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
13:05:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x14000000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:51 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:05:51 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}}], 0x2, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xad, 0x105220)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x6}, 0x4)

[ 1424.659044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1424.659059] Call Trace:
[ 1424.659068]  <TASK>
[ 1424.659078]  dump_stack_lvl+0xfa/0x120
[ 1424.659122]  dump_header+0x107/0x950
[ 1424.659168]  oom_kill_process+0x278/0xa00
[ 1424.659211]  out_of_memory+0x34b/0x1690
[ 1424.659259]  ? __pfx_out_of_memory+0x10/0x10
[ 1424.659311]  mem_cgroup_out_of_memory+0x164/0x190
[ 1424.659338]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1424.659374]  ? mark_held_locks+0x49/0x80
[ 1424.659411]  try_charge_memcg+0x81f/0xf30
[ 1424.659458]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1424.659508]  charge_memcg+0x7b/0x290
[ 1424.659543]  __mem_cgroup_charge+0x28/0x90
[ 1424.659597]  __handle_mm_fault+0x1455/0x30f0
[ 1424.659638]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1424.659674]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1424.659721]  ? lock_release+0x121/0x290
[ 1424.659784]  handle_mm_fault+0x2c3/0x900
[ 1424.659820]  ? access_error+0x17d/0x380
[ 1424.659852]  do_user_addr_fault+0x4fa/0xeb0
[ 1424.659898]  exc_page_fault+0xb0/0x180
[ 1424.659935]  asm_exc_page_fault+0x26/0x30
[ 1424.659959] RIP: 0033:0x7f88ae9c88fc
[ 1424.659978] Code: 00 00 41 83 7c 06 08 00 0f 85 75 05 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 04 42 05 00 <83> 05 01 b7 56 00 01 80 7c 24 0b 00 74 0b f6 44 24 0c 01 0f 84 c6
[ 1424.660002] RSP: 002b:00007fffea055320 EFLAGS: 00010207
[ 1424.660022] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007f88aea1cb19
[ 1424.660037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88aeb2ff68
[ 1424.660053] RBP: 00007f88aeb2ff60 R08: 00007f88abf92700 R09: 0000000000000000
[ 1424.660068] R10: 00007f88abf92700 R11: 0000000000000246 R12: 00007f88aeb34030
[ 1424.660083] R13: 00007fffea055420 R14: 00007f88aeb2ff60 R15: 000000000015bbe7
[ 1424.660124]  </TASK>
[ 1424.688087] memory: usage 307200kB, limit 307200kB, failcnt 1242
[ 1424.692715] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1424.693866] Memory cgroup stats for /syz7:
[ 1424.717070] anon 1466368
[ 1424.718275] file 308297728
[ 1424.718744] kernel 4808704
[ 1424.719549] kernel_stack 557056
[ 1424.720136] pagetables 2170880
[ 1424.720670] sec_pagetables 0
[ 1424.721200] percpu 1152
[ 1424.721638] sock 0
[ 1424.722044] vmalloc 0
[ 1424.722448] shmem 308293632
[ 1424.722959] file_mapped 0
[ 1424.723572] file_dirty 0
[ 1424.724063] file_writeback 0
[ 1424.724590] swapcached 0
[ 1424.725096] inactive_anon 309678080
[ 1424.725791] active_anon 81920
[ 1424.726365] inactive_file 0
[ 1424.726871] active_file 4096
[ 1424.727459] unevictable 0
[ 1424.727869] slab_reclaimable 966304
[ 1424.728605] slab_unreclaimable 1128864
[ 1424.729280] slab 2095168
[ 1424.729737] workingset_refault_anon 0
[ 1424.730378] workingset_refault_file 1
[ 1424.731000] workingset_activate_anon 0
[ 1424.731708] workingset_activate_file 0
[ 1424.732406] workingset_restore_anon 0
[ 1424.733086] workingset_restore_file 0
[ 1424.733714] workingset_nodereclaim 0
[ 1424.734334] pgdemote_kswapd 0
[ 1424.734800] pgdemote_direct 0
[ 1424.735332] pgdemote_khugepaged 0
[ 1424.736059] pgdemote_proactive 0
[ 1424.736648] pgscan 1819
[ 1424.737133] pgsteal 77
[ 1424.737552] pswpin 0
[ 1424.737982] pswpout 0
[ 1424.738367] pgscan_kswapd 1
[ 1424.738796] pgscan_direct 1818
[ 1424.739343] pgscan_khugepaged 0
[ 1424.739922] pgscan_proactive 0
[ 1424.740422] pgsteal_kswapd 0
[ 1424.740915] pgsteal_direct 77
[ 1424.741395] pgsteal_khugepaged 0
[ 1424.742030] pgsteal_proactive 0
[ 1424.742522] pgfault 89084
[ 1424.742958] pgmajfault 3
[ 1424.743367] pgrefill 2028
[ 1424.743841] pgactivate 2118
[ 1424.744386] pgdeactivate 2028
[ 1424.744864] pglazyfree 0
[ 1424.745295] pglazyfreed 0
[ 1424.745705] swpin_zero 0
[ 1424.746224] swpout_zero 0
[ 1424.746698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11600,uid=0
[ 1424.748850] Memory cgroup out of memory: Killed process 11600 (syz-executor.7) total-vm:93420kB, anon-rss:276kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:05:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x82020000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:05:51 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e)
sendmsg$inet(r2, &(0x7f0000001780)={&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000180)="0855d8db8c65ef9556e1", 0xa}, {&(0x7f00000001c0)="2fcb9effa61a77ba23087942c88948fa638c8585e16b93da6317a4792d1305157814d963763fec6afd4efd567f618b15f5232efa67ff0b3f244e88b1e22a4345b9ea0aaa3f1a1d2f26431bf9ad1c7e2e8b553e7693633a61417deb85c62271", 0x5f}, {&(0x7f0000000240)="4c51a420f52309e2b638329b5e2bccf7d9021a99e017008c315926da380544200384962ec2c933ccb44fb294c5c50e04", 0x30}, {&(0x7f0000000280)="a58bc701b0d29ed7516d2c1ae89a8a1da8c687a065c597b3e94e5aa5682104dd96415c0ae565ece49ea65cedebdc84d086076cf6130f3b243370a5b1b049a968df3b98a4251ad99276f92f282804477f8dde2e20e858f9e4fea642f242dccef32f968ffaa572f3f953bea9f43819c9466a81be17a81999ae210c0cbbf072a8d84beda1358a8dec3f4b911cf0a43c169d2aa23499d8f83409268f032484ebbf2449137340a604ae6a67d07bc63c1ef471475524d9f2da51d59fa9e1c94cd5cde4970306488e9f656c600424dd2b2d6db30084b6b1d5c715b902d05d5438c856dcdbf007712e8d134301f235e02b6f5e3a9c99e830ef255e1da2ef0ec021d403843aa2c0939965a007098c35e65f667baa46abbb05e079887e56bfed22f784ac2df0d9ecc873a4a0b882430cebe9af360d805be70300ba6e881e1a798f58d095a89db6f53175fb040fa5296aeeb5614c3b91c0abdcbca238ad2b6d0d145bf8dd327ab5b5cff50c80d52489c9ca89fe6bd9ed5203a35a9e2d8b07903ec7a1553f2772ad53d0f3d7269f6150107bd1a7e6a4595699dc97c5b15b71eb12fc55d2d9a4640f6387d3b1ec890f1c4c75540829f01e278d3ce611458d2b548909d14574cd4dd4bb136e48bc61eeffd8ad674c7ce75b51270fc2d167efb45a68b163b10ed946dbe7cd554ff428be1849712e9b3e95c846ed566e850c74cf16e7590f26d75d45dbbe37b8a1078860e8a8f9cbcc141da26ac803ae9312bc8637178b25d5fadfe4a8ed38f0653fabef51601d6e4828cd2214e2cf7eabd63c16ae0f03c4ebcad0ed985c74345ae049c1235e9a93dc66c36b67eac2e5c5ae99d56a386e7ad01ff1c759c15bae5b7a891a5787f6aee51686f802561b948dc069247e2e31eb8ddb011a495ce8094782cb32647d29a42526c62edea367e02efc59100602c1c47a0fc6e0f1fbbff771572854a0143a009d51668293304cdfcc96eb30510e8e5223fb5987ad2232afda0a984bd449c1229a8cde4f0beb632d08f7dd6efbbbc91f1025c7d5fd86b29cae10b381d04b0dee794e397b7b74c0c589591bb8c23dcd5cedbf88a93b86945b1cef73454add247704981fb36ab5b1120a76a73241b1f5cf98b0ab21a9b257a314ff73c1aa1443b89388fa639a59c200061f427c4da698e6c42404bd2985115c92eed82e4c8f3b732326666ad6c84b9992778339d0e4806f9761a1662bfa832785ccb7260a5197d5f67a669d825ea1d537dad149087a7e7a5b12075fe5cac9bf354642ac306917e1229b5c5c024c5da277cfa1e5acf4d5fa39cec47d24101962e43ea1827af5b72211b6a0868bcdb8622f1f829562b46f33decfcb1b3862265860a1ba74fa1c988dbdfce8ab8a517cd1dc6512288a9ceb1762c2fe8ba2dcdf3b53a7582e7f768c7006b57f1e6ed91e774e09819f93cda1dfc71eb348df024771b2136837043891d686deddaf36786da5a0aa1bc8cf53ae6aebd1e5f36e7e24f9ce6c65a70aee19424b800cfd49b875280b04b4ce295c77f5c66ccfd54a68af11f52ede5ac5bed434245aed4aab80f4966907bdee15a59e614a816c42280d81eda01bd76be2c9af4c83b4030b2e2fa9163a4252ee3e96766dcfd55e0e8abb4f0714e2ca22a926e8c7a229341b42b5497596715df1bc342e03abf288f4b87681b782c191c4444688b261fd392b67e6f5de107e130bbae8708842037dfa47e77c13dcb939da1d5863544a65c8ce7154f7b419cac638a22c082668be173207735bc353a89876a6b340113d29f1dd2f09bc0e37acb75f30403b0680cc9570192ed18fcf765e22b3cece3f302ea046792be214089e44ba46928ab4d1df658bd2692847af39f6ef11907649f6ca21f0dfd2ab2cf1acda6062d30e2a6712550984fc552439be858519364bf143ffe84a4a0a2e396a10e7a097921bc2f3ac0328d13fdb1086dc4c08cc3a1da2fa6934d6f7d91f8b64484d191dd79947fd2fd6adbe85d2be16ad04fd03814e09f6ca38f9674cbc5526565e17c9420cadeca7e65ea05311db646ea0a981f7a75129115d5fbd040f132e05fb62a9c5b51f1303636526ea0e7babc7a41e5c52be6702a8a00058e9bcb3eead0242549cd2bf6751c4ae983b132cfa5b76f6a2ba0d2bc1c51b197f6415d293f48e446a7cae79df02a615ed486ba04cd92f3255e7634cbd2053203ed19000ae520cc0d62201ad0ffc4ad9a99f8442b5c2123ed6de1f47b1ba8af0dd4e3a05adc162808bfda8d90bf455c4ccbe0dfed449da5ad7ee4415dfe631c4e3a274a32ebb5d1953bb16130ff748c74d927ce14cd248ebd92969a1a0d05c3aa13ee57cbba1a51b5c7ba40974df5da2541cd3eef7c9ef58073719e4c8092c206534aeddc2cb7b2d5a7a771476c5a08362175eb28404b123d59e763008d9f191df94ea7ae2225db64e1f59f2d29553856d3ef2b02f0671dd2b581239d4170f9194cf0148befeb5e2b4d3bf8e3d61b62abca8f0d196b8d0ac683d6475e89c6c0763e2b0a99e574d332ad0bdb81e4ab9d48f001c989425b9d28af22f1077192d0dfbe3277c1f60e4ea1bc56fa54f3b1a9a08bae56cbae82c29193a774c12d7cabc2da0539d0c7cfab56adf058806c8ec926338128ead45380934cb0ee503fdd285ce89cd45ab8ca90a9b12f5c4e175574af2b43143198cdd11e722fa4641b03dc1f32fa6847f908d8e7e63de3a80055c2ea3c98695b5b190b7acd3c59ad396d03c74ff49c59ad22a512b166181f71d13b01cba58e89c47509564a56cba145e10eb8e9050c8c26ba548b6f16069dc0c02c2d1baa570572f2a29f06bc2535c066b4b5f8dc956f87c1f8fb5c4a00f68aac5ce17668d18f6c2fcb86402ddb558765b1e7679fe1728f5cf9aee74eb501ccefa0c5b75bd14173f01ce2bd221e7ca7baa77d99f144b9e8f87639840114313da7f53f80a5ed343c37e413cd92d724eef3c7384c46ed31abc2a81c6ecf9de9dd78663f741cd4ef983729c70770ac74e22e26bf7790ba6823b89a285e245eee8a912bfcd3a2a1a1edabffef1fe5eb2e53496961c82b5df95254db434e9d009428c8ae76178715c4792ce646d9dab8ff40bf6397ddece335717321cb454acd08f285a9dfb82fe1e0e742c013f702b416828e1f752905e87a3fa60a4507ab87cb15d255d7d0b729c9b0b577e711f92013a3946a301b6366011fd4b86a594743733b9a9c067337bc120e8d427c6cfa9681995cb2a02c5444fe372ef5633db17537bf9fabd35d52b831bd918a53965a4f32a0e60d9a145f09f3674f550ee84c4f47d1d0117b5cb4f43510f6db3bbaa79e55b236c1323f9521cd1f9a63214fb676ad30519f91c7496058beb6992be2a62e27a09dee945a8eb6ca547b69d6d2e30291207f6716c1312a0cb3c0e1495b4f2bc0815b70ea2f5b6497a03c4dac461a4adee00cf9e5102ef6fc7c14f67efab35e2e10d48b887b4157ed8414839437226b158e19d5a728f6c7b798f2066e8c33aafce61ae2926c9c7a9aab77ec81334340db6bf73d3ac84d37714810b48c64ac1fa2cef1e198d2490f12d2899d5e24f5a13069767ea6c874bec12a2b4f7596a2f48cd04f61ebfb0f815944a39003d2850a0862d46e7e55bade097340754fc9f962cb18be4884e859deeefc121cf9699cf81002dd0329447b548ce609ee6bcb1d820fbe96960a47f2248bf719e22785cb9e29020f1847ab11249deceb10b35f1b1c0e02f2490721a8bbefa5b865806aa7b7fb075163a5e02bd02aba716e16f8f15faa4bc7ed010805eb02f529fa655a7f706978769af1801c8f90df94501b4f1d3f39d2a745363bfd50a2cf2421553e98ad2ba677040f955020f014adeb8b14e3974d33a4d95d37d35efb70232a6492eb12259e0217c6350e3e6846ab670c672e71a414c5690556163699d62363f3196540386b7d67f91fe80d783fc8c06738ddf4f1efdd1e5c83bbba20444bf684c063abe7028a1f2a0bdce0789c14c79716869b8c86724997843e351daf8d858cfb51b4889d7e96294c02239f9464093ef289a0abb46d0d1e8cba7c7451ae7437a31e80cdaa5a9d0941f404231949865f121c5d3785c4af34abe01f6bbce24e5e74d452cbadaec59659d9da7971300bfbdab9ea68d114fb87f4fa2f377a1f7046633839218a5d3349b60c3b0bf9c055b50ce8d5229039b8ca96b1d9af2b42c59fd1c5ca7f8b72390c8f9c461f595840140b6cb05dc9950b6e8e5c1a857b8e84be6e2774b7ccaacb9a8e51d002bc517c75b3cebba3810efc371199a5ee949447ad16b1fd51a11eba79245d12b2aecc925eb67793511cf6f5e34a77d5819cb35d078993f3831bc57437534b7343224aba72b87b5091f1f51c8bb686779bf078960ada6751f783c3ad01d4cbbf7d2e6409fa390af4838a7f1768624b25061921b22e34a3ba1a122303d5934b7ba6af91140adaa79b610d1c369808d34d58d6a95d58d41c14b00be43304ff79f982ac32321857e79f7b89f633bdf038b8c69b9e297598d2d9ed35e43e3ff359771541687b4b53f547e7c810678b3bda983215ebe7db80ab11e721a87153ebbb5fc68a4bf624baedd3cd61c4795aa54b7bfbd7ced8babbc357c7af2d3afb9a5e86c4f6d9a57dafcdc1c08fb9abd3907964d53cb6b6c6f52428242a2c008c53a13a7572e4af96ca55ebcff8f654e67674ffd1d6d021d0e753a349c810f69b336b67ea3f883e71eb20e12727e512bc1aa236e3664cbf4d6ddaa0fe9419bb5199f4febe3757850d295c0b76ccecc903281b5585908267235f79436ff0f27827506fc354cee998eafc39a5a9f7308f87914d7bbff2a615e47e868eadfb2c364264f94be96d9e4063ef7fa8ab22558bc7432497a91031cf2d6a1c702cfa101f7fc013c85d3a94dd2bff497e8e4a4302cafa6fddc8b3c5902e59e4c2f2325529b98f4ffda17bac3af9f7edd2a7abd0ed1d43fb171cb8d8aa7af91db9717c376ad3348fc4fd2be3bab374963c38dcaab53fe5b995f0e4771008a5e8ff5c2db2f361efdb855ea5827bc3bfca56b86dd2e6973e3d4065b84884715c84c5773231f2d482cc94593a26f43d3d97b16cded37f84e75df0d368b446ac996fe8add1f38fa11dfab4f334e2c2630c197e320d9040cceb3fd393428f049bbf16adbc957765ed603ade044222e11d9af2ca5056f6d5b29f25f160182be1228eefbcb16f7b67d2d304809e0aad28de6fdf18809317a7ecd8ec954c61f3992acb41773c7edf576092f2a1c60d1a2bf8286e9ffaac018871cae529e18efcb311dfb96390b14e28961666168d59d7d07ac5e545c00e78ed328cdc98d45ad9051f161c9dde8beee5ec973d8dc34eeae0f25288893367bfe55b1bfd56509b455943864e73621d0aeaa8895cdee7695fb2740dfdd0b77c954e3f3c780dab4a9d6dfc6ed1b18860df36d2529df3cab1be6d4f6f3052274bbb9ca8200eb86c1812d1aff0855f509a19cf09e36e12f7ad0e21e66a6b2068578dc7201a72cff1b9fbb9b797243d985e0e1ca47e15b55687f225def1aae6a6a2ea6dec62501ca4e473f3d8713e3c82614d82192e071030e8569dcc436016e4a67227728509e7f6eab9ea86a910cdbc9a4e6941e1c7aacca3e6f0b276d6b8342937e28f7be8883258643d8b616bce90ed1438e8e19e39e8cb17e7bf4b75635ac130d5c9d3821609237fcc4ef1449340fc34cb522bd8b5f6629b4ce48ecec7c02417a639113ee69e051e085b1ed2a57353772fa57ed44a90f56871588d04ccbdb51fd5d518672582ad097e1c58c0e0130c964", 0x1000}, {&(0x7f0000001280)="a298947859755ea31795d695dfc7acd79aaaca35c39565d18a1ce5eb69ec137e4fbd44fd2c646463cce3c0b4f49b4c3796f077ecd16d7df59c75e2b5aefa70bafd1658425bf6981fdec9b7b44955ad1be8b7d9f0c738253b72228d895cee0a906b946cbd8a1316022ab0b55e0c279672eea88f52ef3373c2c1de8d82623456d3a0d2cd9ad1cf6902742cb5ceb1b5471b55aed5bb882bfd914935dbb8f2542ba59fcda653981c88e2bbc1587c2d6c81ee30e5214bc3a669ef826c2c63903a8ce542010a64c4e2c1e19d52658a421943eb12517fa0bb60835f5fb36af8b78392bb2f4e3a8310620b9becd5184ebf8fa8a98c5d98", 0xf3}, {&(0x7f0000001380)="111f0a58e0beda5ec3b2ee47f6a7d744401ae90fe8be9d8db9a280e84524ca4ad727810053c5f3a93b84b4cf987845e8beee65c197e4401bace8e458729a9165c94b99edb46e5e7d3119260c857314114d5a00133e3699a1c2f094b2bf2e2221e4b33765d7aa216f7e8d5893d3c0c5bd2b2a5ee7de4654dfeef6172c159ad88a1b6cf83352524faa5d78a16979727156d925c9475669f564dc83d3bb7188364b41addcfa", 0xa4}, {&(0x7f0000001440)="f896a371bd2ef7187746acfbb3638296b87a2d6fee14e5901f306baae2d6319dc04df2f13e6a8b2888dd6b5eccd44fdbb88b2b64b0ada90d2f74cdbd66f74c1e6136bd98dc90eeace3ceefe3a147e920af421b3e54d57e5bc679c884fba65bdc4da98c48190e16567b5b6754b66bee1a7797e413807ef26cc759894ef8d23574bf4b4502e711f9f31236c3a48441ce2884bc29ed942079fe", 0x98}, {&(0x7f0000001500)="469af80adf9809f191f3affaaf1a361517753fb1cbaf03a37251dc1d54d99e5b5c31dda32371956489282a18a480c5fb490efab771cd46193722c896552a8fb54744d24833675d3eb35c2942fe3dede84fb8e846ed9ce2f46819554ae0ef4b759aabfc0563651eda9a2bfecc7fce6a207693ae57ec45147f5b4baef52f3db3b8cf893dc070a149e5c1dcac9ff8a7225a1c6041e35833323b9b809159be9b4b9e4aeb4f3784318c2cfd314b7f787632e9fa7235a901657c8b6c6d98181aaa741724bf59393d4c54e2e8e4a86e9be3a83489dd77d4c85d3bd9716964d2bcc06bded4811afc29a65dd9", 0xe8}], 0x8, &(0x7f0000001680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffc0}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xc8}, 0x40)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x14)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000002680)={0x4, {{0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}}, {{0xa, 0x0, 0x8000, @dev={0xfe, 0x80, '\x00', 0x20}}}}, 0x108)

[ 1424.891826] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1424.895323] CPU: 1 UID: 0 PID: 11624 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1424.895353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1424.895367] Call Trace:
[ 1424.895375]  <TASK>
[ 1424.895383]  dump_stack_lvl+0xfa/0x120
[ 1424.895423]  dump_header+0x107/0x950
[ 1424.895464]  oom_kill_process+0x278/0xa00
[ 1424.895502]  out_of_memory+0x34b/0x1690
[ 1424.895542]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1424.895572]  ? __pfx_out_of_memory+0x10/0x10
[ 1424.895618]  mem_cgroup_out_of_memory+0x164/0x190
[ 1424.895641]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1424.895674]  ? mark_held_locks+0x49/0x80
[ 1424.895707]  try_charge_memcg+0x81f/0xf30
[ 1424.895749]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1424.895792]  charge_memcg+0x7b/0x290
[ 1424.895823]  __mem_cgroup_charge+0x28/0x90
[ 1424.895857]  do_wp_page+0x56e/0x31f0
[ 1424.895907]  ? __pfx_do_wp_page+0x10/0x10
[ 1424.895939]  ? do_raw_spin_lock+0x123/0x260
[ 1424.895967]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1424.895995]  ? ___pte_offset_map+0x176/0x370
[ 1424.896029]  __handle_mm_fault+0xde1/0x30f0
[ 1424.896061]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1424.896091]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1424.896121]  ? lock_release+0x121/0x290
[ 1424.896176]  handle_mm_fault+0x2c3/0x900
[ 1424.896208]  ? access_error+0x17d/0x380
[ 1424.896236]  do_user_addr_fault+0x4fa/0xeb0
[ 1424.896269]  exc_page_fault+0xb0/0x180
[ 1424.896301]  asm_exc_page_fault+0x26/0x30
[ 1424.896322] RIP: 0033:0x7fc67e13dd30
[ 1424.896339] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1424.896360] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1424.896378] RAX: 00000000413566b5 RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1424.896393] RDX: 0000001b2cc20018 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1424.896406] RBP: 0000000000000001 R08: 00000000413566b5 R09: 0000001b2cc2001c
[ 1424.896420] R10: 00000000000006b5 R11: 00000000413566b9 R12: 0000000000000000
[ 1424.896449] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1424.896465]  ? __might_fault+0x1f/0x190
[ 1424.896500]  ? __might_fault+0x1f/0x190
[ 1424.896530]  </TASK>
[ 1424.929099] memory: usage 307200kB, limit 307200kB, failcnt 1617
[ 1424.930211] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1424.931112] Memory cgroup stats for /syz0:
[ 1424.960239] anon 1101824
[ 1424.960860] file 309952512
[ 1424.961146] kernel 3518464
[ 1424.961383] kernel_stack 360448
[ 1424.961649] pagetables 1380352
[ 1424.961933] sec_pagetables 0
[ 1424.962182] percpu 768
[ 1424.962391] sock 0
[ 1424.962574] vmalloc 0
[ 1424.962775] shmem 309952512
[ 1424.963041] file_mapped 0
[ 1424.963271] file_dirty 0
[ 1424.963493] file_writeback 0
[ 1424.963750] swapcached 0
[ 1424.963993] inactive_anon 310853632
[ 1424.964288] active_anon 200704
[ 1424.964590] inactive_file 0
[ 1424.965145] active_file 0
[ 1424.965378] unevictable 0
[ 1424.965606] slab_reclaimable 973912
[ 1424.965926] slab_unreclaimable 813952
[ 1424.966233] slab 1787864
[ 1424.966455] workingset_refault_anon 0
[ 1424.966762] workingset_refault_file 0
[ 1424.967087] workingset_activate_anon 0
[ 1424.967397] workingset_activate_file 0
[ 1424.967712] workingset_restore_anon 0
[ 1424.968038] workingset_restore_file 0
[ 1424.968343] workingset_nodereclaim 0
[ 1424.968648] pgdemote_kswapd 0
[ 1424.968922] pgdemote_direct 0
[ 1424.969177] pgdemote_khugepaged 0
[ 1424.969460] pgdemote_proactive 0
[ 1424.969740] pgscan 367
[ 1424.969972] pgsteal 76
[ 1424.970179] pswpin 0
[ 1424.970372] pswpout 0
[ 1424.970572] pgscan_kswapd 0
[ 1424.970811] pgscan_direct 367
[ 1424.971086] pgscan_khugepaged 0
[ 1424.971353] pgscan_proactive 0
[ 1424.971612] pgsteal_kswapd 0
[ 1424.971859] pgsteal_direct 76
[ 1424.972136] pgsteal_khugepaged 0
[ 1424.972412] pgsteal_proactive 0
[ 1424.972683] pgfault 88937
[ 1424.972925] pgmajfault 0
[ 1424.973145] pgrefill 275
[ 1424.973366] pgactivate 365
[ 1424.973600] pgdeactivate 278
[ 1424.973848] pglazyfree 0
[ 1424.974092] pglazyfreed 0
[ 1424.974320] swpin_zero 0
[ 1424.974541] swpout_zero 0
[ 1424.974767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11624,uid=0
[ 1424.975973] Memory cgroup out of memory: Killed process 11624 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x2e)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = dup3(r3, r1, 0x80000)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x8000000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r6 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xc, 0x0, r7)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x4, 0xe, 0x0, {0x0, r7, r4}}, 0x7)
syz_io_uring_submit(r5, 0x0, 0x0, 0x0)

13:06:02 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmget$private(0x0, 0x400000, 0x400, &(0x7f0000bff000/0x400000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmat(r0, &(0x7f0000606000/0x3000)=nil, 0x6000)
shmdt(r2)

13:06:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

13:06:02 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x244)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:02 executing program 6:
kexec_load(0x1000000000001000, 0x8, &(0x7f0000000400)=[{&(0x7f00000006c0)="335fb8b4e0b73a2e4a92173a95bc5b117c2e2ca88fe6313c060cad75d6e6c7ffffffffffff342ef5cc25f53ce409eb7dad47af36b8a8003e50a6acb9", 0x3c, 0x4, 0x80000001}, {&(0x7f0000001340)="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", 0x107c, 0x3, 0x58d}, {&(0x7f0000000080)="0354078ef5cec815ac91168797608c33ee030da772362e8ac34a3a341330d19a969f0e94ed0472627fdc3ff16d751d896b4c86217bbb8aca25f5f9031cbf522048c6535ff62421841d44fd8056a38ddc98f48710fa058c89119e825d641f593ecbb4fb18cc9644647e61014dc866a1c2517235c2438d03efc06e96049a55717ab24a2a438dfa79b5ce4f4d75b39d298d8b1f815c37c34c40759032e0c20000", 0x9f, 0x80004, 0x8}, {&(0x7f0000000300)="49fb05853cda041dd355538a711ca19f09adbc37e3614ed5761d1fef5b355d6f2ce756d9df2562017a28af907592991916ffc3f9bfc5b4116bd8d1d7cc5c", 0x3e, 0x20, 0xffffffff00000000}, {&(0x7f00000023c0)="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", 0x1000, 0x2}, {&(0x7f0000000500)="db6566a1efc232985a1a09b3fc5ebd746a977e4a5b2ed5d2526e68acf899f06fc961aed6528ec02a4a644dd4f245db7e65003c0ef3b488b5c602e00075683aaaed0deb11e41816ece7115f571c", 0x4d, 0x4, 0x9}, {&(0x7f00000033c0)="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", 0x1000, 0x7c}, {&(0x7f0000000380)="3774efb29e7ac2fbf125dd07e2c64398950a8eb50049e56cd0d28eebfc3fe823f9eec822b07cdb518e4089ffae27826b8e9074ef577e421e4a8c66ee73f69e192ed9b047b2b68e5f556add23e7f6793578bd260374b00d8cb84813654bf598d7497564022e0e14e3f454", 0x6a, 0x3, 0x9}], 0x320000)
kexec_load(0x66, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="3b37db75bdcfbb1203792c2af2334346d09835a9d3cd8af955675588dc2373709f004051ce663e29e9c6cd699a3f4dda360652345868bfe304d4563df98c8cf70467c0977bd3f0974d0fecc6eac89eb757bae9254fda73f5da64658eb9e940295d25fb4213036583f9d7eecc2c16e9980735ed4231fc8d3e86340102e3b47f2ff1814929bcf1102b0376c1aae2f6b5a30e5cde", 0x93, 0x8, 0x8}], 0x3e0000)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/bluetooth', 0x424202, 0x1)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x9)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
r3 = accept4$inet(r2, &(0x7f0000000340)={0x2, 0x0, @initdev}, &(0x7f0000000580)=0x10, 0x80000)
dup2(0xffffffffffffffff, r3)
poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9)
syz_io_uring_setup(0x36bb, &(0x7f00000005c0)={0x0, 0x5b95, 0x10, 0x1, 0x2a8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000640), &(0x7f0000000680))
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000180)=0x8, 0x1)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x3, 0x1)
getsockopt$sock_linger(r0, 0x1, 0xb, 0x0, &(0x7f0000000140))

13:06:02 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
mlock(&(0x7f0000f30000/0x4000)=nil, 0x4000)
shmdt(0x0)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
madvise(&(0x7f0000b7f000/0x1000)=nil, 0x1000, 0xd)
shmat(r2, &(0x7f0000466000/0x3000)=nil, 0x2000)
pkey_mprotect(&(0x7f0000b47000/0x4000)=nil, 0x4000, 0x1000006, 0xffffffffffffffff)
r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
shmat(r3, &(0x7f0000c2e000/0x2000)=nil, 0x0)
r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r4, 0xc)
shmat(r4, &(0x7f0000ad7000/0x2000)=nil, 0x1000)
shmdt(r1)

13:06:02 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ce)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:06:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x9effffff, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1435.492829] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1435.493644] CPU: 1 UID: 0 PID: 11640 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1435.493661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1435.493668] Call Trace:
[ 1435.493673]  <TASK>
[ 1435.493679]  dump_stack_lvl+0xfa/0x120
[ 1435.493704]  dump_header+0x107/0x950
[ 1435.493729]  oom_kill_process+0x278/0xa00
[ 1435.493750]  out_of_memory+0x34b/0x1690
[ 1435.493774]  ? __pfx_out_of_memory+0x10/0x10
[ 1435.493800]  mem_cgroup_out_of_memory+0x164/0x190
[ 1435.493813]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1435.493832]  ? mark_held_locks+0x49/0x80
[ 1435.493851]  try_charge_memcg+0x81f/0xf30
[ 1435.493879]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1435.493904]  charge_memcg+0x7b/0x290
[ 1435.493921]  __mem_cgroup_charge+0x28/0x90
[ 1435.493940]  do_wp_page+0x56e/0x31f0
[ 1435.493965]  ? __pfx_do_wp_page+0x10/0x10
[ 1435.493982]  ? do_raw_spin_lock+0x123/0x260
[ 1435.493999]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1435.494014]  ? ___pte_offset_map+0x176/0x370
[ 1435.494034]  __handle_mm_fault+0xde1/0x30f0
[ 1435.494052]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1435.494070]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1435.494086]  ? lock_release+0x121/0x290
[ 1435.494117]  handle_mm_fault+0x2c3/0x900
[ 1435.494135]  ? access_error+0x17d/0x380
[ 1435.494151]  do_user_addr_fault+0x4fa/0xeb0
[ 1435.494170]  exc_page_fault+0xb0/0x180
[ 1435.494188]  asm_exc_page_fault+0x26/0x30
[ 1435.494201] RIP: 0033:0x7fc67e13aecd
[ 1435.494211] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1435.494223] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1435.494234] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1435.494242] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1435.494249] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1435.494257] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1435.494265] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 000000000015e666
[ 1435.494280]  ? do_syscall_64+0x12c/0x360
[ 1435.494302]  </TASK>
[ 1435.511549] memory: usage 307200kB, limit 307200kB, failcnt 1661
[ 1435.512118] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1435.512696] Memory cgroup stats for /syz0:
[ 1435.514156] anon 1134592
[ 1435.514839] file 309952512
[ 1435.515282] kernel 3485696
[ 1435.515534] kernel_stack 360448
[ 1435.515919] pagetables 1372160
[ 1435.516181] sec_pagetables 0
[ 1435.516427] percpu 640
[ 1435.516646] sock 0
[ 1435.516827] vmalloc 0
[ 1435.517045] shmem 309952512
[ 1435.517284] file_mapped 0
[ 1435.517509] file_dirty 0
[ 1435.517725] file_writeback 0
[ 1435.518031] swapcached 0
[ 1435.518254] inactive_anon 310886400
[ 1435.518543] active_anon 200704
[ 1435.518802] inactive_file 0
[ 1435.519060] active_file 0
[ 1435.519286] unevictable 0
[ 1435.519559] slab_reclaimable 973912
[ 1435.519982] slab_unreclaimable 789936
[ 1435.520290] slab 1763848
[ 1435.520512] workingset_refault_anon 0
[ 1435.520824] workingset_refault_file 0
[ 1435.521188] workingset_activate_anon 0
[ 1435.521589] workingset_activate_file 0
[ 1435.521957] workingset_restore_anon 0
[ 1435.522344] workingset_restore_file 0
[ 1435.522647] workingset_nodereclaim 0
[ 1435.523040] pgdemote_kswapd 0
[ 1435.523296] pgdemote_direct 0
[ 1435.523648] pgdemote_khugepaged 0
[ 1435.523988] pgdemote_proactive 0
[ 1435.524261] pgscan 367
[ 1435.524465] pgsteal 76
[ 1435.524730] pswpin 0
[ 1435.525022] pswpout 0
[ 1435.525226] pgscan_kswapd 0
[ 1435.525462] pgscan_direct 367
[ 1435.525753] pgscan_khugepaged 0
[ 1435.526153] pgscan_proactive 0
[ 1435.526417] pgsteal_kswapd 0
[ 1435.526664] pgsteal_direct 76
[ 1435.526935] pgsteal_khugepaged 0
[ 1435.527216] pgsteal_proactive 0
[ 1435.527597] pgfault 88991
[ 1435.527824] pgmajfault 0
[ 1435.528076] pgrefill 275
[ 1435.528303] pgactivate 365
[ 1435.528536] pgdeactivate 278
[ 1435.528813] pglazyfree 0
[ 1435.529139] pglazyfreed 0
[ 1435.529380] swpin_zero 0
[ 1435.529600] swpout_zero 0
[ 1435.529824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11640,uid=0
[ 1435.531177] Memory cgroup out of memory: Killed process 11640 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1435.535120] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1435.536785] CPU: 0 UID: 0 PID: 11636 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1435.536816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1435.536831] Call Trace:
[ 1435.536839]  <TASK>
[ 1435.536849]  dump_stack_lvl+0xfa/0x120
[ 1435.536898]  dump_header+0x107/0x950
[ 1435.536941]  oom_kill_process+0x278/0xa00
[ 1435.536980]  out_of_memory+0x34b/0x1690
[ 1435.537024]  ? __pfx_out_of_memory+0x10/0x10
[ 1435.537071]  mem_cgroup_out_of_memory+0x164/0x190
[ 1435.537096]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1435.537130]  ? mark_held_locks+0x49/0x80
[ 1435.537166]  try_charge_memcg+0x81f/0xf30
[ 1435.537211]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1435.537257]  charge_memcg+0x7b/0x290
[ 1435.537289]  __mem_cgroup_charge+0x28/0x90
[ 1435.537325]  do_wp_page+0x56e/0x31f0
[ 1435.537371]  ? __pfx_do_wp_page+0x10/0x10
[ 1435.537404]  ? do_raw_spin_lock+0x123/0x260
[ 1435.537434]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1435.537464]  ? ___pte_offset_map+0x176/0x370
[ 1435.537505]  __handle_mm_fault+0xde1/0x30f0
[ 1435.537539]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1435.537571]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1435.537602]  ? lock_release+0x121/0x290
[ 1435.537659]  handle_mm_fault+0x2c3/0x900
[ 1435.537692]  ? access_error+0x17d/0x380
[ 1435.537722]  do_user_addr_fault+0x4fa/0xeb0
[ 1435.537756]  exc_page_fault+0xb0/0x180
[ 1435.537791]  asm_exc_page_fault+0x26/0x30
[ 1435.537814] RIP: 0033:0x7f88ae9cad30
[ 1435.537832] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1435.537854] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1435.537872] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1435.537888] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1435.537902] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1435.537917] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1435.537930] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1435.537947]  ? __do_sys_mlockall+0x258/0x5c0
[ 1435.537982]  ? __do_sys_mlockall+0x258/0x5c0
[ 1435.538011]  </TASK>
[ 1435.569246] memory: usage 307200kB, limit 307200kB, failcnt 1261
[ 1435.572314] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1435.573666] Memory cgroup stats for /syz7:
[ 1435.593237] anon 1499136
[ 1435.594477] file 308297728
[ 1435.595137] kernel 4775936
[ 1435.596017] kernel_stack 557056
[ 1435.596518] pagetables 2162688
[ 1435.597172] sec_pagetables 0
[ 1435.597626] percpu 1024
[ 1435.598209] sock 0
[ 1435.598548] vmalloc 0
[ 1435.598949] shmem 308293632
[ 1435.599388] file_mapped 0
[ 1435.599797] file_dirty 0
[ 1435.600224] file_writeback 0
[ 1435.600967] swapcached 0
[ 1435.601454] inactive_anon 309710848
[ 1435.602198] active_anon 81920
[ 1435.602661] inactive_file 0
[ 1435.603186] active_file 4096
[ 1435.603648] unevictable 0
[ 1435.604089] slab_reclaimable 966304
[ 1435.604633] slab_unreclaimable 1104848
[ 1435.605265] slab 2071152
[ 1435.605665] workingset_refault_anon 0
[ 1435.606245] workingset_refault_file 1
[ 1435.606803] workingset_activate_anon 0
[ 1435.607649] workingset_activate_file 0
[ 1435.608405] workingset_restore_anon 0
[ 1435.609170] workingset_restore_file 0
[ 1435.609784] workingset_nodereclaim 0
[ 1435.610484] pgdemote_kswapd 0
[ 1435.611163] pgdemote_direct 0
[ 1435.611627] pgdemote_khugepaged 0
[ 1435.612172] pgdemote_proactive 0
[ 1435.612914] pgscan 1868
[ 1435.613313] pgsteal 77
[ 1435.613919] pswpin 0
[ 1435.614345] pswpout 0
[ 1435.614798] pgscan_kswapd 1
[ 1435.615505] pgscan_direct 1867
[ 1435.616012] pgscan_khugepaged 0
[ 1435.616700] pgscan_proactive 0
[ 1435.617420] pgsteal_kswapd 0
[ 1435.617915] pgsteal_direct 77
[ 1435.618589] pgsteal_khugepaged 0
[ 1435.619423] pgsteal_proactive 0
[ 1435.620226] pgfault 89141
[ 1435.620650] pgmajfault 3
[ 1435.621284] pgrefill 2046
[ 1435.621701] pgactivate 2137
[ 1435.622512] pgdeactivate 2046
[ 1435.623220] pglazyfree 0
[ 1435.623622] pglazyfreed 0
[ 1435.624278] swpin_zero 0
[ 1435.624737] swpout_zero 0
[ 1435.625344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11636,uid=0
[ 1435.627736] Memory cgroup out of memory: Killed process 11636 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xf0ffffff, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:02 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

[ 1435.679745] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1435.680581] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1435.681171] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1435.681697] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 ff e0 00 00 40 00
[ 1435.682305] blk_print_req_error: 23 callbacks suppressed
[ 1435.682315] I/O error, dev sr0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[ 1435.683829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.684298] I/O error, dev sr0, sector 262144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.685000] buffer_io_error: 22 callbacks suppressed
[ 1435.685007] Buffer I/O error on dev sr0, logical block 262144, async page read
[ 1435.686269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.686715] I/O error, dev sr0, sector 262145 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.687591] Buffer I/O error on dev sr0, logical block 262145, async page read
[ 1435.690668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.691324] I/O error, dev sr0, sector 262146 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.692040] Buffer I/O error on dev sr0, logical block 262146, async page read
[ 1435.695809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.696431] I/O error, dev sr0, sector 262147 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.697323] Buffer I/O error on dev sr0, logical block 262147, async page read
[ 1435.701855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.702333] I/O error, dev sr0, sector 262148 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.703035] Buffer I/O error on dev sr0, logical block 262148, async page read
[ 1435.710454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.711066] I/O error, dev sr0, sector 262149 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.711744] Buffer I/O error on dev sr0, logical block 262149, async page read
[ 1435.718011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.718578] I/O error, dev sr0, sector 262150 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.719293] Buffer I/O error on dev sr0, logical block 262150, async page read
[ 1435.723956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.724582] I/O error, dev sr0, sector 262151 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.725294] Buffer I/O error on dev sr0, logical block 262151, async page read
[ 1435.729479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.731157] I/O error, dev sr0, sector 262144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1435.732851] Buffer I/O error on dev sr0, logical block 262144, async page read
[ 1435.746200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.746803] Buffer I/O error on dev sr0, logical block 262145, async page read
[ 1435.752146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.753868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.755777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.757472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.758638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1435.759600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:06:14 executing program 7:
mlockall(0x2)
mlockall(0x5)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:06:14 executing program 0:
mlockall(0x2)
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000f7b000/0x3000)=nil)
shmdt(0x0)
shmdt(r1)

13:06:14 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:14 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ce)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:06:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xfffff000, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

13:06:14 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x244)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:14 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x9, 0x1, 0x6, 0x0, @empty, @empty, 0x7, 0x20, 0x5, 0x800}})
sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x0, @dev, 0x80}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x2, 0x0)

[ 1447.909102] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1447.910041] CPU: 1 UID: 0 PID: 11675 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1447.910058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1447.910066] Call Trace:
[ 1447.910070]  <TASK>
[ 1447.910075]  dump_stack_lvl+0xfa/0x120
[ 1447.910101]  dump_header+0x107/0x950
[ 1447.910124]  oom_kill_process+0x278/0xa00
[ 1447.910145]  out_of_memory+0x34b/0x1690
[ 1447.910167]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 1447.910184]  ? __pfx_out_of_memory+0x10/0x10
[ 1447.910209]  mem_cgroup_out_of_memory+0x164/0x190
[ 1447.910223]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1447.910241]  ? mark_held_locks+0x49/0x80
[ 1447.910261]  try_charge_memcg+0x81f/0xf30
[ 1447.910284]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1447.910309]  charge_memcg+0x7b/0x290
[ 1447.910326]  __mem_cgroup_charge+0x28/0x90
[ 1447.910345]  do_wp_page+0x56e/0x31f0
[ 1447.910369]  ? __pfx_do_wp_page+0x10/0x10
[ 1447.910387]  ? do_raw_spin_lock+0x123/0x260
[ 1447.910404]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1447.910420]  ? ___pte_offset_map+0x176/0x370
[ 1447.910440]  __handle_mm_fault+0xde1/0x30f0
[ 1447.910458]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1447.910476]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1447.910493]  ? lock_release+0x121/0x290
[ 1447.910524]  handle_mm_fault+0x2c3/0x900
[ 1447.910542]  ? access_error+0x17d/0x380
[ 1447.910558]  do_user_addr_fault+0x4fa/0xeb0
[ 1447.910577]  exc_page_fault+0xb0/0x180
[ 1447.910595]  asm_exc_page_fault+0x26/0x30
[ 1447.910608] RIP: 0033:0x7f88ae9cad30
[ 1447.910618] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1447.910630] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1447.910641] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1447.910649] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1447.910657] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1447.910664] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1447.910672] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1447.910680]  ? __do_sys_mlockall+0x258/0x5c0
[ 1447.910699]  ? __do_sys_mlockall+0x258/0x5c0
[ 1447.910714]  </TASK>
[ 1447.910719] memory: usage 307200kB, limit 307200kB, failcnt 1282
[ 1447.928821] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1447.929317] Memory cgroup stats for /syz7:
[ 1447.946240] anon 1499136
[ 1447.946798] file 308297728
[ 1447.947057] kernel 4775936
[ 1447.947300] kernel_stack 557056
[ 1447.947567] pagetables 2162688
[ 1447.947824] sec_pagetables 0
[ 1447.948226] percpu 1024
[ 1447.948438] sock 0
[ 1447.948622] vmalloc 0
[ 1447.948827] shmem 308293632
[ 1447.949244] file_mapped 0
[ 1447.949469] file_dirty 0
[ 1447.949687] file_writeback 0
[ 1447.950115] swapcached 0
[ 1447.950334] inactive_anon 309710848
[ 1447.950621] active_anon 81920
[ 1447.951025] inactive_file 0
[ 1447.951299] active_file 4096
[ 1447.951668] unevictable 0
[ 1447.952026] slab_reclaimable 966304
[ 1447.952317] slab_unreclaimable 1104848
[ 1447.952625] slab 2071152
[ 1447.952847] workingset_refault_anon 0
[ 1447.953299] workingset_refault_file 1
[ 1447.953708] workingset_activate_anon 0
[ 1447.954036] workingset_activate_file 0
[ 1447.954349] workingset_restore_anon 0
[ 1447.954666] workingset_restore_file 0
[ 1447.955123] workingset_nodereclaim 0
[ 1447.955420] pgdemote_kswapd 0
[ 1447.955669] pgdemote_direct 0
[ 1447.955941] pgdemote_khugepaged 0
[ 1447.956218] pgdemote_proactive 0
[ 1447.956488] pgscan 1885
[ 1447.956704] pgsteal 77
[ 1447.956929] pswpin 0
[ 1447.957122] pswpout 0
[ 1447.957319] pgscan_kswapd 1
[ 1447.957552] pgscan_direct 1884
[ 1447.957813] pgscan_khugepaged 0
[ 1447.958101] pgscan_proactive 0
[ 1447.958361] pgsteal_kswapd 0
[ 1447.958603] pgsteal_direct 77
[ 1447.958852] pgsteal_khugepaged 0
[ 1447.959138] pgsteal_proactive 0
[ 1447.959404] pgfault 89196
[ 1447.959625] pgmajfault 3
[ 1447.959847] pgrefill 2084
[ 1447.960093] pgactivate 2175
[ 1447.960330] pgdeactivate 2084
[ 1447.960581] pglazyfree 0
[ 1447.960805] pglazyfreed 0
[ 1447.961046] swpin_zero 0
13:06:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xffffff7f, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1447.961264] swpout_zero 0
[ 1447.961626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11675,uid=0
[ 1447.962883] Memory cgroup out of memory: Killed process 11675 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1448.000073] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1448.000833] CPU: 1 UID: 0 PID: 11683 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1448.000849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1448.000856] Call Trace:
[ 1448.000861]  <TASK>
[ 1448.000866]  dump_stack_lvl+0xfa/0x120
[ 1448.000894]  dump_header+0x107/0x950
[ 1448.000918]  oom_kill_process+0x278/0xa00
[ 1448.000939]  out_of_memory+0x34b/0x1690
[ 1448.000963]  ? __pfx_out_of_memory+0x10/0x10
[ 1448.000988]  mem_cgroup_out_of_memory+0x164/0x190
[ 1448.001002]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1448.001020]  ? mark_held_locks+0x49/0x80
[ 1448.001039]  try_charge_memcg+0x81f/0xf30
[ 1448.001063]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1448.001088]  charge_memcg+0x7b/0x290
[ 1448.001105]  __mem_cgroup_charge+0x28/0x90
[ 1448.001124]  do_wp_page+0x56e/0x31f0
[ 1448.001149]  ? __pfx_do_wp_page+0x10/0x10
[ 1448.001166]  ? do_raw_spin_lock+0x123/0x260
[ 1448.001183]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1448.001199]  ? ___pte_offset_map+0x176/0x370
[ 1448.001219]  __handle_mm_fault+0xde1/0x30f0
[ 1448.001237]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1448.001255]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1448.001273]  ? lock_release+0x121/0x290
[ 1448.001303]  handle_mm_fault+0x2c3/0x900
[ 1448.001321]  ? access_error+0x17d/0x380
[ 1448.001337]  do_user_addr_fault+0x4fa/0xeb0
[ 1448.001356]  exc_page_fault+0xb0/0x180
[ 1448.001374]  asm_exc_page_fault+0x26/0x30
[ 1448.001387] RIP: 0033:0x7fc67e13aecd
[ 1448.001397] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1448.001409] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1448.001419] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1448.001427] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1448.001435] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1448.001443] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1448.001451] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 00000000001616a5
[ 1448.001466]  ? do_syscall_64+0x12c/0x360
[ 1448.001488]  </TASK>
[ 1448.018238] memory: usage 307200kB, limit 307200kB, failcnt 1685
[ 1448.018728] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
13:06:14 executing program 5:
add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

[ 1448.019500] Memory cgroup stats for /syz0:
[ 1448.048627] anon 1134592
[ 1448.050132] file 309952512
[ 1448.050580] kernel 3485696
[ 1448.051074] kernel_stack 360448
[ 1448.051614] pagetables 1372160
[ 1448.052155] sec_pagetables 0
[ 1448.052641] percpu 640
[ 1448.053075] sock 0
[ 1448.053433] vmalloc 0
[ 1448.053820] shmem 309952512
[ 1448.054301] file_mapped 0
[ 1448.054739] file_dirty 0
[ 1448.055196] file_writeback 0
[ 1448.055677] swapcached 0
[ 1448.056131] inactive_anon 310886400
[ 1448.056704] active_anon 200704
[ 1448.057240] inactive_file 0
[ 1448.057695] active_file 0
[ 1448.058166] unevictable 0
[ 1448.058612] slab_reclaimable 973912
[ 1448.059212] slab_unreclaimable 789936
[ 1448.059797] slab 1763848
[ 1448.060258] workingset_refault_anon 0
[ 1448.060851] workingset_refault_file 0
[ 1448.061482] workingset_activate_anon 0
[ 1448.062148] workingset_activate_file 0
[ 1448.062757] workingset_restore_anon 0
[ 1448.063386] workingset_restore_file 0
[ 1448.064019] workingset_nodereclaim 0
[ 1448.064595] pgdemote_kswapd 0
[ 1448.065133] pgdemote_direct 0
[ 1448.065643] pgdemote_khugepaged 0
[ 1448.066232] pgdemote_proactive 0
[ 1448.066761] pgscan 367
[ 1448.067185] pgsteal 76
[ 1448.067582] pswpin 0
[ 1448.067985] pswpout 0
[ 1448.068368] pgscan_kswapd 0
[ 1448.068843] pgscan_direct 367
[ 1448.069369] pgscan_khugepaged 0
[ 1448.069916] pgscan_proactive 0
[ 1448.070418] pgsteal_kswapd 0
[ 1448.070919] pgsteal_direct 76
[ 1448.071419] pgsteal_khugepaged 0
[ 1448.071973] pgsteal_proactive 0
[ 1448.072493] pgfault 89045
[ 1448.072968] pgmajfault 0
[ 1448.073391] pgrefill 275
[ 1448.073810] pgactivate 365
[ 1448.074296] pgdeactivate 278
[ 1448.074795] pglazyfree 0
[ 1448.075257] pglazyfreed 0
[ 1448.075701] swpin_zero 0
[ 1448.076152] swpout_zero 0
[ 1448.076592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11683,uid=0
[ 1448.079027] Memory cgroup out of memory: Killed process 11683 (syz-executor.0) total-vm:93420kB, anon-rss:428kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:15 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000b6f000/0x4000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000)
r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r2)

13:06:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xffffff9e, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:15 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
mlockall(0x1)
shmdt(0x0)
shmdt(r1)

13:06:15 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x2, 0x100, 0x0, 0x0, 0x3, 0x1, {0x0, r1}}, 0xfff)
r2 = getpid()
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r2})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080), 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl(r3, 0x2f, &(0x7f00000000c0)="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")
r4 = syz_open_dev$mouse(&(0x7f00000010c0), 0x1000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000001100), 0x1)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001140), 0x28603, 0x0)
r6 = openat2(r4, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x4000, 0x128}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001200)={0x0, 0x2, r6, 0xd88})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, @out_args}, './file0\x00'})
perf_event_open(&(0x7f0000001240)={0x4, 0x80, 0x7, 0x4, 0x9, 0x34, 0x0, 0x8, 0x24, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa9e0, 0x0, @perf_config_ext={0x7, 0x27}, 0x50082, 0x64, 0x10001, 0x4, 0x5, 0x101, 0xa61, 0x0, 0x4, 0x0, 0x3ff}, r2, 0x6, r7, 0x1)
r8 = syz_open_dev$vcsa(&(0x7f0000001300), 0x5, 0x0)
ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000001340))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000001440)={&(0x7f00000013c0)=""/116, 0x74, 0x0, 0x3})
write$binfmt_script(0xffffffffffffffff, &(0x7f00000014c0)={'#! ', './file0', [{0x20, '}\\+:#'}, {0x20, '\x00'}, {0x20, '[%!('}], 0xa, "056279d9c7610978200eba5a90b3f655"}, 0x28)

[ 1448.430564] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1448.431587] CPU: 1 UID: 0 PID: 11704 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1448.431604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1448.431612] Call Trace:
[ 1448.431617]  <TASK>
[ 1448.431622]  dump_stack_lvl+0xfa/0x120
[ 1448.431647]  dump_header+0x107/0x950
[ 1448.431671]  oom_kill_process+0x278/0xa00
[ 1448.431691]  out_of_memory+0x34b/0x1690
[ 1448.431715]  ? __pfx_out_of_memory+0x10/0x10
[ 1448.431740]  mem_cgroup_out_of_memory+0x164/0x190
[ 1448.431754]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1448.431772]  ? mark_held_locks+0x49/0x80
[ 1448.431792]  try_charge_memcg+0x81f/0xf30
[ 1448.431816]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1448.431840]  charge_memcg+0x7b/0x290
[ 1448.431857]  __mem_cgroup_charge+0x28/0x90
[ 1448.431880]  do_wp_page+0x56e/0x31f0
[ 1448.431904]  ? __pfx_do_wp_page+0x10/0x10
[ 1448.431922]  ? do_raw_spin_lock+0x123/0x260
[ 1448.431938]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1448.431954]  ? ___pte_offset_map+0x176/0x370
[ 1448.431974]  __handle_mm_fault+0xde1/0x30f0
[ 1448.431992]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1448.432010]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1448.432027]  ? lock_release+0x121/0x290
[ 1448.432058]  handle_mm_fault+0x2c3/0x900
[ 1448.432075]  ? access_error+0x17d/0x380
[ 1448.432091]  do_user_addr_fault+0x4fa/0xeb0
[ 1448.432110]  exc_page_fault+0xb0/0x180
[ 1448.432129]  asm_exc_page_fault+0x26/0x30
[ 1448.432142] RIP: 0033:0x7f88ae9cad30
[ 1448.432152] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1448.432164] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1448.432174] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1448.432182] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1448.432190] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1448.432198] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1448.432205] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1448.432214]  ? syscall_trace_enter+0xeb/0x240
[ 1448.432233]  ? syscall_trace_enter+0xeb/0x240
[ 1448.432249]  </TASK>
[ 1448.450546] memory: usage 307200kB, limit 307200kB, failcnt 1301
[ 1448.451685] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1448.452209] Memory cgroup stats for /syz7:
[ 1448.452298] anon 1470464
[ 1448.452900] file 308297728
[ 1448.453148] kernel 4792320
[ 1448.453422] kernel_stack 557056
[ 1448.453792] pagetables 2166784
[ 1448.454088] sec_pagetables 0
[ 1448.454345] percpu 1088
[ 1448.454564] sock 0
[ 1448.454752] vmalloc 0
[ 1448.454975] shmem 308293632
[ 1448.455221] file_mapped 0
[ 1448.455452] file_dirty 0
[ 1448.455670] file_writeback 0
[ 1448.455946] swapcached 0
[ 1448.456166] inactive_anon 309682176
[ 1448.456502] active_anon 81920
[ 1448.456859] inactive_file 4096
[ 1448.457170] active_file 0
[ 1448.457394] unevictable 0
[ 1448.457625] slab_reclaimable 966304
[ 1448.457945] slab_unreclaimable 1116856
[ 1448.458258] slab 2083160
[ 1448.458484] workingset_refault_anon 0
[ 1448.458796] workingset_refault_file 1
[ 1448.459126] workingset_activate_anon 0
[ 1448.459449] workingset_activate_file 0
[ 1448.459776] workingset_restore_anon 0
[ 1448.460103] workingset_restore_file 0
[ 1448.460423] workingset_nodereclaim 0
[ 1448.460734] pgdemote_kswapd 0
[ 1448.461023] pgdemote_direct 0
[ 1448.461290] pgdemote_khugepaged 0
[ 1448.461590] pgdemote_proactive 0
[ 1448.461933] pgscan 1895
[ 1448.462257] pgsteal 77
[ 1448.462469] pswpin 0
[ 1448.462676] pswpout 0
[ 1448.462904] pgscan_kswapd 1
[ 1448.463147] pgscan_direct 1894
[ 1448.463409] pgscan_khugepaged 0
[ 1448.463685] pgscan_proactive 0
[ 1448.463962] pgsteal_kswapd 0
[ 1448.464219] pgsteal_direct 77
[ 1448.464470] pgsteal_khugepaged 0
[ 1448.464760] pgsteal_proactive 0
[ 1448.465058] pgfault 89236
[ 1448.465297] pgmajfault 3
[ 1448.465518] pgrefill 2108
[ 1448.465761] pgactivate 2198
[ 1448.466075] pgdeactivate 2108
[ 1448.466439] pglazyfree 0
[ 1448.466668] pglazyfreed 0
[ 1448.466918] swpin_zero 0
[ 1448.467153] swpout_zero 0
[ 1448.467487] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11704,uid=0
[ 1448.468715] Memory cgroup out of memory: Killed process 11704 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1448.523774] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1448.524590] CPU: 1 UID: 0 PID: 11706 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1448.524606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1448.524613] Call Trace:
[ 1448.524618]  <TASK>
[ 1448.524623]  dump_stack_lvl+0xfa/0x120
[ 1448.524648]  dump_header+0x107/0x950
[ 1448.524672]  oom_kill_process+0x278/0xa00
[ 1448.524693]  out_of_memory+0x34b/0x1690
[ 1448.524730]  ? __pfx_out_of_memory+0x10/0x10
[ 1448.524756]  mem_cgroup_out_of_memory+0x164/0x190
[ 1448.524770]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1448.524787]  ? mark_held_locks+0x49/0x80
[ 1448.524807]  try_charge_memcg+0x81f/0xf30
[ 1448.524831]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1448.524855]  charge_memcg+0x7b/0x290
[ 1448.524872]  __mem_cgroup_charge+0x28/0x90
[ 1448.524891]  do_wp_page+0x56e/0x31f0
[ 1448.524915]  ? __pfx_do_wp_page+0x10/0x10
[ 1448.524932]  ? do_raw_spin_lock+0x123/0x260
[ 1448.524949]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1448.524965]  ? ___pte_offset_map+0x176/0x370
[ 1448.524985]  __handle_mm_fault+0xde1/0x30f0
[ 1448.525003]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1448.525020]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1448.525037]  ? lock_release+0x121/0x290
[ 1448.525068]  handle_mm_fault+0x2c3/0x900
[ 1448.525086]  ? access_error+0x17d/0x380
[ 1448.525102]  do_user_addr_fault+0x4fa/0xeb0
[ 1448.525120]  exc_page_fault+0xb0/0x180
[ 1448.525139]  asm_exc_page_fault+0x26/0x30
[ 1448.525152] RIP: 0033:0x7fc67e13dd30
[ 1448.525163] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1448.525175] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1448.525185] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1448.525193] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1448.525201] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1448.525208] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1448.525216] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1448.525225]  ? __might_fault+0x1f/0x190
[ 1448.525244]  ? __might_fault+0x1f/0x190
[ 1448.525261]  </TASK>
[ 1448.542044] memory: usage 307200kB, limit 307200kB, failcnt 1704
[ 1448.542529] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1448.543028] Memory cgroup stats for /syz0:
[ 1448.543119] anon 1081344
[ 1448.543737] file 309952512
[ 1448.544069] kernel 3436544
[ 1448.544300] kernel_stack 327680
[ 1448.544563] pagetables 1355776
[ 1448.544837] sec_pagetables 0
[ 1448.545109] percpu 704
[ 1448.545316] sock 0
[ 1448.545497] vmalloc 0
[ 1448.545695] shmem 309952512
[ 1448.545950] file_mapped 0
[ 1448.546179] file_dirty 0
[ 1448.546395] file_writeback 0
[ 1448.546639] swapcached 0
[ 1448.546852] inactive_anon 310833152
[ 1448.547157] active_anon 200704
[ 1448.548717] inactive_file 0
[ 1448.549641] active_file 0
[ 1448.549890] unevictable 0
[ 1448.550113] slab_reclaimable 979544
[ 1448.550405] slab_unreclaimable 785128
[ 1448.550708] slab 1764672
[ 1448.550942] workingset_refault_anon 0
[ 1448.551246] workingset_refault_file 0
[ 1448.551547] workingset_activate_anon 0
[ 1448.551857] workingset_activate_file 0
[ 1448.552179] workingset_restore_anon 0
[ 1448.552481] workingset_restore_file 0
[ 1448.552784] workingset_nodereclaim 0
[ 1448.553101] pgdemote_kswapd 0
[ 1448.553354] pgdemote_direct 0
[ 1448.553607] pgdemote_khugepaged 0
[ 1448.553902] pgdemote_proactive 0
[ 1448.554175] pgscan 367
[ 1448.554379] pgsteal 76
[ 1448.554580] pswpin 0
[ 1448.554806] pswpout 0
[ 1448.555062] pgscan_kswapd 0
[ 1448.555400] pgscan_direct 367
[ 1448.555683] pgscan_khugepaged 0
[ 1448.555967] pgscan_proactive 0
[ 1448.556235] pgsteal_kswapd 0
[ 1448.556477] pgsteal_direct 76
[ 1448.556734] pgsteal_khugepaged 0
[ 1448.557024] pgsteal_proactive 0
[ 1448.557291] pgfault 89074
[ 1448.557513] pgmajfault 0
[ 1448.557727] pgrefill 275
[ 1448.557959] pgactivate 365
[ 1448.558188] pgdeactivate 278
[ 1448.558434] pglazyfree 0
[ 1448.558649] pglazyfreed 0
[ 1448.558889] swpin_zero 0
[ 1448.559108] swpout_zero 0
[ 1448.559331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11706,uid=0
[ 1448.560668] Memory cgroup out of memory: Killed process 11706 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:26 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xfffffff0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:26 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x244)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:26 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x244)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:26 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
accept4(r1, 0x0, &(0x7f0000000500), 0x80800)
write$binfmt_script(r0, 0x0, 0x20)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1'}, 0xb)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', r3, 0x4, 0x1d, 0x1, 0x8, 0x65, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x8000, 0xc0, 0x1ff, 0x91cddd0}})
poll(&(0x7f0000000140)=[{r2}], 0x1, 0x9)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r2)
r4 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x35c, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="ef460c159aef563f434c399e5f798c82930a989c0c95f5df5f61f400", 0x1c, 0x80000000}, {&(0x7f0000000180)="32902f3110b19cd07610fe47ff7b6bb316f175bfcc6bbf0af9109ec47e330204d41e3a296d63a762d0be4ca9a65f3aad9fdb96", 0x33, 0x40}, {&(0x7f0000000480)="93afed9eb447473b62641c08ed336ddd8104c81c3b8128c78d1c0c462be9f39f47688b394180979f55e2c17a35dff78c043d4f0574e0029514d7ec9283be68612f059809222ba17a4955e2cbc4e1d4ffc6feb0e3b6062a7f59f5d807000000db85cc8aefd8b8152f73f9d4503c90476f6074f9f3773aa212daa1fb03986da8", 0x7f, 0x4}], 0x800040, &(0x7f0000000300)={[{'#! '}], [{@obj_role={'obj_role', 0x3d, '(*'}}, {@uid_gt={'uid>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@hash}, {@uid_gt={'uid>', 0xee01}}]})
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
futimesat(r4, &(0x7f0000000380)='./file1\x00', &(0x7f0000000440)={{r5, r6/1000+10000}, {0x0, 0xea60}})

13:06:26 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000697000/0x4000)=nil, 0x0)

13:06:26 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
r2 = shmat(r0, &(0x7f000062c000/0x1000)=nil, 0x3000)
shmdt(r2)

13:06:26 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1ce)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:06:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0xffffffff, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1460.276819] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1460.277967] CPU: 0 UID: 0 PID: 11719 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1460.277984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1460.277992] Call Trace:
[ 1460.277997]  <TASK>
[ 1460.278002]  dump_stack_lvl+0xfa/0x120
[ 1460.278027]  dump_header+0x107/0x950
[ 1460.278052]  oom_kill_process+0x278/0xa00
[ 1460.278072]  out_of_memory+0x34b/0x1690
[ 1460.278096]  ? __pfx_out_of_memory+0x10/0x10
[ 1460.278121]  mem_cgroup_out_of_memory+0x164/0x190
[ 1460.278134]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1460.278152]  ? mark_held_locks+0x49/0x80
[ 1460.278171]  try_charge_memcg+0x81f/0xf30
[ 1460.278195]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1460.278220]  charge_memcg+0x7b/0x290
[ 1460.278237]  __mem_cgroup_charge+0x28/0x90
[ 1460.278256]  do_wp_page+0x56e/0x31f0
[ 1460.278280]  ? __pfx_do_wp_page+0x10/0x10
[ 1460.278302]  ? do_raw_spin_lock+0x123/0x260
[ 1460.278318]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1460.278334]  ? ___pte_offset_map+0x176/0x370
[ 1460.278353]  __handle_mm_fault+0xde1/0x30f0
[ 1460.278372]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1460.278390]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1460.278407]  ? lock_release+0x121/0x290
[ 1460.278438]  handle_mm_fault+0x2c3/0x900
[ 1460.278456]  ? access_error+0x17d/0x380
[ 1460.278472]  do_user_addr_fault+0x4fa/0xeb0
[ 1460.278491]  exc_page_fault+0xb0/0x180
[ 1460.278510]  asm_exc_page_fault+0x26/0x30
[ 1460.278523] RIP: 0033:0x7f88ae9cad30
[ 1460.278534] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1460.278546] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1460.278557] RAX: 00000000e9786253 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1460.278565] RDX: 0000001b2d620060 RSI: ffffffff819ed3f8 RDI: 0000000000000000
[ 1460.278572] RBP: 0000000000000001 R08: 00000000e9786253 R09: 0000001b2d62001c
[ 1460.278580] R10: 0000000000000253 R11: 00000000e9786257 R12: 0000000000000012
[ 1460.278587] R13: 00007f88aeb24000 R14: ffffffff819ed3f8 R15: 00007f88aeb2fff0
[ 1460.278596]  ? __do_sys_mlockall+0x258/0x5c0
[ 1460.278615]  ? __do_sys_mlockall+0x258/0x5c0
[ 1460.278631]  </TASK>
[ 1460.278785] memory: usage 307200kB, limit 307200kB, failcnt 1322
[ 1460.297005] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1460.297492] Memory cgroup stats for /syz7:
[ 1460.326129] anon 1499136
[ 1460.326697] file 308297728
[ 1460.327187] kernel 4775936
[ 1460.327426] kernel_stack 557056
[ 1460.327700] pagetables 2162688
[ 1460.327987] sec_pagetables 0
[ 1460.328234] percpu 1024
[ 1460.328445] sock 0
[ 1460.328625] vmalloc 0
[ 1460.328825] shmem 308293632
[ 1460.329096] file_mapped 0
[ 1460.329319] file_dirty 0
[ 1460.329537] file_writeback 0
[ 1460.329780] swapcached 0
[ 1460.330019] inactive_anon 309710848
[ 1460.330313] active_anon 81920
[ 1460.330564] inactive_file 0
[ 1460.330799] active_file 4096
[ 1460.331069] unevictable 0
[ 1460.331306] slab_reclaimable 966304
[ 1460.331595] slab_unreclaimable 1104848
[ 1460.331924] slab 2071152
[ 1460.332143] workingset_refault_anon 0
[ 1460.332448] workingset_refault_file 1
[ 1460.332939] workingset_activate_anon 0
[ 1460.333254] workingset_activate_file 0
[ 1460.333560] workingset_restore_anon 0
[ 1460.333862] workingset_restore_file 0
[ 1460.334194] workingset_nodereclaim 0
[ 1460.334491] pgdemote_kswapd 0
[ 1460.334746] pgdemote_direct 0
[ 1460.335017] pgdemote_khugepaged 0
[ 1460.335297] pgdemote_proactive 0
[ 1460.335566] pgscan 1923
[ 1460.335776] pgsteal 77
[ 1460.336003] pswpin 0
[ 1460.336196] pswpout 0
[ 1460.336416] pgscan_kswapd 1
[ 1460.336699] pgscan_direct 1922
[ 1460.337066] pgscan_khugepaged 0
[ 1460.337336] pgscan_proactive 0
[ 1460.337592] pgsteal_kswapd 0
[ 1460.337839] pgsteal_direct 77
[ 1460.338112] pgsteal_khugepaged 0
[ 1460.338431] pgsteal_proactive 0
[ 1460.338814] pgfault 89298
[ 1460.339067] pgmajfault 3
[ 1460.339291] pgrefill 2171
[ 1460.339512] pgactivate 2263
[ 1460.339800] pgdeactivate 2171
[ 1460.340179] pglazyfree 0
[ 1460.340403] pglazyfreed 0
[ 1460.340626] swpin_zero 0
[ 1460.340852] swpout_zero 0
[ 1460.341103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11719,uid=0
[ 1460.342298] Memory cgroup out of memory: Killed process 11719 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1460.403555] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1460.405311] CPU: 1 UID: 0 PID: 11722 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1460.405342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1460.405355] Call Trace:
[ 1460.405364]  <TASK>
[ 1460.405374]  dump_stack_lvl+0xfa/0x120
[ 1460.405415]  dump_header+0x107/0x950
[ 1460.405457]  oom_kill_process+0x278/0xa00
[ 1460.405496]  out_of_memory+0x34b/0x1690
[ 1460.405551]  ? __pfx_out_of_memory+0x10/0x10
[ 1460.405607]  mem_cgroup_out_of_memory+0x164/0x190
[ 1460.405632]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1460.405665]  ? mark_held_locks+0x49/0x80
[ 1460.405700]  try_charge_memcg+0x81f/0xf30
[ 1460.405743]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1460.405790]  charge_memcg+0x7b/0x290
[ 1460.405822]  __mem_cgroup_charge+0x28/0x90
[ 1460.405857]  do_wp_page+0x56e/0x31f0
[ 1460.405911]  ? __pfx_do_wp_page+0x10/0x10
[ 1460.405943]  ? do_raw_spin_lock+0x123/0x260
[ 1460.405973]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1460.406004]  ? ___pte_offset_map+0x176/0x370
[ 1460.406040]  __handle_mm_fault+0xde1/0x30f0
[ 1460.406074]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1460.406106]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1460.406138]  ? lock_release+0x121/0x290
[ 1460.406196]  handle_mm_fault+0x2c3/0x900
[ 1460.406229]  ? access_error+0x17d/0x380
[ 1460.406259]  do_user_addr_fault+0x4fa/0xeb0
[ 1460.406294]  exc_page_fault+0xb0/0x180
[ 1460.406328]  asm_exc_page_fault+0x26/0x30
[ 1460.406350] RIP: 0033:0x7fc67e13aecd
[ 1460.406369] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1460.406391] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1460.406409] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000024
[ 1460.406423] RDX: 0000001b2cc200b0 RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1460.406438] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1460.406452] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1460.406466] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 00000000001646f5
[ 1460.406496]  ? do_syscall_64+0x12c/0x360
[ 1460.406538]  </TASK>
[ 1460.438400] memory: usage 307200kB, limit 307200kB, failcnt 1723
[ 1460.440674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1460.441607] Memory cgroup stats for /syz0:
[ 1460.477080] anon 1134592
[ 1460.477804] file 309952512
[ 1460.478195] kernel 3485696
[ 1460.478430] kernel_stack 360448
[ 1460.478702] pagetables 1372160
[ 1460.478983] sec_pagetables 0
[ 1460.479232] percpu 640
[ 1460.479434] sock 0
[ 1460.479616] vmalloc 0
[ 1460.479815] shmem 309952512
[ 1460.480080] file_mapped 0
[ 1460.480309] file_dirty 0
[ 1460.480530] file_writeback 0
[ 1460.480776] swapcached 0
[ 1460.481033] inactive_anon 310886400
[ 1460.481326] active_anon 200704
[ 1460.481583] inactive_file 0
[ 1460.481820] active_file 0
[ 1460.482069] unevictable 0
[ 1460.482296] slab_reclaimable 973912
[ 1460.482583] slab_unreclaimable 789936
[ 1460.482904] slab 1763848
[ 1460.483124] workingset_refault_anon 0
[ 1460.483432] workingset_refault_file 0
[ 1460.483733] workingset_activate_anon 0
[ 1460.484063] workingset_activate_file 0
[ 1460.484372] workingset_restore_anon 0
[ 1460.484674] workingset_restore_file 0
[ 1460.485009] workingset_nodereclaim 0
[ 1460.485304] pgdemote_kswapd 0
[ 1460.485554] pgdemote_direct 0
[ 1460.485808] pgdemote_khugepaged 0
[ 1460.486107] pgdemote_proactive 0
[ 1460.486379] pgscan 367
[ 1460.486583] pgsteal 76
[ 1460.486792] pswpin 0
[ 1460.487007] pswpout 0
[ 1460.487205] pgscan_kswapd 0
[ 1460.487442] pgscan_direct 367
[ 1460.487692] pgscan_khugepaged 0
[ 1460.487984] pgscan_proactive 0
[ 1460.488244] pgsteal_kswapd 0
[ 1460.488490] pgsteal_direct 76
[ 1460.488749] pgsteal_khugepaged 0
[ 1460.489055] pgsteal_proactive 0
[ 1460.489321] pgfault 89146
[ 1460.489542] pgmajfault 0
[ 1460.489759] pgrefill 275
[ 1460.489999] pgactivate 365
[ 1460.490232] pgdeactivate 278
[ 1460.490477] pglazyfree 0
[ 1460.490694] pglazyfreed 0
[ 1460.490941] swpin_zero 0
[ 1460.491161] swpout_zero 0
[ 1460.491388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11722,uid=0
[ 1460.492584] Memory cgroup out of memory: Killed process 11722 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:27 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (fail_nth: 1)

13:06:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1460.709808] FAULT_INJECTION: forcing a failure.
[ 1460.709808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1460.711777] CPU: 1 UID: 0 PID: 11751 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1460.711810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1460.711824] Call Trace:
[ 1460.711833]  <TASK>
[ 1460.711843]  dump_stack_lvl+0xfa/0x120
[ 1460.711895]  should_fail_ex+0x4d7/0x5e0
[ 1460.711939]  _copy_from_user+0x30/0xd0
[ 1460.711968]  copy_from_sockptr_offset+0x170/0x1b0
[ 1460.712007]  ? __pfx_copy_from_sockptr_offset+0x10/0x10
[ 1460.712043]  ? perf_trace_lock+0xb5/0x5d0
[ 1460.712077]  ? find_held_lock+0x2b/0x80
[ 1460.712122]  ? get_pid_task+0xfd/0x250
[ 1460.712164]  do_tcp_setsockopt+0x158/0x2620
[ 1460.712196]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[ 1460.712228]  ? sock_has_perm+0x21d/0x2b0
[ 1460.712267]  ? perf_trace_lock_acquire+0x2/0x700
[ 1460.712298]  ? selinux_netlbl_socket_setsockopt+0xa1/0x460
[ 1460.712327]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[ 1460.712359]  ? lock_acquire+0x15e/0x2f0
[ 1460.712385]  ? __fget_files+0x34/0x3b0
[ 1460.712423]  ? find_held_lock+0x2b/0x80
[ 1460.712457]  ? __fget_files+0x203/0x3b0
[ 1460.712513]  tcp_setsockopt+0xe6/0x110
[ 1460.712543]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1460.712577]  do_sock_setsockopt+0xf7/0x1e0
[ 1460.712617]  __sys_setsockopt+0x11f/0x1a0
[ 1460.712651]  __x64_sys_setsockopt+0xbe/0x160
[ 1460.712674]  ? syscall_trace_enter+0xf2/0x240
[ 1460.712703]  do_syscall_64+0xbf/0x360
[ 1460.712743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.712768] RIP: 0033:0x7f4755660b19
[ 1460.712788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1460.712813] RSP: 002b:00007f4752bb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1460.712856] RAX: ffffffffffffffda RBX: 00007f4755774020 RCX: 00007f4755660b19
[ 1460.712872] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003
[ 1460.712887] RBP: 00007f4752bb51d0 R08: 0000000000000004 R09: 0000000000000000
[ 1460.712902] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[ 1460.712917] R13: 00007ffca1ea302f R14: 00007f4752bb5300 R15: 0000000000022000
[ 1460.712956]  </TASK>
13:06:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x2, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x3, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:28 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
syz_open_procfs$userns(0x0, &(0x7f00000001c0))

13:06:28 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1d7)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:06:28 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x249)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:28 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)
mbind(&(0x7f0000c87000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x101, 0x9, 0x4)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0)

13:06:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x4, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:28 executing program 3:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2601, 0x0)
getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180))
sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{&(0x7f0000000140)={0x2, 0x4e1e, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="fd", 0x1}], 0x5}}], 0x2, 0x400c000)

[ 1461.427555] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
13:06:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x5, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1461.429166] CPU: 1 UID: 0 PID: 11767 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1461.429196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1461.429209] Call Trace:
[ 1461.429217]  <TASK>
[ 1461.429228]  dump_stack_lvl+0xfa/0x120
[ 1461.429282]  dump_header+0x107/0x950
[ 1461.429327]  oom_kill_process+0x278/0xa00
[ 1461.429365]  out_of_memory+0x34b/0x1690
[ 1461.429408]  ? __pfx_out_of_memory+0x10/0x10
[ 1461.429454]  mem_cgroup_out_of_memory+0x164/0x190
[ 1461.429477]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1461.429510]  ? mark_held_locks+0x49/0x80
[ 1461.429543]  try_charge_memcg+0x81f/0xf30
[ 1461.429585]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1461.429629]  charge_memcg+0x7b/0x290
[ 1461.429660]  __mem_cgroup_charge+0x28/0x90
[ 1461.429694]  do_wp_page+0x56e/0x31f0
[ 1461.429738]  ? __pfx_do_wp_page+0x10/0x10
[ 1461.429769]  ? do_raw_spin_lock+0x123/0x260
[ 1461.429799]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1461.429827]  ? ___pte_offset_map+0x176/0x370
[ 1461.429862]  __handle_mm_fault+0xde1/0x30f0
[ 1461.429904]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1461.429935]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1461.429966]  ? lock_release+0x121/0x290
[ 1461.430022]  handle_mm_fault+0x2c3/0x900
[ 1461.430055]  ? access_error+0x17d/0x380
[ 1461.430084]  do_user_addr_fault+0x4fa/0xeb0
[ 1461.430118]  exc_page_fault+0xb0/0x180
[ 1461.430151]  asm_exc_page_fault+0x26/0x30
[ 1461.430172] RIP: 0033:0x7fc67e13dd30
[ 1461.430190] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1461.430212] RSP: 002b:00007ffc5e9f3b00 EFLAGS: 00010246
[ 1461.430230] RAX: 0000000084f5f5de RBX: 00007fc67df07008 RCX: 0000001b2cc20000
[ 1461.430245] RDX: 0000001b2cc20030 RSI: ffffffff819c2fdf RDI: 0000000000000000
[ 1461.430259] RBP: 0000000000000001 R08: 0000000084f5f5de R09: 0000001b2cc2001c
[ 1461.430272] R10: 00000000000015de R11: 0000000084f5f5e2 R12: 0000000000000004
[ 1461.430286] R13: 00007fc67e297000 R14: ffffffff819c2fdf R15: 00007fc67e2a2ff0
[ 1461.430302]  ? __might_fault+0x1f/0x190
[ 1461.430337]  ? __might_fault+0x1f/0x190
[ 1461.430368]  </TASK>
[ 1461.462272] memory: usage 307200kB, limit 307200kB, failcnt 1758
[ 1461.464311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1461.465302] Memory cgroup stats for /syz0:
[ 1461.494070] anon 1118208
[ 1461.494664] file 309952512
[ 1461.495077] kernel 3502080
[ 1461.495311] kernel_stack 360448
[ 1461.495578] pagetables 1376256
[ 1461.495856] sec_pagetables 0
[ 1461.496261] percpu 704
[ 1461.496476] sock 0
[ 1461.496660] vmalloc 0
[ 1461.496866] shmem 309952512
[ 1461.497265] file_mapped 0
[ 1461.497492] file_dirty 0
[ 1461.497712] file_writeback 0
[ 1461.498130] swapcached 0
[ 1461.498349] inactive_anon 310870016
[ 1461.498644] active_anon 200704
[ 1461.499064] inactive_file 0
[ 1461.499302] active_file 0
[ 1461.499538] unevictable 0
[ 1461.499759] slab_reclaimable 973912
[ 1461.500191] slab_unreclaimable 801944
[ 1461.500496] slab 1775856
[ 1461.500721] workingset_refault_anon 0
[ 1461.501221] workingset_refault_file 0
[ 1461.501526] workingset_activate_anon 0
[ 1461.501836] workingset_activate_file 0
[ 1461.502246] workingset_restore_anon 0
[ 1461.502549] workingset_restore_file 0
[ 1461.502855] workingset_nodereclaim 0
[ 1461.503173] pgdemote_kswapd 0
[ 1461.503428] pgdemote_direct 0
[ 1461.503680] pgdemote_khugepaged 0
[ 1461.503981] pgdemote_proactive 0
[ 1461.504250] pgscan 367
[ 1461.504461] pgsteal 76
[ 1461.504667] pswpin 0
[ 1461.504889] pswpout 0
[ 1461.505090] pgscan_kswapd 0
[ 1461.505324] pgscan_direct 367
[ 1461.505585] pgscan_khugepaged 0
[ 1461.505852] pgscan_proactive 0
[ 1461.506143] pgsteal_kswapd 0
[ 1461.506390] pgsteal_direct 76
[ 1461.506644] pgsteal_khugepaged 0
[ 1461.506938] pgsteal_proactive 0
[ 1461.507205] pgfault 89193
[ 1461.507431] pgmajfault 0
[ 1461.507650] pgrefill 275
[ 1461.507865] pgactivate 365
[ 1461.508119] pgdeactivate 278
[ 1461.508362] pglazyfree 0
[ 1461.508587] pglazyfreed 0
[ 1461.508809] swpin_zero 0
[ 1461.509060] swpout_zero 0
[ 1461.509287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11767,uid=0
[ 1461.510496] Memory cgroup out of memory: Killed process 11767 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (fail_nth: 2)

13:06:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x6, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:28 executing program 3:
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005a40)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)=""/133, 0x85}], 0x1, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/15, 0xf}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000000840)=""/212, 0xd4}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/226, 0xe2}, {&(0x7f0000000b40)=""/68, 0x44}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/118, 0x76}, {&(0x7f0000000d00)=""/239, 0xef}], 0xa, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000002140)=[{&(0x7f0000000fc0)=""/154, 0x9a}, {&(0x7f0000001080)=""/135, 0x87}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000002280), 0x6e, &(0x7f0000003480)=[{&(0x7f0000002300)=""/244, 0xf4}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/92, 0x5c}], 0x3, &(0x7f00000034c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000003500)=""/177, 0xb1}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004600)=""/97, 0x61}, {&(0x7f0000004680)=""/135, 0x87}, {&(0x7f0000004740)=""/70, 0x46}, {&(0x7f00000047c0)=""/110, 0x6e}], 0x4, &(0x7f0000004880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="009a4de3"], 0x58}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004980)=""/196, 0xc4}, {&(0x7f0000004a80)=""/10, 0xa}, {&(0x7f0000004ac0)=""/180, 0xb4}, {&(0x7f0000004b80)=""/38, 0x26}, {&(0x7f0000004bc0)=""/251, 0xfb}], 0x5, &(0x7f0000004d40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000004e00)=""/235, 0xeb}, {&(0x7f0000004f00)=""/210, 0xd2}, {&(0x7f0000005000)=""/146, 0x92}, {&(0x7f00000050c0)=""/47, 0x2f}, {&(0x7f0000005100)=""/117, 0x75}, {&(0x7f0000005180)=""/131, 0x83}, {&(0x7f0000005240)=""/203, 0xcb}, {&(0x7f0000005340)=""/193, 0xc1}, {&(0x7f0000005440)=""/135, 0x87}, {&(0x7f0000005500)}], 0xa, &(0x7f0000005600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000005740)=@abs, 0x6e, &(0x7f0000005980)=[{&(0x7f00000057c0)=""/138, 0x8a}, {&(0x7f0000005880)=""/250, 0xfa}], 0x2, &(0x7f00000059c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0xa, 0x40, &(0x7f0000005cc0)={0x77359400})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000005d00))
sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close_range(r0, r1, 0x2)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@dax}]})

13:06:28 executing program 7:
mlockall(0x2)
shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil)
shmdt(0x0)
r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r2)
r3 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r4 = shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(r4)
shmdt(r4)

13:06:28 executing program 0:
mlockall(0x2)
shmat(0xffffffffffffffff, &(0x7f0000e40000/0x2000)=nil, 0x2000)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r1 = shmat(r0, &(0x7f0000c8f000/0x2000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

[ 1461.662485] EXT4-fs: dax option not supported
[ 1461.669691] EXT4-fs: dax option not supported
13:06:28 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xd, r0, 0x8)
r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @multicast1}, &(0x7f0000000240)=0xc)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000004cc0)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(r1, &(0x7f0000004b00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/254, 0xfe}], 0x6, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000740), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/130, 0x82}], 0x1, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/78, 0x4e}, {&(0x7f0000002bc0)=""/19, 0x13}], 0x7}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002d00)=""/80, 0x50}, {&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/69, 0x45}, {&(0x7f0000002e80)=""/25, 0x19}], 0x4, &(0x7f0000002f00)=[@rights={{0x18, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002f80)=""/114, 0x72}, {&(0x7f0000003000)=""/100, 0x64}, {&(0x7f0000003080)=""/53, 0x35}, {&(0x7f00000030c0)=""/179, 0xb3}], 0x4, &(0x7f00000031c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000032c0)=""/151, 0x97}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x2, &(0x7f00000043c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f00000044c0)=""/16, 0x10}, {&(0x7f0000004500)=""/113, 0x71}, {&(0x7f0000004580)=""/145, 0x91}, {&(0x7f0000004640)=""/47, 0x2f}, {&(0x7f0000004680)=""/90, 0x5a}, {&(0x7f0000004700)=""/185, 0xb9}, {&(0x7f00000047c0)=""/90, 0x5a}, {&(0x7f0000004840)=""/251, 0xfb}, {&(0x7f0000004940)=""/70, 0x46}], 0x9, &(0x7f0000004a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x7, 0x10000, &(0x7f0000004d00)={r2, r3+60000000})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000004d40)={0x5, 0x4, 0x1, 'queue1\x00', 0x9})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600))
clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58)

[ 1461.750215] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1461.751110] CPU: 0 UID: 0 PID: 11784 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1461.751127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1461.751136] Call Trace:
[ 1461.751141]  <TASK>
[ 1461.751146]  dump_stack_lvl+0xfa/0x120
[ 1461.751171]  dump_header+0x107/0x950
[ 1461.751195]  oom_kill_process+0x278/0xa00
[ 1461.751216]  out_of_memory+0x34b/0x1690
[ 1461.751240]  ? __pfx_out_of_memory+0x10/0x10
[ 1461.751265]  mem_cgroup_out_of_memory+0x164/0x190
[ 1461.751278]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1461.751296]  ? mark_held_locks+0x49/0x80
[ 1461.751316]  try_charge_memcg+0x81f/0xf30
[ 1461.751339]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1461.751364]  charge_memcg+0x7b/0x290
[ 1461.751381]  __mem_cgroup_charge+0x28/0x90
[ 1461.751399]  do_wp_page+0x56e/0x31f0
[ 1461.751423]  ? __pfx_do_wp_page+0x10/0x10
[ 1461.751441]  ? do_raw_spin_lock+0x123/0x260
[ 1461.751457]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1461.751473]  ? ___pte_offset_map+0x176/0x370
[ 1461.751493]  __handle_mm_fault+0xde1/0x30f0
[ 1461.751511]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1461.751529]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1461.751545]  ? lock_release+0x121/0x290
[ 1461.751576]  handle_mm_fault+0x2c3/0x900
[ 1461.751594]  ? access_error+0x17d/0x380
[ 1461.751610]  do_user_addr_fault+0x4fa/0xeb0
[ 1461.751628]  exc_page_fault+0xb0/0x180
[ 1461.751648]  asm_exc_page_fault+0x26/0x30
[ 1461.751660] RIP: 0033:0x7f88ae9cad30
[ 1461.751671] Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
[ 1461.751683] RSP: 002b:00007fffea055230 EFLAGS: 00010246
[ 1461.751694] RAX: 000000002b475ac7 RBX: 00007f88ae794008 RCX: 0000001b2d620000
[ 1461.751702] RDX: 0000001b2d62002c RSI: ffffffff815ec68b RDI: 0000000000000000
[ 1461.751709] RBP: 0000000000000001 R08: 000000002b475ac7 R09: 0000001b2d62001c
[ 1461.751717] R10: 0000000000001ac7 R11: 000000002b475acb R12: 0000000000000003
[ 1461.751724] R13: 00007f88aeb24000 R14: ffffffff815ec68b R15: 00007f88aeb2fff0
[ 1461.751733]  ? syscall_trace_enter+0xeb/0x240
[ 1461.751752]  ? syscall_trace_enter+0xeb/0x240
[ 1461.751767]  </TASK>
[ 1461.751772] memory: usage 307200kB, limit 307200kB, failcnt 1342
[ 1461.771692] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1461.772201] Memory cgroup stats for /syz7:
[ 1461.782167] anon 1482752
[ 1461.783142] file 308297728
[ 1461.783476] kernel 4792320
[ 1461.783802] kernel_stack 557056
[ 1461.784227] pagetables 2166784
[ 1461.784600] sec_pagetables 0
[ 1461.785002] percpu 1088
[ 1461.785305] sock 0
[ 1461.785559] vmalloc 0
[ 1461.785839] shmem 308293632
[ 1461.786208] file_mapped 0
[ 1461.786528] file_dirty 0
[ 1461.786840] file_writeback 0
[ 1461.787221] swapcached 0
[ 1461.787533] inactive_anon 309694464
[ 1461.787972] active_anon 81920
[ 1461.788332] inactive_file 0
[ 1461.788668] active_file 4096
[ 1461.789057] unevictable 0
[ 1461.789375] slab_reclaimable 966304
[ 1461.789783] slab_unreclaimable 1116856
[ 1461.790257] slab 2083160
[ 1461.790569] workingset_refault_anon 0
[ 1461.791033] workingset_refault_file 1
[ 1461.791457] workingset_activate_anon 0
[ 1461.791923] workingset_activate_file 0
[ 1461.792359] workingset_restore_anon 0
[ 1461.792780] workingset_restore_file 0
[ 1461.793256] workingset_nodereclaim 0
[ 1461.793678] pgdemote_kswapd 0
[ 1461.794065] pgdemote_direct 0
[ 1461.794422] pgdemote_khugepaged 0
[ 1461.794809] pgdemote_proactive 0
[ 1461.795218] pgscan 1941
[ 1461.795519] pgsteal 77
[ 1461.795805] pswpin 0
[ 1461.796108] pswpout 0
[ 1461.796391] pgscan_kswapd 1
[ 1461.796725] pgscan_direct 1940
[ 1461.797124] pgscan_khugepaged 0
[ 1461.797497] pgscan_proactive 0
[ 1461.797856] pgsteal_kswapd 0
[ 1461.798232] pgsteal_direct 77
[ 1461.798587] pgsteal_khugepaged 0
[ 1461.798999] pgsteal_proactive 0
[ 1461.799370] pgfault 89345
[ 1461.799685] pgmajfault 3
[ 1461.800018] pgrefill 2204
[ 1461.800334] pgactivate 2296
[ 1461.800663] pgdeactivate 2204
[ 1461.801059] pglazyfree 0
[ 1461.801366] pglazyfreed 0
[ 1461.801678] swpin_zero 0
[ 1461.802019] swpout_zero 0
[ 1461.802337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11784,uid=0
[ 1461.804012] Memory cgroup out of memory: Killed process 11784 (syz-executor.7) total-vm:93420kB, anon-rss:348kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1461.806054] syz-executor.0 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=2, oom_score_adj=1000
[ 1461.807648] CPU: 0 UID: 0 PID: 11792 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1461.807666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1461.807674] Call Trace:
[ 1461.807679]  <TASK>
[ 1461.807685]  dump_stack_lvl+0xfa/0x120
[ 1461.807709]  dump_header+0x107/0x950
[ 1461.807733]  oom_kill_process+0x278/0xa00
[ 1461.807754]  out_of_memory+0x34b/0x1690
[ 1461.807777]  ? __pfx_out_of_memory+0x10/0x10
[ 1461.807802]  mem_cgroup_out_of_memory+0x164/0x190
[ 1461.807816]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1461.807834]  ? mark_held_locks+0x49/0x80
[ 1461.807853]  try_charge_memcg+0x81f/0xf30
[ 1461.807882]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1461.807901]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1461.807921]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1461.807943]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1461.807965]  ? __create_object+0x59/0x80
[ 1461.807982]  __kvmalloc_node_noprof+0x4e8/0x590
[ 1461.808001]  ? find_held_lock+0x2b/0x80
[ 1461.808019]  ? futex_hash_allocate+0x2cf/0x10a0
[ 1461.808037]  ? futex_hash_allocate+0x2cf/0x10a0
[ 1461.808048]  futex_hash_allocate+0x2cf/0x10a0
[ 1461.808060]  ? do_raw_spin_lock+0x123/0x260
[ 1461.808077]  ? __pfx_futex_hash_allocate+0x10/0x10
[ 1461.808090]  ? lock_acquire+0x15e/0x2f0
[ 1461.808102]  ? futex_hash_allocate_default+0x63/0x5b0
[ 1461.808117]  ? find_held_lock+0x2b/0x80
[ 1461.808134]  ? futex_hash_allocate_default+0x2a1/0x5b0
[ 1461.808148]  ? lock_release+0xc8/0x290
[ 1461.808160]  ? lock_is_held_type+0x9e/0x120
[ 1461.808180]  futex_hash_allocate_default+0x319/0x5b0
[ 1461.808196]  copy_process+0x41f2/0x73e0
[ 1461.808221]  ? __pfx_copy_process+0x10/0x10
[ 1461.808236]  ? do_try_to_free_pages+0x1275/0x1770
[ 1461.808256]  kernel_clone+0xea/0x7f0
[ 1461.808269]  ? __pfx_kernel_clone+0x10/0x10
[ 1461.808281]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1461.808300]  ? perf_trace_lock+0xb5/0x5d0
[ 1461.808314]  ? perf_trace_lock_acquire+0x1/0x700
[ 1461.808333]  __do_sys_clone+0xce/0x120
[ 1461.808345]  ? __pfx___do_sys_clone+0x10/0x10
[ 1461.808356]  ? lock_acquire+0x15e/0x2f0
[ 1461.808380]  ? syscall_trace_enter+0x1cf/0x240
[ 1461.808393]  ? lock_release+0xc8/0x290
[ 1461.808413]  do_syscall_64+0xbf/0x360
[ 1461.808433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.808445] RIP: 0033:0x7fc67e190f41
[ 1461.808456] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 1461.808468] RSP: 002b:00007ffc5e9f3ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1461.808480] RAX: ffffffffffffffda RBX: 00007fc67b705700 RCX: 00007fc67e190f41
[ 1461.808488] RDX: 00007fc67b7059d0 RSI: 00007fc67b7052f0 RDI: 00000000003d0f00
[ 1461.808496] RBP: 00007ffc5e9f3cf0 R08: 00007fc67b705700 R09: 00007fc67b705700
[ 1461.808504] R10: 00007fc67b7059d0 R11: 0000000000000206 R12: 00007ffc5e9f3b6e
[ 1461.808511] R13: 00007ffc5e9f3b6f R14: 00007fc67b705300 R15: 0000000000022000
[ 1461.808531]  </TASK>
[ 1461.831152] memory: usage 307192kB, limit 307200kB, failcnt 1778
[ 1461.831821] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1461.832614] Memory cgroup stats for /syz0:
[ 1461.837342] anon 1093632
[ 1461.837943] file 309952512
[ 1461.838182] kernel 3506176
[ 1461.838434] kernel_stack 360448
[ 1461.838703] pagetables 1376256
[ 1461.839055] sec_pagetables 0
[ 1461.839416] percpu 768
[ 1461.839630] sock 0
[ 1461.839813] vmalloc 0
[ 1461.840106] shmem 309952512
[ 1461.840456] file_mapped 0
[ 1461.840690] file_dirty 0
[ 1461.840947] file_writeback 0
[ 1461.841200] swapcached 0
[ 1461.841498] inactive_anon 310833152
[ 1461.841958] active_anon 200704
[ 1461.842287] inactive_file 0
[ 1461.842536] active_file 0
[ 1461.842761] unevictable 0
[ 1461.843015] slab_reclaimable 973912
[ 1461.843312] slab_unreclaimable 805752
[ 1461.843622] slab 1779664
[ 1461.843842] workingset_refault_anon 0
[ 1461.844205] workingset_refault_file 0
[ 1461.844622] workingset_activate_anon 0
[ 1461.844979] workingset_activate_file 0
[ 1461.845295] workingset_restore_anon 0
[ 1461.845601] workingset_restore_file 0
[ 1461.845935] workingset_nodereclaim 0
[ 1461.846243] pgdemote_kswapd 0
[ 1461.846500] pgdemote_direct 0
[ 1461.846757] pgdemote_khugepaged 0
13:06:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x7, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

[ 1461.847061] pgdemote_proactive 0
[ 1461.847818] pgscan 367
[ 1461.848060] pgsteal 76
[ 1461.848270] pswpin 0
[ 1461.848461] pswpout 0
[ 1461.848680] pgscan_kswapd 0
[ 1461.849017] pgscan_direct 367
[ 1461.849336] pgscan_khugepaged 0
[ 1461.849606] pgscan_proactive 0
[ 1461.849864] pgsteal_kswapd 0
[ 1461.850164] pgsteal_direct 76
[ 1461.850493] pgsteal_khugepaged 0
[ 1461.851016] pgsteal_proactive 0
[ 1461.851289] pgfault 89229
[ 1461.851513] pgmajfault 0
[ 1461.851731] pgrefill 275
[ 1461.852082] pgactivate 365
[ 1461.852316] pgdeactivate 278
[ 1461.852563] pglazyfree 0
[ 1461.852780] pglazyfreed 0
[ 1461.853143] swpin_zero 0
[ 1461.853369] swpout_zero 0
[ 1461.853593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11792,uid=0
[ 1461.855760] Memory cgroup out of memory: Killed process 11792 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
13:06:28 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
r2 = shmget$private(0x0, 0x4000, 0x78000064, &(0x7f0000ffb000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x3000)
shmdt(r1)

13:06:28 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000d12000/0x2000)=nil)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

[ 1462.150396] syz-executor.0 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=2, oom_score_adj=1000
[ 1462.151728] CPU: 1 UID: 0 PID: 11799 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1462.151751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1462.151760] Call Trace:
[ 1462.151768]  <TASK>
[ 1462.151774]  dump_stack_lvl+0xfa/0x120
[ 1462.151802]  dump_header+0x107/0x950
[ 1462.151830]  oom_kill_process+0x278/0xa00
[ 1462.151855]  out_of_memory+0x34b/0x1690
[ 1462.151888]  ? __pfx_out_of_memory+0x10/0x10
[ 1462.151917]  mem_cgroup_out_of_memory+0x164/0x190
[ 1462.151933]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1462.151954]  ? mark_held_locks+0x49/0x80
[ 1462.151976]  try_charge_memcg+0x81f/0xf30
[ 1462.152003]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1462.152026]  ? get_mem_cgroup_from_objcg+0xf8/0x430
[ 1462.152046]  obj_cgroup_charge_account+0xa8/0x6e0
[ 1462.152071]  __memcg_slab_post_alloc_hook+0x33c/0x9d0
[ 1462.152096]  ? __create_object+0x59/0x80
[ 1462.152116]  __kvmalloc_node_noprof+0x4e8/0x590
[ 1462.152138]  ? find_held_lock+0x2b/0x80
[ 1462.152158]  ? futex_hash_allocate+0x2cf/0x10a0
[ 1462.152178]  ? futex_hash_allocate+0x2cf/0x10a0
[ 1462.152191]  futex_hash_allocate+0x2cf/0x10a0
[ 1462.152205]  ? do_raw_spin_lock+0x123/0x260
[ 1462.152224]  ? __pfx_futex_hash_allocate+0x10/0x10
[ 1462.152239]  ? lock_acquire+0x15e/0x2f0
[ 1462.152253]  ? futex_hash_allocate_default+0x63/0x5b0
[ 1462.152270]  ? find_held_lock+0x2b/0x80
[ 1462.152289]  ? futex_hash_allocate_default+0x2a1/0x5b0
[ 1462.152305]  ? lock_release+0xc8/0x290
[ 1462.152319]  ? lock_is_held_type+0x9e/0x120
[ 1462.152342]  futex_hash_allocate_default+0x319/0x5b0
[ 1462.152360]  copy_process+0x41f2/0x73e0
[ 1462.152388]  ? __pfx_copy_process+0x10/0x10
[ 1462.152406]  ? do_try_to_free_pages+0x1275/0x1770
[ 1462.152428]  kernel_clone+0xea/0x7f0
[ 1462.152444]  ? __pfx_kernel_clone+0x10/0x10
[ 1462.152457]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1462.152479]  ? perf_trace_lock+0xb5/0x5d0
[ 1462.152495]  ? perf_trace_lock_acquire+0x1/0x700
[ 1462.152517]  __do_sys_clone+0xce/0x120
[ 1462.152530]  ? __pfx___do_sys_clone+0x10/0x10
[ 1462.152542]  ? lock_acquire+0x15e/0x2f0
[ 1462.152570]  ? syscall_trace_enter+0x1cf/0x240
[ 1462.152586]  ? lock_release+0xc8/0x290
[ 1462.152608]  do_syscall_64+0xbf/0x360
[ 1462.152631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.152646] RIP: 0033:0x7fc67e190f41
[ 1462.152657] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 1462.152672] RSP: 002b:00007ffc5e9f3ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1462.152686] RAX: ffffffffffffffda RBX: 00007fc67b705700 RCX: 00007fc67e190f41
[ 1462.152696] RDX: 00007fc67b7059d0 RSI: 00007fc67b7052f0 RDI: 00000000003d0f00
[ 1462.152705] RBP: 00007ffc5e9f3cf0 R08: 00007fc67b705700 R09: 00007fc67b705700
[ 1462.152714] R10: 00007fc67b7059d0 R11: 0000000000000206 R12: 00007ffc5e9f3b6e
[ 1462.152722] R13: 00007ffc5e9f3b6f R14: 00007fc67b705300 R15: 0000000000022000
[ 1462.152745]  </TASK>
[ 1462.179648] memory: usage 307196kB, limit 307200kB, failcnt 1798
[ 1462.180253] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1462.181508] Memory cgroup stats for /syz0:
[ 1462.220056] anon 1093632
[ 1462.220709] file 309952512
[ 1462.221120] kernel 3522560
[ 1462.221471] kernel_stack 360448
[ 1462.221745] pagetables 1380352
[ 1462.222185] sec_pagetables 0
[ 1462.222441] percpu 832
[ 1462.222648] sock 0
[ 1462.222831] vmalloc 0
[ 1462.223199] shmem 309952512
[ 1462.223443] file_mapped 0
[ 1462.223669] file_dirty 0
[ 1462.224076] file_writeback 0
[ 1462.224330] swapcached 0
[ 1462.224548] inactive_anon 310845440
[ 1462.224851] active_anon 200704
[ 1462.225191] inactive_file 0
[ 1462.225438] active_file 0
[ 1462.225665] unevictable 0
[ 1462.225913] slab_reclaimable 973912
[ 1462.226210] slab_unreclaimable 817760
[ 1462.226516] slab 1791672
[ 1462.226737] workingset_refault_anon 0
[ 1462.227065] workingset_refault_file 0
[ 1462.227374] workingset_activate_anon 0
[ 1462.227688] workingset_activate_file 0
[ 1462.228022] workingset_restore_anon 0
[ 1462.228328] workingset_restore_file 0
[ 1462.228635] workingset_nodereclaim 0
[ 1462.228965] pgdemote_kswapd 0
[ 1462.229224] pgdemote_direct 0
[ 1462.229479] pgdemote_khugepaged 0
[ 1462.229763] pgdemote_proactive 0
[ 1462.230062] pgscan 367
[ 1462.230274] pgsteal 76
[ 1462.230482] pswpin 0
[ 1462.230677] pswpout 0
[ 1462.230894] pgscan_kswapd 0
[ 1462.231135] pgscan_direct 367
[ 1462.231393] pgscan_khugepaged 0
[ 1462.231663] pgscan_proactive 0
[ 1462.231943] pgsteal_kswapd 0
[ 1462.232200] pgsteal_direct 76
[ 1462.232458] pgsteal_khugepaged 0
[ 1462.232734] pgsteal_proactive 0
[ 1462.233030] pgfault 89264
[ 1462.233260] pgmajfault 0
[ 1462.233480] pgrefill 275
[ 1462.233701] pgactivate 365
[ 1462.233953] pgdeactivate 278
[ 1462.234207] pglazyfree 0
[ 1462.234429] pglazyfreed 0
[ 1462.234657] swpin_zero 0
[ 1462.234903] swpout_zero 0
[ 1462.235134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11799,uid=0
[ 1462.236365] Memory cgroup out of memory: Killed process 11799 (syz-executor.0) total-vm:93420kB, anon-rss:344kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[ 1462.238004] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1462.238868] CPU: 1 UID: 0 PID: 11800 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1462.238897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1462.238909] Call Trace:
[ 1462.238917]  <TASK>
[ 1462.238925]  dump_stack_lvl+0xfa/0x120
[ 1462.238954]  dump_header+0x107/0x950
[ 1462.238980]  oom_kill_process+0x278/0xa00
[ 1462.239002]  out_of_memory+0x34b/0x1690
[ 1462.239029]  ? __pfx_out_of_memory+0x10/0x10
[ 1462.239056]  mem_cgroup_out_of_memory+0x164/0x190
[ 1462.239071]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1462.239091]  ? mark_held_locks+0x49/0x80
[ 1462.239111]  try_charge_memcg+0x81f/0xf30
[ 1462.239136]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1462.239163]  charge_memcg+0x7b/0x290
[ 1462.239181]  __mem_cgroup_charge+0x28/0x90
[ 1462.239202]  __handle_mm_fault+0x1455/0x30f0
[ 1462.239223]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1462.239242]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1462.239261]  ? lock_release+0x121/0x290
[ 1462.239295]  handle_mm_fault+0x2c3/0x900
[ 1462.239314]  ? access_error+0x17d/0x380
[ 1462.239332]  do_user_addr_fault+0x4fa/0xeb0
[ 1462.239352]  exc_page_fault+0xb0/0x180
[ 1462.239372]  asm_exc_page_fault+0x26/0x30
[ 1462.239385] RIP: 0033:0x7f88ae9c88fc
[ 1462.239396] Code: 00 00 41 83 7c 06 08 00 0f 85 75 05 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 04 42 05 00 <83> 05 01 b7 56 00 01 80 7c 24 0b 00 74 0b f6 44 24 0c 01 0f 84 c6
[ 1462.239409] RSP: 002b:00007fffea055320 EFLAGS: 00010207
[ 1462.239420] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007f88aea1cb19
[ 1462.239429] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88aeb2ff68
[ 1462.239437] RBP: 00007f88aeb2ff60 R08: 00007f88abf92700 R09: 0000000000000000
[ 1462.239445] R10: 00007f88abf92700 R11: 0000000000000246 R12: 00007f88aeb34030
[ 1462.239454] R13: 00007fffea055420 R14: 00007f88aeb2ff60 R15: 0000000000164e96
[ 1462.239475]  </TASK>
[ 1462.248469] 
[ 1462.248913] memory: usage 307200kB, limit 307200kB, failcnt 1365
[ 1462.249083] =====================================
[ 1462.249406] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1462.250858] WARNING: bad unlock balance detected!
[ 1462.250866] 6.16.0-rc7-next-20250725 #1 Not tainted
[ 1462.250874] -------------------------------------
[ 1462.250880] syz-executor.0/11799 is trying to release lock (&sighand->siglock) at:
[ 1462.250893] [<ffffffff81395609>] copy_process+0x5f89/0x73e0
[ 1462.250915] but there are no more locks to release!
[ 1462.250920] 
[ 1462.250920] other info that might help us debug this:
[ 1462.250925] 1 lock held by syz-executor.0/11799:
[ 1462.250933]  #0: ffffffff85c5df90 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x418a/0x73e0
[ 1462.250962] 
[ 1462.250962] stack backtrace:
[ 1462.250970] CPU: 0 UID: 0 PID: 11799 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1462.250986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1462.250995] Call Trace:
[ 1462.251000]  <TASK>
[ 1462.251005]  dump_stack_lvl+0xca/0x120
[ 1462.251025]  ? copy_process+0x5f89/0x73e0
[ 1462.251036]  print_unlock_imbalance_bug+0x118/0x130
[ 1462.251051]  ? copy_process+0x5f89/0x73e0
[ 1462.251061]  lock_release+0x208/0x290
[ 1462.251076]  _raw_spin_unlock+0x16/0x40
[ 1462.251092]  copy_process+0x5f89/0x73e0
[ 1462.251110]  ? __pfx_copy_process+0x10/0x10
[ 1462.251123]  ? do_try_to_free_pages+0x1275/0x1770
[ 1462.251141]  kernel_clone+0xea/0x7f0
[ 1462.251153]  ? __pfx_kernel_clone+0x10/0x10
[ 1462.251164]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1462.251182]  ? perf_trace_lock+0xb5/0x5d0
[ 1462.251195]  ? perf_trace_lock_acquire+0x1/0x700
[ 1462.251212]  __do_sys_clone+0xce/0x120
[ 1462.251222]  ? __pfx___do_sys_clone+0x10/0x10
[ 1462.251233]  ? lock_acquire+0x15e/0x2f0
[ 1462.251252]  ? syscall_trace_enter+0x1cf/0x240
[ 1462.251266]  ? lock_release+0xc8/0x290
[ 1462.251282]  do_syscall_64+0xbf/0x360
[ 1462.251302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.251315] RIP: 0033:0x7fc67e190f41
[ 1462.251325] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 1462.251337] RSP: 002b:00007ffc5e9f3ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1462.251349] RAX: ffffffffffffffda RBX: 00007fc67b705700 RCX: 00007fc67e190f41
[ 1462.251357] RDX: 00007fc67b7059d0 RSI: 00007fc67b7052f0 RDI: 00000000003d0f00
[ 1462.251365] RBP: 00007ffc5e9f3cf0 R08: 00007fc67b705700 R09: 00007fc67b705700
[ 1462.251373] R10: 00007fc67b7059d0 R11: 0000000000000206 R12: 00007ffc5e9f3b6e
[ 1462.251380] R13: 00007ffc5e9f3b6f R14: 00007fc67b705300 R15: 0000000000022000
[ 1462.251395]  </TASK>
[ 1462.251483] BUG: sleeping function called from invalid context at kernel/nsproxy.c:233
[ 1462.251497] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11799, name: syz-executor.0
[ 1462.251507] preempt_count: 7ffffffe, expected: 0
[ 1462.251513] RCU nest depth: 0, expected: 0
[ 1462.251519] INFO: lockdep is turned off.
[ 1462.251525] CPU: 0 UID: 0 PID: 11799 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1462.251540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1462.251546] Call Trace:
[ 1462.251550]  <TASK>
[ 1462.251554]  dump_stack_lvl+0xfa/0x120
[ 1462.251573]  __might_resched+0x2f3/0x510
[ 1462.251589]  switch_task_namespaces+0x2d/0x100
[ 1462.251608]  copy_process+0x2756/0x73e0
[ 1462.251626]  ? __pfx_copy_process+0x10/0x10
[ 1462.251639]  ? do_try_to_free_pages+0x1275/0x1770
[ 1462.251655]  kernel_clone+0xea/0x7f0
[ 1462.251667]  ? __pfx_kernel_clone+0x10/0x10
[ 1462.251678]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1462.251695]  ? perf_trace_lock+0xb5/0x5d0
[ 1462.251709]  ? perf_trace_lock_acquire+0x1/0x700
[ 1462.251726]  __do_sys_clone+0xce/0x120
[ 1462.251737]  ? __pfx___do_sys_clone+0x10/0x10
[ 1462.251748]  ? lock_acquire+0x15e/0x2f0
[ 1462.251767]  ? syscall_trace_enter+0x1cf/0x240
[ 1462.251780]  ? lock_release+0xc8/0x290
[ 1462.251796]  do_syscall_64+0xbf/0x360
[ 1462.251815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.251828] RIP: 0033:0x7fc67e190f41
[ 1462.251839] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 1462.251853] RSP: 002b:00007ffc5e9f3ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1462.251866] RAX: ffffffffffffffda RBX: 00007fc67b705700 RCX: 00007fc67e190f41
[ 1462.251879] RDX: 00007fc67b7059d0 RSI: 00007fc67b7052f0 RDI: 00000000003d0f00
[ 1462.251887] RBP: 00007ffc5e9f3cf0 R08: 00007fc67b705700 R09: 00007fc67b705700
[ 1462.251895] R10: 00007fc67b7059d0 R11: 0000000000000206 R12: 00007ffc5e9f3b6e
[ 1462.251903] R13: 00007ffc5e9f3b6f R14: 00007fc67b705300 R15: 0000000000022000
[ 1462.251918]  </TASK>
[ 1462.251962] BUG: scheduling while atomic: syz-executor.0/11799/0x7fffffff
[ 1462.251971] INFO: lockdep is turned off.
[ 1462.251974] Modules linked in:
[ 1462.251984] CPU: 0 UID: 0 PID: 11799 Comm: syz-executor.0 Tainted: G        W           6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1462.252003] Tainted: [W]=WARN
[ 1462.252007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1462.252014] Call Trace:
[ 1462.252017]  <TASK>
[ 1462.252022]  dump_stack_lvl+0xfa/0x120
[ 1462.252040]  __schedule_bug+0xb9/0x100
[ 1462.252052]  __schedule+0x250d/0x35b0
[ 1462.252068]  ? perf_trace_lock+0xb5/0x5d0
[ 1462.252084]  ? __pfx___schedule+0x10/0x10
[ 1462.252101]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1462.252122]  ? lock_acquire+0xc5/0x2f0
[ 1462.252135]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1462.252155]  ? lock_release+0x1c7/0x290
[ 1462.252170]  schedule+0xdb/0x390
[ 1462.252185]  exit_to_user_mode_loop+0x69/0x100
[ 1462.252198]  do_syscall_64+0x2f7/0x360
[ 1462.252217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.252228] RIP: 0033:0x7fc67e190f41
[ 1462.252237] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 1462.252248] RSP: 002b:00007ffc5e9f3ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1462.252259] RAX: fffffffffffffff4 RBX: 00007fc67b705700 RCX: 00007fc67e190f41
[ 1462.252268] RDX: 00007fc67b7059d0 RSI: 00007fc67b7052f0 RDI: 00000000003d0f00
[ 1462.252276] RBP: 00007ffc5e9f3cf0 R08: 00007fc67b705700 R09: 00007fc67b705700
[ 1462.252284] R10: 00007fc67b7059d0 R11: 0000000000000206 R12: 00007ffc5e9f3b6e
[ 1462.252291] R13: 00007ffc5e9f3b6f R14: 00007fc67b705300 R15: 0000000000022000
[ 1462.252306]  </TASK>
[ 1462.310961] Memory cgroup stats for /syz7:
[ 1462.311597] anon 1466368
[ 1462.312369] file 308297728
[ 1462.312675] kernel 4804608
[ 1462.313292] kernel_stack 557056
[ 1462.313579] pagetables 2170880
[ 1462.313844] sec_pagetables 0
[ 1462.314145] percpu 1152
[ 1462.314369] sock 0
[ 1462.314552] vmalloc 0
[ 1462.314751] shmem 308293632
[ 1462.315044] file_mapped 0
[ 1462.315276] file_dirty 0
[ 1462.315500] file_writeback 0
[ 1462.315753] swapcached 0
[ 1462.316008] inactive_anon 309678080
[ 1462.316312] active_anon 81920
[ 1462.316573] inactive_file 0
[ 1462.316815] active_file 4096
[ 1462.317120] unevictable 0
[ 1462.317352] slab_reclaimable 966304
[ 1462.317649] slab_unreclaimable 1122776
[ 1462.317997] slab 2089080
[ 1462.318224] workingset_refault_anon 0
[ 1462.318534] workingset_refault_file 1
[ 1462.318843] workingset_activate_anon 0
[ 1462.319199] workingset_activate_file 0
[ 1462.319523] workingset_restore_anon 0
[ 1462.319831] workingset_restore_file 0
[ 1462.320175] workingset_nodereclaim 0
[ 1462.320482] pgdemote_kswapd 0
[ 1462.320741] pgdemote_direct 0
[ 1462.321046] pgdemote_khugepaged 0
[ 1462.321338] pgdemote_proactive 0
[ 1462.321615] pgscan 1979
[ 1462.321828] pgsteal 77
[ 1462.322072] pswpin 0
[ 1462.322271] pswpout 0
[ 1462.322474] pgscan_kswapd 1
[ 1462.322712] pgscan_direct 1978
[ 1462.323018] pgscan_khugepaged 0
[ 1462.323295] pgscan_proactive 0
[ 1462.323560] pgsteal_kswapd 0
[ 1462.323809] pgsteal_direct 77
[ 1462.324104] pgsteal_khugepaged 0
[ 1462.324386] pgsteal_proactive 0
[ 1462.324654] pgfault 89384
[ 1462.324920] pgmajfault 3
[ 1462.325155] pgrefill 2246
[ 1462.325385] pgactivate 2338
[ 1462.325627] pgdeactivate 2246
[ 1462.325920] pglazyfree 0
[ 1462.326149] pglazyfreed 0
[ 1462.326378] swpin_zero 0
[ 1462.326602] swpout_zero 0
[ 1462.326834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11800,uid=0
[ 1462.328104] Memory cgroup out of memory: Killed process 11800 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
13:06:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xe}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0)

13:06:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000100))
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (fail_nth: 3)

13:06:37 executing program 7:
mlockall(0x2)
r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f00008ef000/0x4000)=nil)
shmat(r0, &(0x7f0000e1e000/0x1000)=nil, 0x2000)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r2)

13:06:37 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x249)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r5, 0x407, 0x100000000)

13:06:37 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x1d7)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
r4 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
fcntl$setpipe(r4, 0x407, 0x100000000)

13:06:37 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
clone3(&(0x7f0000000480)={0x906400, &(0x7f0000000100), 0x0, &(0x7f0000000280), {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x58)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40086607, &(0x7f0000000000)={0x80000})
r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x20000)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x100, 0x40000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x8170, 0x2, 0x81, 0x7, 0x4, 0x2, 0x0, 0x0, 0xbf, 0x0, 0x10000}, r2, 0x0, r1, 0x4)

13:06:37 executing program 0:
mlockall(0x2)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
mlockall(0x1)
r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmdt(0x0)
shmdt(r1)

13:06:37 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)='^', 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000900)="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", 0x23b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r4, 0x5412, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a300afd18f28ee3f5361421a10621d35e3dd9fc521a2850968dd66f8c4f64b1e3a45561e04b04dd93cce56a5c0638835fc2ae8fb2c933ceb0a5a304a6344a77e35bdb0fc229a81daf980ca572b6c63761f097661198448263d41ced5e52a4a3a4503e8bfcdcbb554578a1294904f7c564caf97e2bd9eaa120210c46eb6ebd866e7ab08984d20d6d7d86f56c2617277e446e399baeaa363bff40645c6c9670d89e"], 0xbb)
write$binfmt_misc(r4, &(0x7f0000000040)={'syz0', "f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f3762f18321d25423a8200d04ea346f39300e9f13bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494b9d63e199f"}, 0xb0)
sendfile(r2, r3, 0x0, 0xfdef)
sendfile(r0, r1, 0x0, 0xfdef)
syz_open_procfs$userns(0x0, &(0x7f00000001c0))

[ 1471.124851] EXT4-fs warning (device sda): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed
[ 1471.180503] EXT4-fs warning (device sda): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed
[ 1471.319191] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1471.320751] CPU: 1 UID: 0 PID: 11811 Comm: syz-executor.7 Tainted: G        W           6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1471.320788] Tainted: [W]=WARN
[ 1471.320796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1471.320809] Call Trace:
[ 1471.320818]  <TASK>
[ 1471.320827]  dump_stack_lvl+0xfa/0x120
[ 1471.320870]  dump_header+0x107/0x950
[ 1471.320933]  oom_kill_process+0x278/0xa00
[ 1471.320988]  out_of_memory+0x34b/0x1690
[ 1471.321023]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1471.321059]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 1471.321089]  ? __pfx_out_of_memory+0x10/0x10
[ 1471.321130]  mem_cgroup_out_of_memory+0x164/0x190
[ 1471.321153]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1471.321181]  ? trace_irq_enable.constprop.0+0x26/0x100
[ 1471.321202]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1471.321236]  try_charge_memcg+0x81f/0xf30
[ 1471.321274]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1471.321313]  charge_memcg+0x7b/0x290
[ 1471.321344]  __mem_cgroup_charge+0x28/0x90
[ 1471.321377]  do_wp_page+0x56e/0x31f0
[ 1471.321414]  ? lock_acquire+0xc5/0x2f0
[ 1471.321438]  ? lock_acquire+0x18c/0x2f0
[ 1471.321461]  ? __pfx_do_wp_page+0x10/0x10
[ 1471.321491]  ? do_raw_spin_lock+0x123/0x260
[ 1471.321520]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1471.321548]  ? ___pte_offset_map+0x176/0x370
[ 1471.321578]  __handle_mm_fault+0xde1/0x30f0
[ 1471.321611]  ? lock_acquire+0xc5/0x2f0
[ 1471.321634]  ? lock_vma_under_rcu+0x449/0x920
[ 1471.321658]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1471.321689]  ? lock_release+0x1c7/0x290
[ 1471.321732]  handle_mm_fault+0x2c3/0x900
[ 1471.321763]  ? access_error+0x17d/0x380
[ 1471.321791]  do_user_addr_fault+0x4fa/0xeb0
[ 1471.321821]  exc_page_fault+0xb0/0x180
[ 1471.321852]  asm_exc_page_fault+0x26/0x30
[ 1471.321878] RIP: 0033:0x7f88ae9c7ecd
[ 1471.321903] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1471.321930] RSP: 002b:00007fffea055290 EFLAGS: 00010202
[ 1471.321949] RAX: 0000000000000001 RBX: 00007f88aeb2ff60 RCX: 0000000000000023
[ 1471.321963] RDX: 0000001b2d6200ac RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1471.321978] RBP: 0000001b2d620014 R08: 0000001b2e620000 R09: 0000001b2d62001c
[ 1471.321992] R10: 0000000000000024 R11: 0000000064504028 R12: 00007f88aeb2ff60
[ 1471.322006] R13: 0000001b2d620000 R14: 00007f88aeb2ff60 R15: 00000000001671ed
[ 1471.322029]  ? do_syscall_64+0x12c/0x360
[ 1471.322068]  </TASK>
[ 1471.360726] memory: usage 307200kB, limit 307200kB, failcnt 1392
[ 1471.361841] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1471.362777] Memory cgroup stats for /syz7:
[ 1471.410247] anon 1503232
[ 1471.411131] file 308297728
[ 1471.411505] kernel 4771840
[ 1471.411740] kernel_stack 557056
[ 1471.412031] pagetables 2162688
[ 1471.412306] sec_pagetables 0
[ 1471.412684] percpu 1024
[ 1471.412928] sock 0
[ 1471.413123] vmalloc 0
[ 1471.413317] shmem 308293632
[ 1471.413574] file_mapped 0
[ 1471.413866] file_dirty 0
[ 1471.414153] file_writeback 0
[ 1471.414397] swapcached 0
[ 1471.414612] inactive_anon 309714944
[ 1471.414990] active_anon 81920
[ 1471.415315] inactive_file 4096
[ 1471.415573] active_file 0
[ 1471.415793] unevictable 0
[ 1471.416036] slab_reclaimable 966304
[ 1471.416388] slab_unreclaimable 1098760
[ 1471.416792] slab 2065064
[ 1471.417041] workingset_refault_anon 0
[ 1471.417344] workingset_refault_file 1
[ 1471.417720] workingset_activate_anon 0
[ 1471.418096] workingset_activate_file 0
[ 1471.418429] workingset_restore_anon 0
[ 1471.418827] workingset_restore_file 0
[ 1471.419151] workingset_nodereclaim 0
[ 1471.419504] pgdemote_kswapd 0
[ 1471.419837] pgdemote_direct 0
[ 1471.420111] pgdemote_khugepaged 0
[ 1471.420393] pgdemote_proactive 0
[ 1471.420667] pgscan 2035
[ 1471.420899] pgsteal 77
[ 1471.421111] pswpin 0
[ 1471.421307] pswpout 0
[ 1471.421505] pgscan_kswapd 1
[ 1471.421737] pgscan_direct 2034
[ 1471.422077] pgscan_khugepaged 0
[ 1471.422407] pgscan_proactive 0
[ 1471.422666] pgsteal_kswapd 0
[ 1471.423059] pgsteal_direct 77
[ 1471.423330] pgsteal_khugepaged 0
[ 1471.423721] pgsteal_proactive 0
[ 1471.424024] pgfault 89440
[ 1471.424354] pgmajfault 3
[ 1471.424569] pgrefill 2305
[ 1471.424846] pgactivate 2396
[ 1471.425165] pgdeactivate 2305
[ 1471.425419] pglazyfree 0
[ 1471.425669] pglazyfreed 0
[ 1471.426031] swpin_zero 0
[ 1471.426252] swpout_zero 0
[ 1471.426474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=11811,uid=0
[ 1471.427816] Memory cgroup out of memory: Killed process 11811 (syz-executor.7) total-vm:93420kB, anon-rss:300kB, file-rss:35628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1471.433520] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1471.434552] CPU: 0 UID: 0 PID: 11809 Comm: syz-executor.0 Tainted: G        W           6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1471.434573] Tainted: [W]=WARN
[ 1471.434577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1471.434584] Call Trace:
[ 1471.434589]  <TASK>
[ 1471.434594]  dump_stack_lvl+0xfa/0x120
[ 1471.434619]  dump_header+0x107/0x950
[ 1471.434640]  oom_kill_process+0x278/0xa00
[ 1471.434659]  out_of_memory+0x34b/0x1690
[ 1471.434676]  ? perf_trace_lock+0xb5/0x5d0
[ 1471.434690]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 1471.434707]  ? __pfx_out_of_memory+0x10/0x10
[ 1471.434726]  ? do_raw_spin_lock+0x123/0x260
[ 1471.434744]  mem_cgroup_out_of_memory+0x164/0x190
[ 1471.434757]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1471.434773]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1471.434791]  try_charge_memcg+0x81f/0xf30
[ 1471.434812]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1471.434833]  charge_memcg+0x7b/0x290
[ 1471.434849]  __mem_cgroup_charge+0x28/0x90
[ 1471.434867]  do_wp_page+0x56e/0x31f0
[ 1471.434890]  ? lock_acquire+0xc5/0x2f0
[ 1471.434902]  ? lock_acquire+0x18c/0x2f0
[ 1471.434914]  ? __pfx_do_wp_page+0x10/0x10
[ 1471.434931]  ? do_raw_spin_lock+0x123/0x260
[ 1471.434946]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1471.434961]  ? ___pte_offset_map+0x176/0x370
[ 1471.434978]  __handle_mm_fault+0xde1/0x30f0
[ 1471.434995]  ? lock_acquire+0xc5/0x2f0
[ 1471.435008]  ? lock_vma_under_rcu+0x449/0x920
[ 1471.435021]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1471.435037]  ? lock_release+0x1c7/0x290
[ 1471.435060]  handle_mm_fault+0x2c3/0x900
[ 1471.435077]  ? access_error+0x17d/0x380
[ 1471.435093]  do_user_addr_fault+0x4fa/0xeb0
[ 1471.435109]  exc_page_fault+0xb0/0x180
[ 1471.435126]  asm_exc_page_fault+0x26/0x30
[ 1471.435139] RIP: 0033:0x7fc67e13aecd
[ 1471.435149] Code: 0c 48 89 df 41 83 c6 01 e8 20 f6 ff ff 48 83 c3 20 49 39 df 75 df 4c 8b 2d f0 14 0a 01 44 89 75 08 8b 05 36 41 16 00 83 c0 01 <89> 05 2d 41 16 00 41 89 45 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 1471.435161] RSP: 002b:00007ffc5e9f3b60 EFLAGS: 00010202
[ 1471.435171] RAX: 0000000000000001 RBX: 00007fc67e2a2f60 RCX: 0000000000000023
[ 1471.435178] RDX: 0000001b2cc200ac RSI: ffffffff84bb02cc RDI: 0000000064504024
[ 1471.435186] RBP: 0000001b2cc20014 R08: 0000001b2dc20000 R09: 0000001b2cc2001c
[ 1471.435194] R10: 0000000000000024 R11: 0000000064504028 R12: 00007fc67e2a2f60
[ 1471.435201] R13: 0000001b2cc20000 R14: 00007fc67e2a2f60 R15: 00000000001671f7
[ 1471.435214]  ? do_syscall_64+0x12c/0x360
[ 1471.435235]  </TASK>
[ 1471.453698] memory: usage 307200kB, limit 307200kB, failcnt 1835
[ 1471.454422] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1471.455121] Memory cgroup stats for /syz0:
[ 1471.468985] anon 1134592
[ 1471.469683] file 309952512
[ 1471.469945] kernel 3485696
[ 1471.470174] kernel_stack 360448
[ 1471.470442] pagetables 1372160
[ 1471.470749] sec_pagetables 0
[ 1471.471108] percpu 640
[ 1471.471313] sock 0
[ 1471.471490] vmalloc 0
[ 1471.471686] shmem 309952512
[ 1471.471940] file_mapped 0
[ 1471.472230] file_dirty 0
[ 1471.472503] file_writeback 0
[ 1471.472747] swapcached 0
[ 1471.472993] inactive_anon 310886400
[ 1471.473290] active_anon 200704
[ 1471.473681] inactive_file 0
[ 1471.473936] active_file 0
[ 1471.474159] unevictable 0
[ 1471.474383] slab_reclaimable 973912
[ 1471.474705] slab_unreclaimable 789936
[ 1471.475133] slab 1763848
[ 1471.475358] workingset_refault_anon 0
[ 1471.475655] workingset_refault_file 0
[ 1471.476105] workingset_activate_anon 0
[ 1471.476420] workingset_activate_file 0
[ 1471.476723] workingset_restore_anon 0
[ 1471.477152] workingset_restore_file 0
[ 1471.477507] workingset_nodereclaim 0
[ 1471.477798] pgdemote_kswapd 0
[ 1471.478067] pgdemote_direct 0
[ 1471.478321] pgdemote_khugepaged 0
[ 1471.478596] pgdemote_proactive 0
[ 1471.478922] pgscan 367
[ 1471.479205] pgsteal 76
[ 1471.479413] pswpin 0
[ 1471.479607] pswpout 0
[ 1471.479806] pgscan_kswapd 0
[ 1471.480102] pgscan_direct 367
[ 1471.480417] pgscan_khugepaged 0
[ 1471.480682] pgscan_proactive 0
[ 1471.481092] pgsteal_kswapd 0
[ 1471.481341] pgsteal_direct 76
[ 1471.481590] pgsteal_khugepaged 0
[ 1471.481857] pgsteal_proactive 0
[ 1471.482161] pgfault 89317
[ 1471.482497] pgmajfault 0
[ 1471.482712] pgrefill 275
[ 1471.482955] pgactivate 365
[ 1471.483184] pgdeactivate 278
[ 1471.483428] pglazyfree 0
[ 1471.483642] pglazyfreed 0
[ 1471.483939] swpin_zero 0
[ 1471.484261] swpout_zero 0
[ 1471.484484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11809,uid=0
[ 1471.486805] Memory cgroup out of memory: Killed process 11809 (syz-executor.0) total-vm:93420kB, anon-rss:300kB, file-rss:35616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000

VM DIAGNOSIS:
13:06:29  Registers:
info registers vcpu 0
RAX=ffff88801b535e00 RBX=00000000ffffffff RCX=ffffffff81520ca3 RDX=ffff88801b535c60
RSI=0000000000000000 RDI=ffff88801b535c80 RBP=0000000000000046 RSP=ffff888009617230
R8 =0000000000000001 R9 =ffffed10012c2e36 R10=0000000000000003 R11=0000000000000000
R12=ffff88800dcbd190 R13=0000000000000000 R14=0000000000000000 R15=0000000000000282
RIP=ffffffff81b2b5f0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55da000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555593285c58 CR3=00000000435a1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f47557477c000007f47557477c8
XMM02=00007f47557477e000007f47557477c0 XMM03=00007f47557477c800007f47557477c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff828d3f00 RDI=ffffffff887270a0 RBP=ffffffff88727060 RSP=ffff888047f9f3e0
R8 =0000000000000000 R9 =ffffed10014eb046 R10=00000000000fe503 R11=79735f6f645f5f20
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4e66 R15=dffffc0000000000
RIP=ffffffff828d3f55 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555557343400 00000000 00000000
GS =0000 ffff8880e56da000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f737a29b678 CR3=000000000daf7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134
XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572
XMM04=77dce7b3395bb53c00000000006fbcf0 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=9285e9841bad358200000000000ae988 XMM07=00000000000000000000000000000000
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000